tapimo 0.1.0 → 0.3.0

package/dist/db/tables/invitations.d.ts

@@ -0,0 +1,84 @@
+import type { Selectable } from 'kysely';
+import type * as Db from '../Db.js';
+import type * as db_Schema from '../Schema.js';
+import * as Memberships from './memberships.js';
+/** Columns of the `invitations` table, derived from `Schema.Invitation`. */
+export type Table = db_Schema.Invitation;
+/** A stored invitation row. */
+export type Record = Selectable<Table>;
+/**
+ * Inserts an invitation and returns the stored record. Emails are stored
+ * lowercase so matching against verified emails is case-insensitive. Re-inviting
+ * a live (pending) (org, email) refreshes that row — role, inviter, expiry —
+ * rather than accumulating duplicates, matching the `invitations_pending_unique`
+ * partial index.
+ *
+ * @param db - The database.
+ * @param input - The invitation to insert.
+ * @returns The stored record.
+ */
+export declare function create(db: Db.Db, input: create.Input): Promise<Record>;
+export declare namespace create {
+    /** Fields accepted when inserting an invitation. */
+    type Input = {
+        /** Invitee email. */
+        email: string;
+        /** When the invitation expires (ISO 8601). */
+        expiresAt: string;
+        /** User id (`usr_…`) creating the invitation. */
+        invitedBy: string;
+        /** Organization id (`org_…`) the invitation joins. */
+        orgId: string;
+        /** Role granted on accept. */
+        role: Memberships.Role;
+    };
+}
+/**
+ * Reads an invitation by id.
+ *
+ * @param db - The database.
+ * @param id - The invitation id (`inv_…`).
+ * @returns The record, or `undefined` when absent.
+ */
+export declare function get(db: Db.Db, id: string): Promise<Record | undefined>;
+/**
+ * Lists an organization's pending invitations (unaccepted, unrevoked,
+ * unexpired), newest first.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @returns The records.
+ */
+export declare function listByOrg(db: Db.Db, orgId: string): Promise<Record[]>;
+/**
+ * Lists pending invitations addressed to an email, joined with the inviting
+ * organization's name, newest first.
+ *
+ * @param db - The database.
+ * @param email - The invitee email (matched lowercase).
+ * @returns The records with `orgName` from the organization row.
+ */
+export declare function listByEmail(db: Db.Db, email: string): Promise<(Record & {
+    orgName: string;
+})[]>;
+/**
+ * Revokes a pending invitation.
+ *
+ * @param db - The database.
+ * @param id - The invitation id (`inv_…`).
+ * @returns The revoked record, or `undefined` when absent or already settled.
+ */
+export declare function revoke(db: Db.Db, id: string): Promise<Record | undefined>;
+/**
+ * Accepts a pending invitation into a membership, atomically: the conditional
+ * update settles the invitation exactly once (double accepts lose the race).
+ * A new member is inserted at the invited role; an existing member is only ever
+ * elevated to it — accepting never demotes (which could strip the last owner).
+ *
+ * @param db - The database.
+ * @param id - The invitation id (`inv_…`).
+ * @param userId - The accepting user id (`usr_…`).
+ * @returns The accepted record, or `undefined` when absent, settled, or expired.
+ */
+export declare function accept(db: Db.Db, id: string, userId: string): Promise<Record | undefined>;
+//# sourceMappingURL=invitations.d.ts.map

package/dist/db/tables/invitations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../../src/db/tables/invitations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAGxC,OAAO,KAAK,KAAK,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAE/C,4EAA4E;AAC5E,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAA;AAExC,+BAA+B;AAC/B,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;AAEtC;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BtE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,oDAAoD;IACpD,KAAK,KAAK,GAAG;QACX,qBAAqB;QACrB,KAAK,EAAE,MAAM,CAAA;QACb,8CAA8C;QAC9C,SAAS,EAAE,MAAM,CAAA;QACjB,iDAAiD;QACjD,SAAS,EAAE,MAAM,CAAA;QACjB,sDAAsD;QACtD,KAAK,EAAE,MAAM,CAAA;QACb,8BAA8B;QAC9B,IAAI,EAAE,WAAW,CAAC,IAAI,CAAA;KACvB,CAAA;CACF;AAED;;;;;;GAMG;AACH,wBAAgB,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEtE;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAErE;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,CAAC,CAY/F;AAED;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAUzE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAyCzF"}

