@headless-lms/adapter-db 0.2.0 → 0.4.0

package/dist/repositories/entitlements.js.map

@@ -1 +1 @@
-{"version":3,"file":"entitlements.js","names":[],"sources":["../../src/repositories/entitlements.ts"],"sourcesContent":["import { and, asc, desc, eq, ilike, or, sql, type SQL } from \"drizzle-orm\";\nimport { alias } from \"drizzle-orm/pg-core\";\nimport type { DbExecutor } from \"../client.js\";\nimport type { EntitlementsRepository } from \"@headless-lms/core/entitlements\";\nimport type {\n  Entitlement,\n  EntitlementStatus,\n  EntitlementsQuery,\n  GrantEntitlementInput,\n  Logger,\n  Page,\n} from \"@headless-lms/core/types\";\nimport { entitlements, orgUsers, users } from \"../schema/index.js\";\nimport { bundleItems, bundles, contentItems, courses, downloads } from \"../schema/content.js\";\nimport { noopLogger } from \"@headless-lms/core/shared/logger\";\nimport { translateDbErrors } from \"./pg-errors.js\";\n\ntype ResolvedStatus = \"active\" | \"expired\" | \"revoked\";\n\n// CASE expression: revoked beats everything; otherwise an elapsed expiry reads as\n// expired; otherwise active.\nconst derivedStatus = sql<ResolvedStatus>`case\n  when ${entitlements.status} = 'revoked' then 'revoked'\n  when ${entitlements.expiresAt} is not null and ${entitlements.expiresAt} < now() then 'expired'\n  else 'active'\nend`;\n\n// Display name of the grant's target, whatever it is. One LEFT JOIN per concrete\n// content table plus one for bundles; exactly one hits per row (a grant targets\n// either a bundle or a single content item), so the COALESCE picks the single\n// non-null title. Extended per new content type.\nconst contentTitle = sql<string>`coalesce(${courses.title}, ${downloads.title}, ${bundles.name})`;\n\n// Sortable columns by the client-facing field name. `status` sorts on the derived\n// expression so the ordering matches the displayed value; `contentTitle` on the\n// coalesced join expression.\nconst sortColumns = {\n  firstName: users.firstName,\n  lastName: users.lastName,\n  email: users.email,\n  contentTitle,\n  status: derivedStatus,\n  grantedAt: entitlements.grantedAt,\n  expiresAt: entitlements.expiresAt,\n  source: entitlements.source,\n} as const;\n\nconst selection = {\n  orgId: entitlements.orgId,\n  id: entitlements.id,\n  orgUserId: entitlements.orgUserId,\n  bundleId: entitlements.bundleId,\n  contentId: entitlements.contentId,\n  status: entitlements.status,\n  source: entitlements.source,\n  grantedAt: entitlements.grantedAt,\n  expiresAt: entitlements.expiresAt,\n  createdAt: entitlements.createdAt,\n  updatedAt: entitlements.updatedAt,\n} as const;\n\ninterface Row {\n  orgId: string;\n  id: string;\n  orgUserId: string;\n  bundleId: string | null;\n  contentId: string | null;\n  status: EntitlementStatus;\n  source: string;\n  grantedAt: Date;\n  expiresAt: Date | null;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nfunction toEntitlement(row: Row): Entitlement {\n  return {\n    orgId: row.orgId,\n    id: row.id,\n    orgUserId: row.orgUserId,\n    bundleId: row.bundleId,\n    contentId: row.contentId,\n    status: row.status,\n    source: row.source,\n    grantedAt: row.grantedAt,\n    expiresAt: row.expiresAt,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\nexport class DrizzleEntitlementsRepository implements EntitlementsRepository {\n  constructor(\n    private readonly db: DbExecutor,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  /** entitlements → org_users + the grant's target: content_items (type) and one\n   *  LEFT JOIN per concrete content table (title), or bundles (name). Both target\n   *  joins are LEFT — a row carries one of the two, never both. */\n  private joined(where: SQL | undefined) {\n    return this.db\n      .select(selection)\n      .from(entitlements)\n      .innerJoin(\n        orgUsers,\n        and(eq(orgUsers.orgId, entitlements.orgId), eq(orgUsers.id, entitlements.orgUserId)),\n      )\n      .innerJoin(users, eq(users.id, orgUsers.userId))\n      .leftJoin(\n        contentItems,\n        and(\n          eq(contentItems.orgId, entitlements.orgId),\n          eq(contentItems.id, entitlements.contentId),\n        ),\n      )\n      .leftJoin(\n        bundles,\n        and(eq(bundles.orgId, entitlements.orgId), eq(bundles.id, entitlements.bundleId)),\n      )\n      .leftJoin(\n        courses,\n        and(eq(courses.orgId, entitlements.orgId), eq(courses.id, entitlements.contentId)),\n      )\n      .leftJoin(\n        downloads,\n        and(eq(downloads.orgId, entitlements.orgId), eq(downloads.id, entitlements.contentId)),\n      )\n      .where(where);\n  }\n\n  async list(orgId: string, query: EntitlementsQuery): Promise<Page<Entitlement>> {\n    const conditions: SQL[] = [eq(entitlements.orgId, orgId)];\n    if (query.status) {\n      conditions.push(sql`${derivedStatus} = ${query.status}`);\n    }\n    if (query.source) {\n      conditions.push(eq(entitlements.source, query.source));\n    }\n    if (query.orgUserId) {\n      conditions.push(eq(entitlements.orgUserId, query.orgUserId));\n    }\n    if (query.contentId) {\n      conditions.push(eq(entitlements.contentId, query.contentId));\n    }\n    if (query.bundleId) {\n      conditions.push(eq(entitlements.bundleId, query.bundleId));\n    }\n    if (query.type) {\n      conditions.push(eq(contentItems.type, query.type));\n    }\n    if (query.search) {\n      const pattern = `%${query.search}%`;\n      conditions.push(\n        or(\n          ilike(users.firstName, pattern),\n          ilike(users.lastName, pattern),\n          ilike(users.email, pattern),\n          ilike(contentTitle, pattern),\n        ) as SQL,\n      );\n    }\n    const where = and(...conditions);\n\n    // Sort: `-field` for descending; default to most-recently granted first.\n    let orderBy: SQL;\n    if (query.sort) {\n      const isDesc = query.sort.startsWith(\"-\");\n      const field = (isDesc ? query.sort.slice(1) : query.sort) as keyof typeof sortColumns;\n      const col = sortColumns[field] ?? entitlements.grantedAt;\n      orderBy = isDesc ? desc(col) : asc(col);\n    } else {\n      orderBy = desc(entitlements.grantedAt);\n    }\n\n    const offset = (query.page - 1) * query.pageSize;\n\n    const rows = await this.joined(where).orderBy(orderBy).limit(query.pageSize).offset(offset);\n\n    const [{ total } = { total: 0 }] = await this.db\n      .select({ total: sql<number>`cast(count(*) as int)` })\n      .from(entitlements)\n      .innerJoin(\n        orgUsers,\n        and(eq(orgUsers.orgId, entitlements.orgId), eq(orgUsers.id, entitlements.orgUserId)),\n      )\n      .innerJoin(users, eq(users.id, orgUsers.userId))\n      .leftJoin(\n        contentItems,\n        and(\n          eq(contentItems.orgId, entitlements.orgId),\n          eq(contentItems.id, entitlements.contentId),\n        ),\n      )\n      .leftJoin(\n        bundles,\n        and(eq(bundles.orgId, entitlements.orgId), eq(bundles.id, entitlements.bundleId)),\n      )\n      .leftJoin(\n        courses,\n        and(eq(courses.orgId, entitlements.orgId), eq(courses.id, entitlements.contentId)),\n      )\n      .leftJoin(\n        downloads,\n        and(eq(downloads.orgId, entitlements.orgId), eq(downloads.id, entitlements.contentId)),\n      )\n      .where(where);\n\n    return {\n      rows: rows.map(toEntitlement),\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n    };\n  }\n\n  /** A grant targets exactly one of a bundle or a content item (db check\n   *  constraint), so the upsert is inferred on whichever of the two partial\n   *  uniques the target uses. */\n  async insert(orgId: string, input: GrantEntitlementInput): Promise<Entitlement> {\n    const bundleId = input.bundleId ?? null;\n    const contentId = input.contentId ?? null;\n    const target = bundleId\n      ? [entitlements.orgId, entitlements.orgUserId, entitlements.bundleId]\n      : [entitlements.orgId, entitlements.orgUserId, entitlements.contentId];\n\n    const [row] = await this.db\n      .insert(entitlements)\n      .values({\n        orgId,\n        orgUserId: input.orgUserId,\n        bundleId,\n        contentId,\n        status: \"active\",\n        source: \"manual\",\n        grantedAt: new Date(),\n        expiresAt: input.expiresAt,\n      })\n      .onConflictDoUpdate({\n        target,\n        set: {\n          status: \"active\",\n          source: \"manual\",\n          grantedAt: new Date(),\n          expiresAt: input.expiresAt,\n        },\n      })\n      .returning(selection);\n    if (!row) {\n      throw new Error(\"failed to insert entitlement\");\n    }\n    return toEntitlement(row);\n  }\n\n  async setStatus(\n    orgId: string,\n    id: string,\n    status: \"active\" | \"revoked\",\n  ): Promise<Entitlement | null> {\n    const [row] = await this.db\n      .update(entitlements)\n      .set({ status })\n      .where(and(eq(entitlements.orgId, orgId), eq(entitlements.id, id)))\n      .returning(selection);\n    if (!row) {\n      return null;\n    }\n    return toEntitlement(row);\n  }\n\n  /** Existence check scoped to the course case: same status predicate as\n   *  `list` (revoked never counts; an elapsed expiry reads as expired, not\n   *  active). The course is reachable two ways — granted directly, or granted\n   *  through a bundle that holds it — and either way the row is joined to\n   *  content_items and constrained to type = 'course', so a grant on some other\n   *  content type can never be mistaken for course access. */\n  async hasCourseAccess(orgId: string, orgUserId: string, courseId: string): Promise<boolean> {\n    const bundledItems = alias(contentItems, \"bundled_content_items\");\n    const rows = await this.db\n      .select({ id: entitlements.id })\n      .from(entitlements)\n      .leftJoin(\n        contentItems,\n        and(\n          eq(contentItems.orgId, entitlements.orgId),\n          eq(contentItems.id, entitlements.contentId),\n        ),\n      )\n      .leftJoin(\n        bundleItems,\n        and(\n          eq(bundleItems.orgId, entitlements.orgId),\n          eq(bundleItems.bundleId, entitlements.bundleId),\n        ),\n      )\n      .leftJoin(\n        bundledItems,\n        and(eq(bundledItems.orgId, bundleItems.orgId), eq(bundledItems.id, bundleItems.contentId)),\n      )\n      .where(\n        and(\n          eq(entitlements.orgId, orgId),\n          eq(entitlements.orgUserId, orgUserId),\n          or(\n            and(eq(entitlements.contentId, courseId), eq(contentItems.type, \"course\")),\n            and(eq(bundleItems.contentId, courseId), eq(bundledItems.type, \"course\")),\n          ),\n          sql`${derivedStatus} = 'active'`,\n        ),\n      )\n      .limit(1);\n    return rows.length > 0;\n  }\n}\ntranslateDbErrors(DrizzleEntitlementsRepository);\n"],"mappings":";;;;;;;;;;AAqBA,MAAM,gBAAgB,GAAmB;SAChC,aAAa,OAAO;SACpB,aAAa,UAAU,mBAAmB,aAAa,UAAU;;;AAQ1E,MAAM,eAAe,GAAW,YAAY,QAAQ,MAAM,IAAI,UAAU,MAAM,IAAI,QAAQ,KAAK;AAK/F,MAAM,cAAc;CAClB,WAAW,MAAM;CACjB,UAAU,MAAM;CAChB,OAAO,MAAM;CACb;CACA,QAAQ;CACR,WAAW,aAAa;CACxB,WAAW,aAAa;CACxB,QAAQ,aAAa;AACvB;AAEA,MAAM,YAAY;CAChB,OAAO,aAAa;CACpB,IAAI,aAAa;CACjB,WAAW,aAAa;CACxB,UAAU,aAAa;CACvB,WAAW,aAAa;CACxB,QAAQ,aAAa;CACrB,QAAQ,aAAa;CACrB,WAAW,aAAa;CACxB,WAAW,aAAa;CACxB,WAAW,aAAa;CACxB,WAAW,aAAa;AAC1B;AAgBA,SAAS,cAAc,KAAuB;CAC5C,OAAO;EACL,OAAO,IAAI;EACX,IAAI,IAAI;EACR,WAAW,IAAI;EACf,UAAU,IAAI;EACd,WAAW,IAAI;EACf,QAAQ,IAAI;EACZ,QAAQ,IAAI;EACZ,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;AAEA,IAAa,gCAAb,MAA6E;CAExD;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;;;;CAKH,OAAe,OAAwB;EACrC,OAAO,KAAK,GACT,OAAO,SAAS,CAAC,CACjB,KAAK,YAAY,CAAC,CAClB,UACC,UACA,IAAI,GAAG,SAAS,OAAO,aAAa,KAAK,GAAG,GAAG,SAAS,IAAI,aAAa,SAAS,CAAC,CACrF,CAAC,CACA,UAAU,OAAO,GAAG,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC,CAC/C,SACC,cACA,IACE,GAAG,aAAa,OAAO,aAAa,KAAK,GACzC,GAAG,aAAa,IAAI,aAAa,SAAS,CAC5C,CACF,CAAC,CACA,SACC,SACA,IAAI,GAAG,QAAQ,OAAO,aAAa,KAAK,GAAG,GAAG,QAAQ,IAAI,aAAa,QAAQ,CAAC,CAClF,CAAC,CACA,SACC,SACA,IAAI,GAAG,QAAQ,OAAO,aAAa,KAAK,GAAG,GAAG,QAAQ,IAAI,aAAa,SAAS,CAAC,CACnF,CAAC,CACA,SACC,WACA,IAAI,GAAG,UAAU,OAAO,aAAa,KAAK,GAAG,GAAG,UAAU,IAAI,aAAa,SAAS,CAAC,CACvF,CAAC,CACA,MAAM,KAAK;CAChB;CAEA,MAAM,KAAK,OAAe,OAAsD;EAC9E,MAAM,aAAoB,CAAC,GAAG,aAAa,OAAO,KAAK,CAAC;EACxD,IAAI,MAAM,QACR,WAAW,KAAK,GAAG,GAAG,cAAc,KAAK,MAAM,QAAQ;EAEzD,IAAI,MAAM,QACR,WAAW,KAAK,GAAG,aAAa,QAAQ,MAAM,MAAM,CAAC;EAEvD,IAAI,MAAM,WACR,WAAW,KAAK,GAAG,aAAa,WAAW,MAAM,SAAS,CAAC;EAE7D,IAAI,MAAM,WACR,WAAW,KAAK,GAAG,aAAa,WAAW,MAAM,SAAS,CAAC;EAE7D,IAAI,MAAM,UACR,WAAW,KAAK,GAAG,aAAa,UAAU,MAAM,QAAQ,CAAC;EAE3D,IAAI,MAAM,MACR,WAAW,KAAK,GAAG,aAAa,MAAM,MAAM,IAAI,CAAC;EAEnD,IAAI,MAAM,QAAQ;GAChB,MAAM,UAAU,IAAI,MAAM,OAAO;GACjC,WAAW,KACT,GACE,MAAM,MAAM,WAAW,OAAO,GAC9B,MAAM,MAAM,UAAU,OAAO,GAC7B,MAAM,MAAM,OAAO,OAAO,GAC1B,MAAM,cAAc,OAAO,CAC7B,CACF;EACF;EACA,MAAM,QAAQ,IAAI,GAAG,UAAU;EAG/B,IAAI;EACJ,IAAI,MAAM,MAAM;GACd,MAAM,SAAS,MAAM,KAAK,WAAW,GAAG;GACxC,MAAM,QAAS,SAAS,MAAM,KAAK,MAAM,CAAC,IAAI,MAAM;GACpD,MAAM,MAAM,YAAY,UAAU,aAAa;GAC/C,UAAU,SAAS,KAAK,GAAG,IAAI,IAAI,GAAG;EACxC,OACE,UAAU,KAAK,aAAa,SAAS;EAGvC,MAAM,UAAU,MAAM,OAAO,KAAK,MAAM;EAExC,MAAM,OAAO,MAAM,KAAK,OAAO,KAAK,CAAC,CAAC,QAAQ,OAAO,CAAC,CAAC,MAAM,MAAM,QAAQ,CAAC,CAAC,OAAO,MAAM;EAE1F,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,MAAM,KAAK,GAC3C,OAAO,EAAE,OAAO,GAAW,wBAAwB,CAAC,CAAC,CACrD,KAAK,YAAY,CAAC,CAClB,UACC,UACA,IAAI,GAAG,SAAS,OAAO,aAAa,KAAK,GAAG,GAAG,SAAS,IAAI,aAAa,SAAS,CAAC,CACrF,CAAC,CACA,UAAU,OAAO,GAAG,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC,CAC/C,SACC,cACA,IACE,GAAG,aAAa,OAAO,aAAa,KAAK,GACzC,GAAG,aAAa,IAAI,aAAa,SAAS,CAC5C,CACF,CAAC,CACA,SACC,SACA,IAAI,GAAG,QAAQ,OAAO,aAAa,KAAK,GAAG,GAAG,QAAQ,IAAI,aAAa,QAAQ,CAAC,CAClF,CAAC,CACA,SACC,SACA,IAAI,GAAG,QAAQ,OAAO,aAAa,KAAK,GAAG,GAAG,QAAQ,IAAI,aAAa,SAAS,CAAC,CACnF,CAAC,CACA,SACC,WACA,IAAI,GAAG,UAAU,OAAO,aAAa,KAAK,GAAG,GAAG,UAAU,IAAI,aAAa,SAAS,CAAC,CACvF,CAAC,CACA,MAAM,KAAK;EAEd,OAAO;GACL,MAAM,KAAK,IAAI,aAAa;GAC5B;GACA,MAAM,MAAM;GACZ,UAAU,MAAM;EAClB;CACF;;;;CAKA,MAAM,OAAO,OAAe,OAAoD;EAC9E,MAAM,WAAW,MAAM,YAAY;EACnC,MAAM,YAAY,MAAM,aAAa;EACrC,MAAM,SAAS,WACX;GAAC,aAAa;GAAO,aAAa;GAAW,aAAa;EAAQ,IAClE;GAAC,aAAa;GAAO,aAAa;GAAW,aAAa;EAAS;EAEvE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,YAAY,CAAC,CACpB,OAAO;GACN;GACA,WAAW,MAAM;GACjB;GACA;GACA,QAAQ;GACR,QAAQ;GACR,2BAAW,IAAI,KAAK;GACpB,WAAW,MAAM;EACnB,CAAC,CAAC,CACD,mBAAmB;GAClB;GACA,KAAK;IACH,QAAQ;IACR,QAAQ;IACR,2BAAW,IAAI,KAAK;IACpB,WAAW,MAAM;GACnB;EACF,CAAC,CAAC,CACD,UAAU,SAAS;EACtB,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,8BAA8B;EAEhD,OAAO,cAAc,GAAG;CAC1B;CAEA,MAAM,UACJ,OACA,IACA,QAC6B;EAC7B,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,YAAY,CAAC,CACpB,IAAI,EAAE,OAAO,CAAC,CAAC,CACf,MAAM,IAAI,GAAG,aAAa,OAAO,KAAK,GAAG,GAAG,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAClE,UAAU,SAAS;EACtB,IAAI,CAAC,KACH,OAAO;EAET,OAAO,cAAc,GAAG;CAC1B;;;;;;;CAQA,MAAM,gBAAgB,OAAe,WAAmB,UAAoC;EAC1F,MAAM,eAAe,MAAM,cAAc,uBAAuB;EAkChE,QAAO,MAjCY,KAAK,GACrB,OAAO,EAAE,IAAI,aAAa,GAAG,CAAC,CAAC,CAC/B,KAAK,YAAY,CAAC,CAClB,SACC,cACA,IACE,GAAG,aAAa,OAAO,aAAa,KAAK,GACzC,GAAG,aAAa,IAAI,aAAa,SAAS,CAC5C,CACF,CAAC,CACA,SACC,aACA,IACE,GAAG,YAAY,OAAO,aAAa,KAAK,GACxC,GAAG,YAAY,UAAU,aAAa,QAAQ,CAChD,CACF,CAAC,CACA,SACC,cACA,IAAI,GAAG,aAAa,OAAO,YAAY,KAAK,GAAG,GAAG,aAAa,IAAI,YAAY,SAAS,CAAC,CAC3F,CAAC,CACA,MACC,IACE,GAAG,aAAa,OAAO,KAAK,GAC5B,GAAG,aAAa,WAAW,SAAS,GACpC,GACE,IAAI,GAAG,aAAa,WAAW,QAAQ,GAAG,GAAG,aAAa,MAAM,QAAQ,CAAC,GACzE,IAAI,GAAG,YAAY,WAAW,QAAQ,GAAG,GAAG,aAAa,MAAM,QAAQ,CAAC,CAC1E,GACA,GAAG,GAAG,cAAc,YACtB,CACF,CAAC,CACA,MAAM,CAAC,EAAA,CACE,SAAS;CACvB;AACF;AACA,kBAAkB,6BAA6B"}
+{"version":3,"file":"entitlements.js","names":[],"sources":["../../src/repositories/entitlements.ts"],"sourcesContent":["import { and, asc, desc, eq, gt, ilike, inArray, or, sql, type SQL } from \"drizzle-orm\";\nimport type { DbExecutor } from \"../client.js\";\nimport type {\n  AccessFacts,\n  EndingGrant,\n  EndingGrantKey,\n  EntitlementNotice,\n  EntitlementsRepository,\n  GrantKey,\n  GrantTarget,\n  InsertSpaceMemberInput,\n  SpaceMembersQuery,\n} from \"@headless-lms/core/entitlements\";\nimport type {\n  ContentType,\n  Entitlement,\n  EntitlementStatus,\n  EntitlementsQuery,\n  GrantEntitlementInput,\n  Logger,\n  Page,\n  Role,\n  SpaceMember,\n  SpaceMemberStatus,\n} from \"@headless-lms/core/types\";\nimport {\n  contentAccess,\n  entitlementEndingSoonNotices,\n  entitlementExpiryNotices,\n  entitlements,\n  orgUsers,\n  spaceMembers,\n  users,\n} from \"../schema/index.js\";\nimport {\n  grantExpired,\n  grantIsActive,\n  communityMember,\n  grantOpens,\n  holdsCommunity,\n} from \"./grant-covers.js\";\nimport { bundles, communities, contentItems, courses, downloads } from \"../schema/content.js\";\nimport { noopLogger } from \"@headless-lms/core/shared/logger\";\nimport { ROLES, canModerate } from \"@headless-lms/core/organizations\";\nimport { translateDbErrors } from \"./pg-errors.js\";\n\ntype ResolvedStatus = \"active\" | \"expired\" | \"revoked\";\n\nconst MODERATING_ROLES: Role[] = ROLES.filter((role) => canModerate(role));\n\n// CASE expression: revoked beats everything; otherwise an elapsed expiry reads as\n// expired; otherwise active.\nconst derivedStatus = sql<ResolvedStatus>`case\n  when ${entitlements.status} = 'revoked' then 'revoked'\n  when ${grantExpired(entitlements.expiresAt)} then 'expired'\n  else 'active'\nend`;\n\nfunction at(date: Date): SQL {\n  return sql`${date.toISOString()}::timestamptz`;\n}\n\nconst expiryNoticed = sql`exists (\n  select 1 from ${entitlementExpiryNotices}\n  where ${entitlementExpiryNotices.orgId} = ${entitlements.orgId}\n    and ${entitlementExpiryNotices.entitlementId} = ${entitlements.id}\n    and ${entitlementExpiryNotices.expiresAt} = ${entitlements.expiresAt}\n)`;\n\nconst endingSoonNoticed = sql`exists (\n  select 1 from ${entitlementEndingSoonNotices}\n  where ${entitlementEndingSoonNotices.orgId} = ${entitlements.orgId}\n    and ${entitlementEndingSoonNotices.entitlementId} = ${entitlements.id}\n    and ${entitlementEndingSoonNotices.communityId} = ${communities.id}\n    and ${entitlementEndingSoonNotices.expiresAt} = ${entitlements.expiresAt}\n)`;\n\nconst opensPublishedCommunity = and(\n  eq(communities.orgId, entitlements.orgId),\n  eq(communities.status, \"published\"),\n  grantOpens(entitlements, sql`${communities.id}`, \"community\"),\n);\n\n// Display name of the grant's target, whatever it is. One LEFT JOIN per concrete\n// content table plus one for bundles; exactly one hits per row (a grant targets\n// either a bundle or a single content item), so the COALESCE picks the single\n// non-null title. Extended per new content type.\nconst contentTitle = sql<string>`coalesce(${courses.title}, ${downloads.title}, ${communities.title}, ${bundles.name})`;\n\n// Sortable columns by the client-facing field name. `status` sorts on the derived\n// expression so the ordering matches the displayed value; `contentTitle` on the\n// coalesced join expression.