@jskit-ai/users-core 0.1.30 → 0.1.32

package/src/server/workspaceMembers/bootWorkspaceMembers.js

@@ -103,7 +103,7 @@ function bootWorkspaceMembers(app) {
         input: {
           workspaceSlug: request.input.params.workspaceSlug,
           memberUserId: request.input.params.memberUserId,
-          roleId: request.input.body.roleId
+          roleSid: request.input.body.roleSid
         }
       });
       reply.code(200).send(response);
@@ -195,7 +195,7 @@ function bootWorkspaceMembers(app) {
           input: {
             workspaceSlug: request.input.params.workspaceSlug,
             email: request.input.body.email,
-            roleId: request.input.body.roleId
+            roleSid: request.input.body.roleSid
           }
         });
         reply.code(200).send(response);

package/src/server/workspaceMembers/workspaceMembersActions.js

@@ -68,7 +68,7 @@ const workspaceMembersActions = Object.freeze([
     async execute(input, context, deps) {
       return deps.workspaceMembersService.updateMemberRole(resolveWorkspace(context, input), {
         memberUserId: input.memberUserId,
-        roleId: input.roleId
+        roleSid: input.roleSid
       }, {
         context
       });
@@ -150,7 +150,7 @@ const workspaceMembersActions = Object.freeze([
         resolveActionUser(context, input),
         {
           email: input.email,
-          roleId: input.roleId
+          roleSid: input.roleSid
         },
         {
           context

package/src/server/workspaceMembers/workspaceMembersService.js

@@ -62,12 +62,12 @@ function createService({
 
   async function updateMemberRole(workspace, payload = {}, options = {}) {
     const memberUserId = payload.memberUserId;
-    const roleId = payload.roleId;
-    if (!assignableRoleIds.includes(roleId)) {
+    const roleSid = payload.roleSid;
+    if (!assignableRoleIds.includes(roleSid)) {
       throw new AppError(400, "Validation failed.", {
         details: {
           fieldErrors: {
-            roleId: "Role is not assignable."
+            roleSid: "Role is not assignable."
           }
         }
       });
@@ -77,7 +77,7 @@ function createService({
     if (!existingMembership || existingMembership.status !== "active") {
       throw new AppError(404, "Member not found.");
     }
-    if (Number(memberUserId) === Number(workspace.ownerUserId) || existingMembership.roleId === OWNER_ROLE_ID) {
+    if (Number(memberUserId) === Number(workspace.ownerUserId) || existingMembership.roleSid === OWNER_ROLE_ID) {
       throw new AppError(409, "Cannot change workspace owner role.");
     }
 
@@ -85,7 +85,7 @@ function createService({
       workspace.id,
       memberUserId,
       {
-        roleId,
+        roleSid,
         status: "active"
       },
       options
@@ -101,7 +101,7 @@ function createService({
     if (!existingMembership || existingMembership.status !== "active") {
       throw new AppError(404, "Member not found.");
     }
-    if (Number(memberUserId) === Number(workspace.ownerUserId) || existingMembership.roleId === OWNER_ROLE_ID) {
+    if (Number(memberUserId) === Number(workspace.ownerUserId) || existingMembership.roleSid === OWNER_ROLE_ID) {
       throw new AppError(409, "Cannot remove workspace owner.");
     }
 
@@ -109,7 +109,7 @@ function createService({
       workspace.id,
       memberUserId,
       {
-        roleId: existingMembership.roleId,
+        roleSid: existingMembership.roleSid,
         status: "revoked"
       },
       options
@@ -134,12 +134,12 @@ function createService({
 
   async function createInvite(workspace, user, payload = {}, options = {}) {
     const email = payload.email;
-    const roleId = payload.roleId;
-    if (!assignableRoleIds.includes(roleId)) {
+    const roleSid = payload.roleSid;
+    if (!assignableRoleIds.includes(roleSid)) {
       throw new AppError(400, "Validation failed.", {
         details: {
           fieldErrors: {
-            roleId: "Role is not assignable."
+            roleSid: "Role is not assignable."
           }
         }
       });
@@ -152,7 +152,7 @@ function createService({
       {
         workspaceId: workspace.id,
         email,
-        roleId,
+        roleSid,
         status: "pending",
         tokenHash,
         invitedByUserId: Number(user?.id || 0) || null,

package/src/server/workspacePendingInvitations/workspacePendingInvitationsService.js