package/dist/db/tables/invitations.js

@@ -0,0 +1,165 @@
+import * as Id from '../../internal/Id.js';
+import * as Memberships from './memberships.js';
+/**
+ * Inserts an invitation and returns the stored record. Emails are stored
+ * lowercase so matching against verified emails is case-insensitive. Re-inviting
+ * a live (pending) (org, email) refreshes that row — role, inviter, expiry —
+ * rather than accumulating duplicates, matching the `invitations_pending_unique`
+ * partial index.
+ *
+ * @param db - The database.
+ * @param input - The invitation to insert.
+ * @returns The stored record.
+ */
+export function create(db, input) {
+    const now = new Date().toISOString();
+    return db.kysely
+        .insertInto('invitations')
+        .values({
+        acceptedAt: null,
+        createdAt: now,
+        email: input.email.toLowerCase(),
+        expiresAt: input.expiresAt,
+        id: Id.generate('inv'),
+        invitedBy: input.invitedBy,
+        orgId: input.orgId,
+        revokedAt: null,
+        role: input.role,
+    })
+        .onConflict((oc) => oc
+        .columns(['orgId', 'email'])
+        .where('acceptedAt', 'is', null)
+        .where('revokedAt', 'is', null)
+        .doUpdateSet({
+        createdAt: now,
+        expiresAt: input.expiresAt,
+        invitedBy: input.invitedBy,
+        role: input.role,
+    }))
+        .returningAll()
+        .executeTakeFirstOrThrow();
+}
+/**
+ * Reads an invitation by id.
+ *
+ * @param db - The database.
+ * @param id - The invitation id (`inv_…`).
+ * @returns The record, or `undefined` when absent.
+ */
+export function get(db, id) {
+    return db.kysely.selectFrom('invitations').selectAll().where('id', '=', id).executeTakeFirst();
+}
+/**
+ * Lists an organization's pending invitations (unaccepted, unrevoked,
+ * unexpired), newest first.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @returns The records.
+ */
+export function listByOrg(db, orgId) {
+    return pending(db).where('orgId', '=', orgId).orderBy('createdAt', 'desc').execute();
+}
+/**
+ * Lists pending invitations addressed to an email, joined with the inviting
+ * organization's name, newest first.
+ *
+ * @param db - The database.
+ * @param email - The invitee email (matched lowercase).
+ * @returns The records with `orgName` from the organization row.
+ */
+export function listByEmail(db, email) {
+    return db.kysely
+        .selectFrom('invitations')
+        .innerJoin('organizations', 'organizations.id', 'invitations.orgId')
+        .where('invitations.acceptedAt', 'is', null)
+        .where('invitations.revokedAt', 'is', null)
+        .where('invitations.expiresAt', '>', new Date().toISOString())
+        .where('invitations.email', '=', email.toLowerCase())
+        .selectAll('invitations')
+        .select('organizations.name as orgName')
+        .orderBy('invitations.createdAt', 'desc')
+        .execute();
+}
+/**
+ * Revokes a pending invitation.
+ *
+ * @param db - The database.
+ * @param id - The invitation id (`inv_…`).
+ * @returns The revoked record, or `undefined` when absent or already settled.
+ */
+export function revoke(db, id) {
+    const now = new Date().toISOString();
+    return db.kysely
+        .updateTable('invitations')
+        .set({ revokedAt: now })
+        .where('id', '=', id)
+        .where('acceptedAt', 'is', null)
+        .where('revokedAt', 'is', null)
+        .returningAll()
+        .executeTakeFirst();
+}
+/**
+ * Accepts a pending invitation into a membership, atomically: the conditional
+ * update settles the invitation exactly once (double accepts lose the race).
+ * A new member is inserted at the invited role; an existing member is only ever
+ * elevated to it — accepting never demotes (which could strip the last owner).
+ *
+ * @param db - The database.
+ * @param id - The invitation id (`inv_…`).
+ * @param userId - The accepting user id (`usr_…`).
+ * @returns The accepted record, or `undefined` when absent, settled, or expired.
+ */
+export function accept(db, id, userId) {
+    const now = new Date().toISOString();
+    return db.kysely.transaction().execute(async (trx) => {
+        const invitation = await trx
+            .updateTable('invitations')
+            .set({ acceptedAt: now })
+            .where('id', '=', id)
+            .where('acceptedAt', 'is', null)
+            .where('revokedAt', 'is', null)
+            .where('expiresAt', '>', now)
+            .returningAll()
+            .executeTakeFirst();
+        if (!invitation)
+            return undefined;
+        const existing = await trx
+            .selectFrom('memberships')
+            .selectAll()
+            .where('orgId', '=', invitation.orgId)
+            .where('userId', '=', userId)
+            .executeTakeFirst();
+        if (!existing)
+            await trx
+                .insertInto('memberships')
+                .values({
+                createdAt: now,
+                orgId: invitation.orgId,
+                role: invitation.role,
+                updatedAt: now,
+                userId,
+            })
+                // A concurrent accept/join could insert first; keep that membership.
+                .onConflict((oc) => oc.columns(['orgId', 'userId']).doNothing())
+                .execute();
+        else if (Memberships.rank[invitation.role] > Memberships.rank[existing.role])
+            await trx
+                .updateTable('memberships')
+                .set({ role: invitation.role, updatedAt: now })
+                .where('orgId', '=', invitation.orgId)
+                .where('userId', '=', userId)
+                .execute();
+        return invitation;
+    });
+}
+/** Base query selecting pending invitations (unaccepted, unrevoked, unexpired). */
+function pending(db) {
+    return db.kysely
+        .selectFrom('invitations')
+        .selectAll()
+        .where('acceptedAt', 'is', null)
+        .where('revokedAt', 'is', null)
+        .where('expiresAt', '>', new Date().toISOString());
+}
+//# sourceMappingURL=invitations.js.map

