tapimo 0.0.2 → 0.2.0

package/dist/db/tables/memberships.js

@@ -0,0 +1,153 @@
+/** Fixed membership roles, least to most privileged. */
+export const roles = ['member', 'admin', 'owner'];
+/** Privilege rank per role; higher ranks satisfy lower minimums. */
+export const rank = { admin: 1, member: 0, owner: 2 };
+/**
+ * Inserts a membership and returns the stored record.
+ *
+ * @param db - The database.
+ * @param input - The membership to insert.
+ * @returns The stored record.
+ */
+export function create(db, input) {
+    const now = new Date().toISOString();
+    return db.kysely
+        .insertInto('memberships')
+        .values({
+        createdAt: now,
+        orgId: input.orgId,
+        role: input.role,
+        updatedAt: now,
+        userId: input.userId,
+    })
+        .returningAll()
+        .executeTakeFirstOrThrow();
+}
+/**
+ * Reads one user's membership in an organization.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @param userId - The member user id (`usr_…`).
+ * @returns The record, or `undefined` when absent.
+ */
+export function get(db, orgId, userId) {
+    return db.kysely
+        .selectFrom('memberships')
+        .selectAll()
+        .where('orgId', '=', orgId)
+        .where('userId', '=', userId)
+        .executeTakeFirst();
+}
+/**
+ * Lists an organization's memberships, oldest first (stable member ordering).
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @returns The records.
+ */
+export function listByOrg(db, orgId) {
+    return db.kysely
+        .selectFrom('memberships')
+        .selectAll()
+        .where('orgId', '=', orgId)
+        .orderBy('createdAt', 'asc')
+        .execute();
+}
+/**
+ * Lists an organization's memberships joined with member identity (address,
+ * email), oldest first.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @returns The records with `address`/`email` from the member's user row.
+ */
+export function listByOrgDetailed(db, orgId) {
+    return db.kysely
+        .selectFrom('memberships')
+        .innerJoin('users', 'users.id', 'memberships.userId')
+        .where('memberships.orgId', '=', orgId)
+        .selectAll('memberships')
+        .select(['users.address', 'users.email'])
+        .orderBy('memberships.createdAt', 'asc')
+        .execute();
+}
+/**
+ * Changes a member's role atomically, refusing to demote the last owner. The
+ * org's owner rows are locked for the transaction, so a concurrent demotion or
+ * removal cannot race two guards into leaving the organization ownerless.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @param userId - The member user id (`usr_…`).
+ * @param input - The fields to update.
+ * @returns The updated record, or an `error` when absent or the last owner.
+ */
+export function update(db, orgId, userId, input) {
+    const now = new Date().toISOString();
+    return db.kysely.transaction().execute(async (trx) => {
+        const owners = await trx
+            .selectFrom('memberships')
+            .select('userId')
+            .where('orgId', '=', orgId)
+            .where('role', '=', 'owner')
+            .forUpdate()
+            .execute();
+        const current = await trx
+            .selectFrom('memberships')
+            .selectAll()
+            .where('orgId', '=', orgId)
+            .where('userId', '=', userId)
+            .executeTakeFirst();
+        if (!current)
+            return { error: 'not_found' };
+        if (current.role === 'owner' && input.role !== 'owner' && owners.length <= 1)
+            return { error: 'last_owner' };
+        const record = await trx
+            .updateTable('memberships')
+            .set({ role: input.role, updatedAt: now })
+            .where('orgId', '=', orgId)
+            .where('userId', '=', userId)
+            .returningAll()
+            .executeTakeFirstOrThrow();
+        return { record };
+    });
+}
+/**
+ * Deletes a membership atomically, refusing to remove the last owner. Locks
+ * the org's owner rows for the transaction (see {@link update}) so concurrent
+ * removals cannot race the organization ownerless.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @param userId - The member user id (`usr_…`).
+ * @returns `removed` on success, otherwise why the removal was refused.
+ */
+export function remove(db, orgId, userId) {
+    return db.kysely.transaction().execute(async (trx) => {
+        const owners = await trx
+            .selectFrom('memberships')
+            .select('userId')
+            .where('orgId', '=', orgId)
+            .where('role', '=', 'owner')
+            .forUpdate()
+            .execute();
+        const current = await trx
+            .selectFrom('memberships')
+            .selectAll()
+            .where('orgId', '=', orgId)
+            .where('userId', '=', userId)
+            .executeTakeFirst();
+        if (!current)
+            return 'not_found';
+        if (current.role === 'owner' && owners.length <= 1)
+            return 'last_owner';
+        await trx
+            .deleteFrom('memberships')
+            .where('orgId', '=', orgId)
+            .where('userId', '=', userId)
+            .execute();
+        return 'removed';
+    });
+}
+//# sourceMappingURL=memberships.js.map