\nconst sortColumns = {\n  firstName: users.firstName,\n  lastName: users.lastName,\n  email: users.email,\n  contentTitle,\n  status: derivedStatus,\n  grantedAt: entitlements.grantedAt,\n  expiresAt: entitlements.expiresAt,\n  source: entitlements.source,\n} as const;\n\nconst selection = {\n  orgId: entitlements.orgId,\n  id: entitlements.id,\n  orgUserId: entitlements.orgUserId,\n  bundleId: entitlements.bundleId,\n  contentId: entitlements.contentId,\n  status: entitlements.status,\n  source: entitlements.source,\n  grantedAt: entitlements.grantedAt,\n  expiresAt: entitlements.expiresAt,\n  createdAt: entitlements.createdAt,\n  updatedAt: entitlements.updatedAt,\n} as const;\n\ninterface Row {\n  orgId: string;\n  id: string;\n  orgUserId: string;\n  bundleId: string | null;\n  contentId: string | null;\n  status: EntitlementStatus;\n  source: string;\n  grantedAt: Date;\n  expiresAt: Date | null;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nfunction toEntitlement(row: Row): Entitlement {\n  return {\n    orgId: row.orgId,\n    id: row.id,\n    orgUserId: row.orgUserId,\n    bundleId: row.bundleId,\n    contentId: row.contentId,\n    status: row.status,\n    source: row.source,\n    grantedAt: row.grantedAt,\n    expiresAt: row.expiresAt,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\nexport class DrizzleEntitlementsRepository implements EntitlementsRepository {\n  constructor(\n    private readonly db: DbExecutor,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  /** entitlements → org_users + the grant's target: content_items (type) and one\n   *  LEFT JOIN per concrete content table (title), or bundles (name). Both target\n   *  joins are LEFT — a row carries one of the two, never both. */\n  private joined(where: SQL | undefined) {\n    return this.db\n      .select(selection)\n      .from(entitlements)\n      .innerJoin(\n        orgUsers,\n        and(eq(orgUsers.orgId, entitlements.orgId), eq(orgUsers.id, entitlements.orgUserId)),\n      )\n      .innerJoin(users, eq(users.id, orgUsers.userId))\n      .leftJoin(\n        contentItems,\n        and(\n          eq(contentItems.orgId, entitlements.orgId),\n          eq(contentItems.id, entitlements.contentId),\n        ),\n      )\n      .leftJoin(\n        bundles,\n        and(eq(bundles.orgId, entitlements.orgId), eq(bundles.id, entitlements.bundleId)),\n      )\n      .leftJoin(\n        courses,\n        and(eq(courses.orgId, entitlements.orgId), eq(courses.id, entitlements.contentId)),\n      )\n      .leftJoin(\n        downloads,\n        and(eq(downloads.orgId, entitlements.orgId), eq(downloads.id, entitlements.contentId)),\n      )\n      .leftJoin(\n        communities,\n        and(eq(communities.orgId, entitlements.orgId), eq(communities.id, entitlements.contentId)),\n      )\n      .where(where);\n  }\n\n  async list(orgId: string, query: EntitlementsQuery): Promise<Page<Entitlement>> {\n    const conditions: SQL[] = [eq(entitlements.orgId, orgId)];\n    if (query.status) {\n      conditions.push(sql`${derivedStatus} = ${query.status}`);\n    }\n    if (query.source) {\n      conditions.push(eq(entitlements.source, query.source));\n    }\n    if (query.orgUserId) {\n      conditions.push(eq(entitlements.orgUserId, query.orgUserId));\n    }\n    if (query.contentId) {\n      conditions.push(eq(entitlements.contentId, query.contentId));\n    }\n    if (query.bundleId) {\n      conditions.push(eq(entitlements.bundleId, query.bundleId));\n    }\n    if (query.type) {\n      conditions.push(eq(contentItems.type, query.type));\n    }\n    if (query.search) {\n      const pattern = `%${query.search}%`;\n      conditions.push(\n        or(\n          ilike(users.firstName, pattern),\n          ilike(users.lastName, pattern),\n          ilike(users.email, pattern),\n          ilike(contentTitle, pattern),\n        ) as SQL,\n      );\n    }\n    const where = and(...conditions);\n\n    // Sort: `-field` for descending; default to most-recently granted first.\n    let orderBy: SQL;\n    if (query.sort) {\n      const isDesc = query.sort.startsWith(\"-\");\n      const field = (isDesc ? query.sort.slice(1) : query.sort) as keyof typeof sortColumns;\n      const col = sortColumns[field] ?? entitlements.grantedAt;\n      orderBy = isDesc ? desc(col) : asc(col);\n    } else {\n      orderBy = desc(entitlements.grantedAt);\n    }\n\n    const offset = (query.page - 1) * query.pageSize;\n\n    const rows = await this.joined(where).orderBy(orderBy).limit(query.pageSize).offset(offset);\n\n    const [{ total } = { total: 0 }] = await this.db\n      .select({ total: sql<number>`cast(count(*) as int)` })\n      .from(entitlements)\n      .innerJoin(\n        orgUsers,\n        and(eq(orgUsers.orgId, entitlements.orgId), eq(orgUsers.id, entitlements.orgUserId)),\n      )\n      .innerJoin(users, eq(users.id, orgUsers.userId))\n      .leftJoin(\n        contentItems,\n        and(\n          eq(contentItems.orgId, entitlements.orgId),\n          eq(contentItems.id, entitlements.contentId),\n        ),\n      )\n      .leftJoin(\n        bundles,\n        and(eq(bundles.orgId, entitlements.orgId), eq(bundles.id, entitlements.bundleId)),\n      )\n      .leftJoin(\n        courses,\n        and(eq(courses.orgId, entitlements.orgId), eq(courses.id, entitlements.contentId)),\n      )\n      .leftJoin(\n        downloads,\n        and(eq(downloads.orgId, entitlements.orgId), eq(downloads.id, entitlements.contentId)),\n      )\n      .leftJoin(\n        communities,\n        and(eq(communities.orgId, entitlements.orgId), eq(communities.id, entitlements.contentId)),\n      )\n      .where(where);\n\n    return {\n      rows: rows.map(toEntitlement),\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n    };\n  }\n\n  /** A grant targets exactly one of a bundle or a content item (db check\n   *  constraint), so the upsert is inferred on whichever of the two partial\n   *  uniques the target uses. */\n  async insert(orgId: string, input: GrantEntitlementInput): Promise<Entitlement> {\n    const bundleId = input.bundleId ?? null;\n    const contentId = input.contentId ?? null;\n    const target = bundleId\n      ? [entitlements.orgId, entitlements.orgUserId, entitlements.bundleId]\n      : [entitlements.orgId, entitlements.orgUserId, entitlements.contentId];\n\n    const [row] = await this.db\n      .insert(entitlements)\n      .values({\n        orgId,\n        orgUserId: input.orgUserId,\n        bundleId,\n        contentId,\n        status: \"active\",\n        source: \"manual\",\n        grantedAt: new Date(),\n        expiresAt: input.expiresAt,\n      })\n      .onConflictDoUpdate({\n        target,\n        set: {\n          status: \"active\",\n          source: \"manual\",\n          grantedAt: new Date(),\n          expiresAt: input.expiresAt,\n        },\n      })\n      .returning(selection);\n    if (!row) {\n      throw new Error(\"failed to insert entitlement\");\n    }\n    return toEntitlement(row);\n  }\n\n  async insertIfAbsent(orgId: string, input: GrantEntitlementInput): Promise<Entitlement | null> {\n    const bundleId = input.bundleId ?? null;\n    const contentId = input.contentId ?? null;\n    const target = bundleId\n      ? [entitlements.orgId, entitlements.orgUserId, entitlements.bundleId]\n      : [entitlements.orgId, entitlements.orgUserId, entitlements.contentId];\n    const [row] = await this.db\n      .insert(entitlements)\n      .values({\n        orgId,\n        orgUserId: input.orgUserId,\n        bundleId,\n        contentId,\n        status: \"active\",\n        source: \"manual\",\n        grantedAt: new Date(),\n        expiresAt: input.expiresAt,\n      })\n      .onConflictDoNothing({ target })\n      .returning(selection);\n    return row ? toEntitlement(row) : null;\n  }\n\n  async lockGrant(orgId: string, key: GrantKey): Promise<Entitlement | null> {\n    const target = key.bundleId\n      ? eq(entitlements.bundleId, key.bundleId)\n      : key.contentId\n        ? eq(entitlements.contentId, key.contentId)\n        : undefined;\n    if (!target) {\n      return null;\n    }\n    const [row] = await this.db\n      .select(selection)\n      .from(entitlements)\n      .where(and(eq(entitlements.orgId, orgId), eq(entitlements.orgUserId, key.orgUserId), target))\n      .for(\"update\")\n      .limit(1);\n    return row ? toEntitlement(row) : null;\n  }\n\n  async setExpiresAt(\n    orgId: string,\n    id: string,\n    expiresAt: Date | null,\n  ): Promise<Entitlement | null> {\n    const [row] = await this.db\n      .update(entitlements)\n      .set({ expiresAt })\n      .where(and(eq(entitlements.orgId, orgId), eq(entitlements.id, id)))\n      .returning(selection);\n    return row ? toEntitlement(row) : null;\n  }\n\n  async setStatus(\n    orgId: string,\n    id: string,\n    status: \"active\" | \"revoked\",\n  ): Promise<Entitlement | null> {\n    const [row] = await this.db\n      .update(entitlements)\n      .set({ status })\n      .where(and(eq(entitlements.orgId, orgId), eq(entitlements.id, id)))\n      .returning(selection);\n    if (!row) {\n      return null;\n    }\n    return toEntitlement(row);\n  }\n\n  async hasAccess(orgId: string, orgUserId: string, contentId: string): Promise<boolean> {\n    const rows = await this.db\n      .select({ id: contentAccess.entitlementId })\n      .from(contentAccess)\n      .where(\n        and(\n          eq(contentAccess.orgId, orgId),\n          eq(contentAccess.orgUserId, orgUserId),\n          eq(contentAccess.contentId, contentId),\n        ),\n      )\n      .limit(1);\n    return rows.length > 0;\n  }\n\n  async listAccessibleContent(\n    orgId: string,\n    orgUserId: string,\n    type?: ContentType,\n  ): Promise<string[]> {\n    const rows = await this.db\n      .selectDistinct({ contentId: contentAccess.contentId })\n      .from(contentAccess)\n      .innerJoin(\n        contentItems,\n        and(\n          eq(contentItems.orgId, contentAccess.orgId),\n          eq(contentItems.id, contentAccess.contentId),\n        ),\n      )\n      .where(\n        and(\n          eq(contentAccess.orgId, orgId),\n          eq(contentAccess.orgUserId, orgUserId),\n          type ? eq(contentItems.type, type) : undefined,\n        ),\n      );\n    return rows.map((r) => r.contentId);\n  }\n\n  hasCommunityAccess(orgId: string, orgUserId: string, communityId: string): Promise<boolean> {\n    return this.holds(holdsCommunity(sql`${orgId}`, sql`${orgUserId}`, sql`${communityId}`));\n  }\n\n  private async holds(predicate: SQL): Promise<boolean> {\n    const result = await this.db.execute<{ covered: boolean }>(sql`select ${predicate} as covered`);\n    const rows = Array.isArray(result) ? result : result.rows;\n    return rows[0]?.covered === true;\n  }\n\n  async communitiesOpenedBy(orgId: string, grant: GrantTarget): Promise<string[]> {\n    if (!grant.contentId && !grant.bundleId) {\n      return [];\n    }\n    const target = {\n      orgId: sql`${orgId}`,\n      contentId: sql`${grant.contentId ?? null}::text`,\n      bundleId: sql`${grant.bundleId ?? null}::text`,\n    };\n    const rows = await this.db\n      .select({ id: communities.id })\n      .from(communities)\n      .where(\n        and(\n          eq(communities.orgId, orgId),\n          eq(communities.status, \"published\"),\n          grantOpens(target, sql`${communities.id}`, \"community\"),\n        ),\n      )\n      .orderBy(asc(communities.id));\n    return rows.map((row) => row.id);\n  }\n\n  async accessAmong(\n    orgId: string,\n    communityId: string,\n    spaceId: string | null,\n    orgUserIds: string[],\n  ): Promise<AccessFacts[]> {\n    if (orgUserIds.length === 0) {\n      return [];\n    }\n    const activeInSpace = spaceId\n      ? sql<boolean>`exists (\n          select 1 from space_members sm\n          where sm.org_id = ${sql`${orgUsers.orgId}`}\n            and sm.space_id = ${spaceId}\n            and sm.org_user_id = ${sql`${orgUsers.id}`}\n            and sm.status = 'active'\n        )`\n      : sql<boolean>`false`;\n    const rows = await this.db\n      .select({\n        orgUserId: orgUsers.id,\n        role: orgUsers.role,\n        member: sql<boolean>`${communityMember(sql`${orgUsers.orgId}`, sql`${orgUsers.id}`, sql`${orgUsers.role}`, sql`${communityId}`)}`,\n        activeInSpace,\n      })\n      .from(orgUsers)\n      .where(and(eq(orgUsers.orgId, orgId), inArray(orgUsers.id, orgUserIds)));\n    return rows.map((row) => ({\n      orgUserId: row.orgUserId,\n      role: row.role as Role,\n      member: row.member === true,\n      activeInSpace: row.activeInSpace === true,\n    }));\n  }\n\n  async findSpaceMember(\n    orgId: string,\n    spaceId: string,\n    orgUserId: string,\n  ): Promise<SpaceMember | null> {\n    const [row] = await this.db\n      .select()\n      .from(spaceMembers)\n      .where(\n        and(\n          eq(spaceMembers.orgId, orgId),\n          eq(spaceMembers.spaceId, spaceId),\n          eq(spaceMembers.orgUserId, orgUserId),\n        ),\n      )\n      .limit(1);\n    return row ? toSpaceMember(row) : null;\n  }\n\n  async listSpaceMembersFor(\n    orgId: string,\n    orgUserId: string,\n    communityId: string,\n  ): Promise<SpaceMember[]> {\n    const rows = await this.db\n      .select()\n      .from(spaceMembers)\n      .where(\n        and(\n          eq(spaceMembers.orgId, orgId),\n          eq(spaceMembers.orgUserId, orgUserId),\n          eq(spaceMembers.communityId, communityId),\n        ),\n      );\n    return rows.map(toSpaceMember);\n  }\n\n  async lockSpaceMember(\n    orgId: string,\n    spaceId: string,\n    orgUserId: string,\n  ): Promise<SpaceMember | null> {\n    const [row] = await this.db\n      .select()\n      .from(spaceMembers)\n      .where(\n        and(\n          eq(spaceMembers.orgId, orgId),\n          eq(spaceMembers.spaceId, spaceId),\n          eq(spaceMembers.orgUserId, orgUserId),\n        ),\n      )\n      .for(\"update\")\n      .limit(1);\n    return row ? toSpaceMember(row) : null;\n  }\n\n  async listSpaceMembers(\n    orgId: string,\n    spaceId: string,\n    query: SpaceMembersQuery,\n  ): Promise<Page<SpaceMember>> {\n    const where = and(\n      eq(spaceMembers.orgId, orgId),\n      eq(spaceMembers.spaceId, spaceId),\n      query.statuses ? inArray(spaceMembers.status, query.statuses) : undefined,\n    );\n    const rows = await this.db\n      .select()\n      .from(spaceMembers)\n      .where(where)\n      .orderBy(asc(spaceMembers.createdAt), asc(spaceMembers.id))\n      .limit(query.pageSize)\n      .offset((query.page - 1) * query.pageSize);\n    const [{ total } = { total: 0 }] = await this.db\n      .select({ total: sql<number>`cast(count(*) as int)` })\n      .from(spaceMembers)\n      .where(where);\n    return { rows: rows.map(toSpaceMember), total, page: query.page, pageSize: query.pageSize };\n  }\n\n  async insertSpaceMember(orgId: string, input: InsertSpaceMemberInput): Promise<SpaceMember> {\n    const [row] = await this.db\n      .insert(spaceMembers)\n      .values({\n        orgId,\n        communityId: input.communityId,\n        spaceId: input.spaceId,\n        orgUserId: input.orgUserId,\n        status: input.status,\n        source: input.source,\n      })\n      .returning();\n    if (!row) {\n      throw new Error(\"failed to insert space member\");\n    }\n    return toSpaceMember(row);\n  }\n\n  async updateSpaceMemberStatus(\n    orgId: string,\n    id: string,\n    status: SpaceMemberStatus,\n  ): Promise<SpaceMember | null> {\n    const [row] = await this.db\n      .update(spaceMembers)\n      .set({ status })\n      .where(and(eq(spaceMembers.orgId, orgId), eq(spaceMembers.id, id)))\n      .returning();\n    return row ? toSpaceMember(row) : null;\n  }\n\n  async deleteSpaceMember(orgId: string, id: string): Promise<void> {\n    await this.db\n      .delete(spaceMembers)\n      .where(and(eq(spaceMembers.orgId, orgId), eq(spaceMembers.id, id)));\n  }\n\n  async countActiveSpaceMembers(orgId: string, spaceId: string): Promise<number> {\n    const [row] = await this.db\n      .select({ total: sql<number>`cast(count(*) as int)` })\n      .from(spaceMembers)\n      .where(\n        and(\n          eq(spaceMembers.orgId, orgId),\n          eq(spaceMembers.spaceId, spaceId),\n          eq(spaceMembers.status, \"active\"),\n          holdsCommunity(\n            sql`${spaceMembers.orgId}`,\n            sql`${spaceMembers.orgUserId}`,\n            sql`${spaceMembers.communityId}`,\n          ),\n        ),\n      );\n    return row?.total ?? 