tapimo 0.0.2 → 0.2.0

package/dist/db/Schema.js

@@ -0,0 +1,229 @@
+import * as z from 'zod/mini';
+// Row schemas for database tables (`zod/mini`), the source of truth each
+// `tables/` module derives its `Table` type from. Nullable fields map to
+// nullable columns; the domain layer converts `null` back to absent fields.
+// Domain-owned unions and jsonb values stay typed by their owning module via
+// `z.custom` (type-only imports) so the two cannot drift.
+/** A pending, expiring offer of organization membership. */
+export const Invitation = z.object({
+    acceptedAt: z
+        .nullable(z.string())
+        .check(z.describe('When the invitation was accepted (ISO 8601), or null while pending.')),
+    createdAt: z.string().check(z.describe('When the invitation was created (ISO 8601).')),
+    email: z
+        .string()
+        .check(z.describe('Invitee email (stored lowercase); matched against verified emails.')),
+    expiresAt: z.string().check(z.describe('When the invitation expires (ISO 8601).')),
+    id: z
+        .string()
+        .check(z.describe('Opaque invitation id (`inv_…`).'), z.meta({ examples: ['inv_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+    invitedBy: z.string().check(z.describe('User id (`usr_…`) that created the invitation.')),
+    orgId: z.string().check(z.describe('Organization id (`org_…`) the invitation joins.')),
+    revokedAt: z
+        .nullable(z.string())
+        .check(z.describe('When the invitation was revoked (ISO 8601), or null.')),
+    role: z
+        .enum(['admin', 'member', 'owner'])
+        .check(z.describe('Role granted when the invitation is accepted.')),
+});
+/** A user's role within an organization. */
+export const Membership = z.object({
+    createdAt: z.string().check(z.describe('When the membership was created (ISO 8601).')),
+    orgId: z.string().check(z.describe('Organization id (`org_…`).')),
+    role: z
+        .enum(['admin', 'member', 'owner'])
+        .check(z.describe("The member's role within the organization.")),
+    updatedAt: z.string().check(z.describe('When the membership was last updated (ISO 8601).')),
+    userId: z.string().check(z.describe('Member user id (`usr_…`).')),
+});
+/** An organization, the top-level tenant that owns API keys. */
+export const Organization = z.object({
+    createdAt: z.string().check(z.describe('When the organization was created (ISO 8601).')),
+    createdBy: z
+        .nullable(z.string())
+        .check(z.describe('Identity that created the organization (e.g. admin email), or null.')),
+    id: z
+        .string()
+        .check(z.describe('Opaque organization id (`org_…`).'), z.meta({ examples: ['org_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+    name: z
+        .string()
+        .check(z.describe('Human-readable organization name.'), z.meta({ examples: ['Acme, Inc.'] })),
+    updatedAt: z.string().check(z.describe('When the organization was last updated (ISO 8601).')),
+    userId: z
+        .nullable(z.string())
+        .check(z.describe('Owning user id (`usr_…`), or null for organizations created by the super admin.')),
+});
+/** A project: an app or integration within an organization. */
+export const Project = z.object({
+    createdAt: z.string().check(z.describe('When the project was created (ISO 8601).')),
+    id: z
+        .string()
+        .check(z.describe('Opaque project id (`prj_…`).'), z.meta({ examples: ['prj_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+    name: z
+        .string()
+        .check(z.describe('Human-readable project name.'), z.meta({ examples: ['Checkout'] })),
+    orgId: z.string().check(z.describe('Owning organization id (`org_…`).')),
+    updatedAt: z.string().check(z.describe('When the project was last updated (ISO 8601).')),
+});
+/** A transaction sponsored by the managed fee payer — the billable unit of fee payer spend. */
+export const SponsoredTransaction = z.object({
+    apiKeyId: z.string().check(z.describe('API key id (`key_…`) that requested sponsorship.')),
+    billable: z
+        .boolean()
+        .check(z.describe('Whether the sponsorship accrues billable spend; false for sandbox.')),