package/dist/db/tables/memberships.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memberships.js","sourceRoot":"","sources":["../../../src/db/tables/memberships.ts"],"names":[],"mappings":"AAcA,wDAAwD;AACxD,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAoC,CAAA;AAEpF,oEAAoE;AACpE,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAgD,CAAA;AAEnG;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAmB;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,MAAM,CAAC;QACN,SAAS,EAAE,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;SACD,YAAY,EAAE;SACd,uBAAuB,EAAE,CAAA;AAC9B,CAAC;AAcD;;;;;;;GAOG;AACH,MAAM,UAAU,GAAG,CAAC,EAAS,EAAE,KAAa,EAAE,MAAc;IAC1D,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,EAAE;SACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;SAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;SAC5B,gBAAgB,EAAE,CAAA;AACvB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,EAAS,EAAE,KAAa;IAChD,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,EAAE;SACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;SAC1B,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC;SAC3B,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAS,EACT,KAAa;IAEb,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,oBAAoB,CAAC;SACpD,KAAK,CAAC,mBAAmB,EAAE,GAAG,EAAE,KAAK,CAAC;SACtC,SAAS,CAAC,aAAa,CAAC;SACxB,MAAM,CAAC,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;SACxC,OAAO,CAAC,uBAAuB,EAAE,KAAK,CAAC;SACvC,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CACpB,EAAS,EACT,KAAa,EACb,MAAc,EACd,KAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,GAAG;aACrB,UAAU,CAAC,aAAa,CAAC;aACzB,MAAM,CAAC,QAAQ,CAAC;aAChB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;aAC3B,SAAS,EAAE;aACX,OAAO,EAAE,CAAA;QACZ,MAAM,OAAO,GAAG,MAAM,GAAG;aACtB,UAAU,CAAC,aAAa,CAAC;aACzB,SAAS,EAAE;aACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,gBAAgB,EAAE,CAAA;QACrB,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,WAAoB,EAAE,CAAA;QACpD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;YAC1E,OAAO,EAAE,KAAK,EAAE,YAAqB,EAAE,CAAA;QACzC,MAAM,MAAM,GAAG,MAAM,GAAG;aACrB,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;aACzC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,YAAY,EAAE;aACd,uBAAuB,EAAE,CAAA;QAC5B,OAAO,EAAE,MAAM,EAAE,CAAA;IACnB,CAAC,CAAC,CAAA;AACJ,CAAC;AAeD;;;;;;;;;GASG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAa,EAAE,MAAc;IAC7D,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,GAAG;aACrB,UAAU,CAAC,aAAa,CAAC;aACzB,MAAM,CAAC,QAAQ,CAAC;aAChB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;aAC3B,SAAS,EAAE;aACX,OAAO,EAAE,CAAA;QACZ,MAAM,OAAO,GAAG,MAAM,GAAG;aACtB,UAAU,CAAC,aAAa,CAAC;aACzB,SAAS,EAAE;aACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,gBAAgB,EAAE,CAAA;QACrB,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAA;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO,YAAY,CAAA;QACvE,MAAM,GAAG;aACN,UAAU,CAAC,aAAa,CAAC;aACzB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,OAAO,EAAE,CAAA;QACZ,OAAO,SAAS,CAAA;IAClB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/db/tables/organizations.d.ts