@@ -99,7 +99,7 @@ function createService({
       workspaceId,
       resolvedInvite.user.id,
       {
-        roleId: resolvedInvite.invite.roleId,
+        roleSid: resolvedInvite.invite.roleSid,
         status: "active"
       },
       options

package/src/shared/resources/workspaceMembersResource.js

@@ -19,7 +19,7 @@ const workspaceSummaryOutputSchema = Type.Object(
 const memberSummaryOutputSchema = Type.Object(
   {
     userId: Type.Integer({ minimum: 1 }),
-    roleId: Type.String({ minLength: 1 }),
+    roleSid: Type.String({ minLength: 1 }),
     status: Type.String({ minLength: 1 }),
     displayName: Type.String(),
     email: Type.String({ minLength: 1 }),
@@ -32,7 +32,7 @@ const inviteSummaryOutputSchema = Type.Object(
   {
     id: Type.Integer({ minimum: 1 }),
     email: Type.String({ minLength: 3, format: "email" }),
-    roleId: Type.String({ minLength: 1 }),
+    roleSid: Type.String({ minLength: 1 }),
     status: Type.String({ minLength: 1 }),
     expiresAt: Type.String({ minLength: 1 }),
     invitedByUserId: Type.Union([Type.Integer({ minimum: 1 }), Type.Null()])
@@ -57,13 +57,13 @@ function normalizeMemberSummary(member, workspace) {
 
   return {
     userId: Number(source.userId),
-    roleId: normalizeLowerText(source.roleId || "member") || "member",
+    roleSid: normalizeLowerText(source.roleSid || "member") || "member",
     status: normalizeLowerText(source.status || "active") || "active",
     displayName: normalizeText(source.displayName),
     email: normalizeLowerText(source.email),
     isOwner:
       Number(source.userId) === Number(workspace.ownerUserId) ||
-      normalizeLowerText(source.roleId) === OWNER_ROLE_ID
+      normalizeLowerText(source.roleSid) === OWNER_ROLE_ID
   };
 }
 
@@ -73,7 +73,7 @@ function normalizeInviteSummary(invite) {
   return {
     id: Number(source.id),
     email: normalizeLowerText(source.email),
-    roleId: normalizeLowerText(source.roleId || "member") || "member",
+    roleSid: normalizeLowerText(source.roleSid || "member") || "member",
     status: normalizeLowerText(source.status || "pending") || "pending",
     expiresAt: source.expiresAt,
     invitedByUserId: source.invitedByUserId == null ? null : Number(source.invitedByUserId)
@@ -160,7 +160,7 @@ const workspaceInvitesOutputValidator = Object.freeze({
 const updateMemberRoleBodyValidator = Object.freeze({
   schema: Type.Object(
     {
-      roleId: Type.String({ minLength: 1 })
+      roleSid: Type.String({ minLength: 1 })
     },
     { additionalProperties: false }
   ),
@@ -168,7 +168,7 @@ const updateMemberRoleBodyValidator = Object.freeze({
     const source = normalizeObjectInput(payload);
 
     return {
-      roleId: normalizeLowerText(source.roleId)
+      roleSid: normalizeLowerText(source.roleSid)
     };
   }
 });
@@ -177,7 +177,7 @@ const updateMemberRoleInputValidator = Object.freeze({
   schema: Type.Object(
     {
       memberUserId: Type.Integer({ minimum: 1 }),
-      roleId: Type.String({ minLength: 1 })
+      roleSid: Type.String({ minLength: 1 })
     },
     { additionalProperties: false }
   ),
@@ -186,7 +186,7 @@ const updateMemberRoleInputValidator = Object.freeze({
 
     return {
       memberUserId: normalizePositiveInteger(source.memberUserId),
-      roleId: normalizeLowerText(source.roleId)
+      roleSid: normalizeLowerText(source.roleSid)
     };
   }
 });
@@ -211,7 +211,7 @@ const createInviteBodyValidator = Object.freeze({
   schema: Type.Object(
     {
       email: Type.String({ minLength: 3, format: "email" }),
-      roleId: Type.String({ minLength: 1 })
+      roleSid: Type.String({ minLength: 1 })
     },
     { additionalProperties: false }
   ),
@@ -220,7 +220,7 @@ const createInviteBodyValidator = Object.freeze({
 
