@headless-lms/adapter-db 0.1.0

package/dist/repositories/learn.js

@@ -0,0 +1,54 @@
+import { courses, downloadAssets, downloads } from "../schema/content.js";
+import { entitlements } from "../schema/entitlements.js";
+import "../schema/index.js";
+import { and, eq, gt, isNull, or, sql } from "drizzle-orm";
+import { noopLogger } from "@headless-lms/core/shared/logger";
+//#region src/repositories/learn.ts
+var DrizzleLearnRepository = class {
+	db;
+	logger;
+	constructor(db, logger = noopLogger) {
+		this.db = db;
+		this.logger = logger;
+	}
+	baseFilters(orgId, orgUserId) {
+		return and(eq(entitlements.orgId, orgId), eq(entitlements.orgUserId, orgUserId), eq(entitlements.status, "active"), or(isNull(entitlements.expiresAt), gt(entitlements.expiresAt, sql`now()`)), eq(courses.status, "published"));
+	}
+	async activeRefs(orgId, orgUserId) {
+		return await this.db.select({
+			orgId: entitlements.orgId,
+			contentId: entitlements.contentId
+		}).from(entitlements).innerJoin(courses, and(eq(courses.orgId, entitlements.orgId), eq(courses.id, entitlements.contentId))).where(this.baseFilters(orgId, orgUserId));
+	}
+	async activeRef(orgId, orgUserId, courseId) {
+		const [row] = await this.db.select({
+			orgId: entitlements.orgId,
+			contentId: entitlements.contentId
+		}).from(entitlements).innerJoin(courses, and(eq(courses.orgId, entitlements.orgId), eq(courses.id, entitlements.contentId))).where(and(this.baseFilters(orgId, orgUserId), eq(entitlements.contentId, courseId))).limit(1);
+		return row ?? null;
+	}
+	downloadFilters(orgId, orgUserId) {
+		return and(eq(entitlements.orgId, orgId), eq(entitlements.orgUserId, orgUserId), eq(entitlements.status, "active"), or(isNull(entitlements.expiresAt), gt(entitlements.expiresAt, sql`now()`)), eq(downloads.status, "published"));
+	}
+	async activeDownloadRefs(orgId, orgUserId) {
+		return this.db.select({
+			orgId: entitlements.orgId,
+			contentId: entitlements.contentId
+		}).from(entitlements).innerJoin(downloads, and(eq(downloads.orgId, entitlements.orgId), eq(downloads.id, entitlements.contentId))).where(this.downloadFilters(orgId, orgUserId));
+	}
+	async activeDownloadRef(orgId, orgUserId, downloadId) {
+		const [row] = await this.db.select({
+			orgId: entitlements.orgId,
+			contentId: entitlements.contentId
+		}).from(entitlements).innerJoin(downloads, and(eq(downloads.orgId, entitlements.orgId), eq(downloads.id, entitlements.contentId))).where(and(this.downloadFilters(orgId, orgUserId), eq(entitlements.contentId, downloadId))).limit(1);
+		return row ?? null;
+	}
+	async downloadHasAsset(orgId, downloadId, assetId) {
+		const [row] = await this.db.select({ id: downloadAssets.id }).from(downloadAssets).where(and(eq(downloadAssets.orgId, orgId), eq(downloadAssets.downloadId, downloadId), eq(downloadAssets.assetId, assetId))).limit(1);
+		return row !== void 0;
+	}
+};
+//#endregion
+export { DrizzleLearnRepository };
+
+//# sourceMappingURL=learn.js.map

package/dist/repositories/learn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"learn.js","names":[],"sources":["../../src/repositories/learn.ts"],"sourcesContent":["// learn — Drizzle read repo (implements the reporting/learn outbound port).\n// Returns the (org, content) refs a student is ACTIVELY entitled to and whose\n// course is PUBLISHED. \"Active\" excludes revoked and expired grants (expiry is\n// derived from expires_at at read time — no row flip). Org-scoped: the portal\n// org bounds the read (`entitlements.org_id`), so no cross-org grants leak.\n// The inner join to `courses` on the content id restricts to course grants —\n// no explicit content-type filter needed.\nimport { and, eq, gt, isNull, or, sql, type SQL } from 'drizzle-orm';\nimport type { NodePgDatabase } from 'drizzle-orm/node-postgres';\nimport type { LearnEntitlementReader, ContentRef } from '@headless-lms/core/reporting/learn';\nimport { entitlements, courses, downloads, downloadAssets } from '../schema/index.js';\nimport type { Logger } from '@headless-lms/core/shared/ports';\nimport { noopLogger } from '@headless-lms/core/shared/logger';\n\nexport class DrizzleLearnRepository implements LearnEntitlementReader {\n  constructor(\n    private readonly db: NodePgDatabase,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  private baseFilters(orgId: string, orgUserId: string): SQL {\n    return and(\n      eq(entitlements.orgId, orgId),\n      eq(entitlements.orgUserId, orgUserId),\n      eq(entitlements.status, 'active'),\n      or(isNull(entitlements.expiresAt), gt(entitlements.expiresAt, sql`now()`))!,\n      eq(courses.status, 'published'),\n    )!;\n  }\n\n  async activeRefs(orgId: string, orgUserId: string): Promise<ContentRef[]> {\n    const rows = await this.db\n      .select({ orgId: entitlements.orgId, contentId: entitlements.contentId })\n      .from(entitlements)\n      .innerJoin(\n        courses,\n        and(eq(courses.orgId, entitlements.orgId), eq(courses.id, entitlements.contentId)),\n      )\n      .where(this.baseFilters(orgId, orgUserId));\n    return rows;\n  }\n\n  async activeRef(orgId: string, orgUserId: string, courseId: string): Promise<ContentRef | null> {\n    const [row] = await this.db\n      .select({ orgId: entitlements.orgId, contentId: entitlements.contentId })\n      .from(entitlements)\n      .innerJoin(\n        courses,\n        and(eq(courses.orgId, entitlements.orgId), eq(courses.id, entitlements.contentId)),\n      )\n      .where(and(this.baseFilters(orgId, orgUserId), eq(entitlements.contentId, courseId)))\n      .limit(1);\n    return row ?? null;\n  }\n\n  private downloadFilters(orgId: string, orgUserId: string): SQL {\n    return and(\n      eq(entitlements.orgId, orgId),\n      eq(entitlements.orgUserId, orgUserId),\n      eq(entitlements.status, 'active'),\n      or(isNull(entitlements.expiresAt), gt(entitlements.expiresAt, sql`now()`))!,\n      eq(downloads.status, 'published'),\n    )!;\n  }\n\n  async activeDownloadRefs(orgId: string, orgUserId: string): Promise<ContentRef[]> {\n    return this.db\n      .select({ orgId: entitlements.orgId, contentId: entitlements.contentId })\n      .from(entitlements)\n      .innerJoin(\n        downloads,\n        and(eq(downloads.orgId, entitlements.orgId), eq(downloads.id, entitlements.contentId)),\n      )\n      .where(this.downloadFilters(orgId, orgUserId));\n  }\n\n  async activeDownloadRef(\n    orgId: string,\n    orgUserId: string,\n    downloadId: string,\n  ): Promise<ContentRef | null> {\n    const [row] = await this.db\n      .select({ orgId: entitlements.orgId, contentId: entitlements.contentId })\n      .from(entitlements)\n      .innerJoin(\n        downloads,\n        and(eq(downloads.orgId, entitlements.orgId), eq(downloads.id, entitlements.contentId)),\n      )\n      .where(and(this.downloadFilters(orgId, orgUserId), eq(entitlements.contentId, downloadId)))\n      .limit(1);\n    return row ?? null;\n  }\n\n  async downloadHasAsset(orgId: string, downloadId: string, assetId: string): Promise<boolean> {\n    const [row] = await this.db\n      .select({ id: downloadAssets.id })\n      .from(downloadAssets)\n      .where(\n        and(\n          eq(downloadAssets.orgId, orgId),\n          eq(downloadAssets.downloadId, downloadId),\n          eq(downloadAssets.assetId, assetId),\n        ),\n      )\n      .limit(1);\n    return row !== undefined;\n  }\n}\n"],"mappings":";;;;;;AAcA,IAAa,yBAAb,MAAsE;CAEjD;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,YAAoB,OAAe,WAAwB;EACzD,OAAO,IACL,GAAG,aAAa,OAAO,KAAK,GAC5B,GAAG,aAAa,WAAW,SAAS,GACpC,GAAG,aAAa,QAAQ,QAAQ,GAChC,GAAG,OAAO,aAAa,SAAS,GAAG,GAAG,aAAa,WAAW,GAAG,OAAO,CAAC,GACzE,GAAG,QAAQ,QAAQ,WAAW,CAChC;CACF;CAEA,MAAM,WAAW,OAAe,WAA0C;EASxE,OAAO,MARY,KAAK,GACrB,OAAO;GAAE,OAAO,aAAa;GAAO,WAAW,aAAa;EAAU,CAAC,CAAC,CACxE,KAAK,YAAY,CAAC,CAClB,UACC,SACA,IAAI,GAAG,QAAQ,OAAO,aAAa,KAAK,GAAG,GAAG,QAAQ,IAAI,aAAa,SAAS,CAAC,CACnF,CAAC,CACA,MAAM,KAAK,YAAY,OAAO,SAAS,CAAC;CAE7C;CAEA,MAAM,UAAU,OAAe,WAAmB,UAA8C;EAC9F,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO;GAAE,OAAO,aAAa;GAAO,WAAW,aAAa;EAAU,CAAC,CAAC,CACxE,KAAK,YAAY,CAAC,CAClB,UACC,SACA,IAAI,GAAG,QAAQ,OAAO,aAAa,KAAK,GAAG,GAAG,QAAQ,IAAI,aAAa,SAAS,CAAC,CACnF,CAAC,CACA,MAAM,IAAI,KAAK,YAAY,OAAO,SAAS,GAAG,GAAG,aAAa,WAAW,QAAQ,CAAC,CAAC,CAAC,CACpF,MAAM,CAAC;EACV,OAAO,OAAO;CAChB;CAEA,gBAAwB,OAAe,WAAwB;EAC7D,OAAO,IACL,GAAG,aAAa,OAAO,KAAK,GAC5B,GAAG,aAAa,WAAW,SAAS,GACpC,GAAG,aAAa,QAAQ,QAAQ,GAChC,GAAG,OAAO,aAAa,SAAS,GAAG,GAAG,aAAa,WAAW,GAAG,OAAO,CAAC,GACzE,GAAG,UAAU,QAAQ,WAAW,CAClC;CACF;CAEA,MAAM,mBAAmB,OAAe,WAA0C;EAChF,OAAO,KAAK,GACT,OAAO;GAAE,OAAO,aAAa;GAAO,WAAW,aAAa;EAAU,CAAC,CAAC,CACxE,KAAK,YAAY,CAAC,CAClB,UACC,WACA,IAAI,GAAG,UAAU,OAAO,aAAa,KAAK,GAAG,GAAG,UAAU,IAAI,aAAa,SAAS,CAAC,CACvF,CAAC,CACA,MAAM,KAAK,gBAAgB,OAAO,SAAS,CAAC;CACjD;CAEA,MAAM,kBACJ,OACA,WACA,YAC4B;EAC5B,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO;GAAE,OAAO,aAAa;GAAO,WAAW,aAAa;EAAU,CAAC,CAAC,CACxE,KAAK,YAAY,CAAC,CAClB,UACC,WACA,IAAI,GAAG,UAAU,OAAO,aAAa,KAAK,GAAG,GAAG,UAAU,IAAI,aAAa,SAAS,CAAC,CACvF,CAAC,CACA,MAAM,IAAI,KAAK,gBAAgB,OAAO,SAAS,GAAG,GAAG,aAAa,WAAW,UAAU,CAAC,CAAC,CAAC,CAC1F,MAAM,CAAC;EACV,OAAO,OAAO;CAChB;CAEA,MAAM,iBAAiB,OAAe,YAAoB,SAAmC;EAC3F,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,EAAE,IAAI,eAAe,GAAG,CAAC,CAAC,CACjC,KAAK,cAAc,CAAC,CACpB,MACC,IACE,GAAG,eAAe,OAAO,KAAK,GAC9B,GAAG,eAAe,YAAY,UAAU,GACxC,GAAG,eAAe,SAAS,OAAO,CACpC,CACF,CAAC,CACA,MAAM,CAAC;EACV,OAAO,QAAQ,KAAA;CACjB;AACF"}