@@ -0,0 +1,123 @@
+import type { Selectable } from 'kysely';
+import type * as Db from '../Db.js';
+import type * as db_Schema from '../Schema.js';
+/** Columns of the `organizations` table, derived from `Schema.Organization`. */
+export type Table = db_Schema.Organization;
+/** A stored organization row. */
+export type Record = Selectable<Table>;
+/**
+ * Inserts an organization and returns the stored record. The `id` defaults to
+ * a generated `org_…` handle when omitted.
+ *
+ * @param db - The database.
+ * @param input - The organization to insert.
+ * @returns The stored record.
+ */
+export declare function create(db: Db.Db, input: create.Input): Promise<Record>;
+export declare namespace create {
+    /** Fields accepted when inserting an organization. */
+    type Input = {
+        /** Identity creating the organization (e.g. admin email), recorded for audit. */
+        createdBy?: string | undefined;
+        /** Explicit id; a generated `org_…` handle is used when omitted. */
+        id?: string | undefined;
+        /** Human-readable organization name. */
+        name: string;
+        /** Owning user id (`usr_…`); null for organizations created by the super admin. */
+        userId?: string | undefined;
+    };
+}
+/**
+ * Inserts an organization owned by `userId` — the org row plus its `owner`
+ * membership, atomically.
+ *
+ * @param db - The database.
+ * @param input - The organization to insert.
+ * @returns The stored record.
+ */
+export declare function createOwned(db: Db.Db, input: createOwned.Input): Promise<Record>;
+export declare namespace createOwned {
+    /** Fields accepted when inserting a user-owned organization. */
+    type Input = {
+        /** Human-readable organization name. */
+        name: string;
+        /** Owning user id (`usr_…`), granted the `owner` membership. */
+        userId: string;
+    };
+}
+/**
+ * Deletes an organization and its owned rows atomically.
+ *
+ * @param db - The database.
+ * @param id - The organization id (`org_…`).
+ * @returns Whether the organization existed and was deleted.
+ */
+export declare function deleteOrganization(db: Db.Db, id: string): Promise<boolean>;
+/**
+ * Reads an organization by id.
+ *
+ * @param db - The database.
+ * @param id - The organization id (`org_…`).
+ * @returns The record, or `undefined` when absent.
+ */
+export declare function get(db: Db.Db, id: string): Promise<Record | undefined>;
+/**
+ * Lists organizations, newest first.
+ *
+ * @param db - The database.
+ * @returns The records.
+ */
+export declare function list(db: Db.Db): Promise<Record[]>;
+/**
+ * Lists organizations owned by `userId`, newest first.
+ *
+ * @param db - The database.
+ * @param userId - The owning user id (`usr_…`).
+ * @returns The records.
+ */
+export declare function listByUser(db: Db.Db, userId: string): Promise<Record[]>;
+/**
+ * Lists organizations `userId` is a member of (any role), newest first.
+ *
+ * @param db - The database.
+ * @param userId - The member user id (`usr_…`).
+ * @returns The records.
+ */
+export declare function listByMember(db: Db.Db, userId: string): Promise<Record[]>;
+/**
+ * Renames an organization, bumping `updatedAt`.
+ *
+ * @param db - The database.
+ * @param id - The organization id (`org_…`).
+ * @param input - The fields to update.
+ * @returns The updated record, or `undefined` when absent.
+ */
+export declare function update(db: Db.Db, id: string, input: update.Input): Promise<Record | undefined>;
+export declare namespace update {
+    /** Mutable organization fields. */
+    type Input = {
+        /** New human-readable organization name. */
+        name: string;
+    };
+}
+/**
+ * Inserts an organization when absent (`ON CONFLICT DO NOTHING`) — the
+ * mint/backfill path, where a key's `orgId` must resolve to a real row. The
+ * `name` defaults to the id for degenerate orgs created by the mint fallback.
+ *
+ * @param db - The database.
+ * @param input - The organization to ensure.
+ */
+export declare function upsert(db: Db.Db, input: upsert.Input): Promise<void>;
+export declare namespace upsert {
+    /** Fields accepted when ensuring an organization exists. */
+    type Input = {
+        /** Identity creating the organization, recorded for audit. */
+        createdBy?: string | undefined;
+        /** The organization id (`org_…`, or a mint-fallback key id). */
+        id: string;
+        /** Human-readable organization name; defaults to the id. */
+        name?: string | undefined;
+    };
+}
+//# sourceMappingURL=organizations.d.ts.map