+    chainId: z.number().check(z.describe('Chain the sponsored transaction targets.')),
+    createdAt: z.string().check(z.describe('When the sponsorship was recorded (ISO 8601).')),
+    environment: z
+        .enum(['production', 'sandbox'])
+        .check(z.describe('Key environment the sponsorship was requested under.')),
+    feeAmount: z
+        .nullable(z.string())
+        .check(z.describe('Actual fee paid in fee-token base units, or null until finalized.')),
+    feeToken: z
+        .nullable(z.string())
+        .check(z.describe('Fee token address, or null when the chain default applied.')),
+    finalizedAt: z
+        .nullable(z.string())
+        .check(z.describe('When the sponsorship reached a terminal status (ISO 8601), or null.')),
+    id: z
+        .string()
+        .check(z.describe('Opaque sponsored-transaction id (`stx_…`).'), z.meta({ examples: ['stx_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+    orgId: z.string().check(z.describe('Organization id (`org_…`) the spend attributes to.')),
+    projectId: z.string().check(z.describe('Project id (`prj_…`) the spend attributes to.')),
+    signPayload: z
+        .string()
+        .check(z.describe('Fee-payer sign payload — a stable identity for the sponsored envelope.')),
+    status: z
+        .enum(['failed', 'finalized', 'pending'])
+        .check(z.describe('Pending until a receipt finalizes it or the pending TTL fails it.')),
+    transaction: z
+        .string()
+        .check(z.describe('Serialized sponsored transaction, kept for durable observability.')),
+    transactionHash: z
+        .nullable(z.string())
+        .check(z.describe('Transaction hash, or null for fill intents until reconciled.')),
+});
+/** A developer identity. */
+export const User = z.object({
+    address: z
+        .nullable(z.string())
+        .check(z.describe('Wallet address that signs in as this user (stored lowercase), or null for non-wallet identities.')),
+    createdAt: z.string().check(z.describe('When the user was created (ISO 8601).')),
+    email: z
+        .nullable(z.string())
+        .check(z.describe('Verified email from the wallet identity token, or null.')),
+    id: z
+        .string()
+        .check(z.describe('Opaque user id (`usr_…`).'), z.meta({ examples: ['usr_1a2b3c4d5e6f7g8h9j0k1m2n'] })),
+    updatedAt: z.string().check(z.describe('When the user was last updated (ISO 8601).')),
+});
+/**
+ * A verified token: one row per curated token, ordered by `position` (list
+ * order is canonical and surfaced to clients). Addresses are stored lowercase;
+ * case-insensitive symbol uniqueness is enforced by a functional index on
+ * `lower(symbol)`.
+ */
+export const VerifiedToken = z.object({
+    address: z.string().check(z.describe('Verified TIP-20 token contract address (lowercase).')),
+    chainId: z.number().check(z.int(), z.describe('Chain the token belongs to.')),
+    currency: z.string().check(z.describe('Display currency, e.g. `USD`.')),
+    decimals: z.number().check(z.int(), z.describe('Decimal precision.')),
+    logoUri: z.nullable(z.string()).check(z.describe('Curated HTTPS logo URL, or null.')),
+    name: z.string().check(z.describe('Display name.')),
+    position: z
+        .number()
+        .check(z.int(), z.describe("Zero-based position in the chain's canonical list order.")),
+    symbol: z.string().check(z.describe('Ticker symbol.'), z.meta({ examples: ['USDC'] })),
+});
+/**
+ * A chain's verified-token list metadata — the opaque `version` that drives
+ * the soft-refresh cache and `If-Match` preconditions, bumped on every publish.
+ */
+export const VerifiedTokenList = z.object({
+    chainId: z.number().check(z.int(), z.describe('Chain the list belongs to.')),
+    updatedAt: z.string().check(z.describe('ISO timestamp of the last publish.')),
+    version: z
+        .string()
+        .check(z.describe('Opaque list version (`<epoch-ms>_<hex>`); changes on every publish.')),
+});
+/**
+ * A webhook subscription. The `Webhooks.Owner` union maps to (`ownerType`,
+ * `ownerId`); jsonb object columns round-trip as parsed values. `pollerCursor`
+ * replaces the old per-subscription cursor key.