0;\n  }\n\n  async activeSpaceIds(orgId: string, orgUserId: string, communityId: string): Promise<string[]> {\n    const rows = await this.db\n      .select({ spaceId: spaceMembers.spaceId })\n      .from(spaceMembers)\n      .where(\n        and(\n          eq(spaceMembers.orgId, orgId),\n          eq(spaceMembers.orgUserId, orgUserId),\n          eq(spaceMembers.communityId, communityId),\n          eq(spaceMembers.status, \"active\"),\n        ),\n      );\n    return rows.map((row) => row.spaceId);\n  }\n\n  async listGrantsExpiredBy(\n    orgId: string,\n    now: Date,\n    limit: number,\n    afterId?: string,\n  ): Promise<Entitlement[]> {\n    const rows = await this.db\n      .select(selection)\n      .from(entitlements)\n      .where(\n        and(\n          this.expiredUnnoticed(orgId, now),\n          afterId === undefined ? undefined : gt(entitlements.id, afterId),\n        ),\n      )\n      .orderBy(asc(entitlements.id))\n      .limit(limit);\n    return rows.map(toEntitlement);\n  }\n\n  async listGrantsEndingBetween(\n    orgId: string,\n    after: Date,\n    until: Date,\n    limit: number,\n    afterKey?: EndingGrantKey,\n  ): Promise<EndingGrant[]> {\n    const rows = await this.db\n      .select({ ...selection, communityId: communities.id })\n      .from(entitlements)\n      .innerJoin(communities, opensPublishedCommunity)\n      .where(\n        and(\n          this.endingUnnoticed(orgId, after, until),\n          afterKey\n            ? sql`(${entitlements.id}, ${communities.id}) > (${afterKey.entitlementId}, ${afterKey.communityId})`\n            : undefined,\n        ),\n      )\n      .orderBy(asc(entitlements.id), asc(communities.id))\n      .limit(limit);\n    return rows.map(({ communityId, ...grant }) => ({\n      grant: toEntitlement(grant),\n      communityId,\n    }));\n  }\n\n  async orgIdsWithDueNotices(now: Date, until: Date): Promise<string[]> {\n    const expired = this.db\n      .selectDistinct({ orgId: entitlements.orgId })\n      .from(entitlements)\n      .where(this.expiredUnnoticed(null, now));\n    const ending = this.db\n      .selectDistinct({ orgId: entitlements.orgId })\n      .from(entitlements)\n      .innerJoin(communities, opensPublishedCommunity)\n      .where(this.endingUnnoticed(null, now, until));\n    const rows = await expired.union(ending);\n    return rows.map((row) => row.orgId).sort();\n  }\n\n  async claimNotice(orgId: string, notice: EntitlementNotice, now: Date): Promise<boolean> {\n    const statement =\n      notice.kind === \"expired\"\n        ? sql`insert into ${entitlementExpiryNotices} (\"org_id\", \"entitlement_id\", \"expires_at\", \"notified_at\")\n            values (${orgId}, ${notice.entitlementId}, ${at(notice.expiresAt)}, ${at(now)})\n            on conflict do nothing\n            returning \"entitlement_id\"`\n        : sql`insert into ${entitlementEndingSoonNotices} (\"org_id\", \"entitlement_id\", \"community_id\", \"expires_at\", \"notified_at\")\n            values (${orgId}, ${notice.entitlementId}, ${notice.communityId}, ${at(notice.expiresAt)}, ${at(now)})\n            on conflict do nothing\n            returning \"entitlement_id\"`;\n    const result = await this.db.execute<{ entitlement_id: string }>(statement);\n    const rows = Array.isArray(result) ? result : result.rows;\n    return rows.length > 0;\n  }\n\n  private expiredUnnoticed(orgId: string | null, now: Date): SQL {\n    return and(\n      orgId === null ? undefined : eq(entitlements.orgId, orgId),\n      eq(entitlements.status, \"active\"),\n      grantExpired(entitlements.expiresAt, at(now)),\n      sql`not ${expiryNoticed}`,\n    )!;\n  }\n\n  private endingUnnoticed(orgId: string | null, after: Date, until: Date): SQL {\n    return and(\n      orgId === null ? undefined : eq(entitlements.orgId, orgId),\n      grantIsActive(entitlements, at(after)),\n      grantExpired(entitlements.expiresAt, at(until)),\n      sql`not ${endingSoonNoticed}`,\n    )!;\n  }\n\n  async communityModeratorIds(orgId: string, communityId: string): Promise<string[]> {\n    const rows = await this.db\n      .select({ id: orgUsers.id })\n      .from(orgUsers)\n      .where(\n        and(\n          eq(orgUsers.orgId, orgId),\n          inArray(orgUsers.role, MODERATING_ROLES),\n          communityMember(\n            sql`${orgUsers.orgId}`,\n            sql`${orgUsers.id}`,\n            sql`${orgUsers.role}`,\n            sql`${communityId}`,\n          ),\n        ),\n      )\n      .orderBy(asc(orgUsers.id));\n    return rows.map((row) => row.id);\n  }\n\n  async communityMemberIds(orgId: string, communityId: string): Promise<string[]> {\n    const rows = await this.db\n      .select({ id: orgUsers.id })\n      .from(orgUsers)\n      .where(\n        and(\n          eq(orgUsers.orgId, orgId),\n          communityMember(\n            sql`${orgUsers.orgId}`,\n            sql`${orgUsers.id}`,\n            sql`${orgUsers.role}`,\n            sql`${communityId}`,\n          ),\n        ),\n      )\n      .orderBy(asc(orgUsers.id));\n    return rows.map((row) => row.id);\n  }\n\n  async communityIdsOpenedFor(orgId: string, orgUserId: string): Promise<string[]> {\n    const rows = await this.db\n      .selectDistinct({ id: communities.id })\n      .from(communities)\n      .where(\n        and(\n          eq(communities.orgId, orgId),\n          holdsCommunity(sql`${communities.orgId}`, sql`${orgUserId}`, sql`${communities.id}`),\n        ),\n      )\n      .orderBy(asc(communities.id));\n    return rows.map((row) => row.id);\n  }\n\n  async contentHolderIds(orgId: string, contentId: string): Promise<string[]> {\n    const rows = await this.db\n      .selectDistinct({ orgUserId: contentAccess.orgUserId })\n      .from(contentAccess)\n      .where(and(eq(contentAccess.orgId, orgId), eq(contentAccess.contentId, contentId)))\n      .orderBy(asc(contentAccess.orgUserId));\n    return rows.map((row) => row.orgUserId);\n  }\n\n  async openCommunityIds(orgId: string, orgUserId: string): Promise<string[]> {\n    const rows = await this.db\n      .select({ id: communities.id })\n      .from(communities)\n      .innerJoin(orgUsers, and(eq(orgUsers.orgId, communities.orgId), eq(orgUsers.id, orgUserId)))\n      .where(\n        and(\n          eq(communities.orgId, orgId),\n          communityMember(\n            sql`${communities.orgId}`,\n            sql`${orgUsers.id}`,\n            sql`${orgUsers.role}`,\n            sql`${communities.id}`,\n          ),\n        ),\n      )\n      .orderBy(asc(communities.id));\n    return rows.map((row) => row.id);\n  }\n}\n\nfunction toSpaceMember(row: {\n  orgId: string;\n  id: string;\n  communityId: string;\n  spaceId: string;\n  orgUserId: string;\n  status: SpaceMemberStatus;\n  source: \"request\" | \"invite\" | \"manual\";\n  createdAt: Date;\n  updatedAt: Date;\n}): SpaceMember {\n  return {\n    orgId: row.orgId,\n    id: row.id,\n    communityId: row.communityId,\n    spaceId: row.spaceId,\n    orgUserId: row.orgUserId,\n    status: row.status,\n    source: row.source,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n\ntranslateDbErrors(DrizzleEntitlementsRepository);\n"],"mappings":";;;;;;;;;;;AAgDA,MAAM,mBAA2B,MAAM,QAAQ,SAAS,YAAY,IAAI,CAAC;AAIzE,MAAM,gBAAgB,GAAmB;SAChC,aAAa,OAAO;SACpB,aAAa,aAAa,SAAS,EAAE;;;AAI9C,SAAS,GAAG,MAAiB;CAC3B,OAAO,GAAG,GAAG,KAAK,YAAY,EAAE;AAClC;AAEA,MAAM,gBAAgB,GAAG;kBACP,yBAAyB;UACjC,yBAAyB,MAAM,KAAK,aAAa,MAAM;UACvD,yBAAyB,cAAc,KAAK,aAAa,GAAG;UAC5D,yBAAyB,UAAU,KAAK,aAAa,UAAU;;AAGzE,MAAM,oBAAoB,GAAG;kBACX,6BAA6B;UACrC,6BAA6B,MAAM,KAAK,aAAa,MAAM;UAC3D,6BAA6B,cAAc,KAAK,aAAa,GAAG;UAChE,6BAA6B,YAAY,KAAK,YAAY,GAAG;UAC7D,6BAA6B,UAAU,KAAK,aAAa,UAAU;;AAG7E,MAAM,0BAA0B,IAC9B,GAAG,YAAY,OAAO,aAAa,KAAK,GACxC,GAAG,YAAY,QAAQ,WAAW,GAClC,WAAW,cAAc,GAAG,GAAG,YAAY,MAAM,WAAW,CAC9D;AAMA,MAAM,eAAe,GAAW,YAAY,QAAQ,MAAM,IAAI,UAAU,MAAM,IAAI,YAAY,MAAM,IAAI,QAAQ,KAAK;AAKrH,MAAM,cAAc;CAClB,WAAW,MAAM;CACjB,UAAU,MAAM;CAChB,OAAO,MAAM;CACb;CACA,QAAQ;CACR,WAAW,aAAa;CACxB,WAAW,aAAa;CACxB,QAAQ,aAAa;AACvB;AAEA,MAAM,YAAY;CAChB,OAAO,aAAa;CACpB,IAAI,aAAa;CACjB,WAAW,aAAa;CACxB,UAAU,aAAa;CACvB,WAAW,aAAa;CACxB,QAAQ,aAAa;CACrB,QAAQ,aAAa;CACrB,WAAW,aAAa;CACxB,WAAW,aAAa;CACxB,WAAW,aAAa;CACxB,WAAW,aAAa;AAC1B;AAgBA,SAAS,cAAc,KAAuB;CAC5C,OAAO;EACL,OAAO,IAAI;EACX,IAAI,IAAI;EACR,WAAW,IAAI;EACf,UAAU,IAAI;EACd,WAAW,IAAI;EACf,QAAQ,IAAI;EACZ,QAAQ,IAAI;EACZ,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;AAEA,IAAa,gCAAb,MAA6E;CAExD;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;;;;CAKH,OAAe,OAAwB;EACrC,OAAO,KAAK,GACT,OAAO,SAAS,CAAC,CACjB,KAAK,YAAY,CAAC,CAClB,UACC,UACA,IAAI,GAAG,SAAS,OAAO,aAAa,KAAK,GAAG,GAAG,SAAS,IAAI,aAAa,SAAS,CAAC,CACrF,CAAC,CACA,UAAU,OAAO,GAAG,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC,CAC/C,SACC,cACA,IACE,GAAG,aAAa,OAAO,aAAa,KAAK,GACzC,GAAG,aAAa,IAAI,aAAa,SAAS,CAC5C,CACF,CAAC,CACA,SACC,SACA,IAAI,GAAG,QAAQ,OAAO,aAAa,KAAK,GAAG,GAAG,QAAQ,IAAI,aAAa,QAAQ,CAAC,CAClF,CAAC,CACA,SACC,SACA,IAAI,GAAG,QAAQ,OAAO,aAAa,KAAK,GAAG,GAAG,QAAQ,IAAI,aAAa,SAAS,CAAC,CACnF,CAAC,CACA,SACC,WACA,IAAI,GAAG,UAAU,OAAO,aAAa,KAAK,GAAG,GAAG,UAAU,IAAI,aAAa,SAAS,CAAC,CACvF,CAAC,CACA,SACC,aACA,IAAI,GAAG,YAAY,OAAO,aAAa,KAAK,GAAG,GAAG,YAAY,IAAI,aAAa,SAAS,CAAC,CAC3F,CAAC,CACA,MAAM,KAAK;CAChB;CAEA,MAAM,KAAK,OAAe,OAAsD;EAC9E,MAAM,aAAoB,CAAC,GAAG,aAAa,OAAO,KAAK,CAAC;EACxD,IAAI,MAAM,QACR,WAAW,KAAK,GAAG,GAAG,cAAc,KAAK,MAAM,QAAQ;EAEzD,IAAI,MAAM,QACR,WAAW,KAAK,GAAG,aAAa,QAAQ,MAAM,MAAM,CAAC;EAEvD,IAAI,MAAM,WACR,WAAW,KAAK,GAAG,aAAa,WAAW,MAAM,SAAS,CAAC;EAE7D,IAAI,MAAM,WACR,WAAW,KAAK,GAAG,aAAa,WAAW,MAAM,SAAS,CAAC;EAE7D,IAAI,MAAM,UACR,WAAW,KAAK,GAAG,aAAa,UAAU,MAAM,QAAQ,CAAC;EAE3D,IAAI,MAAM,MACR,WAAW,KAAK,GAAG,aAAa,MAAM,MAAM,IAAI,CAAC;EAEnD,IAAI,MAAM,QAAQ;GAChB,MAAM,UAAU,IAAI,MAAM,OAAO;GACjC,WAAW,KACT,GACE,MAAM,MAAM,WAAW,OAAO,GAC9B,MAAM,MAAM,UAAU,OAAO,GAC7B,MAAM,MAAM,OAAO,OAAO,GAC1B,MAAM,cAAc,OAAO,CAC7B,CACF;EACF;EACA,MAAM,QAAQ,IAAI,GAAG,UAAU;EAG/B,IAAI;EACJ,IAAI,MAAM,MAAM;GACd,MAAM,SAAS,MAAM,KAAK,WAAW,GAAG;GACxC,MAAM,QAAS,SAAS,MAAM,KAAK,MAAM,CAAC,IAAI,MAAM;GACpD,MAAM,MAAM,YAAY,UAAU,aAAa;GAC/C,UAAU,SAAS,KAAK,GAAG,IAAI,IAAI,GAAG;EACxC,OACE,UAAU,KAAK,aAAa,SAAS;EAGvC,MAAM,UAAU,MAAM,OAAO,KAAK,MAAM;EAExC,MAAM,OAAO,MAAM,KAAK,OAAO,KAAK,CAAC,CAAC,QAAQ,OAAO,CAAC,CAAC,MAAM,MAAM,QAAQ,CAAC,CAAC,OAAO,MAAM;EAE1F,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,MAAM,KAAK,GAC3C,OAAO,EAAE,OAAO,GAAW,wBAAwB,CAAC,CAAC,CACrD,KAAK,YAAY,CAAC,CAClB,UACC,UACA,IAAI,GAAG,SAAS,OAAO,aAAa,KAAK,GAAG,GAAG,SAAS,IAAI,aAAa,SAAS,CAAC,CACrF,CAAC,CACA,UAAU,OAAO,GAAG,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC,CAC/C,SACC,cACA,IACE,GAAG,aAAa,OAAO,aAAa,KAAK,GACzC,GAAG,aAAa,IAAI,aAAa,SAAS,CAC5C,CACF,CAAC,CACA,SACC,SACA,IAAI,GAAG,QAAQ,OAAO,aAAa,KAAK,GAAG,GAAG,QAAQ,IAAI,aAAa,QAAQ,CAAC,CAClF,CAAC,CACA,SACC,SACA,IAAI,GAAG,QAAQ,OAAO,aAAa,KAAK,GAAG,GAAG,QAAQ,IAAI,aAAa,SAAS,CAAC,CACnF,CAAC,CACA,SACC,WACA,IAAI,GAAG,UAAU,OAAO,aAAa,KAAK,GAAG,GAAG,UAAU,IAAI,aAAa,SAAS,CAAC,CACvF,CAAC,CACA,SACC,aACA,IAAI,GAAG,YAAY,OAAO,aAAa,KAAK,GAAG,GAAG,YAAY,IAAI,aAAa,SAAS,CAAC,CAC3F,CAAC,CACA,MAAM,KAAK;EAEd,OAAO;GACL,MAAM,KAAK,IAAI,aAAa;GAC5B;GACA,MAAM,MAAM;GACZ,UAAU,MAAM;EAClB;CACF;;;;CAKA,MAAM,OAAO,OAAe,OAAoD;EAC9E,MAAM,WAAW,MAAM,YAAY;EACnC,MAAM,YAAY,MAAM,aAAa;EACrC,MAAM,SAAS,WACX;GAAC,aAAa;GAAO,aAAa;GAAW,aAAa;EAAQ,IAClE;GAAC,aAAa;GAAO,aAAa;GAAW,aAAa;EAAS;EAEvE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,YAAY,CAAC,CACpB,OAAO;GACN;GACA,WAAW,MAAM;GACjB;GACA;GACA,QAAQ;GACR,QAAQ;GACR,2BAAW,IAAI,KAAK;GACpB,WAAW,MAAM;EACnB,CAAC,CAAC,CACD,mBAAmB;GAClB;GACA,KAAK;IACH,QAAQ;IACR,QAAQ;IACR,2BAAW,IAAI,KAAK;IACpB,WAAW,MAAM;GACnB;EACF,CAAC,CAAC,CACD,UAAU,SAAS;EACtB,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,8BAA8B;EAEhD,OAAO,cAAc,GAAG;CAC1B;CAEA,MAAM,eAAe,OAAe,OAA2D;EAC7F,MAAM,WAAW,MAAM,YAAY;EACnC,MAAM,YAAY,MAAM,aAAa;EACrC,MAAM,SAAS,WACX;GAAC,aAAa;GAAO,aAAa;GAAW,aAAa;EAAQ,IAClE;GAAC,aAAa;GAAO,aAAa;GAAW,aAAa;EAAS;EACvE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,YAAY,CAAC,CACpB,OAAO;GACN;GACA,WAAW,MAAM;GACjB;GACA;GACA,QAAQ;GACR,QAAQ;GACR,2BAAW,IAAI,KAAK;GACpB,WAAW,MAAM;EACnB,CAAC,CAAC,CACD,oBAAoB,EAAE,OAAO,CAAC,CAAC,CAC/B,UAAU,SAAS;EACtB,OAAO,MAAM,cAAc,GAAG,IAAI;CACpC;CAEA,MAAM,UAAU,OAAe,KAA4C;EACzE,MAAM,SAAS,IAAI,WACf,GAAG,aAAa,UAAU,IAAI,QAAQ,IACtC,IAAI,YACF,GAAG,aAAa,WAAW,IAAI,SAAS,IACxC,KAAA;EACN,IAAI,CAAC,QACH,OAAO;EAET,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,SAAS,CAAC,CACjB,KAAK,YAAY,CAAC,CAClB,MAAM,IAAI,GAAG,aAAa,OAAO,KAAK,GAAG,GAAG,aAAa,WAAW,IAAI,SAAS,GAAG,MAAM,CAAC,CAAC,CAC5F,IAAI,QAAQ,CAAC,CACb,MAAM,CAAC;EACV,OAAO,MAAM,cAAc,GAAG,IAAI;CACpC;CAEA,MAAM,aACJ,OACA,IACA,WAC6B;EAC7B,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,YAAY,CAAC,CACpB,IAAI,EAAE,UAAU,CAAC,CAAC,CAClB,MAAM,IAAI,GAAG,aAAa,OAAO,KAAK,GAAG,GAAG,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAClE,UAAU,SAAS;EACtB,OAAO,MAAM,cAAc,GAAG,IAAI;CACpC;CAEA,MAAM,UACJ,OACA,IACA,QAC6B;EAC7B,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,YAAY,CAAC,CACpB,IAAI,EAAE,OAAO,CAAC,CAAC,CACf,MAAM,IAAI,GAAG,aAAa,OAAO,KAAK,GAAG,GAAG,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAClE,UAAU,SAAS;EACtB,IAAI,CAAC,KACH,OAAO;EAET,OAAO,cAAc,GAAG;CAC1B;CAEA,MAAM,UAAU,OAAe,WAAmB,WAAqC;EAYrF,QAAO,MAXY,KAAK,GACrB,OAAO,EAAE,IAAI,cAAc,cAAc,CAAC,CAAC,CAC3C,KAAK,aAAa,CAAC,CACnB,MACC,IACE,GAAG,cAAc,OAAO,KAAK,GAC7B,GAAG,cAAc,WAAW,SAAS,GACrC,GAAG,cAAc,WAAW,SAAS,CACvC,CACF,CAAC,CACA,MAAM,CAAC,EAAA,CACE,SAAS;CACvB;CAEA,MAAM,sBACJ,OACA,WACA,MACmB;EAkBnB,QAAO,MAjBY,KAAK,GACrB,eAAe,EAAE,WAAW,cAAc,UAAU,CAAC,CAAC,CACtD,KAAK,aAAa,CAAC,CACnB,UACC,cACA,IACE,GAAG,aAAa,OAAO,cAAc,KAAK,GAC1C,GAAG,aAAa,IAAI,cAAc,SAAS,CAC7C,CACF,CAAC,CACA,MACC,IACE,GAAG,cAAc,OAAO,KAAK,GAC7B,GAAG,cAAc,WAAW,SAAS,GACrC,OAAO,GAAG,aAAa,MAAM,IAAI,IAAI,KAAA,CACvC,CACF,EAAA,CACU,KAAK,MAAM,EAAE,SAAS;CACpC;CAEA,mBAAmB,OAAe,WAAmB,aAAuC;EAC1F,OAAO,KAAK,MAAM,eAAe,GAAG,GAAG,SAAS,GAAG,GAAG,aAAa,GAAG,GAAG,aAAa,CAAC;CACzF;CAEA,MAAc,MAAM,WAAkC;EACpD,MAAM,SAAS,MAAM,KAAK,GAAG,QAA8B,GAAG,UAAU,UAAU,YAAY;EAE9F,QADa,MAAM,QAAQ,MAAM,IAAI,SAAS,OAAO,KAAA,CACzC,EAAE,EAAE,YAAY;CAC9B;CAEA,MAAM,oBAAoB,OAAe,OAAuC;EAC9E,IAAI,CAAC,MAAM,aAAa,CAAC,MAAM,UAC7B,OAAO,CAAC;EAEV,MAAM,SAAS;GACb,OAAO,GAAG,GAAG;GACb,WAAW,GAAG,GAAG,MAAM,aAAa,KAAK;GACzC,UAAU,GAAG,GAAG,MAAM,YAAY,KAAK;EACzC;EAYA,QAAO,MAXY,KAAK,GACrB,OAAO,EAAE,IAAI,YAAY,GAAG,CAAC,CAAC,CAC9B,KAAK,WAAW,CAAC,CACjB,MACC,IACE,GAAG,YAAY,OAAO,KAAK,GAC3B,GAAG,YAAY,QAAQ,WAAW,GAClC,WAAW,QAAQ,GAAG,GAAG,YAAY,MAAM,WAAW,CACxD,CACF,CAAC,CACA,QAAQ,IAAI,YAAY,EAAE,CAAC,EAAA,CAClB,KAAK,QAAQ,IAAI,EAAE;CACjC;CAEA,MAAM,YACJ,OACA,aACA,SACA,YACwB;EACxB,IAAI,WAAW,WAAW,GACxB,OAAO,CAAC;EAEV,MAAM,gBAAgB,UAClB,GAAY;;8BAEU,GAAG,GAAG,SAAS,QAAQ;gCACrB,QAAQ;mCACL,GAAG,GAAG,SAAS,KAAK;;aAG/C,GAAY;EAUhB,QAAO,MATY,KAAK,GACrB,OAAO;GACN,WAAW,SAAS;GACpB,MAAM,SAAS;GACf,QAAQ,GAAY,GAAG,gBAAgB,GAAG,GAAG,SAAS,SAAS,GAAG,GAAG,SAAS,MAAM,GAAG,GAAG,SAAS,QAAQ,GAAG,GAAG,aAAa;GAC9H;EACF,CAAC,CAAC,CACD,KAAK,QAAQ,CAAC,CACd,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,QAAQ,SAAS,IAAI,UAAU,CAAC,CAAC,EAAA,CAC7D,KAAK,SAAS;GACxB,WAAW,IAAI;GACf,MAAM,IAAI;GACV,QAAQ,IAAI,WAAW;GACvB,eAAe,IAAI,kBAAkB;EACvC,EAAE;CACJ;CAEA,MAAM,gBACJ,OACA,SACA,WAC6B;EAC7B,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,YAAY,CAAC,CAClB,MACC,IACE,GAAG,aAAa,OAAO,KAAK,GAC5B,GAAG,aAAa,SAAS,OAAO,GAChC,GAAG,aAAa,WAAW,SAAS,CACtC,CACF,CAAC,CACA,MAAM,CAAC;EACV,OAAO,MAAM,cAAc,GAAG,IAAI;CACpC;CAEA,MAAM,oBACJ,OACA,WACA,aACwB;EAWxB,QAAO,MAVY,KAAK,GACrB,OAAO,CAAC,CACR,KAAK,YAAY,CAAC,CAClB,MACC,IACE,GAAG,aAAa,OAAO,KAAK,GAC5B,GAAG,aAAa,WAAW,SAAS,GACpC,GAAG,aAAa,aAAa,WAAW,CAC1C,CACF,EAAA,CACU,IAAI,aAAa;CAC/B;CAEA,MAAM,gBACJ,OACA,SACA,WAC6B;EAC7B,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,YAAY,CAAC,CAClB,MACC,IACE,GAAG,aAAa,OAAO,KAAK,GAC5B,GAAG,aAAa,SAAS,OAAO,GAChC,GAAG,aAAa,WAAW,SAAS,CACtC,CACF,CAAC,CACA,IAAI,QAAQ,CAAC,CACb,MAAM,CAAC;EACV,OAAO,MAAM,cAAc,GAAG,IAAI;CACpC;CAEA,MAAM,iBACJ,OACA,SACA,OAC4B;EAC5B,MAAM,QAAQ,IACZ,GAAG,aAAa,OAAO,KAAK,GAC5B,GAAG,aAAa,SAAS,OAAO,GAChC,MAAM,WAAW,QAAQ,aAAa,QAAQ,MAAM,QAAQ,IAAI,KAAA,CAClE;EACA,MAAM,OAAO,MAAM,KAAK,GACrB,OAAO,CAAC,CACR,KAAK,YAAY,CAAC,CAClB,MAAM,KAAK,CAAC,CACZ,QAAQ,IAAI,aAAa,SAAS,GAAG,IAAI,aAAa,EAAE,CAAC,CAAC,CAC1D,MAAM,MAAM,QAAQ,CAAC,CACrB,QAAQ,MAAM,OAAO,KAAK,MAAM,QAAQ;EAC3C,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,MAAM,KAAK,GAC3C,OAAO,EAAE,OAAO,GAAW,wBAAwB,CAAC,CAAC,CACrD,KAAK,YAAY,CAAC,CAClB,MAAM,KAAK;EACd,OAAO;GAAE,MAAM,KAAK,IAAI,aAAa;GAAG;GAAO,MAAM,MAAM;GAAM,UAAU,MAAM;EAAS;CAC5F;CAEA,MAAM,kBAAkB,OAAe,OAAqD;EAC1F,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,YAAY,CAAC,CACpB,OAAO;GACN;GACA,aAAa,MAAM;GACnB,SAAS,MAAM;GACf,WAAW,MAAM;GACjB,QAAQ,MAAM;GACd,QAAQ,MAAM;EAChB,CAAC,CAAC,CACD,UAAU;EACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,+BAA+B;EAEjD,OAAO,cAAc,GAAG;CAC1B;CAEA,MAAM,wBACJ,OACA,IACA,QAC6B;EAC7B,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,YAAY,CAAC,CACpB,IAAI,EAAE,OAAO,CAAC,CAAC,CACf,MAAM,IAAI,GAAG,aAAa,OAAO,KAAK,GAAG,GAAG,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAClE,UAAU;EACb,OAAO,MAAM,cAAc,GAAG,IAAI;CACpC;CAEA,MAAM,kBAAkB,OAAe,IAA2B;EAChE,MAAM,KAAK,GACR,OAAO,YAAY,CAAC,CACpB,MAAM,IAAI,GAAG,aAAa,OAAO,KAAK,GAAG,GAAG,aAAa,IAAI,EAAE,CAAC,CAAC;CACtE;CAEA,MAAM,wBAAwB,OAAe,SAAkC;EAC7E,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,EAAE,OAAO,GAAW,wBAAwB,CAAC,CAAC,CACrD,KAAK,YAAY,CAAC,CAClB,MACC,IACE,GAAG,aAAa,OAAO,KAAK,GAC5B,GAAG,aAAa,SAAS,OAAO,GAChC,GAAG,aAAa,QAAQ,QAAQ,GAChC,eACE,GAAG,GAAG,aAAa,SACnB,GAAG,GAAG,aAAa,aACnB,GAAG,GAAG,aAAa,aACrB,CACF,CACF;EACF,OAAO,KAAK,SAAS;CACvB;CAEA,MAAM,eAAe,OAAe,WAAmB,aAAwC;EAY7F,QAAO,MAXY,KAAK,GACrB,OAAO,EAAE,SAAS,aAAa,QAAQ,CAAC,CAAC,CACzC,KAAK,YAAY,CAAC,CAClB,MACC,IACE,GAAG,aAAa,OAAO,KAAK,GAC5B,GAAG,aAAa,WAAW,SAAS,GACpC,GAAG,aAAa,aAAa,WAAW,GACxC,GAAG,aAAa,QAAQ,QAAQ,CAClC,CACF,EAAA,CACU,KAAK,QAAQ,IAAI,OAAO;CACtC;CAEA,MAAM,oBACJ,OACA,KACA,OACA,SACwB;EAYxB,QAAO,MAXY,KAAK,GACrB,OAAO,SAAS,CAAC,CACjB,KAAK,YAAY,CAAC,CAClB,MACC,IACE,KAAK,iBAAiB,OAAO,GAAG,GAChC,YAAY,KAAA,IAAY,KAAA,IAAY,GAAG,aAAa,IAAI,OAAO,CACjE,CACF,CAAC,CACA,QAAQ,IAAI,aAAa,EAAE,CAAC,CAAC,CAC7B,MAAM,KAAK,EAAA,CACF,IAAI,aAAa;CAC/B;CAEA,MAAM,wBACJ,OACA,OACA,OACA,OACA,UACwB;EAexB,QAAO,MAdY,KAAK,GACrB,OAAO;GAAE,GAAG;GAAW,aAAa,YAAY;EAAG,CAAC,CAAC,CACrD,KAAK,YAAY,CAAC,CAClB,UAAU,aAAa,uBAAuB,CAAC,CAC/C,MACC,IACE,KAAK,gBAAgB,OAAO,OAAO,KAAK,GACxC,WACI,GAAG,IAAI,aAAa,GAAG,IAAI,YAAY,GAAG,OAAO,SAAS,cAAc,IAAI,SAAS,YAAY,KACjG,KAAA,CACN,CACF,CAAC,CACA,QAAQ,IAAI,aAAa,EAAE,GAAG,IAAI,YAAY,EAAE,CAAC,CAAC,CAClD,MAAM,KAAK,EAAA,CACF,KAAK,EAAE,aAAa,GAAG,aAAa;GAC9C,OAAO,cAAc,KAAK;GAC1B;EACF,EAAE;CACJ;CAEA,MAAM,qBAAqB,KAAW,OAAgC;EACpE,MAAM,UAAU,KAAK,GAClB,eAAe,EAAE,OAAO,aAAa,MAAM,CAAC,CAAC,CAC7C,KAAK,YAAY,CAAC,CAClB,MAAM,KAAK,iBAAiB,MAAM,GAAG,CAAC;EACzC,MAAM,SAAS,KAAK,GACjB,eAAe,EAAE,OAAO,aAAa,MAAM,CAAC,CAAC,CAC7C,KAAK,YAAY,CAAC,CAClB,UAAU,aAAa,uBAAuB,CAAC,CAC/C,MAAM,KAAK,gBAAgB,MAAM,KAAK,KAAK,CAAC;EAE/C,QAAO,MADY,QAAQ,MAAM,MAAM,EAAA,CAC3B,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,KAAK;CAC3C;CAEA,MAAM,YAAY,OAAe,QAA2B,KAA6B;EACvF,MAAM,YACJ,OAAO,SAAS,YACZ,GAAG,eAAe,yBAAyB;sBAC/B,MAAM,IAAI,OAAO,cAAc,IAAI,GAAG,OAAO,SAAS,EAAE,IAAI,GAAG,GAAG,EAAE;;0CAGhF,GAAG,eAAe,6BAA6B;sBACnC,MAAM,IAAI,OAAO,cAAc,IAAI,OAAO,YAAY,IAAI,GAAG,OAAO,SAAS,EAAE,IAAI,GAAG,GAAG,EAAE;;;EAG7G,MAAM,SAAS,MAAM,KAAK,GAAG,QAAoC,SAAS;EAE1E,QADa,MAAM,QAAQ,MAAM,IAAI,SAAS,OAAO,KAAA,CACzC,SAAS;CACvB;CAEA,iBAAyB,OAAsB,KAAgB;EAC7D,OAAO,IACL,UAAU,OAAO,KAAA,IAAY,GAAG,aAAa,OAAO,KAAK,GACzD,GAAG,aAAa,QAAQ,QAAQ,GAChC,aAAa,aAAa,WAAW,GAAG,GAAG,CAAC,GAC5C,GAAG,OAAO,eACZ;CACF;CAEA,gBAAwB,OAAsB,OAAa,OAAkB;EAC3E,OAAO,IACL,UAAU,OAAO,KAAA,IAAY,GAAG,aAAa,OAAO,KAAK,GACzD,cAAc,cAAc,GAAG,KAAK,CAAC,GACrC,aAAa,aAAa,WAAW,GAAG,KAAK,CAAC,GAC9C,GAAG,OAAO,mBACZ;CACF;CAEA,MAAM,sBAAsB,OAAe,aAAwC;EAiBjF,QAAO,MAhBY,KAAK,GACrB,OAAO,EAAE,IAAI,SAAS,GAAG,CAAC,CAAC,CAC3B,KAAK,QAAQ,CAAC,CACd,MACC,IACE,GAAG,SAAS,OAAO,KAAK,GACxB,QAAQ,SAAS,MAAM,gBAAgB,GACvC,gBACE,GAAG,GAAG,SAAS,SACf,GAAG,GAAG,SAAS,MACf,GAAG,GAAG,SAAS,QACf,GAAG,GAAG,aACR,CACF,CACF,CAAC,CACA,QAAQ,IAAI,SAAS,EAAE,CAAC,EAAA,CACf,KAAK,QAAQ,IAAI,EAAE;CACjC;CAEA,MAAM,mBAAmB,OAAe,aAAwC;EAgB9E,QAAO,MAfY,KAAK,GACrB,OAAO,EAAE,IAAI,SAAS,GAAG,CAAC,CAAC,CAC3B,KAAK,QAAQ,CAAC,CACd,MACC,IACE,GAAG,SAAS,OAAO,KAAK,GACxB,gBACE,GAAG,GAAG,SAAS,SACf,GAAG,GAAG,SAAS,MACf,GAAG,GAAG,SAAS,QACf,GAAG,GAAG,aACR,CACF,CACF,CAAC,CACA,QAAQ,IAAI,SAAS,EAAE,CAAC,EAAA,CACf,KAAK,QAAQ,IAAI,EAAE;CACjC;CAEA,MAAM,sBAAsB,OAAe,WAAsC;EAW/E,QAAO,MAVY,KAAK,GACrB,eAAe,EAAE,IAAI,YAAY,GAAG,CAAC,CAAC,CACtC,KAAK,WAAW,CAAC,CACjB,MACC,IACE,GAAG,YAAY,OAAO,KAAK,GAC3B,eAAe,GAAG,GAAG,YAAY,SAAS,GAAG,GAAG,aAAa,GAAG,GAAG,YAAY,IAAI,CACrF,CACF,CAAC,CACA,QAAQ,IAAI,YAAY,EAAE,CAAC,EAAA,CAClB,KAAK,QAAQ,IAAI,EAAE;CACjC;CAEA,MAAM,iBAAiB,OAAe,WAAsC;EAM1E,QAAO,MALY,KAAK,GACrB,eAAe,EAAE,WAAW,cAAc,UAAU,CAAC,CAAC,CACtD,KAAK,aAAa,CAAC,CACnB,MAAM,IAAI,GAAG,cAAc,OAAO,KAAK,GAAG,GAAG,cAAc,WAAW,SAAS,CAAC,CAAC,CAAC,CAClF,QAAQ,IAAI,cAAc,SAAS,CAAC,EAAA,CAC3B,KAAK,QAAQ,IAAI,SAAS;CACxC;CAEA,MAAM,iBAAiB,OAAe,WAAsC;EAiB1E,QAAO,MAhBY,KAAK,GACrB,OAAO,EAAE,IAAI,YAAY,GAAG,CAAC,CAAC,CAC9B,KAAK,WAAW,CAAC,CACjB,UAAU,UAAU,IAAI,GAAG,SAAS,OAAO,YAAY,KAAK,GAAG,GAAG,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,CAC3F,MACC,IACE,GAAG,YAAY,OAAO,KAAK,GAC3B,gBACE,GAAG,GAAG,YAAY,SAClB,GAAG,GAAG,SAAS,MACf,GAAG,GAAG,SAAS,QACf,GAAG,GAAG,YAAY,IACpB,CACF,CACF,CAAC,CACA,QAAQ,IAAI,YAAY,EAAE,CAAC,EAAA,CAClB,KAAK,QAAQ,IAAI,EAAE;CACjC;AACF;AAEA,SAAS,cAAc,KAUP;CACd,OAAO;EACL,OAAO,IAAI;EACX,IAAI,IAAI;EACR,aAAa,IAAI;EACjB,SAAS,IAAI;EACb,WAAW,IAAI;EACf,QAAQ,IAAI;EACZ,QAAQ,IAAI;EACZ,WAAW,IAAI;EACf,WAAW,IAAI;CACjB;AACF;AAEA,kBAAkB,6BAA6B"}

