@kindgi/platform 0.1.3 → 0.1.4-rc.1

package/dist/org-binding.d.ts

@@ -9,6 +9,12 @@
  *   `@kindgi/types` (`items` + `nextCursor`).
  * - `list` filters extend the shared `Filter` shape so every list call
  *   shares the same pagination fields.
+ * - A write the caller can get wrong (a slug already taken, a row that
+ *   doesn't exist) resolves to an outcome — a union discriminated on
+ *   `kind`, `'ok'` on success — and never rejects for it. Each
+ *   non-`ok` `kind` is also the API error code the routes answer with
+ *   (`slug-conflict` is a 409, `org-not-found` a 404). A rejected
+ *   promise means the backend failed.
  *
  * This package ships the interface + reference in-memory adapter
  * (in `./in-memory/org-binding.ts`). Any adapter can be checked with
@@ -36,11 +42,13 @@ export interface OrgListFilter extends Filter {
  */
 export interface OrgBinding {
     /**
-     * Create a new `Org` in the given tenant. Returns the freshly-
-     * assigned `OrgId`. The binding is responsible for allocating IDs,
-     * timestamps, and slug-uniqueness enforcement within the tenant.
+     * Create a new `Org` in the given tenant. Resolves to `ok` with the
+     * freshly-assigned `OrgId`, or to `slug-conflict` when another org in
+     * the tenant has `spec.slug`. The binding is responsible for
+     * allocating IDs, timestamps, and slug-uniqueness enforcement within
+     * the tenant.
      */
-    create(tenantId: TenantId, spec: OrgSpec): Promise<OrgId>;
+    create(tenantId: TenantId, spec: OrgSpec): Promise<OrgCreateOutcome>;
     /**
      * Look up an `Org` by id. Returns `undefined` when no row exists in
      * the given tenant, or when the row exists in a different tenant
@@ -55,16 +63,52 @@ export interface OrgBinding {
     list(tenantId: TenantId, filter: OrgListFilter): Promise<Page<Org>>;
     /**
      * Partially update an `Org`. Fields absent from `patch` are left
-     * unchanged; fields present are set to the new value. Not-found is
-     * an error the adapter surfaces (e.g. as a rejected promise); the
-     * conformance suite specifies the exact shape.
+     * unchanged; fields present are set to the new value. Resolves to
+     * `org-not-found` when no org has `orgId` in the tenant, and to
+     * `slug-conflict` when `patch.slug` is another org's slug.
      */
-    update(tenantId: TenantId, orgId: OrgId, patch: OrgPatch): Promise<void>;
+    update(tenantId: TenantId, orgId: OrgId, patch: OrgPatch): Promise<OrgUpdateOutcome>;
     /**
-     * Delete an `Org`. Cascade semantics (dependent teams / projects) are
-     * a storage-layer concern — the in-memory adapter does the delete
-     * unconditionally.
+     * Delete an `Org`: a tombstone, not an erase. From then on `get`,
+     * `list` and `update` treat it as unknown, and its slug is free for a
+     * new org; a retention policy on the `org` domain purges the row.
+     * What happens to dependents (teams, projects, org-scoped config) is
+     * the storage's concern; the in-memory adapter has none. A storage
+     * whose projects leave a deleted org (the Kindgi runtime's: they
+     * become projects without an org) answers `slug-conflict` instead
+     * when one of them has the slug of a project that has no org, and
+     * deletes nothing. Nothing (`void`): the org is deleted, or wasn't
+     * there (or was already deleted).
      */
-    delete(tenantId: TenantId, orgId: OrgId): Promise<void>;
+    delete(tenantId: TenantId, orgId: OrgId): Promise<void | OrgDeleteConflict>;
 }
+/**
+ * Why `OrgBinding.delete` deleted nothing: the org's projects would leave
+ * it with `slugs` that projects without an org already have. Rename or
+ * move them first.
+ */
+export interface OrgDeleteConflict {
+    readonly kind: 'slug-conflict';
+    readonly slugs: readonly string[];
+}
+/** What `OrgBinding.create` did. */
+export type OrgCreateOutcome = {
+    readonly kind: 'ok';
+    readonly orgId: OrgId;
+} | {
+    /** Another org in the tenant already has this slug. */
+    readonly kind: 'slug-conflict';
+    readonly slug: string;
+};
+/** What `OrgBinding.update` did. */
+export type OrgUpdateOutcome = {
+    readonly kind: 'ok';
+} | {
+    /** No org with this id in the tenant. */
+    readonly kind: 'org-not-found';
+} | {
+    /** Another org in the tenant already has the patched slug. */
+    readonly kind: 'slug-conflict';
+    readonly slug: string;
+};
 //# sourceMappingURL=org-binding.d.ts.map