+ */
+export const WebhookSubscription = z.object({
+    chainId: z.number().check(z.int(), z.describe('Chain the subscription listens on.')),
+    context: z
+        .nullable(z.custom())
+        .check(z.describe('Human context (`jsonb`), or null.')),
+    createdAt: z.string().check(z.describe('ISO timestamp of creation.')),
+    destination: z
+        .custom()
+        .check(z.describe('Delivery destination (`jsonb`).')),
+    eventType: z
+        .custom()
+        .check(z.describe('Event type the subscription listens to.')),
+    expiresAt: z
+        .nullable(z.string())
+        .check(z.describe('ISO expiry timestamp (MPP-owned subscriptions), or null.')),
+    failureCount: z
+        .number()
+        .check(z.int(), z.describe('Consecutive delivery failures; drives auto-disable.')),
+    filters: z
+        .custom()
+        .check(z.describe('Event-type-specific filter predicates (`jsonb`).')),
+    id: z
+        .string()
+        .check(z.describe('Subscription id (`wh_…`, lexically time-ordered).'), z.meta({ examples: ['wh_0000019c1a2b3c4d5e6f7g8h'] })),
+    lastDeliveryAt: z
+        .nullable(z.string())
+        .check(z.describe('ISO timestamp of the last successful delivery, or null.')),
+    ownerId: z
+        .string()
+        .check(z.describe('Owner identifier: `orgId` for `api_key` owners, `payer` for `mpp`.')),
+    ownerType: z.custom().check(z.describe('Owner kind.')),
+    pollerCursor: z
+        .nullable(z.string())
+        .check(z.describe('Poller keyset cursor, or null before the first tick.')),
+    secret: z.string().check(z.describe('HMAC signing secret.')),
+    status: z.custom().check(z.describe('Lifecycle status.')),
+    updatedAt: z
+        .string()
+        .check(z.describe('ISO timestamp of the last mutation (`pollerCursor` writes excluded).')),
+});
+/**
+ * A webhook delivery attempt. Rows are invisible past `expiresAt` (the
+ * retention deadline that replaces the old store TTL) and pruned by the
+ * poller; deleting a subscription cascades to its rows.
+ */
+export const WebhookDelivery = z.object({
+    attempt: z
+        .number()
+        .check(z.int(), z.describe('Consecutive attempt number (1-based) at the time of the delivery.')),
+    createdAt: z.string().check(z.describe('ISO timestamp the attempt was recorded.')),
+    envelope: z
+        .custom()
+        .check(z.describe('The exact envelope that was sent (`jsonb`), for verbatim replay.')),
+    error: z
+        .nullable(z.string())
+        .check(z.describe('Failure reason when `status` is `failed`, or null.')),
+    eventId: z.string().check(z.describe('Idempotent event id the delivery carried (`evt_…`).')),
+    expiresAt: z
+        .string()
+        .check(z.describe('ISO retention deadline; rows past it are invisible and pruned.')),
+    id: z
+        .string()
+        .check(z.describe('Delivery id (`whd_…`, lexically time-ordered).'), z.meta({ examples: ['whd_0000019c1a2b3c4d5e6f7g8h'] })),
+    requestUrl: z.string().check(z.describe('Subscriber callback URL the attempt targeted.')),
+    responseMs: z
+        .nullable(z.number())
+        .check(z.describe('Wall-clock duration of the attempt in ms, or null.')),
+    responseStatus: z
+        .nullable(z.number())
+        .check(z.describe('HTTP response status, or null when no response was received.')),
+    status: z.custom().check(z.describe('Outcome status.')),
+    subscriptionId: z
+        .string()
+        .check(z.describe('Owning subscription id (`wh_…`); FK with `ON DELETE CASCADE`.')),
+});
+//# sourceMappingURL=Schema.js.map

package/dist/db/Schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Schema.js","sourceRoot":"","sources":["../../src/db/Schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,UAAU,CAAA;AAI7B,yEAAyE;AACzE,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,0DAA0D;AAE1D,4DAA4D;AAC5D,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,UAAU,EAAE,CAAC;SACV,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,qEAAqE,CAAC,CAAC;IAC3F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC;IACtF,KAAK,EAAE,CAAC;SACL,MAAM,EAAE;SACR,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oEAAoE,CAAC,CAAC;IAC1F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;IAClF,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAC7C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC,CAAC;IACzF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;IACtF,SAAS,EAAE,CAAC;SACT,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;IAC5E,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;SAClC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;CACtE,CAAC,CAAA;AAKF,4CAA4C;AAC5C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC,CAAC;IACtF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IACjE,IAAI,EAAE,CAAC;SACJ,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;SAClC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CAAC;IAClE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;IAC3F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC;CAClE,CAAC,CAAA;AAKF,gEAAgE;AAChE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;IACxF,SAAS,EAAE,CAAC;SACT,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,qEAAqE,CAAC,CAAC;IAC3F,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAC/C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;IACH,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC;IAC7F,MAAM,EAAE,CAAC;SACN,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,iFAAiF,CAAC,CAC9F;CACJ,CAAC,CAAA;AAKF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC;IACnF,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAC1C,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;IACH,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACxF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;CACzF,CAAC,CAAA;AAKF,+FAA+F;AAC/F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;IAC1F,QAAQ,EAAE,CAAC;SACR,OAAO,EAAE;SACT,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oEAAoE,CAAC,CAAC;IAC1F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC;IACjF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;IACxF,WAAW,EAAE,CAAC;SACX,IAAI,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;SAC/B,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;IAC5E,SAAS,EAAE,CAAC;SACT,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,mEAAmE,CAAC,CAAC;IACzF,QAAQ,EAAE,CAAC;SACR,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,4DAA4D,CAAC,CAAC;IAClF,WAAW,EAAE,CAAC;SACX,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,qEAAqE,CAAC,CAAC;IAC3F,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC,EACxD,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC;IACzF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;IACxF,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,wEAAwE,CAAC,CAAC;IAC9F,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;SACxC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,mEAAmE,CAAC,CAAC;IACzF,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,mEAAmE,CAAC,CAAC;IACzF,eAAe,EAAE,CAAC;SACf,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,8DAA8D,CAAC,CAAC;CACrF,CAAC,CAAA;AAKF,4BAA4B;AAC5B,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,CAAC;SACP,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CACJ,CAAC,CAAC,QAAQ,CACR,kGAAkG,CACnG,CACF;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC;IAChF,KAAK,EAAE,CAAC;SACL,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IAC/E,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EACvC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CAAC;CACtF,CAAC,CAAA;AAKF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,qDAAqD,CAAC,CAAC;IAC5F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;IAC7E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IACvE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACrE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC;IACrF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACnD,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC,CAAC;IACzF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;CACvF,CAAC,CAAA;AAKF;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;IAC7E,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,qEAAqE,CAAC,CAAC;CAC5F,CAAC,CAAA;AAKF;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;IACpF,OAAO,EAAE,CAAC;SACP,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAoB,CAAC;SACtC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC;IACrE,WAAW,EAAE,CAAC;SACX,MAAM,EAAwB;SAC9B,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC;IACvD,SAAS,EAAE,CAAC;SACT,MAAM,EAAsB;SAC5B,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;IAC/D,SAAS,EAAE,CAAC;SACT,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,0DAA0D,CAAC,CAAC;IAChF,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,qDAAqD,CAAC,CAAC;IACpF,OAAO,EAAE,CAAC;SACP,MAAM,EAAoC;SAC1C,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;IACxE,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,mDAAmD,CAAC,EAC/D,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,6BAA6B,CAAC,EAAE,CAAC,CACtD;IACH,cAAc,EAAE,CAAC;SACd,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IAC/E,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oEAAoE,CAAC,CAAC;IAC1F,SAAS,EAAE,CAAC,CAAC,MAAM,EAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC9E,YAAY,EAAE,CAAC;SACZ,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC,CAAC;IAC5E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC1E,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,sEAAsE,CAAC,CAAC;CAC7F,CAAC,CAAA;AAKF;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,KAAK,CACJ,CAAC,CAAC,GAAG,EAAE,EACP,CAAC,CAAC,QAAQ,CAAC,mEAAmE,CAAC,CAChF;IACH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC,CAAC;IAClF,QAAQ,EAAE,CAAC;SACR,MAAM,EAAqB;SAC3B,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,kEAAkE,CAAC,CAAC;IACxF,KAAK,EAAE,CAAC;SACL,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC;IAC1E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,qDAAqD,CAAC,CAAC;IAC5F,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,gEAAgE,CAAC,CAAC;IACtF,EAAE,EAAE,CAAC;SACF,MAAM,EAAE;SACR,KAAK,CACJ,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC,EAC5D,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,CACvD;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;IACzF,UAAU,EAAE,CAAC;SACV,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,oDAAoD,CAAC,CAAC;IAC1E,cAAc,EAAE,CAAC;SACd,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACpB,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,8DAA8D,CAAC,CAAC;IACpF,MAAM,EAAE,CAAC,CAAC,MAAM,EAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAChF,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,+DAA+D,CAAC,CAAC;CACtF,CAAC,CAAA"}

package/dist/db/tables/invitations.d.ts

@@ -0,0 +1,84 @@
+import type { Selectable } from 'kysely';
+import type * as Db from '../Db.js';
+import type * as db_Schema from '../Schema.js';
+import * as Memberships from './memberships.js';
+/** Columns of the `invitations` table, derived from `Schema.Invitation`. */
+export type Table = db_Schema.Invitation;
+/** A stored invitation row. */
+export type Record = Selectable<Table>;
+/**
+ * Inserts an invitation and returns the stored record. Emails are stored
+ * lowercase so matching against verified emails is case-insensitive. Re-inviting
+ * a live (pending) (org, email) refreshes that row — role, inviter, expiry —
+ * rather than accumulating duplicates, matching the `invitations_pending_unique`
+ * partial index.