package/dist/db/tables/invitations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invitations.js","sourceRoot":"","sources":["../../../src/db/tables/invitations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAG1C,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAQ/C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAmB;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,MAAM,CAAC;QACN,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE;SACC,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC3B,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,WAAW,CAAC;QACX,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CACL;SACA,YAAY,EAAE;SACd,uBAAuB,EAAE,CAAA;AAC9B,CAAC;AAkBD;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,EAAS,EAAE,EAAU;IACvC,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAA;AAChG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,EAAS,EAAE,KAAa;IAChD,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAA;AACtF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,EAAS,EAAE,KAAa;IAClD,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,CAAC,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;SACnE,KAAK,CAAC,wBAAwB,EAAE,IAAI,EAAE,IAAI,CAAC;SAC3C,KAAK,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,CAAC;SAC1C,KAAK,CAAC,uBAAuB,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAC7D,KAAK,CAAC,mBAAmB,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACpD,SAAS,CAAC,aAAa,CAAC;SACxB,MAAM,CAAC,+BAA+B,CAAC;SACvC,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC;SACxC,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,EAAU;IAC1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM;SACb,WAAW,CAAC,aAAa,CAAC;SAC1B,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;SACvB,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,YAAY,EAAE;SACd,gBAAgB,EAAE,CAAA;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,EAAU,EAAE,MAAc;IAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,UAAU,GAAG,MAAM,GAAG;aACzB,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;aACxB,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;aAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;aAC9B,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC;aAC5B,YAAY,EAAE;aACd,gBAAgB,EAAE,CAAA;QACrB,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,GAAG;aACvB,UAAU,CAAC,aAAa,CAAC;aACzB,SAAS,EAAE;aACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC;aACrC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,gBAAgB,EAAE,CAAA;QACrB,IAAI,CAAC,QAAQ;YACX,MAAM,GAAG;iBACN,UAAU,CAAC,aAAa,CAAC;iBACzB,MAAM,CAAC;gBACN,SAAS,EAAE,GAAG;gBACd,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,SAAS,EAAE,GAAG;gBACd,MAAM;aACP,CAAC;gBACF,qEAAqE;iBACpE,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;iBAC/D,OAAO,EAAE,CAAA;aACT,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC1E,MAAM,GAAG;iBACN,WAAW,CAAC,aAAa,CAAC;iBAC1B,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;iBAC9C,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC;iBACrC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;iBAC5B,OAAO,EAAE,CAAA;QACd,OAAO,UAAU,CAAA;IACnB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,OAAO,CAAC,EAAS;IACxB,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,EAAE;SACX,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;AACtD,CAAC"}