package/dist/db/tables/organizations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../../src/db/tables/organizations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAGxC,OAAO,KAAK,KAAK,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAE9C,gFAAgF;AAChF,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAA;AAE1C,iCAAiC;AACjC,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;AAEtC;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CActE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,sDAAsD;IACtD,KAAK,KAAK,GAAG;QACX,iFAAiF;QACjF,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC9B,oEAAoE;QACpE,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACvB,wCAAwC;QACxC,IAAI,EAAE,MAAM,CAAA;QACZ,mFAAmF;QACnF,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC5B,CAAA;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CA2BhF;AAED,MAAM,CAAC,OAAO,WAAW,WAAW,CAAC;IACnC,gEAAgE;IAChE,KAAK,KAAK,GAAG;QACX,wCAAwC;QACxC,IAAI,EAAE,MAAM,CAAA;QACZ,gEAAgE;QAChE,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;CACF;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAa1E;AAED;;;;;;GAMG;AACH,wBAAgB,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEtE;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAEjD;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOvE;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAQzE;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO9F;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,mCAAmC;IACnC,KAAK,KAAK,GAAG;QACX,4CAA4C;QAC5C,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;CACF;AAED;;;;;;;GAOG;AACH,wBAAsB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAa1E;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,4DAA4D;IAC5D,KAAK,KAAK,GAAG;QACX,8DAA8D;QAC9D,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC9B,gEAAgE;QAChE,EAAE,EAAE,MAAM,CAAA;QACV,4DAA4D;QAC5D,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC1B,CAAA;CACF"}