+ *
+ * @param db - The database.
+ * @param input - The invitation to insert.
+ * @returns The stored record.
+ */
+export declare function create(db: Db.Db, input: create.Input): Promise<Record>;
+export declare namespace create {
+    /** Fields accepted when inserting an invitation. */
+    type Input = {
+        /** Invitee email. */
+        email: string;
+        /** When the invitation expires (ISO 8601). */
+        expiresAt: string;
+        /** User id (`usr_…`) creating the invitation. */
+        invitedBy: string;
+        /** Organization id (`org_…`) the invitation joins. */
+        orgId: string;
+        /** Role granted on accept. */
+        role: Memberships.Role;
+    };
+}
+/**
+ * Reads an invitation by id.
+ *
+ * @param db - The database.
+ * @param id - The invitation id (`inv_…`).
+ * @returns The record, or `undefined` when absent.
+ */
+export declare function get(db: Db.Db, id: string): Promise<Record | undefined>;
+/**
+ * Lists an organization's pending invitations (unaccepted, unrevoked,
+ * unexpired), newest first.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @returns The records.
+ */
+export declare function listByOrg(db: Db.Db, orgId: string): Promise<Record[]>;
+/**
+ * Lists pending invitations addressed to an email, joined with the inviting
+ * organization's name, newest first.
+ *
+ * @param db - The database.
+ * @param email - The invitee email (matched lowercase).
+ * @returns The records with `orgName` from the organization row.
+ */
+export declare function listByEmail(db: Db.Db, email: string): Promise<(Record & {
+    orgName: string;
+})[]>;
+/**
+ * Revokes a pending invitation.
+ *
+ * @param db - The database.
+ * @param id - The invitation id (`inv_…`).
+ * @returns The revoked record, or `undefined` when absent or already settled.
+ */
+export declare function revoke(db: Db.Db, id: string): Promise<Record | undefined>;
+/**
+ * Accepts a pending invitation into a membership, atomically: the conditional
+ * update settles the invitation exactly once (double accepts lose the race).
+ * A new member is inserted at the invited role; an existing member is only ever
+ * elevated to it — accepting never demotes (which could strip the last owner).
+ *
+ * @param db - The database.
+ * @param id - The invitation id (`inv_…`).
+ * @param userId - The accepting user id (`usr_…`).
+ * @returns The accepted record, or `undefined` when absent, settled, or expired.
+ */
+export declare function accept(db: Db.Db, id: string, userId: string): Promise<Record | undefined>;
+//# sourceMappingURL=invitations.d.ts.map

package/dist/db/tables/invitations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../../src/db/tables/invitations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAGxC,OAAO,KAAK,KAAK,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAE/C,4EAA4E;AAC5E,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAA;AAExC,+BAA+B;AAC/B,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;AAEtC;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BtE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,oDAAoD;IACpD,KAAK,KAAK,GAAG;QACX,qBAAqB;QACrB,KAAK,EAAE,MAAM,CAAA;QACb,8CAA8C;QAC9C,SAAS,EAAE,MAAM,CAAA;QACjB,iDAAiD;QACjD,SAAS,EAAE,MAAM,CAAA;QACjB,sDAAsD;QACtD,KAAK,EAAE,MAAM,CAAA;QACb,8BAA8B;QAC9B,IAAI,EAAE,WAAW,CAAC,IAAI,CAAA;KACvB,CAAA;CACF;AAED;;;;;;GAMG;AACH,wBAAgB,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEtE;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAErE;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,CAAC,CAY/F;AAED;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAUzE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAyCzF"}

package/dist/db/tables/invitations.js

@@ -0,0 +1,165 @@
+import { nanoid } from 'nanoid';
+import * as Memberships from './memberships.js';
+/**
+ * Inserts an invitation and returns the stored record. Emails are stored
+ * lowercase so matching against verified emails is case-insensitive. Re-inviting
+ * a live (pending) (org, email) refreshes that row — role, inviter, expiry —
+ * rather than accumulating duplicates, matching the `invitations_pending_unique`
+ * partial index.
+ *
+ * @param db - The database.