package/dist/org-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"org-binding.d.ts","sourceRoot":"","sources":["../src/org-binding.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEnE,OAAO,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAEzD;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAc,SAAQ,MAAM;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB;;;;OAIG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1D;;;;OAIG;IACH,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;IAChE;;;;OAIG;IACH,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE;;;;OAIG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD"}
+{"version":3,"file":"org-binding.d.ts","sourceRoot":"","sources":["../src/org-binding.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEnE,OAAO,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAEzD;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAc,SAAQ,MAAM;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrE;;;;OAIG;IACH,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;IAChE;;;;OAIG;IACH,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrF;;;;;;;;;;;OAWG;IAEH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,GAAG,iBAAiB,CAAC,CAAC;CAC7E;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,oCAAoC;AACpC,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAC9C;IACE,uDAAuD;IACvD,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEN,oCAAoC;AACpC,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GACvB;IACE,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;CAChC,GACD;IACE,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC"}

package/dist/project-binding.d.ts

@@ -17,7 +17,9 @@
  * `AgentPublishInput.projectId` in `@kindgi/api`).
  *
  * Same convention as `org-binding.ts`: `tenantId` first, `Page<T>`
- * return, `Filter`-extending filter shapes.
+ * return, `Filter`-extending filter shapes, and writes the caller can
+ * get wrong resolve to an outcome discriminated on `kind` instead of
+ * rejecting.
  */
 import type { Filter, OrgId, Page, ProjectId, TenantId, UserId } from '@kindgi/types';
 import type { Project, ProjectMembership, ProjectPatch, ProjectRole, ProjectSpec } from './types.js';
@@ -44,12 +46,14 @@ export interface ProjectMembershipAddInput {
  */
 export interface ProjectBinding {
     /**
-     * Create a `Project` within the tenant. `spec.orgId` optional. If
-     * `spec.isDefault === true` and a Default already exists, the
-     * binding rejects — the isDefault-uniqueness guardrail is enforced
-     * at write time.
+     * Create a `Project` within the tenant. `spec.orgId` optional.
+     * Resolves to `ok` with the assigned `ProjectId`; to `slug-conflict`
+     * when another project in the tenant has `spec.slug`; and, when
+     * `spec.isDefault === true` and the tenant already has a Default, to
+     * `project-default-already-exists` — the isDefault-uniqueness
+     * guardrail is enforced at write time.
      */
-    create(tenantId: TenantId, spec: ProjectSpec): Promise<ProjectId>;
+    create(tenantId: TenantId, spec: ProjectSpec): Promise<ProjectCreateOutcome>;
     /**
      * Look up a `Project` by id. `undefined` when unknown or in a
      * different tenant.
@@ -67,9 +71,11 @@ export interface ProjectBinding {
     getDefault(tenantId: TenantId): Promise<Project | undefined>;
     /**
      * Partially update a `Project`. `ProjectPatch.orgId` supports
-     * `null` to re-assign the project out of any org.
+     * `null` to re-assign the project out of any org. Resolves to
+     * `project-not-found` when no project has `projectId` in the tenant,
+     * and to `slug-conflict` when `patch.slug` is another project's slug.
      */
-    update(tenantId: TenantId, projectId: ProjectId, patch: ProjectPatch): Promise<void>;
+    update(tenantId: TenantId, projectId: ProjectId, patch: ProjectPatch): Promise<ProjectUpdateOutcome>;
     /**
      * Delete a `Project`. What happens to content rows that still
      * reference the project is the storage layer's concern; the
@@ -89,8 +95,10 @@ export interface ProjectMembershipBinding {
      * Add a user directly to a project. Idempotent on
      * `(projectId, userId)` — re-adding the same user does not mutate
      * a stored differing role. Use `updateRole` to change roles.
+     * Resolves to `project-not-found` when no project has
+     * `input.projectId` in the tenant.
      */
-    add(tenantId: TenantId, input: ProjectMembershipAddInput): Promise<void>;
+    add(tenantId: TenantId, input: ProjectMembershipAddInput): Promise<ProjectMembershipAddOutcome>;
     /**
      * Remove the direct project grant. No-op when absent.
      */
@@ -107,9 +115,65 @@ export interface ProjectMembershipBinding {
      */
     listForUser(tenantId: TenantId, userId: UserId, filter: Filter): Promise<Page<ProjectMembership>>;
     /**
-     * Update an existing direct-membership's role. Errors when the
-     * membership doesn't exist.
+     * Update an existing direct-membership's role. Resolves to
+     * `project-not-found` when the project isn't in the tenant, and to
+     * `project-membership-not-found` when the user has no direct
+     * membership.
      */
-    updateRole(tenantId: TenantId, projectId: ProjectId, userId: UserId, role: ProjectRole): Promise<void>;
+    updateRole(tenantId: TenantId, projectId: ProjectId, userId: UserId, role: ProjectRole): Promise<ProjectMembershipUpdateRoleOutcome>;
 }
+/** What `ProjectBinding.create` did. */
+export type ProjectCreateOutcome = {
+    readonly kind: 'ok';
+    readonly projectId: ProjectId;
+} | {
+    /** Another project in the tenant already has this slug. */
+    readonly kind: 'slug-conflict';
+    readonly slug: string;
+} | {
+    /** `spec.isDefault` was `true` and the tenant already has a Default project. */
+    readonly kind: 'project-default-already-exists';
+} | {
+    /**
+     * The org the project would be in isn't one of the tenant's: it never
+     * existed, or it was deleted. Nothing changed.
+     */
+    readonly kind: 'org-not-found';
+    readonly orgId: OrgId;
+};
+/** What `ProjectBinding.update` did. */
+export type ProjectUpdateOutcome = {
+    readonly kind: 'ok';
+} | {
+    /** No project with this id in the tenant. */
+    readonly kind: 'project-not-found';
+} | {
+    /** Another project in the tenant already has the patched slug. */
+    readonly kind: 'slug-conflict';
+    readonly slug: string;
+} | {
+    /**
+     * The org the project would be in isn't one of the tenant's: it never
+     * existed, or it was deleted. Nothing changed.
+     */
+    readonly kind: 'org-not-found';
+    readonly orgId: OrgId;
+};
+/** What `ProjectMembershipBinding.add` did (`ok` when already a member, too). */
+export type ProjectMembershipAddOutcome = {
+    readonly kind: 'ok';
+} | {
+    /** No project with this id in the tenant. */
+    readonly kind: 'project-not-found';
+};
+/** What `ProjectMembershipBinding.updateRole` did. */
+export type ProjectMembershipUpdateRoleOutcome = {
+    readonly kind: 'ok';
+} | {
+    /** No project with this id in the tenant. */
+    readonly kind: 'project-not-found';
+} | {
+    /** The user has no direct membership on the project. */
+    readonly kind: 'project-membership-not-found';
+};
 //# sourceMappingURL=project-binding.d.ts.map