package/dist/db/tables/memberships.d.ts

@@ -0,0 +1,108 @@
+import type { Selectable } from 'kysely';
+import type * as Db from '../Db.js';
+import type * as db_Schema from '../Schema.js';
+/** Columns of the `memberships` table, derived from `Schema.Membership`. */
+export type Table = db_Schema.Membership;
+/** A stored membership row. */
+export type Record = Selectable<Table>;
+/** A membership role. */
+export type Role = Record['role'];
+/** Fixed membership roles, least to most privileged. */
+export declare const roles: readonly ["member", "admin", "owner"];
+/** Privilege rank per role; higher ranks satisfy lower minimums. */
+export declare const rank: {
+    readonly admin: 1;
+    readonly member: 0;
+    readonly owner: 2;
+};
+/**
+ * Inserts a membership and returns the stored record.
+ *
+ * @param db - The database.
+ * @param input - The membership to insert.
+ * @returns The stored record.
+ */
+export declare function create(db: Db.Db, input: create.Input): Promise<Record>;
+export declare namespace create {
+    /** Fields accepted when inserting a membership. */
+    type Input = {
+        /** Organization id (`org_…`). */
+        orgId: string;
+        /** Granted role. */
+        role: Role;
+        /** Member user id (`usr_…`). */
+        userId: string;
+    };
+}
+/**
+ * Reads one user's membership in an organization.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @param userId - The member user id (`usr_…`).
+ * @returns The record, or `undefined` when absent.
+ */
+export declare function get(db: Db.Db, orgId: string, userId: string): Promise<Record | undefined>;
+/**
+ * Lists an organization's memberships, oldest first (stable member ordering).
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @returns The records.
+ */
+export declare function listByOrg(db: Db.Db, orgId: string): Promise<Record[]>;
+/**
+ * Lists an organization's memberships joined with member identity (address,
+ * email), oldest first.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @returns The records with `address`/`email` from the member's user row.
+ */
+export declare function listByOrgDetailed(db: Db.Db, orgId: string): Promise<(Record & {
+    address: string | null;
+    email: string | null;
+})[]>;
+/**
+ * Changes a member's role atomically, refusing to demote the last owner. The
+ * org's owner rows are locked for the transaction, so a concurrent demotion or
+ * removal cannot race two guards into leaving the organization ownerless.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @param userId - The member user id (`usr_…`).
+ * @param input - The fields to update.
+ * @returns The updated record, or an `error` when absent or the last owner.
+ */
+export declare function update(db: Db.Db, orgId: string, userId: string, input: update.Input): Promise<update.Result>;
+export declare namespace update {
+    /** Mutable membership fields. */
+    type Input = {
+        /** New role. */
+        role: Role;
+    };
+    /** Outcome of a guarded role change. */
+    type Result = {
+        error: 'last_owner' | 'not_found';
+        record?: undefined;
+    } | {
+        error?: undefined;
+        record: Record;
+    };
+}
+/**
+ * Deletes a membership atomically, refusing to remove the last owner. Locks
+ * the org's owner rows for the transaction (see {@link update}) so concurrent
+ * removals cannot race the organization ownerless.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @param userId - The member user id (`usr_…`).
+ * @returns `removed` on success, otherwise why the removal was refused.
+ */
+export declare function remove(db: Db.Db, orgId: string, userId: string): Promise<remove.Result>;
+export declare namespace remove {
+    /** Outcome of a guarded removal. */
+    type Result = 'last_owner' | 'not_found' | 'removed';
+}
+//# sourceMappingURL=memberships.d.ts.map

package/dist/db/tables/memberships.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memberships.d.ts","sourceRoot":"","sources":["../../../src/db/tables/memberships.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAExC,OAAO,KAAK,KAAK,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAE9C,4EAA4E;AAC5E,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAA;AAExC,+BAA+B;AAC/B,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;AAEtC,yBAAyB;AACzB,MAAM,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;AAEjC,wDAAwD;AACxD,eAAO,MAAM,KAAK,uCAAkE,CAAA;AAEpF,oEAAoE;AACpE,eAAO,MAAM,IAAI;oBAAY,CAAC;qBAAU,CAAC;oBAAS,CAAC;CAAgD,CAAA;AAEnG;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAatE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,mDAAmD;IACnD,KAAK,KAAK,GAAG;QACX,iCAAiC;QACjC,KAAK,EAAE,MAAM,CAAA;QACb,oBAAoB;QACpB,IAAI,EAAE,IAAI,CAAA;QACV,gCAAgC;QAChC,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAOzF;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOrE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,EAAE,CAAC,EAAE,EACT,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,CAAC,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,EAAE,CAAC,CASxE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CACpB,EAAE,EAAE,EAAE,CAAC,EAAE,EACT,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,CAAC,KAAK,GAClB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CA4BxB;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,iCAAiC;IACjC,KAAK,KAAK,GAAG;QACX,gBAAgB;QAChB,IAAI,EAAE,IAAI,CAAA;KACX,CAAA;IAED,wCAAwC;IACxC,KAAK,MAAM,GACP;QAAE,KAAK,EAAE,YAAY,GAAG,WAAW,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAA;KAAE,GACzD;QAAE,KAAK,CAAC,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAC1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAwBvF;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,oCAAoC;IACpC,KAAK,MAAM,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAA;CACrD"}