     return {
       email: normalizeLowerText(source.email),
-      roleId: normalizeLowerText(source.roleId || "member") || "member"
+      roleSid: normalizeLowerText(source.roleSid || "member") || "member"
     };
   }
 });

package/src/shared/resources/workspacePendingInvitationsResource.js

@@ -25,7 +25,7 @@ function normalizePendingInvite(invite) {
     workspaceSlug: normalizeText(invite?.workspaceSlug),
     workspaceName: normalizeText(invite?.workspaceName || invite?.workspaceSlug),
     workspaceAvatarUrl: normalizeText(invite?.workspaceAvatarUrl),
-    roleId: normalizeLowerText(invite?.roleId || "member") || "member",
+    roleSid: normalizeLowerText(invite?.roleSid || "member") || "member",
     status: normalizeLowerText(invite?.status || "pending") || "pending",
     expiresAt: invite?.expiresAt || null,
     token: encodeInviteTokenHash(tokenHash)
@@ -44,7 +44,7 @@ const pendingInviteRecordValidator = Object.freeze({
       workspaceSlug: Type.String({ minLength: 1 }),
       workspaceName: Type.String({ minLength: 1 }),
       workspaceAvatarUrl: Type.String(),
-      roleId: Type.String({ minLength: 1 }),
+      roleSid: Type.String({ minLength: 1 }),
       status: Type.String({ minLength: 1 }),
       expiresAt: Type.Union([Type.String({ minLength: 1 }), Type.Null()]),
       token: Type.String({ minLength: 1 })

package/src/shared/resources/workspaceResource.js

@@ -63,7 +63,7 @@ function normalizeWorkspaceListItemOutput(payload = {}) {
     slug: normalizeLowerText(source.slug),
     name: normalizeText(source.name),
     avatarUrl: normalizeText(source.avatarUrl),
-    roleId: normalizeLowerText(source.roleId || "member") || "member",
+    roleSid: normalizeLowerText(source.roleSid || "member") || "member",
     isAccessible: source.isAccessible !== false
   };
 }
@@ -85,7 +85,7 @@ const listItemSchema = Type.Object(
     slug: Type.String({ minLength: 1 }),
     name: Type.String({ minLength: 1, maxLength: 160 }),
     avatarUrl: Type.String(),
-    roleId: Type.String({ minLength: 1 }),
+    roleSid: Type.String({ minLength: 1 }),
     isAccessible: Type.Boolean()
   },
   { additionalProperties: false }

package/src/shared/roles.js

@@ -20,13 +20,13 @@ function normalizeRoleId(value) {
     .toLowerCase();
 }
 
-function createRoleDescriptor(roleId, configuredDefinition) {
+function createRoleDescriptor(roleSid, configuredDefinition) {
   const source = asRecord(configuredDefinition);
-  const assignable = roleId === OWNER_ROLE_ID ? false : source.assignable === true;
+  const assignable = roleSid === OWNER_ROLE_ID ? false : source.assignable === true;
   const permissions = normalizePermissionList(source.permissions);
 
   return Object.freeze({
-    id: roleId,
+    id: roleSid,
     assignable,
     permissions: Object.freeze([...permissions])
   });
@@ -46,8 +46,8 @@ function normalizeConfiguredRoles(appConfig = {}) {
   const configuredRoles = asRecord(workspaceRoles.roles);
   const normalizedRoles = {};
 
-  for (const [roleId, roleDefinition] of Object.entries(configuredRoles)) {
-    const normalizedRoleId = normalizeRoleId(roleId);
+  for (const [roleSid, roleDefinition] of Object.entries(configuredRoles)) {
+    const normalizedRoleId = normalizeRoleId(roleSid);
     if (!normalizedRoleId) {
       continue;
     }
@@ -60,7 +60,7 @@ function normalizeConfiguredRoles(appConfig = {}) {
 function createWorkspaceRoleCatalog(appConfig = {}) {
   const configuredRoles = normalizeConfiguredRoles(appConfig);
   const roleIds = listConfiguredRoleIds(appConfig);
-  const roles = roleIds.map((roleId) => createRoleDescriptor(roleId, configuredRoles[roleId]));
+  const roles = roleIds.map((roleSid) => createRoleDescriptor(roleSid, configuredRoles[roleSid]));
   const assignableRoleIds = roles.filter((role) => role.assignable).map((role) => role.id);
   const configuredDefaultInviteRole = resolveConfiguredDefaultInviteRole(appConfig);
   const defaultInviteRole = assignableRoleIds.includes(configuredDefaultInviteRole)
@@ -109,8 +109,8 @@ function listRoleDescriptors(appConfig = {}) {
   }));
 }
 