package/dist/repositories/grant-covers.d.ts

@@ -0,0 +1,20 @@
+import { entitlements } from "../schema/entitlements.js";
+import { SQL, SQLWrapper } from "drizzle-orm";
+//#region src/repositories/grant-covers.d.ts
+type GrantedContentType = "course" | "download" | "community";
+interface GrantColumns {
+  orgId: SQLWrapper;
+  contentId: SQLWrapper;
+  bundleId: SQLWrapper;
+}
+declare function grantUnexpired(expiresAt?: SQLWrapper, at?: SQL): SQL;
+declare function grantExpired(expiresAt?: SQLWrapper, at?: SQL): SQL;
+declare function grantIsActive(row?: typeof entitlements, at?: SQL): SQL;
+declare function grantOpens(row: GrantColumns, contentId: SQL, type: GrantedContentType): SQL;
+declare function activeGrantCovers(orgId: SQL, orgUserId: SQL, contentId: SQL, type: GrantedContentType): SQL;
+declare function communityPublished(orgId: SQL, communityId: SQL): SQL;
+declare function holdsCommunity(orgId: SQL, orgUserId: SQL, communityId: SQL): SQL;
+declare function communityMember(orgId: SQL, orgUserId: SQL, role: SQL, communityId: SQL): SQL;
+//#endregion
+export { GrantColumns, GrantedContentType, activeGrantCovers, communityMember, communityPublished, grantExpired, grantIsActive, grantOpens, grantUnexpired, holdsCommunity };
+//# sourceMappingURL=grant-covers.d.ts.map