package/dist/db/tables/memberships.js

@@ -0,0 +1,153 @@
+/** Fixed membership roles, least to most privileged. */
+export const roles = ['member', 'admin', 'owner'];
+/** Privilege rank per role; higher ranks satisfy lower minimums. */
+export const rank = { admin: 1, member: 0, owner: 2 };
+/**
+ * Inserts a membership and returns the stored record.
+ *
+ * @param db - The database.
+ * @param input - The membership to insert.
+ * @returns The stored record.
+ */
+export function create(db, input) {
+    const now = new Date().toISOString();
+    return db.kysely
+        .insertInto('memberships')
+        .values({
+        createdAt: now,
+        orgId: input.orgId,
+        role: input.role,
+        updatedAt: now,
+        userId: input.userId,
+    })
+        .returningAll()
+        .executeTakeFirstOrThrow();
+}
+/**
+ * Reads one user's membership in an organization.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @param userId - The member user id (`usr_…`).
+ * @returns The record, or `undefined` when absent.
+ */
+export function get(db, orgId, userId) {
+    return db.kysely
+        .selectFrom('memberships')
+        .selectAll()
+        .where('orgId', '=', orgId)
+        .where('userId', '=', userId)
+        .executeTakeFirst();
+}
+/**
+ * Lists an organization's memberships, oldest first (stable member ordering).
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @returns The records.
+ */
+export function listByOrg(db, orgId) {
+    return db.kysely
+        .selectFrom('memberships')
+        .selectAll()
+        .where('orgId', '=', orgId)
+        .orderBy('createdAt', 'asc')
+        .execute();
+}
+/**
+ * Lists an organization's memberships joined with member identity (address,
+ * email), oldest first.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @returns The records with `address`/`email` from the member's user row.
+ */
+export function listByOrgDetailed(db, orgId) {
+    return db.kysely
+        .selectFrom('memberships')
+        .innerJoin('users', 'users.id', 'memberships.userId')
+        .where('memberships.orgId', '=', orgId)
+        .selectAll('memberships')
+        .select(['users.address', 'users.email'])
+        .orderBy('memberships.createdAt', 'asc')
+        .execute();
+}
+/**
+ * Changes a member's role atomically, refusing to demote the last owner. The
+ * org's owner rows are locked for the transaction, so a concurrent demotion or
+ * removal cannot race two guards into leaving the organization ownerless.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @param userId - The member user id (`usr_…`).
+ * @param input - The fields to update.
+ * @returns The updated record, or an `error` when absent or the last owner.
+ */
+export function update(db, orgId, userId, input) {
+    const now = new Date().toISOString();
+    return db.kysely.transaction().execute(async (trx) => {
+        const owners = await trx
+            .selectFrom('memberships')
+            .select('userId')
+            .where('orgId', '=', orgId)
+            .where('role', '=', 'owner')
+            .forUpdate()
+            .execute();
+        const current = await trx
+            .selectFrom('memberships')
+            .selectAll()
+            .where('orgId', '=', orgId)
+            .where('userId', '=', userId)
+            .executeTakeFirst();
+        if (!current)
+            return { error: 'not_found' };
+        if (current.role === 'owner' && input.role !== 'owner' && owners.length <= 1)
+            return { error: 'last_owner' };
+        const record = await trx
+            .updateTable('memberships')
+            .set({ role: input.role, updatedAt: now })
+            .where('orgId', '=', orgId)
+            .where('userId', '=', userId)
+            .returningAll()
+            .executeTakeFirstOrThrow();
+        return { record };
+    });
+}
+/**
+ * Deletes a membership atomically, refusing to remove the last owner. Locks
+ * the org's owner rows for the transaction (see {@link update}) so concurrent
+ * removals cannot race the organization ownerless.
+ *
+ * @param db - The database.
+ * @param orgId - The organization id (`org_…`).
+ * @param userId - The member user id (`usr_…`).
+ * @returns `removed` on success, otherwise why the removal was refused.
+ */
+export function remove(db, orgId, userId) {
+    return db.kysely.transaction().execute(async (trx) => {
+        const owners = await trx
+            .selectFrom('memberships')
+            .select('userId')
+            .where('orgId', '=', orgId)
+            .where('role', '=', 'owner')
+            .forUpdate()
+            .execute();
+        const current = await trx
+            .selectFrom('memberships')
+            .selectAll()
+            .where('orgId', '=', orgId)
+            .where('userId', '=', userId)
+            .executeTakeFirst();
+        if (!current)
+            return 'not_found';
+        if (current.role === 'owner' && owners.length <= 1)
+            return 'last_owner';
+        await trx
+            .deleteFrom('memberships')
+            .where('orgId', '=', orgId)
+            .where('userId', '=', userId)
+            .execute();
+        return 'removed';
+    });
+}
+//# sourceMappingURL=memberships.js.map