package/dist/project-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-binding.d.ts","sourceRoot":"","sources":["../src/project-binding.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEtF,OAAO,KAAK,EACV,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,WAAW,EACZ,MAAM,YAAY,CAAC;AAEpB;;;;GAIG;AACH,MAAM,WAAW,iBAAkB,SAAQ,MAAM;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClE;;;OAGG;IACH,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC5E;;;OAGG;IACH,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E;;;OAGG;IACH,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D;;;OAGG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjE;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF;;;OAGG;IACH,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACjG;;;;OAIG;IACH,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAClG;;;OAGG;IACH,UAAU,CACR,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB"}
+{"version":3,"file":"project-binding.d.ts","sourceRoot":"","sources":["../src/project-binding.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEtF,OAAO,KAAK,EACV,OAAO,EACP,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,WAAW,EACZ,MAAM,YAAY,CAAC;AAEpB;;;;GAIG;AACH,MAAM,WAAW,iBAAkB,SAAQ,MAAM;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;;;OAOG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7E;;;OAGG;IACH,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC5E;;;OAGG;IACH,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E;;;OAGG;IACH,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D;;;;;OAKG;IACH,MAAM,CACJ,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjE;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;;OAMG;IACH,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAChG;;OAEG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF;;;OAGG;IACH,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACjG;;;;OAIG;IACH,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAClG;;;;;OAKG;IACH,UAAU,CACR,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAChD;AAED,wCAAwC;AACxC,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GACtD;IACE,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,gCAAgC,CAAC;CACjD,GACD;IACE;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB,CAAC;AAEN,wCAAwC;AACxC,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GACvB;IACE,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;CACpC,GACD;IACE,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB,CAAC;AAEN,iFAAiF;AACjF,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GACvB;IACE,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;CACpC,CAAC;AAEN,sDAAsD;AACtD,MAAM,MAAM,kCAAkC,GAC1C;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GACvB;IACE,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;CACpC,GACD;IACE,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC;CAC/C,CAAC"}