-function resolveRolePermissions(roleId, appConfig = {}) {
-  const normalizedRoleId = normalizeRoleId(roleId);
+function resolveRolePermissions(roleSid, appConfig = {}) {
+  const normalizedRoleId = normalizeRoleId(roleSid);
   if (!normalizedRoleId) {
     return [];
   }

package/templates/migrations/users_core_initial.cjs

@@ -5,7 +5,7 @@ exports.up = async function up(knex) {
   await knex.schema.createTable("users", (table) => {
     table.increments("id").primary();
     table.string("auth_provider", 64).notNullable();
-    table.string("auth_provider_user_id", 191).notNullable();
+    table.string("auth_provider_user_sid", 191).notNullable();
     table.string("email", 255).notNullable();
     table.string("username", 120).notNullable();
     table.string("display_name", 160).notNullable();
@@ -13,7 +13,7 @@ exports.up = async function up(knex) {
     table.string("avatar_version", 64).nullable();
     table.timestamp("avatar_updated_at", { useTz: false }).nullable();
     table.timestamp("created_at", { useTz: false }).notNullable().defaultTo(knex.fn.now());
-    table.unique(["auth_provider", "auth_provider_user_id"], "uq_users_identity");
+    table.unique(["auth_provider", "auth_provider_user_sid"], "uq_users_identity");
     table.unique(["email"], "uq_users_email");
     table.unique(["username"], "uq_users_username");
   });
@@ -35,7 +35,7 @@ exports.up = async function up(knex) {
     table.increments("id").primary();
     table.integer("workspace_id").unsigned().notNullable().references("id").inTable("workspaces").onDelete("CASCADE");
     table.integer("user_id").unsigned().notNullable().references("id").inTable("users").onDelete("CASCADE");
-    table.string("role_id", 64).notNullable().defaultTo("member");
+    table.string("role_sid", 64).notNullable().defaultTo("member");
     table.string("status", 32).notNullable().defaultTo("active");
     table.timestamp("created_at", { useTz: false }).notNullable().defaultTo(knex.fn.now());
     table.timestamp("updated_at", { useTz: false }).notNullable().defaultTo(knex.fn.now());
@@ -63,7 +63,7 @@ exports.up = async function up(knex) {
     table.increments("id").primary();
     table.integer("workspace_id").unsigned().notNullable().references("id").inTable("workspaces").onDelete("CASCADE");
     table.string("email", 255).notNullable();
-    table.string("role_id", 64).notNullable().defaultTo("member");
+    table.string("role_sid", 64).notNullable().defaultTo("member");
     table.string("status", 32).notNullable().defaultTo("pending");
     table.string("token_hash", 191).notNullable();
     table.integer("invited_by_user_id").unsigned().nullable().references("id").inTable("users").onDelete("SET NULL");
@@ -97,7 +97,7 @@ exports.up = async function up(knex) {
 
   await knex.schema.createTable("console_settings", (table) => {
     table.integer("id").primary();
-    table.integer("owner_user_id").unsigned().nullable();
+    table.integer("owner_user_id").unsigned().nullable().references("id").inTable("users").onDelete("SET NULL");
     table.timestamp("created_at", { useTz: false }).notNullable().defaultTo(knex.fn.now());
     table.timestamp("updated_at", { useTz: false }).notNullable().defaultTo(knex.fn.now());
   });

package/test/authProfileSyncService.test.js

@@ -17,7 +17,7 @@ test("authProfileSyncService.syncIdentityProfile uses shared transaction for pro
         return {
           id: 13,
           authProvider: payload.authProvider,
-          authProviderUserId: payload.authProviderUserId,
+          authProviderUserSid: payload.authProviderUserSid,
           email: payload.email,
           displayName: payload.displayName
         };
@@ -42,7 +42,7 @@ test("authProfileSyncService.syncIdentityProfile uses shared transaction for pro
 