package/dist/repositories/grant-covers.js

@@ -0,0 +1,55 @@
+import { entitlements } from "../schema/entitlements.js";
+import { sql } from "drizzle-orm";
+import { STAFF_ROLES } from "@headless-lms/core/organizations";
+//#region src/repositories/grant-covers.ts
+function grantUnexpired(expiresAt = entitlements.expiresAt, at = sql`now()`) {
+	return sql`(${expiresAt} is null or ${expiresAt} > ${at})`;
+}
+function grantExpired(expiresAt = entitlements.expiresAt, at = sql`now()`) {
+	return sql`(${expiresAt} is not null and ${expiresAt} <= ${at})`;
+}
+function grantIsActive(row = entitlements, at) {
+	return sql`(${row.status} = 'active' and ${grantUnexpired(row.expiresAt, at)})`;
+}
+function grantOpens(row, contentId, type) {
+	return sql`(
+    exists (
+      select 1 from content_items ci
+      where ci.org_id = ${row.orgId} and ci.id = ${contentId} and ci.type = ${type}
+    )
+    and (
+      ${row.contentId} = ${contentId}
+      or exists (
+        select 1 from bundle_items bi
+        where bi.org_id = ${row.orgId}
+          and bi.bundle_id = ${row.bundleId}
+          and bi.content_id = ${contentId}
+      )
+    )
+  )`;
+}
+function activeGrantCovers(orgId, orgUserId, contentId, type) {
+	return sql`exists (
+    select 1 from content_access ca
+    join content_items ci on ci.org_id = ca.org_id and ci.id = ca.content_id and ci.type = ${type}
+    where ca.org_id = ${orgId}
+      and ca.org_user_id = ${orgUserId}
+      and ca.content_id = ${contentId}
+  )`;
+}
+function communityPublished(orgId, communityId) {
+	return sql`exists (
+    select 1 from communities pc
+    where pc.org_id = ${orgId} and pc.id = ${communityId} and pc.status = 'published'
+  )`;
+}
+function holdsCommunity(orgId, orgUserId, communityId) {
+	return sql`(${communityPublished(orgId, communityId)} and ${activeGrantCovers(orgId, orgUserId, communityId, "community")})`;
+}
+function communityMember(orgId, orgUserId, role, communityId) {
+	return sql`(${role} in (${sql.join(STAFF_ROLES.map((r) => sql`${r}`), sql`, `)}) or ${holdsCommunity(orgId, orgUserId, communityId)})`;
+}
+//#endregion
+export { activeGrantCovers, communityMember, communityPublished, grantExpired, grantIsActive, grantOpens, grantUnexpired, holdsCommunity };
+
+//# sourceMappingURL=grant-covers.js.map

package/dist/repositories/grant-covers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-covers.js","names":[],"sources":["../../src/repositories/grant-covers.ts"],"sourcesContent":["import { sql, type SQL, type SQLWrapper } from \"drizzle-orm\";\nimport { STAFF_ROLES } from \"@headless-lms/core/organizations\";\nimport { entitlements } from \"../schema/entitlements.js\";\n\nexport type GrantedContentType = \"course\" | \"download\" | \"community\";\n\nexport interface GrantColumns {\n  orgId: SQLWrapper;\n  contentId: SQLWrapper;\n  bundleId: SQLWrapper;\n}\n\nexport function grantUnexpired(\n  expiresAt: SQLWrapper = entitlements.expiresAt,\n  at: SQL = sql`now()`,\n): SQL {\n  return sql`(${expiresAt} is null or ${expiresAt} > ${at})`;\n}\n\nexport function grantExpired(\n  expiresAt: SQLWrapper = entitlements.expiresAt,\n  at: SQL = sql`now()`,\n): SQL {\n  return sql`(${expiresAt} is not null and ${expiresAt} <= ${at})`;\n}\n\nexport function grantIsActive(row: typeof entitlements = entitlements, at?: SQL): SQL {\n  return sql`(${row.status} = 'active' and ${grantUnexpired(row.expiresAt, at)})`;\n}\n\nexport function grantOpens(row: GrantColumns, contentId: SQL, type: GrantedContentType): SQL {\n  return sql`(\n    exists (\n      select 1 from content_items ci\n      where ci.org_id = ${row.orgId} and ci.id = ${contentId} and ci.type = ${type}\n    )\n    and (\n      ${row.contentId} = ${contentId}\n      or exists (\n        select 1 from bundle_items bi\n        where bi.org_id = ${row.orgId}\n          and bi.bundle_id = ${row.bundleId}\n          and bi.content_id = ${contentId}\n      )\n    )\n  )`;\n}\n\nexport function activeGrantCovers(\n  orgId: SQL,\n  orgUserId: SQL,\n  contentId: SQL,\n  type: GrantedContentType,\n): SQL {\n  return sql`exists (\n    select 1 from content_access ca\n    join content_items ci on ci.org_id = ca.org_id and ci.id = ca.content_id and ci.type = ${type}\n    where ca.org_id = ${orgId}\n      and ca.org_user_id = ${orgUserId}\n      and ca.content_id = ${contentId}\n  )`;\n}\n\nexport function communityPublished(orgId: SQL, communityId: SQL): SQL {\n  return sql`exists (\n    select 1 from communities pc\n    where pc.org_id = ${orgId} and pc.id = ${communityId} and pc.status = 'published'\n  )`;\n}\n\nexport function holdsCommunity(orgId: SQL, orgUserId: SQL, communityId: SQL): SQL {\n  return sql`(${communityPublished(orgId, communityId)} and ${activeGrantCovers(orgId, orgUserId, communityId, \"community\")})`;\n}\n\nexport function communityMember(orgId: SQL, orgUserId: SQL, role: SQL, communityId: SQL): SQL {\n  const staff = sql.join(\n    STAFF_ROLES.map((r) => sql`${r}`),\n    sql`, `,\n  );\n  return sql`(${role} in (${staff}) or ${holdsCommunity(orgId, orgUserId, communityId)})`;\n}\n"],"mappings":";;;;AAYA,SAAgB,eACd,YAAwB,aAAa,WACrC,KAAU,GAAG,SACR;CACL,OAAO,GAAG,IAAI,UAAU,cAAc,UAAU,KAAK,GAAG;AAC1D;AAEA,SAAgB,aACd,YAAwB,aAAa,WACrC,KAAU,GAAG,SACR;CACL,OAAO,GAAG,IAAI,UAAU,mBAAmB,UAAU,MAAM,GAAG;AAChE;AAEA,SAAgB,cAAc,MAA2B,cAAc,IAAe;CACpF,OAAO,GAAG,IAAI,IAAI,OAAO,kBAAkB,eAAe,IAAI,WAAW,EAAE,EAAE;AAC/E;AAEA,SAAgB,WAAW,KAAmB,WAAgB,MAA+B;CAC3F,OAAO,GAAG;;;0BAGc,IAAI,MAAM,eAAe,UAAU,iBAAiB,KAAK;;;QAG3E,IAAI,UAAU,KAAK,UAAU;;;4BAGT,IAAI,MAAM;+BACP,IAAI,SAAS;gCACZ,UAAU;;;;AAI1C;AAEA,SAAgB,kBACd,OACA,WACA,WACA,MACK;CACL,OAAO,GAAG;;6FAEiF,KAAK;wBAC1E,MAAM;6BACD,UAAU;4BACX,UAAU;;AAEtC;AAEA,SAAgB,mBAAmB,OAAY,aAAuB;CACpE,OAAO,GAAG;;wBAEY,MAAM,eAAe,YAAY;;AAEzD;AAEA,SAAgB,eAAe,OAAY,WAAgB,aAAuB;CAChF,OAAO,GAAG,IAAI,mBAAmB,OAAO,WAAW,EAAE,OAAO,kBAAkB,OAAO,WAAW,aAAa,WAAW,EAAE;AAC5H;AAEA,SAAgB,gBAAgB,OAAY,WAAgB,MAAW,aAAuB;CAK5F,OAAO,GAAG,IAAI,KAAK,OAJL,IAAI,KAChB,YAAY,KAAK,MAAM,GAAG,GAAG,GAAG,GAChC,GAAG,IAEyB,EAAE,OAAO,eAAe,OAAO,WAAW,WAAW,EAAE;AACvF"}

package/dist/repositories/identity.d.ts

@@ -1,6 +1,6 @@
 import { NodePgDatabase } from "drizzle-orm/node-postgres";
-import { CreateUserInput, Logger, UpdateUserInput, User } from "@headless-lms/core/types";
-import { IdentityRepository } from "@headless-lms/core/identity";
+import { CreateUserInput, Logger, UpdateUserInput, User, UserProfile } from "@headless-lms/core/types";
+import { IdentityRepository, ProfilePatch } from "@headless-lms/core/identity";
 //#region src/repositories/identity.d.ts
 declare class DrizzleIdentityRepository implements IdentityRepository {
   private readonly db;
@@ -11,6 +11,8 @@ declare class DrizzleIdentityRepository implements IdentityRepository {
   findUserById(id: string): Promise<User | null>;
   findUserByExternalId(externalId: string): Promise<User | null>;
   findUserByEmail(email: string): Promise<User | null>;
+  findProfile(userId: string): Promise<UserProfile | null>;
+  upsertProfile(userId: string, patch: ProfilePatch): Promise<UserProfile>;
 }
 //#endregion
 export { DrizzleIdentityRepository };

package/dist/repositories/identity.js

@@ -1,4 +1,4 @@
-import { users } from "../schema/identity.js";
+import { userProfiles, users } from "../schema/identity.js";
 import { translateDbErrors } from "./pg-errors.js";
 import { eq, sql } from "drizzle-orm";
 import { noopLogger } from "@headless-lms/core/shared/logger";
@@ -38,6 +38,37 @@ var DrizzleIdentityRepository = class {
 		const [row] = await this.db.select().from(users).where(sql`lower(${users.email}) = lower(${email})`).limit(1);
 		return row ?? null;
 	}
+	async findProfile(userId) {
+		const [row] = await this.db.select().from(userProfiles).where(eq(userProfiles.userId, userId)).limit(1);
+		return row ?? null;
+	}
+	async upsertProfile(userId, patch) {
+		if (!await this.findProfile(userId)) {
+			const [row] = await this.db.insert(userProfiles).values({
+				userId,
+				displayName: patch.displayName ?? null,
+				headline: patch.headline ?? null,
+				bio: patch.bio ?? null,
+				imageAssetOrgId: patch.imageAssetOrgId ?? null,
+				imageAssetId: patch.imageAssetId ?? null,
+				extra: patch.extra ?? {}
+			}).returning();
+			if (!row) throw new Error("failed to insert profile");
+			return row;
+		}
+		const set = { updatedAt: /* @__PURE__ */ new Date() };
+		if (patch.displayName !== void 0) set.displayName = patch.displayName;
+		if (patch.headline !== void 0) set.headline = patch.headline;
+		if (patch.bio !== void 0) set.bio = patch.bio;
+		if (patch.imageAssetOrgId !== void 0) {
+			set.imageAssetOrgId = patch.imageAssetOrgId;
+			set.imageAssetId = patch.imageAssetId;
+		}
+		if (patch.extra !== void 0) set.extra = patch.extra;
+		const [row] = await this.db.update(userProfiles).set(set).where(eq(userProfiles.userId, userId)).returning();
+		if (!row) throw new Error("failed to update profile");
+		return row;
+	}
 };
 translateDbErrors(DrizzleIdentityRepository);
 //#endregion

package/dist/repositories/identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity.js","names":[],"sources":["../../src/repositories/identity.ts"],"sourcesContent":["// identity — Drizzle repository (implements the core outbound port).\n//\n// The person only. A person's link to an organization lives in the\n// organizations context (`org_users`), not here.\nimport { eq, sql } from \"drizzle-orm\";\nimport type { NodePgDatabase } from \"drizzle-orm/node-postgres\";\nimport type { IdentityRepository } from \"@headless-lms/core/identity\";\nimport type { CreateUserInput, Logger, UpdateUserInput, User } from \"@headless-lms/core/types\";\nimport { users } from \"../schema/identity.js\";\nimport { noopLogger } from \"@headless-lms/core/shared/logger\";\nimport { translateDbErrors } from \"./pg-errors.js\";\n\nexport class DrizzleIdentityRepository implements IdentityRepository {\n  constructor(\n    private readonly db: NodePgDatabase,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  async insertUser(input: CreateUserInput): Promise<User> {\n    const [row] = await this.db\n      .insert(users)\n      .values({\n        id: input.id,\n        externalId: input.externalId ?? null,\n        email: input.email,\n        firstName: input.firstName ?? null,\n        lastName: input.lastName ?? null,\n      })\n      .returning();\n    if (!row) {\n      throw new Error(\"failed to insert user\");\n    }\n    return row;\n  }\n\n  async updateUser(id: string, input: UpdateUserInput): Promise<User | null> {\n    // An empty patch would be an UPDATE with no SET — read the row back instead.\n    if (Object.keys(input).length === 0) {\n      return this.findUserById(id);\n    }\n    const [row] = await this.db.update(users).set(input).where(eq(users.id, id)).returning();\n    return row ?? null;\n  }\n\n  async findUserById(id: string): Promise<User | null> {\n    const [row] = await this.db.select().from(users).where(eq(users.id, id)).limit(1);\n    return row ?? null;\n  }\n\n  async findUserByExternalId(externalId: string): Promise<User | null> {\n    const [row] = await this.db\n      .select()\n      .from(users)\n      .where(eq(users.externalId, externalId))\n      .limit(1);\n    return row ?? null;\n  }\n\n  // Case-insensitive: the address comes from whatever an admin typed into an\n  // invite, the row from whatever the auth provider stored.\n  async findUserByEmail(email: string): Promise<User | null> {\n    const [row] = await this.db\n      .select()\n      .from(users)\n      .where(sql`lower(${users.email}) = lower(${email})`)\n      .limit(1);\n    return row ?? null;\n  }\n}\ntranslateDbErrors(DrizzleIdentityRepository);\n"],"mappings":";;;;;AAYA,IAAa,4BAAb,MAAqE;CAEhD;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAM,WAAW,OAAuC;EACtD,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,KAAK,CAAC,CACb,OAAO;GACN,IAAI,MAAM;GACV,YAAY,MAAM,cAAc;GAChC,OAAO,MAAM;GACb,WAAW,MAAM,aAAa;GAC9B,UAAU,MAAM,YAAY;EAC9B,CAAC,CAAC,CACD,UAAU;EACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,uBAAuB;EAEzC,OAAO;CACT;CAEA,MAAM,WAAW,IAAY,OAA8C;EAEzE,IAAI,OAAO,KAAK,KAAK,CAAC,CAAC,WAAW,GAChC,OAAO,KAAK,aAAa,EAAE;EAE7B,MAAM,CAAC,OAAO,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU;EACvF,OAAO,OAAO;CAChB;CAEA,MAAM,aAAa,IAAkC;EACnD,MAAM,CAAC,OAAO,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;EAChF,OAAO,OAAO;CAChB;CAEA,MAAM,qBAAqB,YAA0C;EACnE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,KAAK,CAAC,CACX,MAAM,GAAG,MAAM,YAAY,UAAU,CAAC,CAAC,CACvC,MAAM,CAAC;EACV,OAAO,OAAO;CAChB;CAIA,MAAM,gBAAgB,OAAqC;EACzD,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,KAAK,CAAC,CACX,MAAM,GAAG,SAAS,MAAM,MAAM,YAAY,MAAM,EAAE,CAAC,CACnD,MAAM,CAAC;EACV,OAAO,OAAO;CAChB;AACF;AACA,kBAAkB,yBAAyB"}
+{"version":3,"file":"identity.js","names":[],"sources":["../../src/repositories/identity.ts"],"sourcesContent":["// identity — Drizzle repository (implements the core outbound port).\n//\n// The person only. A person's link to an organization lives in the\n// organizations context (`org_users`), not here.\nimport { eq, sql } from \"drizzle-orm\";\nimport type { NodePgDatabase } from \"drizzle-orm/node-postgres\";\nimport type { IdentityRepository, ProfilePatch } from \"@headless-lms/core/identity\";\nimport type {\n  CreateUserInput,\n  Logger,\n  UpdateUserInput,\n  User,\n  UserProfile,\n} from \"@headless-lms/core/types\";\nimport { userProfiles, users } from \"../schema/identity.js\";\nimport { noopLogger } from \"@headless-lms/core/shared/logger\";\nimport { translateDbErrors } from \"./pg-errors.js\";\n\nexport class DrizzleIdentityRepository implements IdentityRepository {\n  constructor(\n    private readonly db: NodePgDatabase,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  async insertUser(input: CreateUserInput): Promise<User> {\n    const [row] = await this.db\n      .insert(users)\n      .values({\n        id: input.id,\n        externalId: input.externalId ?? null,\n        email: input.email,\n        firstName: input.firstName ?? null,\n        lastName: input.lastName ?? null,\n      })\n      .returning();\n    if (!row) {\n      throw new Error(\"failed to insert user\");\n    }\n    return row;\n  }\n\n  async updateUser(id: string, input: UpdateUserInput): Promise<User | null> {\n    // An empty patch would be an UPDATE with no SET — read the row back instead.\n    if (Object.keys(input).length === 0) {\n      return this.findUserById(id);\n    }\n    const [row] = await this.db.update(users).set(input).where(eq(users.id, id)).returning();\n    return row ?? null;\n  }\n\n  async findUserById(id: string): Promise<User | null> {\n    const [row] = await this.db.select().from(users).where(eq(users.id, id)).limit(1);\n    return row ?? null;\n  }\n\n  async findUserByExternalId(externalId: string): Promise<User | null> {\n    const [row] = await this.db\n      .select()\n      .from(users)\n      .where(eq(users.externalId, externalId))\n      .limit(1);\n    return row ?? null;\n  }\n\n  // Case-insensitive: the address comes from whatever an admin typed into an\n  // invite, the row from whatever the auth provider stored.\n  async findUserByEmail(email: string): Promise<User | null> {\n    const [row] = await this.db\n      .select()\n      .from(users)\n      .where(sql`lower(${users.email}) = lower(${email})`)\n      .limit(1);\n    return row ?? null;\n  }\n\n  async findProfile(userId: string): Promise<UserProfile | null> {\n    const [row] = await this.db\n      .select()\n      .from(userProfiles)\n      .where(eq(userProfiles.userId, userId))\n      .limit(1);\n    return row ?? null;\n  }\n\n  async upsertProfile(userId: string, patch: ProfilePatch): Promise<UserProfile> {\n    const existing = await this.findProfile(userId);\n    if (!existing) {\n      const [row] = await this.db\n        .insert(userProfiles)\n        .values({\n          userId,\n          displayName: patch.displayName ?? null,\n          headline: patch.headline ?? null,\n          bio: patch.bio ?? null,\n          imageAssetOrgId: patch.imageAssetOrgId ?? null,\n          imageAssetId: patch.imageAssetId ?? null,\n          extra: patch.extra ?? {},\n        })\n        .returning();\n      if (!row) {\n        throw new Error(\"failed to insert profile\");\n      }\n      return row;\n    }\n    const set: Record<string, unknown> = { updatedAt: new Date() };\n    if (patch.displayName !== undefined) {\n      set.displayName = patch.displayName;\n    }\n    if (patch.headline !== undefined) {\n      set.headline = patch.headline;\n    }\n    if (patch.bio !== undefined) {\n      set.bio = patch.bio;\n    }\n    if (patch.imageAssetOrgId !== undefined) {\n      set.imageAssetOrgId = patch.imageAssetOrgId;\n      set.imageAssetId = patch.imageAssetId;\n    }\n    if (patch.extra !== undefined) {\n      set.extra = patch.extra;\n    }\n    const [row] = await this.db\n      .update(userProfiles)\n      .set(set)\n      .where(eq(userProfiles.userId, userId))\n      .returning();\n    if (!row) {\n      throw new Error(\"failed to update profile\");\n    }\n    return row;\n  }\n}\ntranslateDbErrors(DrizzleIdentityRepository);\n"],"mappings":";;;;;AAkBA,IAAa,4BAAb,MAAqE;CAEhD;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAM,WAAW,OAAuC;EACtD,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,KAAK,CAAC,CACb,OAAO;GACN,IAAI,MAAM;GACV,YAAY,MAAM,cAAc;GAChC,OAAO,MAAM;GACb,WAAW,MAAM,aAAa;GAC9B,UAAU,MAAM,YAAY;EAC9B,CAAC,CAAC,CACD,UAAU;EACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,uBAAuB;EAEzC,OAAO;CACT;CAEA,MAAM,WAAW,IAAY,OAA8C;EAEzE,IAAI,OAAO,KAAK,KAAK,CAAC,CAAC,WAAW,GAChC,OAAO,KAAK,aAAa,EAAE;EAE7B,MAAM,CAAC,OAAO,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU;EACvF,OAAO,OAAO;CAChB;CAEA,MAAM,aAAa,IAAkC;EACnD,MAAM,CAAC,OAAO,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;EAChF,OAAO,OAAO;CAChB;CAEA,MAAM,qBAAqB,YAA0C;EACnE,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,KAAK,CAAC,CACX,MAAM,GAAG,MAAM,YAAY,UAAU,CAAC,CAAC,CACvC,MAAM,CAAC;EACV,OAAO,OAAO;CAChB;CAIA,MAAM,gBAAgB,OAAqC;EACzD,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,KAAK,CAAC,CACX,MAAM,GAAG,SAAS,MAAM,MAAM,YAAY,MAAM,EAAE,CAAC,CACnD,MAAM,CAAC;EACV,OAAO,OAAO;CAChB;CAEA,MAAM,YAAY,QAA6C;EAC7D,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,CAAC,CACR,KAAK,YAAY,CAAC,CAClB,MAAM,GAAG,aAAa,QAAQ,MAAM,CAAC,CAAC,CACtC,MAAM,CAAC;EACV,OAAO,OAAO;CAChB;CAEA,MAAM,cAAc,QAAgB,OAA2C;EAE7E,IAAI,CAAC,MADkB,KAAK,YAAY,MAAM,GAC/B;GACb,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,YAAY,CAAC,CACpB,OAAO;IACN;IACA,aAAa,MAAM,eAAe;IAClC,UAAU,MAAM,YAAY;IAC5B,KAAK,MAAM,OAAO;IAClB,iBAAiB,MAAM,mBAAmB;IAC1C,cAAc,MAAM,gBAAgB;IACpC,OAAO,MAAM,SAAS,CAAC;GACzB,CAAC,CAAC,CACD,UAAU;GACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,0BAA0B;GAE5C,OAAO;EACT;EACA,MAAM,MAA+B,EAAE,2BAAW,IAAI,KAAK,EAAE;EAC7D,IAAI,MAAM,gBAAgB,KAAA,GACxB,IAAI,cAAc,MAAM;EAE1B,IAAI,MAAM,aAAa,KAAA,GACrB,IAAI,WAAW,MAAM;EAEvB,IAAI,MAAM,QAAQ,KAAA,GAChB,IAAI,MAAM,MAAM;EAElB,IAAI,MAAM,oBAAoB,KAAA,GAAW;GACvC,IAAI,kBAAkB,MAAM;GAC5B,IAAI,eAAe,MAAM;EAC3B;EACA,IAAI,MAAM,UAAU,KAAA,GAClB,IAAI,QAAQ,MAAM;EAEpB,MAAM,CAAC,OAAO,MAAM,KAAK,GACtB,OAAO,YAAY,CAAC,CACpB,IAAI,GAAG,CAAC,CACR,MAAM,GAAG,aAAa,QAAQ,MAAM,CAAC,CAAC,CACtC,UAAU;EACb,IAAI,CAAC,KACH,MAAM,IAAI,MAAM,0BAA0B;EAE5C,OAAO;CACT;AACF;AACA,kBAAkB,yBAAyB"}