package/dist/repositories/members.d.ts

@@ -0,0 +1,16 @@
+import { NodePgDatabase } from "drizzle-orm/node-postgres";
+import { Member, MemberRecord, MembersQuery, MembersRepository, Page } from "@headless-lms/core/organizations";
+import { Logger } from "@headless-lms/core/shared/ports";
+//#region src/repositories/members.d.ts
+declare class DrizzleMembersRepository implements MembersRepository {
+  private readonly db;
+  private readonly logger;
+  constructor(db: NodePgDatabase, logger?: Logger);
+  private loadAll;
+  list(orgId: string, query: MembersQuery): Promise<Page<Member>>;
+  findByEmail(orgId: string, email: string): Promise<MemberRecord | null>;
+  findById(orgId: string, id: string): Promise<MemberRecord | null>;
+}
+//#endregion
+export { DrizzleMembersRepository };
+//# sourceMappingURL=members.d.ts.map

package/dist/repositories/members.js

@@ -0,0 +1,116 @@
+import { users } from "../schema/identity.js";
+import { invites, orgUsers } from "../schema/organizations.js";
+import { user } from "../schema/better-auth.js";
+import { orgUserProfileColumns } from "./org-user-profile.js";
+import { and, eq, ne } from "drizzle-orm";
+import { noopLogger } from "@headless-lms/core/shared/logger";
+import { STUDENT_ROLE, isStaffRole } from "@headless-lms/core/organizations";
+//#region src/repositories/members.ts
+const roleOf = (t) => isStaffRole(t) ? t : "instructor";
+function toMember(r) {
+	return {
+		id: r.id,
+		firstName: r.firstName,
+		lastName: r.lastName,
+		email: r.email,
+		image: r.image,
+		role: r.role,
+		status: r.status,
+		joinedAt: r.joinedAt,
+		invitedAt: r.invitedAt
+	};
+}
+var DrizzleMembersRepository = class {
+	db;
+	logger;
+	constructor(db, logger = noopLogger) {
+		this.db = db;
+		this.logger = logger;
+	}
+	async loadAll(orgId) {
+		const memberRows = await this.db.select({
+			...orgUserProfileColumns,
+			role: orgUsers.role,
+			joinedAt: orgUsers.createdAt,
+			userExternalId: users.externalId
+		}).from(orgUsers).innerJoin(users, eq(users.id, orgUsers.userId)).leftJoin(user, eq(user.id, users.externalId)).where(and(eq(orgUsers.orgId, orgId), ne(orgUsers.role, STUDENT_ROLE)));
+		const inviteRows = await this.db.select({
+			id: invites.id,
+			email: invites.email,
+			role: invites.role,
+			invitedAt: invites.createdAt
+		}).from(invites).where(and(eq(invites.orgId, orgId), eq(invites.status, "pending"), ne(invites.role, STUDENT_ROLE)));
+		const members = memberRows.map((m) => ({
+			id: m.id,
+			firstName: m.firstName,
+			lastName: m.lastName,
+			email: m.email,
+			image: m.image ?? null,
+			role: roleOf(m.role),
+			status: "active",
+			joinedAt: m.joinedAt.toISOString(),
+			invitedAt: null,
+			kind: "member",
+			userExternalId: m.userExternalId,
+			inviteId: null
+		}));
+		const invited = inviteRows.map((i) => ({
+			id: i.id,
+			firstName: null,
+			lastName: null,
+			email: i.email,
+			image: null,
+			role: roleOf(i.role),
+			status: "invited",
+			joinedAt: null,
+			invitedAt: i.invitedAt.toISOString(),
+			kind: "invite",
+			userExternalId: null,
+			inviteId: i.id
+		}));
+		return [...members, ...invited];
+	}
+	async list(orgId, query) {
+		let rows = await this.loadAll(orgId);
+		if (query.role) rows = rows.filter((r) => r.role === query.role);
+		if (query.status) rows = rows.filter((r) => r.status === query.status);
+		const q = query.search?.trim().toLowerCase();
+		if (q) rows = rows.filter((r) => [
+			r.firstName,
+			r.lastName,
+			r.email
+		].some((v) => v?.toLowerCase().includes(q)));
+		const sort = query.sort;
+		const desc = sort?.startsWith("-") ?? false;
+		const key = desc ? sort.slice(1) : sort;
+		const byName = (a, b) => a === b ? 0 : a === null ? 1 : b === null ? -1 : a.localeCompare(b);
+		rows.sort((a, b) => {
+			if (key === "email") return desc ? -a.email.localeCompare(b.email) : a.email.localeCompare(b.email);
+			if (key === "role") return desc ? -a.role.localeCompare(b.role) : a.role.localeCompare(b.role);
+			if (key === "lastName") {
+				const cmp = byName(a.lastName, b.lastName) || byName(a.firstName, b.firstName);
+				return desc ? -cmp : cmp;
+			}
+			const cmp = byName(a.firstName, b.firstName) || byName(a.lastName, b.lastName);
+			return desc ? -cmp : cmp;
+		});
+		const total = rows.length;
+		const start = (query.page - 1) * query.pageSize;
+		return {
+			rows: rows.slice(start, start + query.pageSize).map(toMember),
+			total,
+			page: query.page,
+			pageSize: query.pageSize
+		};
+	}
+	async findByEmail(orgId, email) {
+		return (await this.loadAll(orgId)).find((r) => r.email.toLowerCase() === email.toLowerCase()) ?? null;
+	}
+	async findById(orgId, id) {
+		return (await this.loadAll(orgId)).find((r) => r.id === id) ?? null;
+	}
+};
+//#endregion
+export { DrizzleMembersRepository };
+
+//# sourceMappingURL=members.js.map