package/dist/team-binding.d.ts

@@ -7,7 +7,9 @@
  * truth.
  *
  * Same convention as `org-binding.ts`: `tenantId` first, `Page<T>`
- * return, `Filter`-extending filter shapes.
+ * return, `Filter`-extending filter shapes, and writes the caller can
+ * get wrong resolve to an outcome discriminated on `kind` instead of
+ * rejecting.
  */
 import type { Filter, OrgId, Page, TeamId, TenantId, UserId } from '@kindgi/types';
 import type { Team, TeamMembership, TeamPatch, TeamRole, TeamSpec } from './types.js';
@@ -38,10 +40,11 @@ export interface TeamMembershipAddInput {
 export interface TeamBinding {
     /**
      * Create a `Team` within the tenant. `spec.orgId` optional (a team
-     * may be cross-org — nullable FK). Returns the assigned
-     * `TeamId`.
+     * may be cross-org — nullable FK). Resolves to `ok` with the
+     * assigned `TeamId`, or to `slug-conflict` when another team in the
+     * tenant has `spec.slug`.
      */
-    create(tenantId: TenantId, spec: TeamSpec): Promise<TeamId>;
+    create(tenantId: TenantId, spec: TeamSpec): Promise<TeamCreateOutcome>;
     /**
      * Look up a `Team` by id. `undefined` when unknown or in a different
      * tenant.
@@ -55,9 +58,11 @@ export interface TeamBinding {
     /**
      * Partially update a `Team`. `TeamPatch.orgId` supports `null` to
      * explicitly re-assign the team out of any org (cross-org), and
-     * `undefined` to leave the FK untouched.
+     * `undefined` to leave the FK untouched. Resolves to `team-not-found`
+     * when no team has `teamId` in the tenant, and to `slug-conflict`
+     * when `patch.slug` is another team's slug.
      */
-    update(tenantId: TenantId, teamId: TeamId, patch: TeamPatch): Promise<void>;
+    update(tenantId: TenantId, teamId: TeamId, patch: TeamPatch): Promise<TeamUpdateOutcome>;
     /**
      * Delete a `Team`. Its membership rows are removed with it (the
      * in-memory adapter deletes them from its map).
@@ -79,9 +84,10 @@ export interface TeamMembershipBinding {
      * silently mutate a differing role).
      *
      * The conformance suite pins this: adding an existing member whose
-     * stored role differs is a no-op (not a role overwrite).
+     * stored role differs is a no-op (not a role overwrite). Resolves to
+     * `team-not-found` when no team has `input.teamId` in the tenant.
      */
-    add(tenantId: TenantId, input: TeamMembershipAddInput): Promise<void>;
+    add(tenantId: TenantId, input: TeamMembershipAddInput): Promise<TeamMembershipAddOutcome>;
     /**
      * Remove a user from a team. Missing membership is a no-op (not an
      * error) — matches every peer platform's membership-remove shape.
@@ -99,10 +105,62 @@ export interface TeamMembershipBinding {
      */
     listForUser(tenantId: TenantId, userId: UserId, filter: Filter): Promise<Page<TeamMembership>>;
     /**
-     * Update an existing membership's role. Errors when the membership
-     * doesn't exist — role mutation of a non-member is a caller mistake,
-     * not a silent add. Conformance suite pins the not-found behaviour.
+     * Update an existing membership's role. Resolves to `team-not-found`
+     * when the team isn't in the tenant, and to
+     * `team-membership-not-found` when the user isn't a member — role
+     * mutation of a non-member is a caller mistake, not a silent add.
      */
-    updateRole(tenantId: TenantId, teamId: TeamId, userId: UserId, role: TeamRole): Promise<void>;
+    updateRole(tenantId: TenantId, teamId: TeamId, userId: UserId, role: TeamRole): Promise<TeamMembershipUpdateRoleOutcome>;
 }
+/** What `TeamBinding.create` did. */
+export type TeamCreateOutcome = {
+    readonly kind: 'ok';
+    readonly teamId: TeamId;
+} | {
+    /** Another team in the tenant already has this slug. */
+    readonly kind: 'slug-conflict';
+    readonly slug: string;
+} | {
+    /**
+     * The org the team would be in isn't one of the tenant's: it never
+     * existed, or it was deleted. Nothing changed.
+     */
+    readonly kind: 'org-not-found';
+    readonly orgId: OrgId;
+};
+/** What `TeamBinding.update` did. */
+export type TeamUpdateOutcome = {
+    readonly kind: 'ok';
+} | {
+    /** No team with this id in the tenant. */
+    readonly kind: 'team-not-found';
+} | {
+    /** Another team in the tenant already has the patched slug. */
+    readonly kind: 'slug-conflict';
+    readonly slug: string;
+} | {
+    /**
+     * The org the team would be in isn't one of the tenant's: it never
+     * existed, or it was deleted. Nothing changed.
+     */
+    readonly kind: 'org-not-found';
+    readonly orgId: OrgId;
+};
+/** What `TeamMembershipBinding.add` did (`ok` when already a member, too). */
+export type TeamMembershipAddOutcome = {
+    readonly kind: 'ok';
+} | {
+    /** No team with this id in the tenant. */
+    readonly kind: 'team-not-found';
+};
+/** What `TeamMembershipBinding.updateRole` did. */
+export type TeamMembershipUpdateRoleOutcome = {
+    readonly kind: 'ok';
+} | {
+    /** No team with this id in the tenant. */
+    readonly kind: 'team-not-found';
+} | {
+    /** The user isn't a member of the team. */
+    readonly kind: 'team-membership-not-found';
+};
 //# sourceMappingURL=team-binding.d.ts.map