   const profile = await service.syncIdentityProfile({
     authProvider: "supabase",
-    authProviderUserId: "abc-1",
+    authProviderUserSid: "abc-1",
     email: "tony@example.com",
     displayName: "Tony"
   });
@@ -69,7 +69,7 @@ test("authProfileSyncService.syncIdentityProfile skips write path when profile i
         return {
           id: 7,
           authProvider: "supabase",
-          authProviderUserId: "abc-7",
+          authProviderUserSid: "abc-7",
           email: "tony@example.com",
           displayName: "Tony"
         };
@@ -96,7 +96,7 @@ test("authProfileSyncService.syncIdentityProfile skips write path when profile i
 
   const profile = await service.syncIdentityProfile({
     authProvider: "supabase",
-    authProviderUserId: "abc-7",
+    authProviderUserSid: "abc-7",
     email: "tony@example.com",
     displayName: "Tony"
   });
@@ -127,7 +127,7 @@ test("authProfileSyncService.findByIdentity normalizes provider identity input",
 
   await service.findByIdentity({
     authProvider: "  SUPABASE  ",
-    authProviderUserId: " user-1 "
+    authProviderUserSid: " user-1 "
   });
 
   assert.deepEqual(capturedIdentity, {

package/test/avatarService.test.js

@@ -41,7 +41,7 @@ test("avatarService uploadForUser stores bytes and updates profile avatar fields
   const repository = createRepositoryDouble({
     id: 7,
     authProvider: "local",
-    authProviderUserId: "u-7",
+    authProviderUserSid: "u-7",
     email: "test@example.com",
     displayName: "Tester",
     avatarStorageKey: null,
@@ -65,7 +65,7 @@ test("avatarService uploadForUser stores bytes and updates profile avatar fields
 
   const user = {
     authProvider: "local",
-    authProviderUserId: "u-7"
+    authProviderUserSid: "u-7"
   };
 
   const result = await avatarService.uploadForUser(user, {
@@ -84,7 +84,7 @@ test("avatarService clearForUser removes stored avatar and clears profile fields
   const repository = createRepositoryDouble({
     id: 7,
     authProvider: "local",
-    authProviderUserId: "u-7",
+    authProviderUserSid: "u-7",
     email: "test@example.com",
     displayName: "Tester",
     avatarStorageKey: "users/avatars/7/avatar",
@@ -105,7 +105,7 @@ test("avatarService clearForUser removes stored avatar and clears profile fields
 
   const profile = await avatarService.clearForUser({
     authProvider: "local",
-    authProviderUserId: "u-7"
+    authProviderUserSid: "u-7"
   });
 
   assert.deepEqual(deletedKeys, ["users/avatars/7/avatar"]);

package/test/usersRouteRequestInputValidator.test.js

@@ -379,7 +379,7 @@ test("workspace invite and member handlers build action input from request.input
     createActionRequest({
       input: {
         params: { workspaceSlug: "acme", memberUserId: "12" },
-        body: { roleId: "admin" }
+        body: { roleSid: "admin" }
       },
       executeAction
     }),
@@ -389,7 +389,7 @@ test("workspace invite and member handlers build action input from request.input
     createActionRequest({
       input: {
         params: { workspaceSlug: "acme" },
-        body: { email: "user@example.com", roleId: "member" }
+        body: { email: "user@example.com", roleSid: "member" }
       },
       executeAction
     }),
@@ -419,8 +419,8 @@ test("workspace invite and member handlers build action input from request.input
     input: { name: "Operations", slug: "operations" }
   });
   assert.deepEqual(calls[1].input, { payload: { token: "token-1", decision: "accept" } });
-  assert.deepEqual(calls[2].input, { workspaceSlug: "acme", memberUserId: "12", roleId: "admin" });
-  assert.deepEqual(calls[3].input, { workspaceSlug: "acme", email: "user@example.com", roleId: "member" });
+  assert.deepEqual(calls[2].input, { workspaceSlug: "acme", memberUserId: "12", roleSid: "admin" });
+  assert.deepEqual(calls[3].input, { workspaceSlug: "acme", email: "user@example.com", roleSid: "member" });
   assert.deepEqual(calls[4].input, { workspaceSlug: "acme", memberUserId: "44" });
   assert.deepEqual(calls[5].input, { workspaceSlug: "acme", inviteId: "55" });
 });