package/dist/repositories/members.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.js","names":[],"sources":["../../src/repositories/members.ts"],"sourcesContent":["// organizations members — Drizzle read repository. Reads the domain mirror of the\n// org's members (orgUsers) and pending invites, joined to the identity user for\n// display. Writes go through the auth provider (see adapters/auth/org-admin.ts).\nimport { and, eq, ne } from 'drizzle-orm';\nimport type { NodePgDatabase } from 'drizzle-orm/node-postgres';\nimport {\n  isStaffRole,\n  STUDENT_ROLE,\n  type Member,\n  type MemberRecord,\n  type MembersQuery,\n  type MembersRepository,\n  type Page,\n  type StaffRole,\n} from '@headless-lms/core/organizations';\nimport { orgUsers, invites } from '../schema/organizations.js';\nimport { users } from '../schema/identity.js';\nimport { user } from '../schema/better-auth.js';\nimport type { Logger } from '@headless-lms/core/shared/ports';\nimport { noopLogger } from '@headless-lms/core/shared/logger';\nimport { orgUserProfileColumns } from './org-user-profile.js';\n\n// The member surface is staff-only; a student org user never reaches here\n// (the queries below exclude it), so an unrecognized role falls back to the\n// least-privileged staff role rather than widening to the full Role union.\nconst roleOf = (t: string): StaffRole => (isStaffRole(t) ? t : 'instructor');\n\nfunction toMember(r: MemberRecord): Member {\n  return {\n    id: r.id,\n    firstName: r.firstName,\n    lastName: r.lastName,\n    email: r.email,\n    image: r.image,\n    role: r.role,\n    status: r.status,\n    joinedAt: r.joinedAt,\n    invitedAt: r.invitedAt,\n  };\n}\n\nexport class DrizzleMembersRepository implements MembersRepository {\n  constructor(\n    private readonly db: NodePgDatabase,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  private async loadAll(orgId: string): Promise<MemberRecord[]> {\n    // Learners share this table now, so the role filter is what keeps them off\n    // the staff list. Name/email come from the identity user the row links to.\n    const memberRows = await this.db\n      .select({\n        ...orgUserProfileColumns,\n        role: orgUsers.role,\n        joinedAt: orgUsers.createdAt,\n        userExternalId: users.externalId,\n      })\n      .from(orgUsers)\n      .innerJoin(users, eq(users.id, orgUsers.userId))\n      .leftJoin(user, eq(user.id, users.externalId))\n      .where(and(eq(orgUsers.orgId, orgId), ne(orgUsers.role, STUDENT_ROLE)));\n\n    // Student invites live in the same table but belong to the students\n    // surface, not the members list.\n    const inviteRows = await this.db\n      .select({\n        id: invites.id,\n        email: invites.email,\n        role: invites.role,\n        invitedAt: invites.createdAt,\n      })\n      .from(invites)\n      .where(\n        and(\n          eq(invites.orgId, orgId),\n          eq(invites.status, 'pending'),\n          ne(invites.role, STUDENT_ROLE),\n        ),\n      );\n\n    const members: MemberRecord[] = memberRows.map((m) => ({\n      id: m.id,\n      firstName: m.firstName,\n      lastName: m.lastName,\n      email: m.email,\n      image: m.image ?? null,\n      role: roleOf(m.role),\n      status: 'active',\n      joinedAt: m.joinedAt.toISOString(),\n      invitedAt: null,\n      kind: 'member',\n      userExternalId: m.userExternalId,\n      inviteId: null,\n    }));\n    // A pending invite is an address and nothing else — the invites table\n    // carries no names, so there is nobody to name until they accept.\n    const invited: MemberRecord[] = inviteRows.map((i) => ({\n      id: i.id,\n      firstName: null,\n      lastName: null,\n      email: i.email,\n      image: null,\n      role: roleOf(i.role),\n      status: 'invited',\n      joinedAt: null,\n      invitedAt: i.invitedAt.toISOString(),\n      kind: 'invite',\n      userExternalId: null,\n      inviteId: i.id,\n    }));\n    return [...members, ...invited];\n  }\n\n  async list(orgId: string, query: MembersQuery): Promise<Page<Member>> {\n    let rows = await this.loadAll(orgId);\n    if (query.role) {\n      rows = rows.filter((r) => r.role === query.role);\n    }\n    if (query.status) {\n      rows = rows.filter((r) => r.status === query.status);\n    }\n    const q = query.search?.trim().toLowerCase();\n    if (q) {\n      rows = rows.filter((r) =>\n        [r.firstName, r.lastName, r.email].some((v) => v?.toLowerCase().includes(q)),\n      );\n    }\n\n    const sort = query.sort;\n    const desc = sort?.startsWith('-') ?? false;\n    const key = (desc ? sort!.slice(1) : sort) as keyof Member | undefined;\n    // Nulls last whichever way the column is sorted — an unaccepted invite has\n    // no name and belongs at the bottom, not interleaved.\n    const byName = (a: string | null, b: string | null): number =>\n      a === b ? 0 : a === null ? 1 : b === null ? -1 : a.localeCompare(b);\n    rows.sort((a, b) => {\n      if (key === 'email') {\n        return desc ? -a.email.localeCompare(b.email) : a.email.localeCompare(b.email);\n      }\n      if (key === 'role') {\n        return desc ? -a.role.localeCompare(b.role) : a.role.localeCompare(b.role);\n      }\n      if (key === 'lastName') {\n        const cmp = byName(a.lastName, b.lastName) || byName(a.firstName, b.firstName);\n        return desc ? -cmp : cmp;\n      }\n      const cmp = byName(a.firstName, b.firstName) || byName(a.lastName, b.lastName);\n      return desc ? -cmp : cmp;\n    });\n\n    const total = rows.length;\n    const start = (query.page - 1) * query.pageSize;\n    return {\n      rows: rows.slice(start, start + query.pageSize).map(toMember),\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n    };\n  }\n\n  async findByEmail(orgId: string, email: string): Promise<MemberRecord | null> {\n    const all = await this.loadAll(orgId);\n    return all.find((r) => r.email.toLowerCase() === email.toLowerCase()) ?? null;\n  }\n\n  async findById(orgId: string, id: string): Promise<MemberRecord | null> {\n    const all = await this.loadAll(orgId);\n    return all.find((r) => r.id === id) ?? null;\n  }\n}\n"],"mappings":";;;;;;;;AAyBA,MAAM,UAAU,MAA0B,YAAY,CAAC,IAAI,IAAI;AAE/D,SAAS,SAAS,GAAyB;CACzC,OAAO;EACL,IAAI,EAAE;EACN,WAAW,EAAE;EACb,UAAU,EAAE;EACZ,OAAO,EAAE;EACT,OAAO,EAAE;EACT,MAAM,EAAE;EACR,QAAQ,EAAE;EACV,UAAU,EAAE;EACZ,WAAW,EAAE;CACf;AACF;AAEA,IAAa,2BAAb,MAAmE;CAE9C;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAc,QAAQ,OAAwC;EAG5D,MAAM,aAAa,MAAM,KAAK,GAC3B,OAAO;GACN,GAAG;GACH,MAAM,SAAS;GACf,UAAU,SAAS;GACnB,gBAAgB,MAAM;EACxB,CAAC,CAAC,CACD,KAAK,QAAQ,CAAC,CACd,UAAU,OAAO,GAAG,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC,CAC/C,SAAS,MAAM,GAAG,KAAK,IAAI,MAAM,UAAU,CAAC,CAAC,CAC7C,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,GAAG,SAAS,MAAM,YAAY,CAAC,CAAC;EAIxE,MAAM,aAAa,MAAM,KAAK,GAC3B,OAAO;GACN,IAAI,QAAQ;GACZ,OAAO,QAAQ;GACf,MAAM,QAAQ;GACd,WAAW,QAAQ;EACrB,CAAC,CAAC,CACD,KAAK,OAAO,CAAC,CACb,MACC,IACE,GAAG,QAAQ,OAAO,KAAK,GACvB,GAAG,QAAQ,QAAQ,SAAS,GAC5B,GAAG,QAAQ,MAAM,YAAY,CAC/B,CACF;EAEF,MAAM,UAA0B,WAAW,KAAK,OAAO;GACrD,IAAI,EAAE;GACN,WAAW,EAAE;GACb,UAAU,EAAE;GACZ,OAAO,EAAE;GACT,OAAO,EAAE,SAAS;GAClB,MAAM,OAAO,EAAE,IAAI;GACnB,QAAQ;GACR,UAAU,EAAE,SAAS,YAAY;GACjC,WAAW;GACX,MAAM;GACN,gBAAgB,EAAE;GAClB,UAAU;EACZ,EAAE;EAGF,MAAM,UAA0B,WAAW,KAAK,OAAO;GACrD,IAAI,EAAE;GACN,WAAW;GACX,UAAU;GACV,OAAO,EAAE;GACT,OAAO;GACP,MAAM,OAAO,EAAE,IAAI;GACnB,QAAQ;GACR,UAAU;GACV,WAAW,EAAE,UAAU,YAAY;GACnC,MAAM;GACN,gBAAgB;GAChB,UAAU,EAAE;EACd,EAAE;EACF,OAAO,CAAC,GAAG,SAAS,GAAG,OAAO;CAChC;CAEA,MAAM,KAAK,OAAe,OAA4C;EACpE,IAAI,OAAO,MAAM,KAAK,QAAQ,KAAK;EACnC,IAAI,MAAM,MACR,OAAO,KAAK,QAAQ,MAAM,EAAE,SAAS,MAAM,IAAI;EAEjD,IAAI,MAAM,QACR,OAAO,KAAK,QAAQ,MAAM,EAAE,WAAW,MAAM,MAAM;EAErD,MAAM,IAAI,MAAM,QAAQ,KAAK,CAAC,CAAC,YAAY;EAC3C,IAAI,GACF,OAAO,KAAK,QAAQ,MAClB;GAAC,EAAE;GAAW,EAAE;GAAU,EAAE;EAAK,CAAC,CAAC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,CAC7E;EAGF,MAAM,OAAO,MAAM;EACnB,MAAM,OAAO,MAAM,WAAW,GAAG,KAAK;EACtC,MAAM,MAAO,OAAO,KAAM,MAAM,CAAC,IAAI;EAGrC,MAAM,UAAU,GAAkB,MAChC,MAAM,IAAI,IAAI,MAAM,OAAO,IAAI,MAAM,OAAO,KAAK,EAAE,cAAc,CAAC;EACpE,KAAK,MAAM,GAAG,MAAM;GAClB,IAAI,QAAQ,SACV,OAAO,OAAO,CAAC,EAAE,MAAM,cAAc,EAAE,KAAK,IAAI,EAAE,MAAM,cAAc,EAAE,KAAK;GAE/E,IAAI,QAAQ,QACV,OAAO,OAAO,CAAC,EAAE,KAAK,cAAc,EAAE,IAAI,IAAI,EAAE,KAAK,cAAc,EAAE,IAAI;GAE3E,IAAI,QAAQ,YAAY;IACtB,MAAM,MAAM,OAAO,EAAE,UAAU,EAAE,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,SAAS;IAC7E,OAAO,OAAO,CAAC,MAAM;GACvB;GACA,MAAM,MAAM,OAAO,EAAE,WAAW,EAAE,SAAS,KAAK,OAAO,EAAE,UAAU,EAAE,QAAQ;GAC7E,OAAO,OAAO,CAAC,MAAM;EACvB,CAAC;EAED,MAAM,QAAQ,KAAK;EACnB,MAAM,SAAS,MAAM,OAAO,KAAK,MAAM;EACvC,OAAO;GACL,MAAM,KAAK,MAAM,OAAO,QAAQ,MAAM,QAAQ,CAAC,CAAC,IAAI,QAAQ;GAC5D;GACA,MAAM,MAAM;GACZ,UAAU,MAAM;EAClB;CACF;CAEA,MAAM,YAAY,OAAe,OAA6C;EAE5E,QAAO,MADW,KAAK,QAAQ,KAAK,EAAA,CACzB,MAAM,MAAM,EAAE,MAAM,YAAY,MAAM,MAAM,YAAY,CAAC,KAAK;CAC3E;CAEA,MAAM,SAAS,OAAe,IAA0C;EAEtE,QAAO,MADW,KAAK,QAAQ,KAAK,EAAA,CACzB,MAAM,MAAM,EAAE,OAAO,EAAE,KAAK;CACzC;AACF"}