package/dist/team-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"team-binding.d.ts","sourceRoot":"","sources":["../src/team-binding.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEnF,OAAO,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,WAAW,cAAe,SAAQ,MAAM;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D;;;OAGG;IACH,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IACnE;;;OAGG;IACH,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE;;;;OAIG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E;;;OAGG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;;OASG;IACH,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE;;;OAGG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E;;;OAGG;IACH,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACxF;;;;OAIG;IACH,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC/F;;;;OAIG;IACH,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/F"}
+{"version":3,"file":"team-binding.d.ts","sourceRoot":"","sources":["../src/team-binding.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEnF,OAAO,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,WAAW,cAAe,SAAQ,MAAM;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvE;;;OAGG;IACH,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IACnE;;;OAGG;IACH,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzF;;;OAGG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;;;OAUG;IACH,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC1F;;;OAGG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E;;;OAGG;IACH,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACxF;;;;OAIG;IACH,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC/F;;;;;OAKG;IACH,UAAU,CACR,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC,+BAA+B,CAAC,CAAC;CAC7C;AAED,qCAAqC;AACrC,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChD;IACE,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB,CAAC;AAEN,qCAAqC;AACrC,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GACvB;IACE,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;CACjC,GACD;IACE,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB,CAAC;AAEN,8EAA8E;AAC9E,MAAM,MAAM,wBAAwB,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GACvB;IACE,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;CACjC,CAAC;AAEN,mDAAmD;AACnD,MAAM,MAAM,+BAA+B,GACvC;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;CAAE,GACvB;IACE,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;CACjC,GACD;IACE,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;CAC5C,CAAC"}