package/dist/db/tables/organizations.js

@@ -0,0 +1,170 @@
+import { nanoid } from 'nanoid';
+/**
+ * Inserts an organization and returns the stored record. The `id` defaults to
+ * a generated `org_…` handle when omitted.
+ *
+ * @param db - The database.
+ * @param input - The organization to insert.
+ * @returns The stored record.
+ */
+export function create(db, input) {
+    const now = new Date().toISOString();
+    return db.kysely
+        .insertInto('organizations')
+        .values({
+        createdAt: now,
+        createdBy: input.createdBy ?? null,
+        id: input.id ?? `org_${nanoid()}`,
+        name: input.name,
+        updatedAt: now,
+        userId: input.userId ?? null,
+    })
+        .returningAll()
+        .executeTakeFirstOrThrow();
+}
+/**
+ * Inserts an organization owned by `userId` — the org row plus its `owner`
+ * membership, atomically.
+ *
+ * @param db - The database.
+ * @param input - The organization to insert.
+ * @returns The stored record.
+ */
+export function createOwned(db, input) {
+    const now = new Date().toISOString();
+    return db.kysely.transaction().execute(async (trx) => {
+        const record = await trx
+            .insertInto('organizations')
+            .values({
+            createdAt: now,
+            createdBy: input.userId,
+            id: `org_${nanoid()}`,
+            name: input.name,
+            updatedAt: now,
+            userId: input.userId,
+        })
+            .returningAll()
+            .executeTakeFirstOrThrow();
+        await trx
+            .insertInto('memberships')
+            .values({
+            createdAt: now,
+            orgId: record.id,
+            role: 'owner',
+            updatedAt: now,
+            userId: input.userId,
+        })
+            .execute();
+        return record;
+    });
+}
+/**
+ * Deletes an organization and its owned rows atomically.
+ *
+ * @param db - The database.
+ * @param id - The organization id (`org_…`).
+ * @returns Whether the organization existed and was deleted.
+ */
+export function deleteOrganization(db, id) {
+    return db.kysely.transaction().execute(async (trx) => {
+        await trx
+            .deleteFrom('webhook_subscriptions')
+            .where('ownerType', '=', 'api_key')
+            .where('ownerId', '=', id)
+            .execute();
+        await trx.deleteFrom('invitations').where('orgId', '=', id).execute();
+        await trx.deleteFrom('memberships').where('orgId', '=', id).execute();
+        await trx.deleteFrom('projects').where('orgId', '=', id).execute();
+        const result = await trx.deleteFrom('organizations').where('id', '=', id).executeTakeFirst();
+        return result.numDeletedRows > 0n;
+    });
+}
+/**
+ * Reads an organization by id.
+ *
+ * @param db - The database.
+ * @param id - The organization id (`org_…`).
+ * @returns The record, or `undefined` when absent.
+ */
+export function get(db, id) {
+    return db.kysely.selectFrom('organizations').selectAll().where('id', '=', id).executeTakeFirst();
+}
+/**
+ * Lists organizations, newest first.
+ *
+ * @param db - The database.
+ * @returns The records.
+ */
+export function list(db) {
+    return db.kysely.selectFrom('organizations').selectAll().orderBy('createdAt', 'desc').execute();
+}
+/**
+ * Lists organizations owned by `userId`, newest first.
+ *
+ * @param db - The database.
+ * @param userId - The owning user id (`usr_…`).
+ * @returns The records.
+ */
+export function listByUser(db, userId) {
+    return db.kysely
+        .selectFrom('organizations')
+        .selectAll()
+        .where('userId', '=', userId)
+        .orderBy('createdAt', 'desc')
+        .execute();
+}
+/**
+ * Lists organizations `userId` is a member of (any role), newest first.
+ *
+ * @param db - The database.
+ * @param userId - The member user id (`usr_…`).
+ * @returns The records.
+ */
+export function listByMember(db, userId) {
+    return db.kysely
+        .selectFrom('organizations')
+        .innerJoin('memberships', 'memberships.orgId', 'organizations.id')
+        .where('memberships.userId', '=', userId)
+        .selectAll('organizations')
+        .orderBy('organizations.createdAt', 'desc')
+        .execute();
+}
+/**
+ * Renames an organization, bumping `updatedAt`.
+ *
+ * @param db - The database.
+ * @param id - The organization id (`org_…`).
+ * @param input - The fields to update.
+ * @returns The updated record, or `undefined` when absent.
+ */
+export function update(db, id, input) {
+    return db.kysely
+        .updateTable('organizations')
+        .set({ name: input.name, updatedAt: new Date().toISOString() })
+        .where('id', '=', id)
+        .returningAll()
+        .executeTakeFirst();
+}
+/**
+ * Inserts an organization when absent (`ON CONFLICT DO NOTHING`) — the
+ * mint/backfill path, where a key's `orgId` must resolve to a real row. The
+ * `name` defaults to the id for degenerate orgs created by the mint fallback.
+ *
+ * @param db - The database.
+ * @param input - The organization to ensure.
+ */
+export async function upsert(db, input) {
+    const now = new Date().toISOString();
+    await db.kysely
+        .insertInto('organizations')
+        .values({
+        createdAt: now,
+        createdBy: input.createdBy ?? null,
+        id: input.id,
+        name: input.name ?? input.id,
+        updatedAt: now,
+    })
+        .onConflict((oc) => oc.column('id').doNothing())
+        .execute();
+}
+//# sourceMappingURL=organizations.js.map