package/dist/repositories/org-user-profile.d.ts

@@ -0,0 +1,92 @@
+//#region src/repositories/org-user-profile.d.ts
+/** Spread into a `.select({ ... })` to get the profile columns. */
+declare const orgUserProfileColumns: {
+  id: import("drizzle-orm/pg-core").PgColumn<{
+    name: "id";
+    tableName: "org_users";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: true;
+    hasDefault: true;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: true;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  firstName: import("drizzle-orm/pg-core").PgColumn<{
+    name: "first_name";
+    tableName: "users";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: false;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  lastName: import("drizzle-orm/pg-core").PgColumn<{
+    name: "last_name";
+    tableName: "users";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: false;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  email: import("drizzle-orm/pg-core").PgColumn<{
+    name: "email";
+    tableName: "users";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: true;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+  image: import("drizzle-orm/pg-core").PgColumn<{
+    name: "image";
+    tableName: "ba_user";
+    dataType: "string";
+    columnType: "PgText";
+    data: string;
+    driverParam: string;
+    notNull: false;
+    hasDefault: false;
+    isPrimaryKey: false;
+    isAutoincrement: false;
+    hasRuntimeDefault: false;
+    enumValues: [string, ...string[]];
+    baseColumn: never;
+    identity: undefined;
+    generated: undefined;
+  }, {}, {}>;
+};
+//#endregion
+export { orgUserProfileColumns };
+//# sourceMappingURL=org-user-profile.d.ts.map