package/dist/tenant-hierarchy-binding.d.ts

@@ -23,6 +23,12 @@ export type CreateTeamError = {
     readonly code: 'slug-conflict';
     readonly message: string;
     readonly cause?: unknown;
+}
+/** `spec.orgId` isn't the tenant's: it never existed, or it was deleted. */
+ | {
+    readonly code: 'org-not-found';
+    readonly message: string;
+    readonly orgId: OrgId;
 } | {
     readonly code: 'insert-failed';
     readonly message: string;
@@ -43,6 +49,12 @@ export type CreateProjectError = {
     readonly code: 'slug-conflict';
     readonly message: string;
     readonly cause?: unknown;
+}
+/** `spec.orgId` isn't the tenant's: it never existed, or it was deleted. */
+ | {
+    readonly code: 'org-not-found';
+    readonly message: string;
+    readonly orgId: OrgId;
 } | {
     readonly code: 'default-conflict';
     readonly message: string;
@@ -58,10 +70,24 @@ export interface AddProjectMemberParams {
     readonly userId: UserId;
     readonly role: ProjectRole;
 }
-export interface MembershipMutationError {
-    readonly code: string;
+export type AddTeamMemberError = {
+    /** No team with this id in the tenant. */
+    readonly code: 'team-not-found';
     readonly message: string;
-}
+} | {
+    readonly code: 'add-failed';
+    readonly message: string;
+    readonly cause?: unknown;
+};
+export type AddProjectMemberError = {
+    /** No project with this id in the tenant. */
+    readonly code: 'project-not-found';
+    readonly message: string;
+} | {
+    readonly code: 'add-failed';
+    readonly message: string;
+    readonly cause?: unknown;
+};
 /**
  * Tenant-summary read shape returned by `getTenant`. Only the fields
  * the `/v1/tenant` GET route surfaces — id / name / slug / createdAt /
@@ -92,8 +118,8 @@ export interface TenantHierarchyBinding {
     createProject(params: CreateProjectParams): Promise<Result<{
         readonly projectId: ProjectId;
     }, CreateProjectError>>;
-    addTeamMember(params: AddTeamMemberParams): Promise<Result<void, MembershipMutationError>>;
-    addProjectMember(params: AddProjectMemberParams): Promise<Result<void, MembershipMutationError>>;
+    addTeamMember(params: AddTeamMemberParams): Promise<Result<void, AddTeamMemberError>>;
+    addProjectMember(params: AddProjectMemberParams): Promise<Result<void, AddProjectMemberError>>;
     /**
      * Look up a tenant by id. Returns `null` when no tenant exists.
      * Not itself tenant-scoped: it is how a caller finds out which

package/dist/tenant-hierarchy-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tenant-hierarchy-binding.d.ts","sourceRoot":"","sources":["../src/tenant-hierarchy-binding.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAExF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACtF;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACtF;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACtF;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACzF;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3F,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;KAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IAC/F,UAAU,CACR,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACjE,aAAa,CACX,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;KAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC1E,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAC3F,gBAAgB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACjG;;;;OAIG;IACH,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;CAC9D"}
+{"version":3,"file":"tenant-hierarchy-binding.d.ts","sourceRoot":"","sources":["../src/tenant-hierarchy-binding.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAExF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACtF;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE;AACxF,4EAA4E;GAC1E;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACnF;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE;AACxF,4EAA4E;GAC1E;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACnF;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACzF;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3F,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED,MAAM,MAAM,kBAAkB,GAC1B;IACE,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAExF,MAAM,MAAM,qBAAqB,GAC7B;IACE,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAExF;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;KAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IAC/F,UAAU,CACR,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACjE,aAAa,CACX,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;KAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAC1E,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtF,gBAAgB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC/F;;;;OAIG;IACH,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;CAC9D"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kindgi/platform",
-  "version": "0.1.3",
+  "version": "0.1.4-rc.1",
   "description": "Multi-tenant hierarchy primitives — the Tenant → Org → Team → Project + User type surface, the `Scope` discriminated access-boundary, binding interfaces for orgs, teams, projects, memberships, team-project grants and the tenant hierarchy, and reference in-memory adapters.",
   "license": "Apache-2.0",
   "repository": {
@@ -30,7 +30,7 @@
     "README.md"
   ],
   "dependencies": {
-    "@kindgi/types": "0.1.3"
+    "@kindgi/types": "0.1.4-rc.1"
   },
   "devDependencies": {
     "@types/node": "^22.10.5",

package/src/in-memory/index.ts

@@ -10,3 +10,4 @@
 export { makeInMemoryOrgBinding } from './org-binding.js';
 export { makeInMemoryTeamBinding } from './team-binding.js';
 export { makeInMemoryProjectBinding } from './project-binding.js';
+export type { InMemoryHierarchyOptions } from './project-binding.js';

package/src/in-memory/org-binding.ts

@@ -10,12 +10,19 @@
  * filters by `tenantId` at the row level — a lookup from tenant A
  * against an orgId that exists in tenant B returns `undefined` (not a
  * hit). Cross-tenant leakage is a hard guardrail, asserted by the
- * conformance suite.
+ * conformance suite. Slugs are unique within a tenant: `create` and
+ * `update` resolve to `slug-conflict` for a slug another org holds.
+ * `delete` tombstones: a deleted org reads as unknown and frees its slug.
  */
 
 import type { OrgId, Page, TenantId, Timestamp } from '@kindgi/types';
 