package/dist/db/tables/organizations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizations.js","sourceRoot":"","sources":["../../../src/db/tables/organizations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAW/B;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAmB;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,eAAe,CAAC;SAC3B,MAAM,CAAC;QACN,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,OAAO,MAAM,EAAE,EAAE;QACjC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;KAC7B,CAAC;SACD,YAAY,EAAE;SACd,uBAAuB,EAAE,CAAA;AAC9B,CAAC;AAgBD;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,EAAS,EAAE,KAAwB;IAC7D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,GAAG;aACrB,UAAU,CAAC,eAAe,CAAC;aAC3B,MAAM,CAAC;YACN,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,MAAM;YACvB,EAAE,EAAE,OAAO,MAAM,EAAE,EAAE;YACrB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;aACD,YAAY,EAAE;aACd,uBAAuB,EAAE,CAAA;QAC5B,MAAM,GAAG;aACN,UAAU,CAAC,aAAa,CAAC;aACzB,MAAM,CAAC;YACN,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;aACD,OAAO,EAAE,CAAA;QACZ,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CAAA;AACJ,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAS,EAAE,EAAU;IACtD,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,GAAG;aACN,UAAU,CAAC,uBAAuB,CAAC;aACnC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,SAAS,CAAC;aAClC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC;aACzB,OAAO,EAAE,CAAA;QACZ,MAAM,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;QACrE,MAAM,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;QACrE,MAAM,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;QAClE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAA;QAC5F,OAAO,MAAM,CAAC,cAAc,GAAG,EAAE,CAAA;IACnC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,EAAS,EAAE,EAAU;IACvC,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAA;AAClG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAAC,EAAS;IAC5B,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAA;AACjG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,EAAS,EAAE,MAAc;IAClD,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,eAAe,CAAC;SAC3B,SAAS,EAAE;SACX,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;SAC5B,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;SAC5B,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,EAAS,EAAE,MAAc;IACpD,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,eAAe,CAAC;SAC3B,SAAS,CAAC,aAAa,EAAE,mBAAmB,EAAE,kBAAkB,CAAC;SACjE,KAAK,CAAC,oBAAoB,EAAE,GAAG,EAAE,MAAM,CAAC;SACxC,SAAS,CAAC,eAAe,CAAC;SAC1B,OAAO,CAAC,yBAAyB,EAAE,MAAM,CAAC;SAC1C,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,EAAU,EAAE,KAAmB;IAC/D,OAAO,EAAE,CAAC,MAAM;SACb,WAAW,CAAC,eAAe,CAAC;SAC5B,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;SAC9D,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,YAAY,EAAE;SACd,gBAAgB,EAAE,CAAA;AACvB,CAAC;AAUD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,EAAS,EAAE,KAAmB;IACzD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,MAAM,EAAE,CAAC,MAAM;SACZ,UAAU,CAAC,eAAe,CAAC;SAC3B,MAAM,CAAC;QACN,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE;QAC5B,SAAS,EAAE,GAAG;KACf,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;SAC/C,OAAO,EAAE,CAAA;AACd,CAAC"}

package/dist/db/tables/projects.d.ts

@@ -0,0 +1,65 @@
+import type { Selectable } from 'kysely';
+import type * as Db from '../Db.js';
+import type * as db_Schema from '../Schema.js';
+/** Columns of the `projects` table, derived from `Schema.Project`. */
+export type Table = db_Schema.Project;
+/** A stored project row. */
+export type Record = Selectable<Table>;
+/**
+ * Inserts a project and returns the stored record.
+ *
+ * @param db - The database.
+ * @param input - The project to insert.
+ * @returns The stored record.
+ */
+export declare function create(db: Db.Db, input: create.Input): Promise<Record>;
+export declare namespace create {
+    /** Fields accepted when inserting a project. */
+    type Input = {
+        /** Human-readable project name. */
+        name: string;
+        /** Owning organization id (`org_…`). */
+        orgId: string;
+    };
+}
+/**
+ * Deletes a project.
+ *
+ * @param db - The database.
+ * @param id - The project id (`prj_…`).
+ * @returns Whether the project existed and was deleted.
+ */
+export declare function deleteProject(db: Db.Db, id: string): Promise<boolean>;
+/**
+ * Reads a project by id.
+ *
+ * @param db - The database.
+ * @param id - The project id (`prj_…`).
+ * @returns The record, or `undefined` when absent.
+ */
+export declare function get(db: Db.Db, id: string): Promise<Record | undefined>;
+/**
+ * Lists an organization's projects, newest first.
+ *
+ * @param db - The database.
+ * @param orgId - The owning organization id (`org_…`).
+ * @returns The records.
+ */
+export declare function listByOrg(db: Db.Db, orgId: string): Promise<Record[]>;
+/**
+ * Renames a project, bumping `updatedAt`.
+ *
+ * @param db - The database.
+ * @param id - The project id (`prj_…`).
+ * @param input - The fields to update.
+ * @returns The updated record, or `undefined` when absent.
+ */
+export declare function update(db: Db.Db, id: string, input: update.Input): Promise<Record | undefined>;
+export declare namespace update {
+    /** Mutable project fields. */
+    type Input = {
+        /** New human-readable project name. */
+        name: string;
+    };
+}
+//# sourceMappingURL=projects.d.ts.map