+ * @param input - The invitation to insert.
+ * @returns The stored record.
+ */
+export function create(db, input) {
+    const now = new Date().toISOString();
+    return db.kysely
+        .insertInto('invitations')
+        .values({
+        acceptedAt: null,
+        createdAt: now,
+        email: input.email.toLowerCase(),
+        expiresAt: input.expiresAt,
+        id: `inv_${nanoid()}`,
+        invitedBy: input.invitedBy,
+        orgId: input.orgId,
+        revokedAt: null,
+        role: input.role,
+    })
+        .onConflict((oc) => oc
+        .columns(['orgId', 'email'])
+        .where('acceptedAt', 'is', null)
+        .where('revokedAt', 'is', null)
+        .doUpdateSet({
+        createdAt: now,
+        expiresAt: input.expiresAt,
+        invitedBy: input.invitedBy,
+        role: input.role,
+    }))
+        .returningAll()
+        .executeTakeFirstOrThrow();
+}
+/**
+ * Reads an invitation by id.
+ *
+ * @param db - The database.
+ * @param id - The invitation id (`inv_…`).
+ * @returns The record, or `undefined` when absent.
+ */
+export function get(db, id) {
+    return db.kysely.selectFrom('invitations').selectAll().where('id', '=', id).executeTakeFirst();
+}
+/**
+ * Lists an organization's pending invitations (unaccepted, unrevoked,
+ * unexpired), newest first.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @returns The records.
+ */
+export function listByOrg(db, orgId) {
+    return pending(db).where('orgId', '=', orgId).orderBy('createdAt', 'desc').execute();
+}
+/**
+ * Lists pending invitations addressed to an email, joined with the inviting
+ * organization's name, newest first.
+ *
+ * @param db - The database.
+ * @param email - The invitee email (matched lowercase).
+ * @returns The records with `orgName` from the organization row.
+ */
+export function listByEmail(db, email) {
+    return db.kysely
+        .selectFrom('invitations')
+        .innerJoin('organizations', 'organizations.id', 'invitations.orgId')
+        .where('invitations.acceptedAt', 'is', null)
+        .where('invitations.revokedAt', 'is', null)
+        .where('invitations.expiresAt', '>', new Date().toISOString())
+        .where('invitations.email', '=', email.toLowerCase())
+        .selectAll('invitations')
+        .select('organizations.name as orgName')
+        .orderBy('invitations.createdAt', 'desc')
+        .execute();
+}
+/**
+ * Revokes a pending invitation.
+ *
+ * @param db - The database.
+ * @param id - The invitation id (`inv_…`).
+ * @returns The revoked record, or `undefined` when absent or already settled.
+ */
+export function revoke(db, id) {
+    const now = new Date().toISOString();
+    return db.kysely
+        .updateTable('invitations')
+        .set({ revokedAt: now })
+        .where('id', '=', id)
+        .where('acceptedAt', 'is', null)
+        .where('revokedAt', 'is', null)
+        .returningAll()
+        .executeTakeFirst();
+}
+/**
+ * Accepts a pending invitation into a membership, atomically: the conditional
+ * update settles the invitation exactly once (double accepts lose the race).
+ * A new member is inserted at the invited role; an existing member is only ever
+ * elevated to it — accepting never demotes (which could strip the last owner).
+ *
+ * @param db - The database.
+ * @param id - The invitation id (`inv_…`).
+ * @param userId - The accepting user id (`usr_…`).
+ * @returns The accepted record, or `undefined` when absent, settled, or expired.
+ */
+export function accept(db, id, userId) {
+    const now = new Date().toISOString();
+    return db.kysely.transaction().execute(async (trx) => {
+        const invitation = await trx
+            .updateTable('invitations')
+            .set({ acceptedAt: now })
+            .where('id', '=', id)
+            .where('acceptedAt', 'is', null)
+            .where('revokedAt', 'is', null)
+            .where('expiresAt', '>', now)
+            .returningAll()
+            .executeTakeFirst();
+        if (!invitation)
+            return undefined;
+        const existing = await trx
+            .selectFrom('memberships')
+            .selectAll()
+            .where('orgId', '=', invitation.orgId)
+            .where('userId', '=', userId)
+            .executeTakeFirst();
+        if (!existing)
+            await trx
+                .insertInto('memberships')
+                .values({
+                createdAt: now,
+                orgId: invitation.orgId,
+                role: invitation.role,
+                updatedAt: now,
+                userId,
+            })
+                // A concurrent accept/join could insert first; keep that membership.