package/test/workspaceActionContextContributor.test.js

@@ -19,7 +19,7 @@ test("workspace action context contributor resolves workspace context for worksp
             slug: "acme"
           },
           membership: {
-            roleId: "owner"
+            roleSid: "owner"
           },
           permissions: ["workspace.settings.update"]
         };
@@ -64,7 +64,7 @@ test("workspace action context contributor resolves workspace context for worksp
           slug: "acme"
         },
         membership: {
-          roleId: "owner"
+          roleSid: "owner"
         },
         permissions: ["workspace.settings.update"]
       }
@@ -74,7 +74,7 @@ test("workspace action context contributor resolves workspace context for worksp
       slug: "acme"
     },
     membership: {
-      roleId: "owner"
+      roleSid: "owner"
     },
     permissions: ["workspace.settings.update"]
   });
@@ -113,7 +113,7 @@ test("workspace action context contributor always resolves and stores resolved c
             ownerUserId: 77
           },
           membership: {
-            roleId: "owner"
+            roleSid: "owner"
           },
           permissions: ["workspace.settings.update"]
         };
@@ -161,13 +161,13 @@ test("workspace action context contributor always resolves and stores resolved c
           ownerUserId: 77
         },
         membership: {
-          roleId: "owner"
+          roleSid: "owner"
         },
         permissions: ["workspace.settings.update"]
       }
     },
     membership: {
-      roleId: "owner"
+      roleSid: "owner"
     },
     permissions: ["workspace.settings.update"]
   });
@@ -185,7 +185,7 @@ test("workspace action context contributor resolves context for workspace-visibl
             slug: "acme"
           },
           membership: {
-            roleId: "admin"
+            roleSid: "admin"
           },
           permissions: ["assistant.chat.use"]
         };
@@ -234,7 +234,7 @@ test("workspace action context contributor resolves context for workspace-visibl
           slug: "acme"
         },
         membership: {
-          roleId: "admin"
+          roleSid: "admin"
         },
         permissions: ["assistant.chat.use"]
       }
@@ -244,7 +244,7 @@ test("workspace action context contributor resolves context for workspace-visibl
       slug: "acme"
     },
     membership: {
-      roleId: "admin"
+      roleSid: "admin"
     },
     permissions: ["assistant.chat.use"]
   });

package/test/workspaceAuthPolicyContextResolver.test.js

@@ -45,7 +45,7 @@ test("workspace auth policy context resolver resolves workspace context from use
             slug: workspaceSlug
           },
           membership: {
-            roleId: "owner"
+            roleSid: "owner"
           },
           permissions: ["projects.read"]
         };
@@ -85,7 +85,7 @@ test("workspace auth policy context resolver resolves workspace context from use
       slug: "acme"
     },
     membership: {
-      roleId: "owner"
+      roleSid: "owner"
     },
     permissions: ["projects.read"]
   });

package/test/workspaceBootstrapContributor.test.js

@@ -10,7 +10,7 @@ function createAuthenticatedProfile(overrides = {}) {
   return {
     id: 7,
     authProvider: "local",
-    authProviderUserId: "user-7",
+    authProviderUserSid: "user-7",
     username: "tester",
     displayName: "Test User",
     email: "test@example.com",

package/test/workspaceInvitesRepository.test.js

@@ -11,7 +11,7 @@ function createKnexStub() {
     id: 1,
     workspace_id: 1,
     email: "invitee@example.com",
-    role_id: "member",
+    role_sid: "member",
     status: "pending",
     token_hash: "hash",
     invited_by_user_id: 1,
@@ -57,7 +57,7 @@ test("workspaceInvitesRepository.insert normalizes expiresAt ISO input to databa
   await repository.insert({
     workspaceId: 1,
     email: "invitee@example.com",
-    roleId: "member",
+    roleSid: "member",
     status: "pending",
     tokenHash: "hash",
     invitedByUserId: 1,
@@ -76,7 +76,7 @@ test("workspaceInvitesRepository.findPendingByTokenHash reads from invites table
     id: 44,
     workspace_id: 9,
     email: "invitee@example.com",
-    role_id: "member",
+    role_sid: "member",
     status: "pending",
     token_hash: "hash-token",
     invited_by_user_id: 1,