package/dist/db/tables/projects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.d.ts","sourceRoot":"","sources":["../../../src/db/tables/projects.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAGxC,OAAO,KAAK,KAAK,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAE9C,sEAAsE;AACtE,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAA;AAErC,4BAA4B;AAC5B,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;AAEtC;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAatE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,gDAAgD;IAChD,KAAK,KAAK,GAAG;QACX,mCAAmC;QACnC,IAAI,EAAE,MAAM,CAAA;QACZ,wCAAwC;QACxC,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG3E;AAED;;;;;;GAMG;AACH,wBAAgB,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEtE;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOrE;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO9F;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,8BAA8B;IAC9B,KAAK,KAAK,GAAG;QACX,uCAAuC;QACvC,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;CACF"}

package/dist/db/tables/projects.js

@@ -0,0 +1,75 @@
+import { nanoid } from 'nanoid';
+/**
+ * Inserts a project and returns the stored record.
+ *
+ * @param db - The database.
+ * @param input - The project to insert.
+ * @returns The stored record.
+ */
+export function create(db, input) {
+    const now = new Date().toISOString();
+    return db.kysely
+        .insertInto('projects')
+        .values({
+        createdAt: now,
+        id: `prj_${nanoid()}`,
+        name: input.name,
+        orgId: input.orgId,
+        updatedAt: now,
+    })
+        .returningAll()
+        .executeTakeFirstOrThrow();
+}
+/**
+ * Deletes a project.
+ *
+ * @param db - The database.
+ * @param id - The project id (`prj_…`).
+ * @returns Whether the project existed and was deleted.
+ */
+export async function deleteProject(db, id) {
+    const result = await db.kysely.deleteFrom('projects').where('id', '=', id).executeTakeFirst();
+    return result.numDeletedRows > 0n;
+}
+/**
+ * Reads a project by id.
+ *
+ * @param db - The database.
+ * @param id - The project id (`prj_…`).
+ * @returns The record, or `undefined` when absent.
+ */
+export function get(db, id) {
+    return db.kysely.selectFrom('projects').selectAll().where('id', '=', id).executeTakeFirst();
+}
+/**
+ * Lists an organization's projects, newest first.
+ *
+ * @param db - The database.
+ * @param orgId - The owning organization id (`org_…`).
+ * @returns The records.
+ */
+export function listByOrg(db, orgId) {
+    return db.kysely
+        .selectFrom('projects')
+        .selectAll()
+        .where('orgId', '=', orgId)
+        .orderBy('createdAt', 'desc')
+        .execute();
+}
+/**
+ * Renames a project, bumping `updatedAt`.
+ *
+ * @param db - The database.
+ * @param id - The project id (`prj_…`).
+ * @param input - The fields to update.
+ * @returns The updated record, or `undefined` when absent.
+ */
+export function update(db, id, input) {
+    return db.kysely
+        .updateTable('projects')
+        .set({ name: input.name, updatedAt: new Date().toISOString() })
+        .where('id', '=', id)
+        .returningAll()
+        .executeTakeFirst();
+}
+//# sourceMappingURL=projects.js.map

package/dist/db/tables/projects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.js","sourceRoot":"","sources":["../../../src/db/tables/projects.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAW/B;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAmB;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,UAAU,CAAC;SACtB,MAAM,CAAC;QACN,SAAS,EAAE,GAAG;QACd,EAAE,EAAE,OAAO,MAAM,EAAE,EAAE;QACrB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,GAAG;KACf,CAAC;SACD,YAAY,EAAE;SACd,uBAAuB,EAAE,CAAA;AAC9B,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAS,EAAE,EAAU;IACvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAA;IAC7F,OAAO,MAAM,CAAC,cAAc,GAAG,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,EAAS,EAAE,EAAU;IACvC,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAA;AAC7F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,EAAS,EAAE,KAAa;IAChD,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,UAAU,CAAC;SACtB,SAAS,EAAE;SACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;SAC1B,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC;SAC5B,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,EAAU,EAAE,KAAmB;IAC/D,OAAO,EAAE,CAAC,MAAM;SACb,WAAW,CAAC,UAAU,CAAC;SACvB,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;SAC9D,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,YAAY,EAAE;SACd,gBAAgB,EAAE,CAAA;AACvB,CAAC"}