package/dist/repositories/org-user-profile.js

@@ -0,0 +1,16 @@
+import { users } from "../schema/identity.js";
+import { orgUsers } from "../schema/organizations.js";
+import { user } from "../schema/better-auth.js";
+//#region src/repositories/org-user-profile.ts
+/** Spread into a `.select({ ... })` to get the profile columns. */
+const orgUserProfileColumns = {
+	id: orgUsers.id,
+	firstName: users.firstName,
+	lastName: users.lastName,
+	email: users.email,
+	image: user.image
+};
+//#endregion
+export { orgUserProfileColumns };
+
+//# sourceMappingURL=org-user-profile.js.map

package/dist/repositories/org-user-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-user-profile.js","names":[],"sources":["../../src/repositories/org-user-profile.ts"],"sourcesContent":["// The one display join for an org user's profile.\n//\n// The names and email live on the identity `users` row the org_users row links\n// to; the avatar lives on the auth engine's mirrored `user` table, reached\n// through that same identity row. The identity join is INNER (user_id is NOT\n// NULL); the auth join is LEFT, since only the avatar depends on it.\n//\n// Sanctioned by .eslintrc.cjs — \"db repositories read the auth adapter's\n// mirrored `user` table for display joins\".\n//\n// No `joinOrgUserProfile` helper: Drizzle's query builder type narrows on every\n// chained call, so a generic wrapper around `.innerJoin(...).leftJoin(...)`\n// can't be typed without widening it to `unknown` — each repository chains the\n// two joins inline instead.\nimport { orgUsers } from '../schema/organizations.js';\nimport { users } from '../schema/identity.js';\nimport { user } from '../schema/better-auth.js';\n\n/** Spread into a `.select({ ... })` to get the profile columns. */\nexport const orgUserProfileColumns = {\n  id: orgUsers.id,\n  firstName: users.firstName,\n  lastName: users.lastName,\n  email: users.email,\n  image: user.image,\n};\n"],"mappings":";;;;;AAmBA,MAAa,wBAAwB;CACnC,IAAI,SAAS;CACb,WAAW,MAAM;CACjB,UAAU,MAAM;CAChB,OAAO,MAAM;CACb,OAAO,KAAK;AACd"}

package/dist/repositories/organizations.d.ts

@@ -0,0 +1,33 @@
+import { NodePgDatabase } from "drizzle-orm/node-postgres";
+import { AddOrgUserInput, CreateOrgUserInput, Invite, NewInviteRow, NewOrganizationRow, OrgUser, Organization, OrganizationsRepository, UpdateOrganizationInput } from "@headless-lms/core/organizations";
+import { Logger } from "@headless-lms/core/shared/ports";
+//#region src/repositories/organizations.d.ts
+declare class DrizzleOrganizationsRepository implements OrganizationsRepository {
+  private readonly db;
+  private readonly logger;
+  constructor(db: NodePgDatabase, logger?: Logger);
+  create(input: NewOrganizationRow): Promise<Organization>;
+  update(id: string, input: UpdateOrganizationInput): Promise<Organization | null>;
+  delete(id: string): Promise<Organization>;
+  findById(id: string): Promise<Organization | null>;
+  findByExternalId(externalId: string): Promise<Organization | null>;
+  findBySlug(slug: string): Promise<Organization | null>;
+  upsertOrgUser(orgId: string, input: AddOrgUserInput): Promise<OrgUser>;
+  upsertPendingInvite(orgId: string, input: NewInviteRow): Promise<Invite>;
+  setInviteStatus(orgId: string, id: string, status: string): Promise<Invite | null>;
+  findInviteByTokenHash(tokenHash: string): Promise<Invite | null>;
+  findOrgUser(orgId: string, userId: string): Promise<OrgUser | null>;
+  findOrgUsersByUser(userId: string): Promise<OrgUser[]>;
+  findOrgUserById(orgId: string, id: string): Promise<OrgUser | null>;
+  createOrgUser(input: CreateOrgUserInput): Promise<OrgUser>;
+  ensureOrgUser(input: CreateOrgUserInput): Promise<{
+    orgUser: OrgUser;
+    created: boolean;
+  }>;
+  findStudentOrgUsers(userId: string): Promise<OrgUser[]>;
+  cancelPendingInvite(orgId: string, email: string): Promise<Invite | null>;
+  deleteOrgUser(orgId: string, id: string): Promise<OrgUser | null>;
+}
+//#endregion
+export { DrizzleOrganizationsRepository };
+//# sourceMappingURL=organizations.d.ts.map