package/dist/repositories/inserted-row.d.ts

@@ -0,0 +1,5 @@
+//#region src/repositories/inserted-row.d.ts
+declare const insertedRow: import("drizzle-orm").SQL<boolean>;
+//#endregion
+export { insertedRow };
+//# sourceMappingURL=inserted-row.d.ts.map

package/dist/repositories/inserted-row.js

@@ -0,0 +1,7 @@
+import { sql } from "drizzle-orm";
+//#region src/repositories/inserted-row.ts
+const insertedRow = sql`(xmax = 0)`;
+//#endregion
+export { insertedRow };
+
+//# sourceMappingURL=inserted-row.js.map

package/dist/repositories/inserted-row.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inserted-row.js","names":[],"sources":["../../src/repositories/inserted-row.ts"],"sourcesContent":["import { sql } from \"drizzle-orm\";\n\nexport const insertedRow = sql<boolean>`(xmax = 0)`;\n"],"mappings":";;AAEA,MAAa,cAAc,GAAY"}

package/dist/repositories/member.d.ts

@@ -0,0 +1,16 @@
+import { NodePgDatabase } from "drizzle-orm/node-postgres";
+import { Logger } from "@headless-lms/core/shared/ports";
+import { Page } from "@headless-lms/core/types";
+import { DirectoryQuery, DirectoryRow, MemberReportRepository } from "@headless-lms/core/reporting/member";
+//#region src/repositories/member.d.ts
+declare class DrizzleMemberRepository implements MemberReportRepository {
+  private readonly db;
+  private readonly logger;
+  constructor(db: NodePgDatabase, logger?: Logger);
+  directory(orgId: string, communityId: string, query: DirectoryQuery): Promise<Page<DirectoryRow>>;
+  people(orgId: string, orgUserIds: string[]): Promise<DirectoryRow[]>;
+  spaceMemberCounts(orgId: string, communityId: string): Promise<Record<string, number>>;
+}
+//#endregion
+export { DrizzleMemberRepository };
+//# sourceMappingURL=member.d.ts.map

package/dist/repositories/member.js

@@ -0,0 +1,63 @@
+import { spaces } from "../schema/content.js";
+import { userProfiles, users } from "../schema/identity.js";
+import { orgUsers } from "../schema/organizations.js";
+import { contentAccess, spaceMembers } from "../schema/entitlements.js";
+import "../schema/index.js";
+import { translateDbErrors } from "./pg-errors.js";
+import { communityMember, communityPublished } from "./grant-covers.js";
+import { and, asc, eq, ilike, inArray, sql } from "drizzle-orm";
+import { noopLogger } from "@headless-lms/core/shared/logger";
+//#region src/repositories/member.ts
+function personColumns(orgId) {
+	return {
+		orgUserId: orgUsers.id,
+		userId: orgUsers.userId,
+		role: orgUsers.role,
+		displayName: sql`coalesce(nullif(trim(${userProfiles.displayName}), ''), nullif(trim(concat_ws(' ', ${users.firstName}, ${users.lastName})), ''))`,
+		headline: userProfiles.headline,
+		bio: userProfiles.bio,
+		imageAssetId: sql`case when ${userProfiles.imageAssetOrgId} = ${orgId} then ${userProfiles.imageAssetId} end`
+	};
+}
+var DrizzleMemberRepository = class {
+	db;
+	logger;
+	constructor(db, logger = noopLogger) {
+		this.db = db;
+		this.logger = logger;
+	}
+	async directory(orgId, communityId, query) {
+		const columns = personColumns(orgId);
+		const q = query.search?.trim();
+		const where = and(eq(orgUsers.orgId, orgId), communityMember(sql`${orgUsers.orgId}`, sql`${orgUsers.id}`, sql`${orgUsers.role}`, sql`${communityId}`), q ? ilike(columns.displayName, `%${q}%`) : void 0);
+		const rows = await this.db.select(columns).from(orgUsers).leftJoin(userProfiles, eq(userProfiles.userId, orgUsers.userId)).leftJoin(users, eq(users.id, orgUsers.userId)).where(where).orderBy(asc(userProfiles.displayName), asc(orgUsers.id)).limit(query.pageSize).offset((query.page - 1) * query.pageSize);
+		const [{ total } = { total: 0 }] = await this.db.select({ total: sql`cast(count(*) as int)` }).from(orgUsers).leftJoin(userProfiles, eq(userProfiles.userId, orgUsers.userId)).leftJoin(users, eq(users.id, orgUsers.userId)).where(where);
+		return {
+			rows,
+			total,
+			page: query.page,
+			pageSize: query.pageSize
+		};
+	}
+	async people(orgId, orgUserIds) {
+		if (orgUserIds.length === 0) return [];
+		return this.db.select(personColumns(orgId)).from(orgUsers).leftJoin(userProfiles, eq(userProfiles.userId, orgUsers.userId)).leftJoin(users, eq(users.id, orgUsers.userId)).where(and(eq(orgUsers.orgId, orgId), inArray(orgUsers.id, orgUserIds)));
+	}
+	async spaceMemberCounts(orgId, communityId) {
+		const holders = this.db.$with("holders").as(this.db.selectDistinct({ orgUserId: contentAccess.orgUserId }).from(contentAccess).where(and(eq(contentAccess.orgId, orgId), eq(contentAccess.contentId, communityId), communityPublished(sql`${orgId}`, sql`${communityId}`))));
+		const seated = this.db.$with("seated").as(this.db.select({
+			spaceId: spaceMembers.spaceId,
+			count: sql`cast(count(*) as int)`.as("count")
+		}).from(spaceMembers).innerJoin(holders, eq(holders.orgUserId, spaceMembers.orgUserId)).where(and(eq(spaceMembers.orgId, orgId), eq(spaceMembers.communityId, communityId), eq(spaceMembers.status, "active"))).groupBy(spaceMembers.spaceId));
+		const rows = await this.db.with(holders, seated).select({
+			spaceId: spaces.id,
+			count: sql`case when ${spaces.accessRule} = 'all_members' then (select cast(count(*) as int) from ${holders}) else coalesce(${sql.identifier("seated")}.${sql.identifier("count")}, 0) end`
+		}).from(spaces).leftJoin(seated, eq(seated.spaceId, spaces.id)).where(and(eq(spaces.orgId, orgId), eq(spaces.communityId, communityId)));
+		return Object.fromEntries(rows.map((row) => [row.spaceId, Number(row.count)]));
+	}
+};
+translateDbErrors(DrizzleMemberRepository);
+//#endregion
+export { DrizzleMemberRepository };
+
+//# sourceMappingURL=member.js.map

package/dist/repositories/member.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member.js","names":[],"sources":["../../src/repositories/member.ts"],"sourcesContent":["// member — Drizzle read repo (implements the reporting/member outbound port).\nimport { and, asc, eq, ilike, inArray, sql } from \"drizzle-orm\";\nimport type { NodePgDatabase } from \"drizzle-orm/node-postgres\";\nimport type {\n  DirectoryQuery,\n  DirectoryRow,\n  MemberReportRepository,\n} from \"@headless-lms/core/reporting/member\";\nimport type { Page } from \"@headless-lms/core/types\";\nimport {\n  contentAccess,\n  orgUsers,\n  spaceMembers,\n  spaces,\n  userProfiles,\n  users,\n} from \"../schema/index.js\";\nimport type { Logger } from \"@headless-lms/core/shared/ports\";\nimport { noopLogger } from \"@headless-lms/core/shared/logger\";\nimport { translateDbErrors } from \"./pg-errors.js\";\nimport { communityMember, communityPublished } from \"./grant-covers.js\";\n\nfunction personColumns(orgId: string) {\n  return {\n    orgUserId: orgUsers.id,\n    userId: orgUsers.userId,\n    role: orgUsers.role,\n    displayName: sql<\n      string | null\n    >`coalesce(nullif(trim(${userProfiles.displayName}), ''), nullif(trim(concat_ws(' ', ${users.firstName}, ${users.lastName})), ''))`,\n    headline: userProfiles.headline,\n    bio: userProfiles.bio,\n    imageAssetId: sql<\n      string | null\n    >`case when ${userProfiles.imageAssetOrgId} = ${orgId} then ${userProfiles.imageAssetId} end`,\n  };\n}\n\nexport class DrizzleMemberRepository implements MemberReportRepository {\n  constructor(\n    private readonly db: NodePgDatabase,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  async directory(\n    orgId: string,\n    communityId: string,\n    query: DirectoryQuery,\n  ): Promise<Page<DirectoryRow>> {\n    const columns = personColumns(orgId);\n    const q = query.search?.trim();\n    const where = and(\n      eq(orgUsers.orgId, orgId),\n      communityMember(\n        sql`${orgUsers.orgId}`,\n        sql`${orgUsers.id}`,\n        sql`${orgUsers.role}`,\n        sql`${communityId}`,\n      ),\n      q ? ilike(columns.displayName, `%${q}%`) : undefined,\n    );\n    const rows = await this.db\n      .select(columns)\n      .from(orgUsers)\n      .leftJoin(userProfiles, eq(userProfiles.userId, orgUsers.userId))\n      .leftJoin(users, eq(users.id, orgUsers.userId))\n      .where(where)\n      .orderBy(asc(userProfiles.displayName), asc(orgUsers.id))\n      .limit(query.pageSize)\n      .offset((query.page - 1) * query.pageSize);\n    const [{ total } = { total: 0 }] = await this.db\n      .select({ total: sql<number>`cast(count(*) as int)` })\n      .from(orgUsers)\n      .leftJoin(userProfiles, eq(userProfiles.userId, orgUsers.userId))\n      .leftJoin(users, eq(users.id, orgUsers.userId))\n      .where(where);\n    return { rows, total, page: query.page, pageSize: query.pageSize };\n  }\n\n  async people(orgId: string, orgUserIds: string[]): Promise<DirectoryRow[]> {\n    if (orgUserIds.length === 0) {\n      return [];\n    }\n    return this.db\n      .select(personColumns(orgId))\n      .from(orgUsers)\n      .leftJoin(userProfiles, eq(userProfiles.userId, orgUsers.userId))\n      .leftJoin(users, eq(users.id, orgUsers.userId))\n      .where(and(eq(orgUsers.orgId, orgId), inArray(orgUsers.id, orgUserIds)));\n  }\n\n  async spaceMemberCounts(orgId: string, communityId: string): Promise<Record<string, number>> {\n    const holders = this.db.$with(\"holders\").as(\n      this.db\n        .selectDistinct({ orgUserId: contentAccess.orgUserId })\n        .from(contentAccess)\n        .where(\n          and(\n            eq(contentAccess.orgId, orgId),\n            eq(contentAccess.contentId, communityId),\n            communityPublished(sql`${orgId}`, sql`${communityId}`),\n          ),\n        ),\n    );\n    const seated = this.db.$with(\"seated\").as(\n      this.db\n        .select({\n          spaceId: spaceMembers.spaceId,\n          count: sql<number>`cast(count(*) as int)`.as(\"count\"),\n        })\n        .from(spaceMembers)\n        .innerJoin(holders, eq(holders.orgUserId, spaceMembers.orgUserId))\n        .where(\n          and(\n            eq(spaceMembers.orgId, orgId),\n            eq(spaceMembers.communityId, communityId),\n            eq(spaceMembers.status, \"active\"),\n          ),\n        )\n        .groupBy(spaceMembers.spaceId),\n    );\n    const rows = await this.db\n      .with(holders, seated)\n      .select({\n        spaceId: spaces.id,\n        count: sql<number>`case when ${spaces.accessRule} = 'all_members' then (select cast(count(*) as int) from ${holders}) else coalesce(${sql.identifier(\"seated\")}.${sql.identifier(\"count\")}, 0) end`,\n      })\n      .from(spaces)\n      .leftJoin(seated, eq(seated.spaceId, spaces.id))\n      .where(and(eq(spaces.orgId, orgId), eq(spaces.communityId, communityId)));\n    return Object.fromEntries(rows.map((row) => [row.spaceId, Number(row.count)]));\n  }\n}\ntranslateDbErrors(DrizzleMemberRepository);\n"],"mappings":";;;;;;;;;;AAsBA,SAAS,cAAc,OAAe;CACpC,OAAO;EACL,WAAW,SAAS;EACpB,QAAQ,SAAS;EACjB,MAAM,SAAS;EACf,aAAa,GAEZ,wBAAwB,aAAa,YAAY,qCAAqC,MAAM,UAAU,IAAI,MAAM,SAAS;EAC1H,UAAU,aAAa;EACvB,KAAK,aAAa;EAClB,cAAc,GAEb,aAAa,aAAa,gBAAgB,KAAK,MAAM,QAAQ,aAAa,aAAa;CAC1F;AACF;AAEA,IAAa,0BAAb,MAAuE;CAElD;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAM,UACJ,OACA,aACA,OAC6B;EAC7B,MAAM,UAAU,cAAc,KAAK;EACnC,MAAM,IAAI,MAAM,QAAQ,KAAK;EAC7B,MAAM,QAAQ,IACZ,GAAG,SAAS,OAAO,KAAK,GACxB,gBACE,GAAG,GAAG,SAAS,SACf,GAAG,GAAG,SAAS,MACf,GAAG,GAAG,SAAS,QACf,GAAG,GAAG,aACR,GACA,IAAI,MAAM,QAAQ,aAAa,IAAI,EAAE,EAAE,IAAI,KAAA,CAC7C;EACA,MAAM,OAAO,MAAM,KAAK,GACrB,OAAO,OAAO,CAAC,CACf,KAAK,QAAQ,CAAC,CACd,SAAS,cAAc,GAAG,aAAa,QAAQ,SAAS,MAAM,CAAC,CAAC,CAChE,SAAS,OAAO,GAAG,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC,CAC9C,MAAM,KAAK,CAAC,CACZ,QAAQ,IAAI,aAAa,WAAW,GAAG,IAAI,SAAS,EAAE,CAAC,CAAC,CACxD,MAAM,MAAM,QAAQ,CAAC,CACrB,QAAQ,MAAM,OAAO,KAAK,MAAM,QAAQ;EAC3C,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,MAAM,KAAK,GAC3C,OAAO,EAAE,OAAO,GAAW,wBAAwB,CAAC,CAAC,CACrD,KAAK,QAAQ,CAAC,CACd,SAAS,cAAc,GAAG,aAAa,QAAQ,SAAS,MAAM,CAAC,CAAC,CAChE,SAAS,OAAO,GAAG,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC,CAC9C,MAAM,KAAK;EACd,OAAO;GAAE;GAAM;GAAO,MAAM,MAAM;GAAM,UAAU,MAAM;EAAS;CACnE;CAEA,MAAM,OAAO,OAAe,YAA+C;EACzE,IAAI,WAAW,WAAW,GACxB,OAAO,CAAC;EAEV,OAAO,KAAK,GACT,OAAO,cAAc,KAAK,CAAC,CAAC,CAC5B,KAAK,QAAQ,CAAC,CACd,SAAS,cAAc,GAAG,aAAa,QAAQ,SAAS,MAAM,CAAC,CAAC,CAChE,SAAS,OAAO,GAAG,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC,CAC9C,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,QAAQ,SAAS,IAAI,UAAU,CAAC,CAAC;CAC3E;CAEA,MAAM,kBAAkB,OAAe,aAAsD;EAC3F,MAAM,UAAU,KAAK,GAAG,MAAM,SAAS,CAAC,CAAC,GACvC,KAAK,GACF,eAAe,EAAE,WAAW,cAAc,UAAU,CAAC,CAAC,CACtD,KAAK,aAAa,CAAC,CACnB,MACC,IACE,GAAG,cAAc,OAAO,KAAK,GAC7B,GAAG,cAAc,WAAW,WAAW,GACvC,mBAAmB,GAAG,GAAG,SAAS,GAAG,GAAG,aAAa,CACvD,CACF,CACJ;EACA,MAAM,SAAS,KAAK,GAAG,MAAM,QAAQ,CAAC,CAAC,GACrC,KAAK,GACF,OAAO;GACN,SAAS,aAAa;GACtB,OAAO,GAAW,wBAAwB,GAAG,OAAO;EACtD,CAAC,CAAC,CACD,KAAK,YAAY,CAAC,CAClB,UAAU,SAAS,GAAG,QAAQ,WAAW,aAAa,SAAS,CAAC,CAAC,CACjE,MACC,IACE,GAAG,aAAa,OAAO,KAAK,GAC5B,GAAG,aAAa,aAAa,WAAW,GACxC,GAAG,aAAa,QAAQ,QAAQ,CAClC,CACF,CAAC,CACA,QAAQ,aAAa,OAAO,CACjC;EACA,MAAM,OAAO,MAAM,KAAK,GACrB,KAAK,SAAS,MAAM,CAAC,CACrB,OAAO;GACN,SAAS,OAAO;GAChB,OAAO,GAAW,aAAa,OAAO,WAAW,2DAA2D,QAAQ,kBAAkB,IAAI,WAAW,QAAQ,EAAE,GAAG,IAAI,WAAW,OAAO,EAAE;EAC5L,CAAC,CAAC,CACD,KAAK,MAAM,CAAC,CACZ,SAAS,QAAQ,GAAG,OAAO,SAAS,OAAO,EAAE,CAAC,CAAC,CAC/C,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,GAAG,GAAG,OAAO,aAAa,WAAW,CAAC,CAAC;EAC1E,OAAO,OAAO,YAAY,KAAK,KAAK,QAAQ,CAAC,IAAI,SAAS,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC;CAC/E;AACF;AACA,kBAAkB,uBAAuB"}