+                .onConflict((oc) => oc.columns(['orgId', 'userId']).doNothing())
+                .execute();
+        else if (Memberships.rank[invitation.role] > Memberships.rank[existing.role])
+            await trx
+                .updateTable('memberships')
+                .set({ role: invitation.role, updatedAt: now })
+                .where('orgId', '=', invitation.orgId)
+                .where('userId', '=', userId)
+                .execute();
+        return invitation;
+    });
+}
+/** Base query selecting pending invitations (unaccepted, unrevoked, unexpired). */
+function pending(db) {
+    return db.kysely
+        .selectFrom('invitations')
+        .selectAll()
+        .where('acceptedAt', 'is', null)
+        .where('revokedAt', 'is', null)
+        .where('expiresAt', '>', new Date().toISOString());
+}
+//# sourceMappingURL=invitations.js.map

package/dist/db/tables/invitations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.js","sourceRoot":"","sources":["../../../src/db/tables/invitations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAI/B,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAQ/C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAmB;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,MAAM,CAAC;QACN,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,EAAE,EAAE,OAAO,MAAM,EAAE,EAAE;QACrB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE;SACC,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC3B,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,WAAW,CAAC;QACX,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CACL;SACA,YAAY,EAAE;SACd,uBAAuB,EAAE,CAAA;AAC9B,CAAC;AAkBD;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,EAAS,EAAE,EAAU;IACvC,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAA;AAChG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,EAAS,EAAE,KAAa;IAChD,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAA;AACtF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,EAAS,EAAE,KAAa;IAClD,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,CAAC,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;SACnE,KAAK,CAAC,wBAAwB,EAAE,IAAI,EAAE,IAAI,CAAC;SAC3C,KAAK,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,CAAC;SAC1C,KAAK,CAAC,uBAAuB,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAC7D,KAAK,CAAC,mBAAmB,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACpD,SAAS,CAAC,aAAa,CAAC;SACxB,MAAM,CAAC,+BAA+B,CAAC;SACvC,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC;SACxC,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,EAAU;IAC1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM;SACb,WAAW,CAAC,aAAa,CAAC;SAC1B,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;SACvB,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,YAAY,EAAE;SACd,gBAAgB,EAAE,CAAA;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,EAAU,EAAE,MAAc;IAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,UAAU,GAAG,MAAM,GAAG;aACzB,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;aACxB,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;aAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;aAC9B,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC;aAC5B,YAAY,EAAE;aACd,gBAAgB,EAAE,CAAA;QACrB,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,GAAG;aACvB,UAAU,CAAC,aAAa,CAAC;aACzB,SAAS,EAAE;aACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC;aACrC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,gBAAgB,EAAE,CAAA;QACrB,IAAI,CAAC,QAAQ;YACX,MAAM,GAAG;iBACN,UAAU,CAAC,aAAa,CAAC;iBACzB,MAAM,CAAC;gBACN,SAAS,EAAE,GAAG;gBACd,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,SAAS,EAAE,GAAG;gBACd,MAAM;aACP,CAAC;gBACF,qEAAqE;iBACpE,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;iBAC/D,OAAO,EAAE,CAAA;aACT,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC1E,MAAM,GAAG;iBACN,WAAW,CAAC,aAAa,CAAC;iBAC1B,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;iBAC9C,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC;iBACrC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;iBAC5B,OAAO,EAAE,CAAA;QACd,OAAO,UAAU,CAAA;IACnB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,OAAO,CAAC,EAAS;IACxB,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,EAAE;SACX,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;AACtD,CAAC"}

package/dist/db/tables/memberships.d.ts

@@ -0,0 +1,108 @@
+import type { Selectable } from 'kysely';
+import type * as Db from '../Db.js';
+import type * as db_Schema from '../Schema.js';
+/** Columns of the `memberships` table, derived from `Schema.Membership`. */
+export type Table = db_Schema.Membership;
+/** A stored membership row. */
+export type Record = Selectable<Table>;
+/** A membership role. */
+export type Role = Record['role'];
+/** Fixed membership roles, least to most privileged. */
+export declare const roles: readonly ["member", "admin", "owner"];
+/** Privilege rank per role; higher ranks satisfy lower minimums. */
+export declare const rank: {
+    readonly admin: 1;
+    readonly member: 0;
+    readonly owner: 2;
+};
+/**
+ * Inserts a membership and returns the stored record.
+ *
+ * @param db - The database.