package/dist/repositories/organizations.js

@@ -0,0 +1,198 @@
+import { invites, orgUsers, organizations } from "../schema/organizations.js";
+import { isUniqueViolation } from "./pg-errors.js";
+import { and, eq, sql } from "drizzle-orm";
+import { noopLogger } from "@headless-lms/core/shared/logger";
+import { ConflictError } from "@headless-lms/core/shared/errors";
+import { normalizeRole, parseRole } from "@headless-lms/core/organizations";
+//#region src/repositories/organizations.ts
+const INVITE_STATUSES = [
+	"pending",
+	"accepted",
+	"rejected",
+	"canceled"
+];
+const toStatus = (s) => INVITE_STATUSES.includes(s) ? s : "pending";
+function toInvite(row) {
+	return {
+		id: row.id,
+		orgId: row.orgId,
+		email: row.email,
+		role: row.role,
+		status: row.status,
+		invitedBy: row.invitedBy,
+		tokenHash: row.tokenHash,
+		expiresAt: row.expiresAt,
+		createdAt: row.createdAt
+	};
+}
+var DrizzleOrganizationsRepository = class {
+	db;
+	logger;
+	constructor(db, logger = noopLogger) {
+		this.db = db;
+		this.logger = logger;
+	}
+	async create(input) {
+		const [row] = await this.db.insert(organizations).values({
+			externalId: input.externalId,
+			name: input.name,
+			slug: input.slug,
+			ownerId: input.ownerId,
+			id: input.id
+		}).returning();
+		if (!row) throw new Error("failed to insert organization");
+		return row;
+	}
+	async update(id, input) {
+		const [row] = await this.db.update(organizations).set({
+			name: input.name,
+			slug: input.slug
+		}).where(eq(organizations.id, id)).returning();
+		return row ?? null;
+	}
+	async delete(id) {
+		const [row] = await this.db.delete(organizations).where(eq(organizations.id, id)).returning();
+		if (!row) throw new Error("failed to delete organization");
+		return row;
+	}
+	async findById(id) {
+		const [row] = await this.db.select().from(organizations).where(eq(organizations.id, id));
+		return row ?? null;
+	}
+	async findByExternalId(externalId) {
+		const [row] = await this.db.select().from(organizations).where(eq(organizations.externalId, externalId)).limit(1);
+		return row ?? null;
+	}
+	async findBySlug(slug) {
+		const [row] = await this.db.select().from(organizations).where(eq(organizations.slug, slug)).limit(1);
+		return row ?? null;
+	}
+	async upsertOrgUser(orgId, input) {
+		const role = normalizeRole(input.role);
+		const [row] = await this.db.insert(orgUsers).values({
+			orgId,
+			userId: input.userId,
+			role
+		}).onConflictDoUpdate({
+			target: [orgUsers.orgId, orgUsers.userId],
+			set: { role }
+		}).returning();
+		if (!row) throw new Error("failed to upsert orgUser");
+		return {
+			...row,
+			role: parseRole(row.role)
+		};
+	}
+	async upsertPendingInvite(orgId, input) {
+		const [row] = await this.db.insert(invites).values({
+			orgId,
+			email: input.email,
+			role: input.role,
+			status: "pending",
+			invitedBy: input.invitedBy,
+			tokenHash: input.tokenHash,
+			expiresAt: input.expiresAt
+		}).onConflictDoUpdate({
+			target: [invites.orgId, invites.email],
+			targetWhere: sql`${invites.status} = 'pending'`,
+			set: {
+				role: input.role,
+				invitedBy: input.invitedBy,
+				tokenHash: input.tokenHash,
+				expiresAt: input.expiresAt
+			}
+		}).returning();
+		if (!row) throw new Error("failed to upsert invite");
+		return toInvite(row);
+	}
+	async setInviteStatus(orgId, id, status) {
+		const [row] = await this.db.update(invites).set({ status: toStatus(status) }).where(and(eq(invites.orgId, orgId), eq(invites.id, id))).returning();
+		return row ? toInvite(row) : null;
+	}
+	async findInviteByTokenHash(tokenHash) {
+		const [row] = await this.db.select().from(invites).where(eq(invites.tokenHash, tokenHash)).limit(1);
+		return row ? toInvite(row) : null;
+	}
+	async findOrgUser(orgId, userId) {
+		const [row] = await this.db.select().from(orgUsers).where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.userId, userId))).limit(1);
+		return row ? {
+			...row,
+			role: parseRole(row.role)
+		} : null;
+	}
+	async findOrgUsersByUser(userId) {
+		return (await this.db.select().from(orgUsers).where(eq(orgUsers.userId, userId)).orderBy(orgUsers.createdAt)).map((row) => ({
+			...row,
+			role: parseRole(row.role)
+		}));
+	}
+	async findOrgUserById(orgId, id) {
+		const [row] = await this.db.select().from(orgUsers).where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.id, id))).limit(1);
+		return row ? {
+			...row,
+			role: parseRole(row.role)
+		} : null;
+	}
+	async createOrgUser(input) {
+		try {
+			const [row] = await this.db.insert(orgUsers).values({
+				orgId: input.orgId,
+				userId: input.userId,
+				role: input.role,
+				status: input.status ?? "active"
+			}).returning();
+			if (!row) throw new Error("failed to insert org user");
+			return {
+				...row,
+				role: parseRole(row.role)
+			};
+		} catch (err) {
+			if (isUniqueViolation(err)) throw new ConflictError("That account already belongs to this organization");
+			throw err;
+		}
+	}
+	async ensureOrgUser(input) {
+		const status = input.status ?? "active";
+		const [inserted] = await this.db.insert(orgUsers).values({
+			orgId: input.orgId,
+			userId: input.userId,
+			role: input.role,
+			status
+		}).onConflictDoNothing({ target: [orgUsers.orgId, orgUsers.userId] }).returning();
+		if (inserted) return {
+			orgUser: {
+				...inserted,
+				role: parseRole(inserted.role)
+			},
+			created: true
+		};
+		const where = and(eq(orgUsers.orgId, input.orgId), eq(orgUsers.userId, input.userId));
+		const [existing] = status === "active" ? await this.db.update(orgUsers).set({ status }).where(where).returning() : await this.db.select().from(orgUsers).where(where).limit(1);
+		if (!existing) throw new Error("failed to ensure org user");
+		return {
+			orgUser: {
+				...existing,
+				role: parseRole(existing.role)
+			},
+			created: false
+		};
+	}
+	async findStudentOrgUsers(userId) {
+		return (await this.db.select().from(orgUsers).where(and(eq(orgUsers.userId, userId), eq(orgUsers.role, "student"))).orderBy(orgUsers.createdAt)).map((row) => ({
+			...row,
+			role: parseRole(row.role)
+		}));
+	}
+	async cancelPendingInvite(orgId, email) {
+		const [row] = await this.db.update(invites).set({ status: "canceled" }).where(and(eq(invites.orgId, orgId), sql`lower(${invites.email}) = lower(${email})`, eq(invites.status, "pending"))).returning();
+		return row ? toInvite(row) : null;
+	}
+	async deleteOrgUser(orgId, id) {
+		const [row] = await this.db.delete(orgUsers).where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.id, id))).returning();
+		return row ?? null;
+	}
+};
+//#endregion
+export { DrizzleOrganizationsRepository };
+
+//# sourceMappingURL=organizations.js.map