package/dist/repositories/members.js

@@ -5,9 +5,9 @@ import { user } from "../schema/better-auth.js";
 import { orgUserProfileColumns } from "./org-user-profile.js";
 import { and, eq, ne } from "drizzle-orm";
 import { noopLogger } from "@headless-lms/core/shared/logger";
-import { STUDENT_ROLE, isStaffRole } from "@headless-lms/core/organizations";
+import { STUDENT_ROLE, isRole } from "@headless-lms/core/organizations";
 //#region src/repositories/members.ts
-const roleOf = (t) => isStaffRole(t) ? t : "instructor";
+const roleOf = (t) => isRole(t) && t !== STUDENT_ROLE ? t : "instructor";
 function toMember(r) {
 	return {
 		id: r.id,

package/dist/repositories/members.js.map

@@ -1 +1 @@
-{"version":3,"file":"members.js","names":[],"sources":["../../src/repositories/members.ts"],"sourcesContent":["// organizations members — Drizzle read repository. Reads the domain mirror of the\n// org's members (orgUsers) and pending invites, joined to the identity user for\n// display. Writes go through the auth provider (see adapters/auth/org-admin.ts).\nimport { and, eq, ne } from \"drizzle-orm\";\nimport type { NodePgDatabase } from \"drizzle-orm/node-postgres\";\nimport {\n  isStaffRole,\n  STUDENT_ROLE,\n  type Member,\n  type MemberRecord,\n  type MembersQuery,\n  type MembersRepository,\n  type Page,\n  type StaffRole,\n} from \"@headless-lms/core/organizations\";\nimport { orgUsers, invites } from \"../schema/organizations.js\";\nimport { users } from \"../schema/identity.js\";\nimport { user } from \"../schema/better-auth.js\";\nimport type { Logger } from \"@headless-lms/core/shared/ports\";\nimport { noopLogger } from \"@headless-lms/core/shared/logger\";\nimport { orgUserProfileColumns } from \"./org-user-profile.js\";\nimport { translateDbErrors } from \"./pg-errors.js\";\n\n// The member surface is staff-only; a student org user never reaches here\n// (the queries below exclude it), so an unrecognized role falls back to the\n// least-privileged staff role rather than widening to the full Role union.\nconst roleOf = (t: string): StaffRole => (isStaffRole(t) ? t : \"instructor\");\n\nfunction toMember(r: MemberRecord): Member {\n  return {\n    id: r.id,\n    firstName: r.firstName,\n    lastName: r.lastName,\n    email: r.email,\n    image: r.image,\n    role: r.role,\n    status: r.status,\n    joinedAt: r.joinedAt,\n    invitedAt: r.invitedAt,\n  };\n}\n\nexport class DrizzleMembersRepository implements MembersRepository {\n  constructor(\n    private readonly db: NodePgDatabase,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  private async loadAll(orgId: string): Promise<MemberRecord[]> {\n    // Learners share this table now, so the role filter is what keeps them off\n    // the staff list. Name/email come from the identity user the row links to.\n    const memberRows = await this.db\n      .select({\n        ...orgUserProfileColumns,\n        role: orgUsers.role,\n        joinedAt: orgUsers.createdAt,\n        userExternalId: users.externalId,\n      })\n      .from(orgUsers)\n      .innerJoin(users, eq(users.id, orgUsers.userId))\n      .leftJoin(user, eq(user.id, users.externalId))\n      .where(and(eq(orgUsers.orgId, orgId), ne(orgUsers.role, STUDENT_ROLE)));\n\n    // Student invites live in the same table but belong to the students\n    // surface, not the members list.\n    const inviteRows = await this.db\n      .select({\n        id: invites.id,\n        email: invites.email,\n        role: invites.role,\n        invitedAt: invites.createdAt,\n      })\n      .from(invites)\n      .where(\n        and(\n          eq(invites.orgId, orgId),\n          eq(invites.status, \"pending\"),\n          ne(invites.role, STUDENT_ROLE),\n        ),\n      );\n\n    const members: MemberRecord[] = memberRows.map((m) => ({\n      id: m.id,\n      firstName: m.firstName,\n      lastName: m.lastName,\n      email: m.email,\n      image: m.image ?? null,\n      role: roleOf(m.role),\n      status: \"active\",\n      joinedAt: m.joinedAt.toISOString(),\n      invitedAt: null,\n      kind: \"member\",\n      userExternalId: m.userExternalId,\n      inviteId: null,\n    }));\n    // A pending invite is an address and nothing else — the invites table\n    // carries no names, so there is nobody to name until they accept.\n    const invited: MemberRecord[] = inviteRows.map((i) => ({\n      id: i.id,\n      firstName: null,\n      lastName: null,\n      email: i.email,\n      image: null,\n      role: roleOf(i.role),\n      status: \"invited\",\n      joinedAt: null,\n      invitedAt: i.invitedAt.toISOString(),\n      kind: \"invite\",\n      userExternalId: null,\n      inviteId: i.id,\n    }));\n    return [...members, ...invited];\n  }\n\n  async list(orgId: string, query: MembersQuery): Promise<Page<Member>> {\n    let rows = await this.loadAll(orgId);\n    if (query.role) {\n      rows = rows.filter((r) => r.role === query.role);\n    }\n    if (query.status) {\n      rows = rows.filter((r) => r.status === query.status);\n    }\n    const q = query.search?.trim().toLowerCase();\n    if (q) {\n      rows = rows.filter((r) =>\n        [r.firstName, r.lastName, r.email].some((v) => v?.toLowerCase().includes(q)),\n      );\n    }\n\n    const sort = query.sort;\n    const desc = sort?.startsWith(\"-\") ?? false;\n    const key = (desc ? sort!.slice(1) : sort) as keyof Member | undefined;\n    // Nulls last whichever way the column is sorted — an unaccepted invite has\n    // no name and belongs at the bottom, not interleaved.\n    const byName = (a: string | null, b: string | null): number =>\n      a === b ? 0 : a === null ? 1 : b === null ? -1 : a.localeCompare(b);\n    rows.sort((a, b) => {\n      if (key === \"email\") {\n        return desc ? -a.email.localeCompare(b.email) : a.email.localeCompare(b.email);\n      }\n      if (key === \"role\") {\n        return desc ? -a.role.localeCompare(b.role) : a.role.localeCompare(b.role);\n      }\n      if (key === \"lastName\") {\n        const cmp = byName(a.lastName, b.lastName) || byName(a.firstName, b.firstName);\n        return desc ? -cmp : cmp;\n      }\n      const cmp = byName(a.firstName, b.firstName) || byName(a.lastName, b.lastName);\n      return desc ? -cmp : cmp;\n    });\n\n    const total = rows.length;\n    const start = (query.page - 1) * query.pageSize;\n    return {\n      rows: rows.slice(start, start + query.pageSize).map(toMember),\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n    };\n  }\n\n  async findByEmail(orgId: string, email: string): Promise<MemberRecord | null> {\n    const all = await this.loadAll(orgId);\n    return all.find((r) => r.email.toLowerCase() === email.toLowerCase()) ?? null;\n  }\n\n  async findById(orgId: string, id: string): Promise<MemberRecord | null> {\n    const all = await this.loadAll(orgId);\n    return all.find((r) => r.id === id) ?? null;\n  }\n}\ntranslateDbErrors(DrizzleMembersRepository);\n"],"mappings":";;;;;;;;;AA0BA,MAAM,UAAU,MAA0B,YAAY,CAAC,IAAI,IAAI;AAE/D,SAAS,SAAS,GAAyB;CACzC,OAAO;EACL,IAAI,EAAE;EACN,WAAW,EAAE;EACb,UAAU,EAAE;EACZ,OAAO,EAAE;EACT,OAAO,EAAE;EACT,MAAM,EAAE;EACR,QAAQ,EAAE;EACV,UAAU,EAAE;EACZ,WAAW,EAAE;CACf;AACF;AAEA,IAAa,2BAAb,MAAmE;CAE9C;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAc,QAAQ,OAAwC;EAG5D,MAAM,aAAa,MAAM,KAAK,GAC3B,OAAO;GACN,GAAG;GACH,MAAM,SAAS;GACf,UAAU,SAAS;GACnB,gBAAgB,MAAM;EACxB,CAAC,CAAC,CACD,KAAK,QAAQ,CAAC,CACd,UAAU,OAAO,GAAG,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC,CAC/C,SAAS,MAAM,GAAG,KAAK,IAAI,MAAM,UAAU,CAAC,CAAC,CAC7C,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,GAAG,SAAS,MAAM,YAAY,CAAC,CAAC;EAIxE,MAAM,aAAa,MAAM,KAAK,GAC3B,OAAO;GACN,IAAI,QAAQ;GACZ,OAAO,QAAQ;GACf,MAAM,QAAQ;GACd,WAAW,QAAQ;EACrB,CAAC,CAAC,CACD,KAAK,OAAO,CAAC,CACb,MACC,IACE,GAAG,QAAQ,OAAO,KAAK,GACvB,GAAG,QAAQ,QAAQ,SAAS,GAC5B,GAAG,QAAQ,MAAM,YAAY,CAC/B,CACF;EAEF,MAAM,UAA0B,WAAW,KAAK,OAAO;GACrD,IAAI,EAAE;GACN,WAAW,EAAE;GACb,UAAU,EAAE;GACZ,OAAO,EAAE;GACT,OAAO,EAAE,SAAS;GAClB,MAAM,OAAO,EAAE,IAAI;GACnB,QAAQ;GACR,UAAU,EAAE,SAAS,YAAY;GACjC,WAAW;GACX,MAAM;GACN,gBAAgB,EAAE;GAClB,UAAU;EACZ,EAAE;EAGF,MAAM,UAA0B,WAAW,KAAK,OAAO;GACrD,IAAI,EAAE;GACN,WAAW;GACX,UAAU;GACV,OAAO,EAAE;GACT,OAAO;GACP,MAAM,OAAO,EAAE,IAAI;GACnB,QAAQ;GACR,UAAU;GACV,WAAW,EAAE,UAAU,YAAY;GACnC,MAAM;GACN,gBAAgB;GAChB,UAAU,EAAE;EACd,EAAE;EACF,OAAO,CAAC,GAAG,SAAS,GAAG,OAAO;CAChC;CAEA,MAAM,KAAK,OAAe,OAA4C;EACpE,IAAI,OAAO,MAAM,KAAK,QAAQ,KAAK;EACnC,IAAI,MAAM,MACR,OAAO,KAAK,QAAQ,MAAM,EAAE,SAAS,MAAM,IAAI;EAEjD,IAAI,MAAM,QACR,OAAO,KAAK,QAAQ,MAAM,EAAE,WAAW,MAAM,MAAM;EAErD,MAAM,IAAI,MAAM,QAAQ,KAAK,CAAC,CAAC,YAAY;EAC3C,IAAI,GACF,OAAO,KAAK,QAAQ,MAClB;GAAC,EAAE;GAAW,EAAE;GAAU,EAAE;EAAK,CAAC,CAAC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,CAC7E;EAGF,MAAM,OAAO,MAAM;EACnB,MAAM,OAAO,MAAM,WAAW,GAAG,KAAK;EACtC,MAAM,MAAO,OAAO,KAAM,MAAM,CAAC,IAAI;EAGrC,MAAM,UAAU,GAAkB,MAChC,MAAM,IAAI,IAAI,MAAM,OAAO,IAAI,MAAM,OAAO,KAAK,EAAE,cAAc,CAAC;EACpE,KAAK,MAAM,GAAG,MAAM;GAClB,IAAI,QAAQ,SACV,OAAO,OAAO,CAAC,EAAE,MAAM,cAAc,EAAE,KAAK,IAAI,EAAE,MAAM,cAAc,EAAE,KAAK;GAE/E,IAAI,QAAQ,QACV,OAAO,OAAO,CAAC,EAAE,KAAK,cAAc,EAAE,IAAI,IAAI,EAAE,KAAK,cAAc,EAAE,IAAI;GAE3E,IAAI,QAAQ,YAAY;IACtB,MAAM,MAAM,OAAO,EAAE,UAAU,EAAE,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,SAAS;IAC7E,OAAO,OAAO,CAAC,MAAM;GACvB;GACA,MAAM,MAAM,OAAO,EAAE,WAAW,EAAE,SAAS,KAAK,OAAO,EAAE,UAAU,EAAE,QAAQ;GAC7E,OAAO,OAAO,CAAC,MAAM;EACvB,CAAC;EAED,MAAM,QAAQ,KAAK;EACnB,MAAM,SAAS,MAAM,OAAO,KAAK,MAAM;EACvC,OAAO;GACL,MAAM,KAAK,MAAM,OAAO,QAAQ,MAAM,QAAQ,CAAC,CAAC,IAAI,QAAQ;GAC5D;GACA,MAAM,MAAM;GACZ,UAAU,MAAM;EAClB;CACF;CAEA,MAAM,YAAY,OAAe,OAA6C;EAE5E,QAAO,MADW,KAAK,QAAQ,KAAK,EAAA,CACzB,MAAM,MAAM,EAAE,MAAM,YAAY,MAAM,MAAM,YAAY,CAAC,KAAK;CAC3E;CAEA,MAAM,SAAS,OAAe,IAA0C;EAEtE,QAAO,MADW,KAAK,QAAQ,KAAK,EAAA,CACzB,MAAM,MAAM,EAAE,OAAO,EAAE,KAAK;CACzC;AACF;AACA,kBAAkB,wBAAwB"}
+{"version":3,"file":"members.js","names":[],"sources":["../../src/repositories/members.ts"],"sourcesContent":["// organizations members — Drizzle read repository. Reads the domain mirror of the\n// org's members (orgUsers) and pending invites, joined to the identity user for\n// display. Writes go through the auth provider (see adapters/auth/org-admin.ts).\nimport { and, eq, ne } from \"drizzle-orm\";\nimport type { NodePgDatabase } from \"drizzle-orm/node-postgres\";\nimport {\n  isRole,\n  STUDENT_ROLE,\n  type Member,\n  type MemberRecord,\n  type MembersQuery,\n  type MembersRepository,\n  type Page,\n  type TeamRole,\n} from \"@headless-lms/core/organizations\";\nimport { orgUsers, invites } from \"../schema/organizations.js\";\nimport { users } from \"../schema/identity.js\";\nimport { user } from \"../schema/better-auth.js\";\nimport type { Logger } from \"@headless-lms/core/shared/ports\";\nimport { noopLogger } from \"@headless-lms/core/shared/logger\";\nimport { orgUserProfileColumns } from \"./org-user-profile.js\";\nimport { translateDbErrors } from \"./pg-errors.js\";\n\nconst roleOf = (t: string): TeamRole => (isRole(t) && t !== STUDENT_ROLE ? t : \"instructor\");\n\nfunction toMember(r: MemberRecord): Member {\n  return {\n    id: r.id,\n    firstName: r.firstName,\n    lastName: r.lastName,\n    email: r.email,\n    image: r.image,\n    role: r.role,\n    status: r.status,\n    joinedAt: r.joinedAt,\n    invitedAt: r.invitedAt,\n  };\n}\n\nexport class DrizzleMembersRepository implements MembersRepository {\n  constructor(\n    private readonly db: NodePgDatabase,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  private async loadAll(orgId: string): Promise<MemberRecord[]> {\n    // Learners share this table now, so the role filter is what keeps them off\n    // the staff list. Name/email come from the identity user the row links to.\n    const memberRows = await this.db\n      .select({\n        ...orgUserProfileColumns,\n        role: orgUsers.role,\n        joinedAt: orgUsers.createdAt,\n        userExternalId: users.externalId,\n      })\n      .from(orgUsers)\n      .innerJoin(users, eq(users.id, orgUsers.userId))\n      .leftJoin(user, eq(user.id, users.externalId))\n      .where(and(eq(orgUsers.orgId, orgId), ne(orgUsers.role, STUDENT_ROLE)));\n\n    // Student invites live in the same table but belong to the students\n    // surface, not the members list.\n    const inviteRows = await this.db\n      .select({\n        id: invites.id,\n        email: invites.email,\n        role: invites.role,\n        invitedAt: invites.createdAt,\n      })\n      .from(invites)\n      .where(\n        and(\n          eq(invites.orgId, orgId),\n          eq(invites.status, \"pending\"),\n          ne(invites.role, STUDENT_ROLE),\n        ),\n      );\n\n    const members: MemberRecord[] = memberRows.map((m) => ({\n      id: m.id,\n      firstName: m.firstName,\n      lastName: m.lastName,\n      email: m.email,\n      image: m.image ?? null,\n      role: roleOf(m.role),\n      status: \"active\",\n      joinedAt: m.joinedAt.toISOString(),\n      invitedAt: null,\n      kind: \"member\",\n      userExternalId: m.userExternalId,\n      inviteId: null,\n    }));\n    // A pending invite is an address and nothing else — the invites table\n    // carries no names, so there is nobody to name until they accept.\n    const invited: MemberRecord[] = inviteRows.map((i) => ({\n      id: i.id,\n      firstName: null,\n      lastName: null,\n      email: i.email,\n      image: null,\n      role: roleOf(i.role),\n      status: \"invited\",\n      joinedAt: null,\n      invitedAt: i.invitedAt.toISOString(),\n      kind: \"invite\",\n      userExternalId: null,\n      inviteId: i.id,\n    }));\n    return [...members, ...invited];\n  }\n\n  async list(orgId: string, query: MembersQuery): Promise<Page<Member>> {\n    let rows = await this.loadAll(orgId);\n    if (query.role) {\n      rows = rows.filter((r) => r.role === query.role);\n    }\n    if (query.status) {\n      rows = rows.filter((r) => r.status === query.status);\n    }\n    const q = query.search?.trim().toLowerCase();\n    if (q) {\n      rows = rows.filter((r) =>\n        [r.firstName, r.lastName, r.email].some((v) => v?.toLowerCase().includes(q)),\n      );\n    }\n\n    const sort = query.sort;\n    const desc = sort?.startsWith(\"-\") ?? false;\n    const key = (desc ? sort!.slice(1) : sort) as keyof Member | undefined;\n    // Nulls last whichever way the column is sorted — an unaccepted invite has\n    // no name and belongs at the bottom, not interleaved.\n    const byName = (a: string | null, b: string | null): number =>\n      a === b ? 0 : a === null ? 1 : b === null ? -1 : a.localeCompare(b);\n    rows.sort((a, b) => {\n      if (key === \"email\") {\n        return desc ? -a.email.localeCompare(b.email) : a.email.localeCompare(b.email);\n      }\n      if (key === \"role\") {\n        return desc ? -a.role.localeCompare(b.role) : a.role.localeCompare(b.role);\n      }\n      if (key === \"lastName\") {\n        const cmp = byName(a.lastName, b.lastName) || byName(a.firstName, b.firstName);\n        return desc ? -cmp : cmp;\n      }\n      const cmp = byName(a.firstName, b.firstName) || byName(a.lastName, b.lastName);\n      return desc ? -cmp : cmp;\n    });\n\n    const total = rows.length;\n    const start = (query.page - 1) * query.pageSize;\n    return {\n      rows: rows.slice(start, start + query.pageSize).map(toMember),\n      total,\n      page: query.page,\n      pageSize: query.pageSize,\n    };\n  }\n\n  async findByEmail(orgId: string, email: string): Promise<MemberRecord | null> {\n    const all = await this.loadAll(orgId);\n    return all.find((r) => r.email.toLowerCase() === email.toLowerCase()) ?? null;\n  }\n\n  async findById(orgId: string, id: string): Promise<MemberRecord | null> {\n    const all = await this.loadAll(orgId);\n    return all.find((r) => r.id === id) ?? null;\n  }\n}\ntranslateDbErrors(DrizzleMembersRepository);\n"],"mappings":";;;;;;;;;AAuBA,MAAM,UAAU,MAAyB,OAAO,CAAC,KAAK,MAAM,eAAe,IAAI;AAE/E,SAAS,SAAS,GAAyB;CACzC,OAAO;EACL,IAAI,EAAE;EACN,WAAW,EAAE;EACb,UAAU,EAAE;EACZ,OAAO,EAAE;EACT,OAAO,EAAE;EACT,MAAM,EAAE;EACR,QAAQ,EAAE;EACV,UAAU,EAAE;EACZ,WAAW,EAAE;CACf;AACF;AAEA,IAAa,2BAAb,MAAmE;CAE9C;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAc,QAAQ,OAAwC;EAG5D,MAAM,aAAa,MAAM,KAAK,GAC3B,OAAO;GACN,GAAG;GACH,MAAM,SAAS;GACf,UAAU,SAAS;GACnB,gBAAgB,MAAM;EACxB,CAAC,CAAC,CACD,KAAK,QAAQ,CAAC,CACd,UAAU,OAAO,GAAG,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC,CAC/C,SAAS,MAAM,GAAG,KAAK,IAAI,MAAM,UAAU,CAAC,CAAC,CAC7C,MAAM,IAAI,GAAG,SAAS,OAAO,KAAK,GAAG,GAAG,SAAS,MAAM,YAAY,CAAC,CAAC;EAIxE,MAAM,aAAa,MAAM,KAAK,GAC3B,OAAO;GACN,IAAI,QAAQ;GACZ,OAAO,QAAQ;GACf,MAAM,QAAQ;GACd,WAAW,QAAQ;EACrB,CAAC,CAAC,CACD,KAAK,OAAO,CAAC,CACb,MACC,IACE,GAAG,QAAQ,OAAO,KAAK,GACvB,GAAG,QAAQ,QAAQ,SAAS,GAC5B,GAAG,QAAQ,MAAM,YAAY,CAC/B,CACF;EAEF,MAAM,UAA0B,WAAW,KAAK,OAAO;GACrD,IAAI,EAAE;GACN,WAAW,EAAE;GACb,UAAU,EAAE;GACZ,OAAO,EAAE;GACT,OAAO,EAAE,SAAS;GAClB,MAAM,OAAO,EAAE,IAAI;GACnB,QAAQ;GACR,UAAU,EAAE,SAAS,YAAY;GACjC,WAAW;GACX,MAAM;GACN,gBAAgB,EAAE;GAClB,UAAU;EACZ,EAAE;EAGF,MAAM,UAA0B,WAAW,KAAK,OAAO;GACrD,IAAI,EAAE;GACN,WAAW;GACX,UAAU;GACV,OAAO,EAAE;GACT,OAAO;GACP,MAAM,OAAO,EAAE,IAAI;GACnB,QAAQ;GACR,UAAU;GACV,WAAW,EAAE,UAAU,YAAY;GACnC,MAAM;GACN,gBAAgB;GAChB,UAAU,EAAE;EACd,EAAE;EACF,OAAO,CAAC,GAAG,SAAS,GAAG,OAAO;CAChC;CAEA,MAAM,KAAK,OAAe,OAA4C;EACpE,IAAI,OAAO,MAAM,KAAK,QAAQ,KAAK;EACnC,IAAI,MAAM,MACR,OAAO,KAAK,QAAQ,MAAM,EAAE,SAAS,MAAM,IAAI;EAEjD,IAAI,MAAM,QACR,OAAO,KAAK,QAAQ,MAAM,EAAE,WAAW,MAAM,MAAM;EAErD,MAAM,IAAI,MAAM,QAAQ,KAAK,CAAC,CAAC,YAAY;EAC3C,IAAI,GACF,OAAO,KAAK,QAAQ,MAClB;GAAC,EAAE;GAAW,EAAE;GAAU,EAAE;EAAK,CAAC,CAAC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,CAC7E;EAGF,MAAM,OAAO,MAAM;EACnB,MAAM,OAAO,MAAM,WAAW,GAAG,KAAK;EACtC,MAAM,MAAO,OAAO,KAAM,MAAM,CAAC,IAAI;EAGrC,MAAM,UAAU,GAAkB,MAChC,MAAM,IAAI,IAAI,MAAM,OAAO,IAAI,MAAM,OAAO,KAAK,EAAE,cAAc,CAAC;EACpE,KAAK,MAAM,GAAG,MAAM;GAClB,IAAI,QAAQ,SACV,OAAO,OAAO,CAAC,EAAE,MAAM,cAAc,EAAE,KAAK,IAAI,EAAE,MAAM,cAAc,EAAE,KAAK;GAE/E,IAAI,QAAQ,QACV,OAAO,OAAO,CAAC,EAAE,KAAK,cAAc,EAAE,IAAI,IAAI,EAAE,KAAK,cAAc,EAAE,IAAI;GAE3E,IAAI,QAAQ,YAAY;IACtB,MAAM,MAAM,OAAO,EAAE,UAAU,EAAE,QAAQ,KAAK,OAAO,EAAE,WAAW,EAAE,SAAS;IAC7E,OAAO,OAAO,CAAC,MAAM;GACvB;GACA,MAAM,MAAM,OAAO,EAAE,WAAW,EAAE,SAAS,KAAK,OAAO,EAAE,UAAU,EAAE,QAAQ;GAC7E,OAAO,OAAO,CAAC,MAAM;EACvB,CAAC;EAED,MAAM,QAAQ,KAAK;EACnB,MAAM,SAAS,MAAM,OAAO,KAAK,MAAM;EACvC,OAAO;GACL,MAAM,KAAK,MAAM,OAAO,QAAQ,MAAM,QAAQ,CAAC,CAAC,IAAI,QAAQ;GAC5D;GACA,MAAM,MAAM;GACZ,UAAU,MAAM;EAClB;CACF;CAEA,MAAM,YAAY,OAAe,OAA6C;EAE5E,QAAO,MADW,KAAK,QAAQ,KAAK,EAAA,CACzB,MAAM,MAAM,EAAE,MAAM,YAAY,MAAM,MAAM,YAAY,CAAC,KAAK;CAC3E;CAEA,MAAM,SAAS,OAAe,IAA0C;EAEtE,QAAO,MADW,KAAK,QAAQ,KAAK,EAAA,CACzB,MAAM,MAAM,EAAE,OAAO,EAAE,KAAK;CACzC;AACF;AACA,kBAAkB,wBAAwB"}