+ * @param input - The membership to insert.
+ * @returns The stored record.
+ */
+export declare function create(db: Db.Db, input: create.Input): Promise<Record>;
+export declare namespace create {
+    /** Fields accepted when inserting a membership. */
+    type Input = {
+        /** Organization id (`org_…`). */
+        orgId: string;
+        /** Granted role. */
+        role: Role;
+        /** Member user id (`usr_…`). */
+        userId: string;
+    };
+}
+/**
+ * Reads one user's membership in an organization.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @param userId - The member user id (`usr_…`).
+ * @returns The record, or `undefined` when absent.
+ */
+export declare function get(db: Db.Db, orgId: string, userId: string): Promise<Record | undefined>;
+/**
+ * Lists an organization's memberships, oldest first (stable member ordering).
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @returns The records.
+ */
+export declare function listByOrg(db: Db.Db, orgId: string): Promise<Record[]>;
+/**
+ * Lists an organization's memberships joined with member identity (address,
+ * email), oldest first.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @returns The records with `address`/`email` from the member's user row.
+ */
+export declare function listByOrgDetailed(db: Db.Db, orgId: string): Promise<(Record & {
+    address: string | null;
+    email: string | null;
+})[]>;
+/**
+ * Changes a member's role atomically, refusing to demote the last owner. The
+ * org's owner rows are locked for the transaction, so a concurrent demotion or
+ * removal cannot race two guards into leaving the organization ownerless.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @param userId - The member user id (`usr_…`).
+ * @param input - The fields to update.
+ * @returns The updated record, or an `error` when absent or the last owner.
+ */
+export declare function update(db: Db.Db, orgId: string, userId: string, input: update.Input): Promise<update.Result>;
+export declare namespace update {
+    /** Mutable membership fields. */
+    type Input = {
+        /** New role. */
+        role: Role;
+    };
+    /** Outcome of a guarded role change. */
+    type Result = {
+        error: 'last_owner' | 'not_found';
+        record?: undefined;
+    } | {
+        error?: undefined;
+        record: Record;
+    };
+}
+/**
+ * Deletes a membership atomically, refusing to remove the last owner. Locks
+ * the org's owner rows for the transaction (see {@link update}) so concurrent
+ * removals cannot race the organization ownerless.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @param userId - The member user id (`usr_…`).
+ * @returns `removed` on success, otherwise why the removal was refused.
+ */
+export declare function remove(db: Db.Db, orgId: string, userId: string): Promise<remove.Result>;
+export declare namespace remove {
+    /** Outcome of a guarded removal. */
+    type Result = 'last_owner' | 'not_found' | 'removed';
+}
+//# sourceMappingURL=memberships.d.ts.map

package/dist/db/tables/memberships.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memberships.d.ts","sourceRoot":"","sources":["../../../src/db/tables/memberships.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAExC,OAAO,KAAK,KAAK,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAE9C,4EAA4E;AAC5E,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAA;AAExC,+BAA+B;AAC/B,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;AAEtC,yBAAyB;AACzB,MAAM,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;AAEjC,wDAAwD;AACxD,eAAO,MAAM,KAAK,uCAAkE,CAAA;AAEpF,oEAAoE;AACpE,eAAO,MAAM,IAAI;oBAAY,CAAC;qBAAU,CAAC;oBAAS,CAAC;CAAgD,CAAA;AAEnG;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAatE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,mDAAmD;IACnD,KAAK,KAAK,GAAG;QACX,iCAAiC;QACjC,KAAK,EAAE,MAAM,CAAA;QACb,oBAAoB;QACpB,IAAI,EAAE,IAAI,CAAA;QACV,gCAAgC;QAChC,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAOzF;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOrE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,EAAE,CAAC,EAAE,EACT,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,CAAC,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,EAAE,CAAC,CASxE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CACpB,EAAE,EAAE,EAAE,CAAC,EAAE,EACT,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,CAAC,KAAK,GAClB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CA4BxB;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,iCAAiC;IACjC,KAAK,KAAK,GAAG;QACX,gBAAgB;QAChB,IAAI,EAAE,IAAI,CAAA;KACX,CAAA;IAED,wCAAwC;IACxC,KAAK,MAAM,GACP;QAAE,KAAK,EAAE,YAAY,GAAG,WAAW,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAA;KAAE,GACzD;QAAE,KAAK,CAAC,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAC1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAwBvF;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,oCAAoC;IACpC,KAAK,MAAM,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAA;CACrD"}