package/dist/repositories/organizations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.js","names":[],"sources":["../../src/repositories/organizations.ts"],"sourcesContent":["// organizations — Drizzle repository (implements the core outbound port).\nimport { and, eq, sql } from 'drizzle-orm';\nimport type { NodePgDatabase } from 'drizzle-orm/node-postgres';\nimport {\n  normalizeRole,\n  parseRole,\n  type AddOrgUserInput,\n  type CreateOrgUserInput,\n  type Invite,\n  type NewInviteRow,\n  type NewOrganizationRow,\n  type Organization,\n  type OrganizationsRepository,\n  type OrgUser,\n  type UpdateOrganizationInput,\n} from '@headless-lms/core/organizations';\nimport { invites, organizations, orgUsers } from '../schema/organizations.js';\nimport type { Logger } from '@headless-lms/core/shared/ports';\nimport { noopLogger } from '@headless-lms/core/shared/logger';\nimport { ConflictError } from '@headless-lms/core/shared/errors';\nimport { isUniqueViolation } from './pg-errors.js';\n\nconst INVITE_STATUSES = ['pending', 'accepted', 'rejected', 'canceled'] as const;\ntype InviteStatus = (typeof INVITE_STATUSES)[number];\nconst toStatus = (s: string): InviteStatus =>\n  (INVITE_STATUSES as readonly string[]).includes(s) ? (s as InviteStatus) : 'pending';\n\nfunction toInvite(row: typeof invites.$inferSelect): Invite {\n  return {\n    id: row.id,\n    orgId: row.orgId,\n    email: row.email,\n    role: row.role,\n    status: row.status,\n    invitedBy: row.invitedBy,\n    tokenHash: row.tokenHash,\n    expiresAt: row.expiresAt,\n    createdAt: row.createdAt,\n  };\n}\n\nexport class DrizzleOrganizationsRepository implements OrganizationsRepository {\n  constructor(\n    private readonly db: NodePgDatabase,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  async create(input: NewOrganizationRow): Promise<Organization> {\n    const [row] = await this.db\n      .insert(organizations)\n      .values({\n        externalId: input.externalId,\n        name: input.name,\n        slug: input.slug,\n        ownerId: input.ownerId,\n        id: input.id,\n      })\n      .returning();\n    if (!row) {\n      throw new Error('failed to insert organization');\n    }\n    return row!;\n  }\n\n  async update(id: string, input: UpdateOrganizationInput): Promise<Organization | null> {\n    const [row] = await this.db\n      .update(organizations)\n      .set({ name: input.name, slug: input.slug })\n      .where(eq(organizations.id, id))\n      .returning();\n    return row ?? null;\n  }\n\n  async delete(id: string): Promise<Organization> {\n    const [row] = await this.db.delete(organizations).where(eq(organizations.id, id)).returning();\n\n    if (!row) {\n      throw new Error('failed to delete organization');\n    }\n    return row;\n  }\n\n  async findById(id: string): Promise<Organization | null> {\n    const [row] = await this.db.select().from(organizations).where(eq(organizations.id, id));\n    return row ?? null;\n  }\n\n  async findByExternalId(externalId: string): Promise<Organization | null> {\n    const [row] = await this.db\n      .select()\n      .from(organizations)\n      .where(eq(organizations.externalId, externalId))\n      .limit(1);\n    return row ?? null;\n  }\n\n  async findBySlug(slug: string): Promise<Organization | null> {\n    const [row] = await this.db\n      .select()\n      .from(organizations)\n      .where(eq(organizations.slug, slug))\n      .limit(1);\n    return row ?? null;\n  }\n\n  async upsertOrgUser(orgId: string, input: AddOrgUserInput): Promise<OrgUser> {\n    const role = normalizeRole(input.role);\n    const [row] = await this.db\n      .insert(orgUsers)\n      .values({ orgId, userId: input.userId, role })\n      .onConflictDoUpdate({ target: [orgUsers.orgId, orgUsers.userId], set: { role } })\n      .returning();\n    if (!row) {\n      throw new Error('failed to upsert orgUser');\n    }\n    return { ...row, role: parseRole(row.role) };\n  }\n\n  async upsertPendingInvite(orgId: string, input: NewInviteRow): Promise<Invite> {\n    const [row] = await this.db\n      .insert(invites)\n      .values({\n        orgId,\n        email: input.email,\n        role: input.role,\n        status: 'pending',\n        invitedBy: input.invitedBy,\n        tokenHash: input.tokenHash,\n        expiresAt: input.expiresAt,\n      })\n      .onConflictDoUpdate({\n        target: [invites.orgId, invites.email],\n        targetWhere: sql`${invites.status} = 'pending'`,\n        set: {\n          role: input.role,\n          invitedBy: input.invitedBy,\n          tokenHash: input.tokenHash,\n          expiresAt: input.expiresAt,\n        },\n      })\n      .returning();\n    if (!row) {\n      throw new Error('failed to upsert invite');\n    }\n    return toInvite(row);\n  }\n\n  async setInviteStatus(orgId: string, id: string, status: string): Promise<Invite | null> {\n    const [row] = await this.db\n      .update(invites)\n      .set({ status: toStatus(status) })\n      .where(and(eq(invites.orgId, orgId), eq(invites.id, id)))\n      .returning();\n    return row ? toInvite(row) : null;\n  }\n\n  async findInviteByTokenHash(tokenHash: string): Promise<Invite | null> {\n    const [row] = await this.db\n      .select()\n      .from(invites)\n      .where(eq(invites.tokenHash, tokenHash))\n      .limit(1);\n    return row ? toInvite(row) : null;\n  }\n\n  async findOrgUser(orgId: string, userId: string): Promise<OrgUser | null> {\n    const [row] = await this.db\n      .select()\n      .from(orgUsers)\n      .where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.userId, userId)))\n      .limit(1);\n    return row ? { ...row, role: parseRole(row.role) } : null;\n  }\n\n  async findOrgUsersByUser(userId: string): Promise<OrgUser[]> {\n    const rows = await this.db\n      .select()\n      .from(orgUsers)\n      .where(eq(orgUsers.userId, userId))\n      .orderBy(orgUsers.createdAt);\n    return rows.map((row) => ({ ...row, role: parseRole(row.role) }));\n  }\n\n  async findOrgUserById(orgId: string, id: string): Promise<OrgUser | null> {\n    const [row] = await this.db\n      .select()\n      .from(orgUsers)\n      .where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.id, id)))\n      .limit(1);\n    return row ? { ...row, role: parseRole(row.role) } : null;\n  }\n\n  async createOrgUser(input: CreateOrgUserInput): Promise<OrgUser> {\n    try {\n      const [row] = await this.db\n        .insert(orgUsers)\n        .values({\n          orgId: input.orgId,\n          userId: input.userId,\n          role: input.role,\n          status: input.status ?? 'active',\n        })\n        .returning();\n      if (!row) {\n        throw new Error('failed to insert org user');\n      }\n      return { ...row, role: parseRole(row.role) };\n    } catch (err) {\n      if (isUniqueViolation(err)) {\n        throw new ConflictError('That account already belongs to this organization');\n      }\n      throw err;\n    }\n  }\n\n  async ensureOrgUser(input: CreateOrgUserInput): Promise<{ orgUser: OrgUser; created: boolean }> {\n    const status = input.status ?? 'active';\n    const [inserted] = await this.db\n      .insert(orgUsers)\n      .values({\n        orgId: input.orgId,\n        userId: input.userId,\n        role: input.role,\n        status,\n      })\n      .onConflictDoNothing({ target: [orgUsers.orgId, orgUsers.userId] })\n      .returning();\n    if (inserted) {\n      return { orgUser: { ...inserted, role: parseRole(inserted.role) }, created: true };\n    }\n\n    const where = and(eq(orgUsers.orgId, input.orgId), eq(orgUsers.userId, input.userId));\n    // Only an acceptance writes. A re-invite asks for 'invited' against a row\n    // that already exists, and has nothing to say about it.\n    const [existing] =\n      status === 'active'\n        ? await this.db.update(orgUsers).set({ status }).where(where).returning()\n        : await this.db.select().from(orgUsers).where(where).limit(1);\n    if (!existing) {\n      throw new Error('failed to ensure org user');\n    }\n    return { orgUser: { ...existing, role: parseRole(existing.role) }, created: false };\n  }\n\n  async findStudentOrgUsers(userId: string): Promise<OrgUser[]> {\n    const rows = await this.db\n      .select()\n      .from(orgUsers)\n      .where(and(eq(orgUsers.userId, userId), eq(orgUsers.role, 'student')))\n      .orderBy(orgUsers.createdAt);\n    return rows.map((row) => ({ ...row, role: parseRole(row.role) }));\n  }\n\n  async cancelPendingInvite(orgId: string, email: string): Promise<Invite | null> {\n    const [row] = await this.db\n      .update(invites)\n      .set({ status: 'canceled' })\n      .where(\n        and(\n          eq(invites.orgId, orgId),\n          sql`lower(${invites.email}) = lower(${email})`,\n          eq(invites.status, 'pending'),\n        ),\n      )\n      .returning();\n    return row ? toInvite(row) : null;\n  }\n\n  async deleteOrgUser(orgId: string, id: string): Promise<OrgUser | null> {\n    const [row] = await this.db\n      .delete(orgUsers)\n      .where(and(eq(orgUsers.orgId, orgId), eq(orgUsers.id, id)))\n      .returning();\n\n    return row ?? null;\n  }\n}\n"],"mappings":";;;;;;;AAsBA,MAAM,kBAAkB;CAAC;CAAW;CAAY;CAAY;AAAU;AAEtE,MAAM,YAAY,MACf,gBAAsC,SAAS,CAAC,IAAK,IAAqB;AAE7E,SAAS,SAAS,KAA0C;CAC1D,OAAO;EACL,IAAI,IAAI;EACR,OAAO,IAAI;EACX,OAAO,IAAI;EACX,MAAM,IAAI;EACV,QAAQ,IAAI;EACZ,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;AAEA,IAAa,iCAAb,MAA+E;CAE1D;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAM,OAAO,OAAkD;EAC7D,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,aAAa,CAAC,CACrB,OAAO;GACN,YAAY,MAAM;GAClB,MAAM,MAAM;GACZ,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,IAAI,MAAM;EACZ,CAAC,CAAC,CACD,UAAU;EACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,+BAA+B;EAEjD,OAAO;CACT;CAEA,MAAM,OAAO,IAAY,OAA8D;EACrF,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,aAAa,CAAC,CACrB,IAAI;GAAE,MAAM,MAAM;GAAM,MAAM,MAAM;EAAK,CAAC,CAAC,CAC3C,MAAM,GAAG,cAAc,IAAI,EAAE,CAAC,CAAC,CAC/B,UAAU;EACb,OAAO,OAAO;CAChB;CAEA,MAAM,OAAO,IAAmC;EAC9C,MAAM,CAAC,OAAO,MAAM,KAAK,GAAG,OAAO,aAAa,CAAC,CAAC,MAAM,GAAG,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU;EAE5F,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,+BAA+B;EAEjD,OAAO;CACT;CAEA,MAAM,SAAS,IAA0C;EACvD,MAAM,CAAC,OAAO,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,MAAM,GAAG,cAAc,IAAI,EAAE,CAAC;EACvF,OAAO,OAAO;CAChB;CAEA,MAAM,iBAAiB,YAAkD;EACvE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,aAAa,CAAC,CACnB,MAAM,GAAG,cAAc,YAAY,UAAU,CAAC,CAAC,CAC/C,MAAM,CAAC;EACV,OAAO,OAAO;CAChB;CAEA,MAAM,WAAW,MAA4C;EAC3D,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,aAAa,CAAC,CACnB,MAAM,GAAG,cAAc,MAAM,IAAI,CAAC,CAAC,CACnC,MAAM,CAAC;EACV,OAAO,OAAO;CAChB;CAEA,MAAM,cAAc,OAAe,OAA0C;EAC3E,MAAM,OAAO,cAAc,MAAM,IAAI;EACrC,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,QAAQ,CAAC,CAChB,OAAO;GAAE;GAAO,QAAQ,MAAM;GAAQ;EAAK,CAAC,CAAC,CAC7C,mBAAmB;GAAE,QAAQ,CAAC,SAAS,OAAO,SAAS,MAAM;GAAG,KAAK,EAAE,KAAK;EAAE,CAAC,CAAC,CAChF,UAAU;EACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,0BAA0B;EAE5C,OAAO;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE;CAC7C;CAEA,MAAM,oBAAoB,OAAe,OAAsC;EAC7E,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,OAAO,CAAC,CACf,OAAO;GACN;GACA,OAAO,MAAM;GACb,MAAM,MAAM;GACZ,QAAQ;GACR,WAAW,MAAM;GACjB,WAAW,MAAM;GACjB,WAAW,MAAM;EACnB,CAAC,CAAC,CACD,mBAAmB;GAClB,QAAQ,CAAC,QAAQ,OAAO,QAAQ,KAAK;GACrC,aAAa,GAAG,GAAG,QAAQ,OAAO;GAClC,KAAK;IACH,MAAM,MAAM;IACZ,WAAW,MAAM;IACjB,WAAW,MAAM;IACjB,WAAW,MAAM;GACnB;EACF,CAAC,CAAC,CACD,UAAU;EACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,yBAAyB;EAE3C,OAAO,SAAS,GAAG;CACrB;CAEA,MAAM,gBAAgB,OAAe,IAAY,QAAwC;EACvF,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,OAAO,CAAC,CACf,IAAI,EAAE,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAC,CACjC,MAAM,IAAI,GAAG,QAAQ,OAAO,KAAK,GAAG,GAAG,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CACxD,UAAU;EACb,OAAO,MAAM,SAAS,GAAG,IAAI;CAC/B;CAEA,MAAM,sBAAsB,WAA2C;EACrE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,OAAO,CAAC,CACb,MAAM,GAAG,QAAQ,WAAW,SAAS,CAAC,CAAC,CACvC,MAAM,CAAC;EACV,OAAO,MAAM,SAAS,GAAG,IAAI;CAC/B;CAEA,MAAM,YAAY,OAAe,QAAyC;EACxE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,QAAQ,CAAC,CACd,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,GAAG,SAAS,QAAQ,MAAM,CAAC,CAAC,CAAC,CAClE,MAAM,CAAC;EACV,OAAO,MAAM;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,IAAI;CACvD;CAEA,MAAM,mBAAmB,QAAoC;EAM3D,QAAO,MALY,KAAK,GACrB,OAAO,CAAC,CACR,KAAK,QAAQ,CAAC,CACd,MAAM,GAAG,SAAS,QAAQ,MAAM,CAAC,CAAC,CAClC,QAAQ,SAAS,SAAS,EAAA,CACjB,KAAK,SAAS;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,EAAE;CAClE;CAEA,MAAM,gBAAgB,OAAe,IAAqC;EACxE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,QAAQ,CAAC,CACd,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,GAAG,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAC1D,MAAM,CAAC;EACV,OAAO,MAAM;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,IAAI;CACvD;CAEA,MAAM,cAAc,OAA6C;EAC/D,IAAI;GACF,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,QAAQ,CAAC,CAChB,OAAO;IACN,OAAO,MAAM;IACb,QAAQ,MAAM;IACd,MAAM,MAAM;IACZ,QAAQ,MAAM,UAAU;GAC1B,CAAC,CAAC,CACD,UAAU;GACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,2BAA2B;GAE7C,OAAO;IAAE,GAAG;IAAK,MAAM,UAAU,IAAI,IAAI;GAAE;EAC7C,SAAS,KAAK;GACZ,IAAI,kBAAkB,GAAG,GACvB,MAAM,IAAI,cAAc,mDAAmD;GAE7E,MAAM;EACR;CACF;CAEA,MAAM,cAAc,OAA4E;EAC9F,MAAM,SAAS,MAAM,UAAU;EAC/B,MAAM,CAAC,YAAY,MAAM,KAAK,GAC3B,OAAO,QAAQ,CAAC,CAChB,OAAO;GACN,OAAO,MAAM;GACb,QAAQ,MAAM;GACd,MAAM,MAAM;GACZ;EACF,CAAC,CAAC,CACD,oBAAoB,EAAE,QAAQ,CAAC,SAAS,OAAO,SAAS,MAAM,EAAE,CAAC,CAAC,CAClE,UAAU;EACb,IAAI,UACF,OAAO;GAAE,SAAS;IAAE,GAAG;IAAU,MAAM,UAAU,SAAS,IAAI;GAAE;GAAG,SAAS;EAAK;EAGnF,MAAM,QAAQ,IAAI,GAAG,SAAS,OAAO,MAAM,KAAK,GAAG,GAAG,SAAS,QAAQ,MAAM,MAAM,CAAC;EAGpF,MAAM,CAAC,YACL,WAAW,WACP,MAAM,KAAK,GAAG,OAAO,QAAQ,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,UAAU,IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC;EAChE,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,2BAA2B;EAE7C,OAAO;GAAE,SAAS;IAAE,GAAG;IAAU,MAAM,UAAU,SAAS,IAAI;GAAE;GAAG,SAAS;EAAM;CACpF;CAEA,MAAM,oBAAoB,QAAoC;EAM5D,QAAO,MALY,KAAK,GACrB,OAAO,CAAC,CACR,KAAK,QAAQ,CAAC,CACd,MAAM,IAAI,GAAG,SAAS,QAAQ,MAAM,GAAG,GAAG,SAAS,MAAM,SAAS,CAAC,CAAC,CAAC,CACrE,QAAQ,SAAS,SAAS,EAAA,CACjB,KAAK,SAAS;GAAE,GAAG;GAAK,MAAM,UAAU,IAAI,IAAI;EAAE,EAAE;CAClE;CAEA,MAAM,oBAAoB,OAAe,OAAuC;EAC9E,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,OAAO,CAAC,CACf,IAAI,EAAE,QAAQ,WAAW,CAAC,CAAC,CAC3B,MACC,IACE,GAAG,QAAQ,OAAO,KAAK,GACvB,GAAG,SAAS,QAAQ,MAAM,YAAY,MAAM,IAC5C,GAAG,QAAQ,QAAQ,SAAS,CAC9B,CACF,CAAC,CACA,UAAU;EACb,OAAO,MAAM,SAAS,GAAG,IAAI;CAC/B;CAEA,MAAM,cAAc,OAAe,IAAqC;EACtE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,QAAQ,CAAC,CAChB,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,GAAG,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAC1D,UAAU;EAEb,OAAO,OAAO;CAChB;AACF"}