-import type { OrgBinding, OrgListFilter } from '../org-binding.js';
+import type {
+  OrgBinding,
+  OrgCreateOutcome,
+  OrgListFilter,
+  OrgUpdateOutcome,
+} from '../org-binding.js';
 import type { Org, OrgPatch, OrgSpec } from '../types.js';
 
 import { nowTimestamp, paginate } from './util.js';
@@ -31,9 +38,28 @@ function nextOrgId(): OrgId {
  */
 export function makeInMemoryOrgBinding(): OrgBinding {
   const rows = new Map<OrgId, Org>();
+  /** Tombstoned orgs: kept, and read as unknown. */
+  const deleted = new Set<OrgId>();
+
+  /** The tenant's live org with that id. */
+  function live(tenantId: TenantId, orgId: OrgId): Org | undefined {
+    const row = rows.get(orgId);
+    if (row === undefined || row.tenantId !== tenantId || deleted.has(orgId)) return undefined;
+    return row;
+  }
+
+  /** Is `slug` held by a live org in the tenant other than `exceptId`? */
+  function slugTaken(tenantId: TenantId, slug: string, exceptId?: OrgId): boolean {
+    for (const row of rows.values()) {
+      if (deleted.has(row.id)) continue;
+      if (row.tenantId === tenantId && row.slug === slug && row.id !== exceptId) return true;
+    }
+    return false;
+  }
 
   return {
-    async create(tenantId: TenantId, spec: OrgSpec): Promise<OrgId> {
+    async create(tenantId: TenantId, spec: OrgSpec): Promise<OrgCreateOutcome> {
+      if (slugTaken(tenantId, spec.slug)) return { kind: 'slug-conflict', slug: spec.slug };
       const id = nextOrgId();
       const now = nowTimestamp();
       const row: Org = {
@@ -45,20 +71,17 @@ export function makeInMemoryOrgBinding(): OrgBinding {
         updatedAt: now,
       };
       rows.set(id, row);
-      return id;
+      return { kind: 'ok', orgId: id };
     },
 
     async get(tenantId: TenantId, orgId: OrgId): Promise<Org | undefined> {
-      const row = rows.get(orgId);
-      if (row === undefined) return undefined;
-      if (row.tenantId !== tenantId) return undefined;
-      return row;
+      return live(tenantId, orgId);
     },
 
     async list(tenantId: TenantId, filter: OrgListFilter): Promise<Page<Org>> {
       const all: Org[] = [];
       for (const row of rows.values()) {
-        if (row.tenantId !== tenantId) continue;
+        if (row.tenantId !== tenantId || deleted.has(row.id)) continue;
         if (filter.nameContains !== undefined && !row.name.includes(filter.nameContains)) {
           continue;
         }
@@ -72,10 +95,11 @@ export function makeInMemoryOrgBinding(): OrgBinding {
       return paginate(all, filter.limit, filter.cursor);
     },
 
-    async update(tenantId: TenantId, orgId: OrgId, patch: OrgPatch): Promise<void> {
-      const row = rows.get(orgId);
-      if (row === undefined || row.tenantId !== tenantId) {
-        throw new Error(`org-not-found: ${orgId}`);
+    async update(tenantId: TenantId, orgId: OrgId, patch: OrgPatch): Promise<OrgUpdateOutcome> {
+      const row = live(tenantId, orgId);
+      if (row === undefined) return { kind: 'org-not-found' };
+      if (patch.slug !== undefined && slugTaken(tenantId, patch.slug, orgId)) {
+        return { kind: 'slug-conflict', slug: patch.slug };
       }
       const now: Timestamp = nowTimestamp();
       const next: Org = {
@@ -87,15 +111,13 @@ export function makeInMemoryOrgBinding(): OrgBinding {
         updatedAt: now,
       };
       rows.set(orgId, next);
+      return { kind: 'ok' };
     },
 
     async delete(tenantId: TenantId, orgId: OrgId): Promise<void> {
-      const row = rows.get(orgId);
-      if (row === undefined || row.tenantId !== tenantId) {
-        // Idempotent delete — no-op when absent or in another tenant.
-        return;
-      }
-      rows.delete(orgId);
+      // Idempotent: a no-op when absent, already deleted or in another tenant.
+      if (live(tenantId, orgId) === undefined) return;
+      deleted.add(orgId);
     },
   };
 }