package/dist/repositories/mentions.d.ts

@@ -0,0 +1,17 @@
+import { NodePgDatabase } from "drizzle-orm/node-postgres";
+import { Logger, MentionItemType } from "@headless-lms/core/types";
+import { MentionsRepository } from "@headless-lms/core/discussion";
+//#region src/repositories/mentions.d.ts
+declare class DrizzleMentionsRepository implements MentionsRepository {
+  private readonly db;
+  private readonly logger;
+  constructor(db: NodePgDatabase, logger?: Logger);
+  ofItem(orgId: string, itemType: MentionItemType, itemId: string): Promise<string[]>;
+  forItems(orgId: string, itemType: MentionItemType, itemIds: string[]): Promise<Record<string, string[]>>;
+  sync(orgId: string, itemType: MentionItemType, itemId: string, orgUserIds: string[], at: Date): Promise<string[]>;
+  removeItem(orgId: string, itemType: MentionItemType, itemId: string): Promise<void>;
+  private item;
+}
+//#endregion
+export { DrizzleMentionsRepository };
+//# sourceMappingURL=mentions.d.ts.map

package/dist/repositories/mentions.js

@@ -0,0 +1,55 @@
+import { mentions } from "../schema/discussion.js";
+import "../schema/index.js";
+import { and, asc, eq, inArray, notInArray } from "drizzle-orm";
+import { noopLogger } from "@headless-lms/core/shared/logger";
+//#region src/repositories/mentions.ts
+var DrizzleMentionsRepository = class {
+	db;
+	logger;
+	constructor(db, logger = noopLogger) {
+		this.db = db;
+		this.logger = logger;
+	}
+	async ofItem(orgId, itemType, itemId) {
+		return (await this.db.select({ orgUserId: mentions.orgUserId }).from(mentions).where(this.item(orgId, itemType, itemId)).orderBy(asc(mentions.createdAt), asc(mentions.orgUserId))).map((row) => row.orgUserId);
+	}
+	async forItems(orgId, itemType, itemIds) {
+		if (itemIds.length === 0) return {};
+		const rows = await this.db.select({
+			itemId: mentions.itemId,
+			orgUserId: mentions.orgUserId
+		}).from(mentions).where(and(eq(mentions.orgId, orgId), eq(mentions.itemType, itemType), inArray(mentions.itemId, itemIds))).orderBy(asc(mentions.itemId), asc(mentions.createdAt), asc(mentions.orgUserId));
+		const byItem = {};
+		for (const row of rows) (byItem[row.itemId] ??= []).push(row.orgUserId);
+		return byItem;
+	}
+	async sync(orgId, itemType, itemId, orgUserIds, at) {
+		const item = this.item(orgId, itemType, itemId);
+		await this.db.delete(mentions).where(orgUserIds.length > 0 ? and(item, notInArray(mentions.orgUserId, orgUserIds)) : item);
+		if (orgUserIds.length === 0) return [];
+		const added = await this.db.insert(mentions).values(orgUserIds.map((orgUserId) => ({
+			orgId,
+			itemType,
+			itemId,
+			orgUserId,
+			createdAt: at
+		}))).onConflictDoNothing().returning({ orgUserId: mentions.orgUserId });
+		this.logger.debug("mentions synced", {
+			orgId,
+			itemType,
+			itemId,
+			added: added.length
+		});
+		return added.map((row) => row.orgUserId);
+	}
+	async removeItem(orgId, itemType, itemId) {
+		await this.db.delete(mentions).where(this.item(orgId, itemType, itemId));
+	}
+	item(orgId, itemType, itemId) {
+		return and(eq(mentions.orgId, orgId), eq(mentions.itemType, itemType), eq(mentions.itemId, itemId));
+	}
+};
+//#endregion
+export { DrizzleMentionsRepository };
+
+//# sourceMappingURL=mentions.js.map

package/dist/repositories/mentions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mentions.js","names":[],"sources":["../../src/repositories/mentions.ts"],"sourcesContent":["import { and, asc, eq, inArray, notInArray } from \"drizzle-orm\";\nimport type { NodePgDatabase } from \"drizzle-orm/node-postgres\";\nimport type { MentionsRepository } from \"@headless-lms/core/discussion\";\nimport type { Logger, MentionItemType } from \"@headless-lms/core/types\";\nimport { noopLogger } from \"@headless-lms/core/shared/logger\";\nimport { mentions } from \"../schema/index.js\";\n\nexport class DrizzleMentionsRepository implements MentionsRepository {\n  constructor(\n    private readonly db: NodePgDatabase,\n    private readonly logger: Logger = noopLogger,\n  ) {}\n\n  async ofItem(orgId: string, itemType: MentionItemType, itemId: string): Promise<string[]> {\n    const rows = await this.db\n      .select({ orgUserId: mentions.orgUserId })\n      .from(mentions)\n      .where(this.item(orgId, itemType, itemId))\n      .orderBy(asc(mentions.createdAt), asc(mentions.orgUserId));\n    return rows.map((row) => row.orgUserId);\n  }\n\n  async forItems(\n    orgId: string,\n    itemType: MentionItemType,\n    itemIds: string[],\n  ): Promise<Record<string, string[]>> {\n    if (itemIds.length === 0) {\n      return {};\n    }\n    const rows = await this.db\n      .select({ itemId: mentions.itemId, orgUserId: mentions.orgUserId })\n      .from(mentions)\n      .where(\n        and(\n          eq(mentions.orgId, orgId),\n          eq(mentions.itemType, itemType),\n          inArray(mentions.itemId, itemIds),\n        ),\n      )\n      .orderBy(asc(mentions.itemId), asc(mentions.createdAt), asc(mentions.orgUserId));\n    const byItem: Record<string, string[]> = {};\n    for (const row of rows) {\n      (byItem[row.itemId] ??= []).push(row.orgUserId);\n    }\n    return byItem;\n  }\n\n  async sync(\n    orgId: string,\n    itemType: MentionItemType,\n    itemId: string,\n    orgUserIds: string[],\n    at: Date,\n  ): Promise<string[]> {\n    const item = this.item(orgId, itemType, itemId);\n    await this.db\n      .delete(mentions)\n      .where(orgUserIds.length > 0 ? and(item, notInArray(mentions.orgUserId, orgUserIds)) : item);\n    if (orgUserIds.length === 0) {\n      return [];\n    }\n    const added = await this.db\n      .insert(mentions)\n      .values(\n        orgUserIds.map((orgUserId) => ({ orgId, itemType, itemId, orgUserId, createdAt: at })),\n      )\n      .onConflictDoNothing()\n      .returning({ orgUserId: mentions.orgUserId });\n    this.logger.debug(\"mentions synced\", { orgId, itemType, itemId, added: added.length });\n    return added.map((row) => row.orgUserId);\n  }\n\n  async removeItem(orgId: string, itemType: MentionItemType, itemId: string): Promise<void> {\n    await this.db.delete(mentions).where(this.item(orgId, itemType, itemId));\n  }\n\n  private item(orgId: string, itemType: MentionItemType, itemId: string) {\n    return and(\n      eq(mentions.orgId, orgId),\n      eq(mentions.itemType, itemType),\n      eq(mentions.itemId, itemId),\n    );\n  }\n}\n"],"mappings":";;;;;AAOA,IAAa,4BAAb,MAAqE;CAEhD;CACA;CAFnB,YACE,IACA,SAAkC,YAClC;EAFiB,KAAA,KAAA;EACA,KAAA,SAAA;CAChB;CAEH,MAAM,OAAO,OAAe,UAA2B,QAAmC;EAMxF,QAAO,MALY,KAAK,GACrB,OAAO,EAAE,WAAW,SAAS,UAAU,CAAC,CAAC,CACzC,KAAK,QAAQ,CAAC,CACd,MAAM,KAAK,KAAK,OAAO,UAAU,MAAM,CAAC,CAAC,CACzC,QAAQ,IAAI,SAAS,SAAS,GAAG,IAAI,SAAS,SAAS,CAAC,EAAA,CAC/C,KAAK,QAAQ,IAAI,SAAS;CACxC;CAEA,MAAM,SACJ,OACA,UACA,SACmC;EACnC,IAAI,QAAQ,WAAW,GACrB,OAAO,CAAC;EAEV,MAAM,OAAO,MAAM,KAAK,GACrB,OAAO;GAAE,QAAQ,SAAS;GAAQ,WAAW,SAAS;EAAU,CAAC,CAAC,CAClE,KAAK,QAAQ,CAAC,CACd,MACC,IACE,GAAG,SAAS,OAAO,KAAK,GACxB,GAAG,SAAS,UAAU,QAAQ,GAC9B,QAAQ,SAAS,QAAQ,OAAO,CAClC,CACF,CAAC,CACA,QAAQ,IAAI,SAAS,MAAM,GAAG,IAAI,SAAS,SAAS,GAAG,IAAI,SAAS,SAAS,CAAC;EACjF,MAAM,SAAmC,CAAC;EAC1C,KAAK,MAAM,OAAO,MAChB,CAAC,OAAO,IAAI,YAAY,CAAC,EAAA,CAAG,KAAK,IAAI,SAAS;EAEhD,OAAO;CACT;CAEA,MAAM,KACJ,OACA,UACA,QACA,YACA,IACmB;EACnB,MAAM,OAAO,KAAK,KAAK,OAAO,UAAU,MAAM;EAC9C,MAAM,KAAK,GACR,OAAO,QAAQ,CAAC,CAChB,MAAM,WAAW,SAAS,IAAI,IAAI,MAAM,WAAW,SAAS,WAAW,UAAU,CAAC,IAAI,IAAI;EAC7F,IAAI,WAAW,WAAW,GACxB,OAAO,CAAC;EAEV,MAAM,QAAQ,MAAM,KAAK,GACtB,OAAO,QAAQ,CAAC,CAChB,OACC,WAAW,KAAK,eAAe;GAAE;GAAO;GAAU;GAAQ;GAAW,WAAW;EAAG,EAAE,CACvF,CAAC,CACA,oBAAoB,CAAC,CACrB,UAAU,EAAE,WAAW,SAAS,UAAU,CAAC;EAC9C,KAAK,OAAO,MAAM,mBAAmB;GAAE;GAAO;GAAU;GAAQ,OAAO,MAAM;EAAO,CAAC;EACrF,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS;CACzC;CAEA,MAAM,WAAW,OAAe,UAA2B,QAA+B;EACxF,MAAM,KAAK,GAAG,OAAO,QAAQ,CAAC,CAAC,MAAM,KAAK,KAAK,OAAO,UAAU,MAAM,CAAC;CACzE;CAEA,KAAa,OAAe,UAA2B,QAAgB;EACrE,OAAO,IACL,GAAG,SAAS,OAAO,KAAK,GACxB,GAAG,SAAS,UAAU,QAAQ,GAC9B,GAAG,SAAS,QAAQ,MAAM,CAC5B;CACF;AACF"}

package/dist/repositories/notification-settings.d.ts

@@ -0,0 +1,19 @@
+import { NodePgDatabase } from "drizzle-orm/node-postgres";
+import { Logger, StoredSetting } from "@headless-lms/core/types";
+import { NotificationSettingsRepository, SettingKey } from "@headless-lms/core/identity";
+//#region src/repositories/notification-settings.d.ts
+declare class DrizzleNotificationSettingsRepository implements NotificationSettingsRepository {
+  private readonly db;
+  private readonly logger;
+  constructor(db: NodePgDatabase, logger?: Logger);
+  forUsers(orgId: string, userIds: string[], communityId: string | null, categories: string[] | null): Promise<(StoredSetting & {
+    userId: string;
+  })[]>;
+  apply(orgId: string, userId: string, upserts: (SettingKey & {
+    enabled: boolean;
+  })[], deletes: SettingKey[], at: Date): Promise<void>;
+  switchedOn(orgId: string, communityId: string, category: string, spaceId: string | null): Promise<string[]>;
+}
+//#endregion
+export { DrizzleNotificationSettingsRepository };
+//# sourceMappingURL=notification-settings.d.ts.map