package/dist/repositories/outbox.d.ts

@@ -0,0 +1,24 @@
+import { DbExecutor } from "../client.js";
+import { NodePgDatabase } from "drizzle-orm/node-postgres";
+import { Logger, NewDomainEvent, OutboxAppender, OutboxMessage, OutboxStore } from "@headless-lms/core/shared/ports";
+//#region src/repositories/outbox.d.ts
+/** A message that fails this many dispatches is parked: fetchBatch stops
+ *  claiming it, leaving the row (with its last_error) for inspection. */
+declare const OUTBOX_MAX_ATTEMPTS = 10;
+declare class DrizzleOutboxAppender implements OutboxAppender {
+  private readonly tx;
+  private readonly logger;
+  constructor(tx: DbExecutor, logger?: Logger);
+  append<E extends NewDomainEvent>(events: E[]): Promise<void>;
+}
+declare class DrizzleOutboxStore implements OutboxStore {
+  private readonly db;
+  private readonly logger;
+  constructor(db: NodePgDatabase, logger?: Logger);
+  fetchBatch(limit: number): Promise<OutboxMessage[]>;
+  markProcessed(id: string): Promise<void>;
+  markFailed(id: string, error: string, nextAttemptAt: Date): Promise<void>;
+}
+//#endregion
+export { DrizzleOutboxAppender, DrizzleOutboxStore, OUTBOX_MAX_ATTEMPTS };
+//# sourceMappingURL=outbox.d.ts.map