package/dist/db/tables/memberships.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memberships.js","sourceRoot":"","sources":["../../../src/db/tables/memberships.ts"],"names":[],"mappings":"AAcA,wDAAwD;AACxD,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAoC,CAAA;AAEpF,oEAAoE;AACpE,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAgD,CAAA;AAEnG;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAmB;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,MAAM,CAAC;QACN,SAAS,EAAE,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;SACD,YAAY,EAAE;SACd,uBAAuB,EAAE,CAAA;AAC9B,CAAC;AAcD;;;;;;;GAOG;AACH,MAAM,UAAU,GAAG,CAAC,EAAS,EAAE,KAAa,EAAE,MAAc;IAC1D,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,EAAE;SACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;SAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;SAC5B,gBAAgB,EAAE,CAAA;AACvB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,EAAS,EAAE,KAAa;IAChD,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,EAAE;SACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;SAC1B,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC;SAC3B,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAS,EACT,KAAa;IAEb,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,oBAAoB,CAAC;SACpD,KAAK,CAAC,mBAAmB,EAAE,GAAG,EAAE,KAAK,CAAC;SACtC,SAAS,CAAC,aAAa,CAAC;SACxB,MAAM,CAAC,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;SACxC,OAAO,CAAC,uBAAuB,EAAE,KAAK,CAAC;SACvC,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CACpB,EAAS,EACT,KAAa,EACb,MAAc,EACd,KAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,GAAG;aACrB,UAAU,CAAC,aAAa,CAAC;aACzB,MAAM,CAAC,QAAQ,CAAC;aAChB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;aAC3B,SAAS,EAAE;aACX,OAAO,EAAE,CAAA;QACZ,MAAM,OAAO,GAAG,MAAM,GAAG;aACtB,UAAU,CAAC,aAAa,CAAC;aACzB,SAAS,EAAE;aACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,gBAAgB,EAAE,CAAA;QACrB,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,WAAoB,EAAE,CAAA;QACpD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;YAC1E,OAAO,EAAE,KAAK,EAAE,YAAqB,EAAE,CAAA;QACzC,MAAM,MAAM,GAAG,MAAM,GAAG;aACrB,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;aACzC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,YAAY,EAAE;aACd,uBAAuB,EAAE,CAAA;QAC5B,OAAO,EAAE,MAAM,EAAE,CAAA;IACnB,CAAC,CAAC,CAAA;AACJ,CAAC;AAeD;;;;;;;;;GASG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAa,EAAE,MAAc;IAC7D,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,GAAG;aACrB,UAAU,CAAC,aAAa,CAAC;aACzB,MAAM,CAAC,QAAQ,CAAC;aAChB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;aAC3B,SAAS,EAAE;aACX,OAAO,EAAE,CAAA;QACZ,MAAM,OAAO,GAAG,MAAM,GAAG;aACtB,UAAU,CAAC,aAAa,CAAC;aACzB,SAAS,EAAE;aACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,gBAAgB,EAAE,CAAA;QACrB,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAA;QAChC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO,YAAY,CAAA;QACvE,MAAM,GAAG;aACN,UAAU,CAAC,aAAa,CAAC;aACzB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;aAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,OAAO,EAAE,CAAA;QACZ,OAAO,SAAS,CAAA;IAClB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/db/tables/organizations.d.ts

@@ -1,6 +1,7 @@
 import type { Selectable } from 'kysely';
 import type * as Db from '../Db.js';
 import type * as db_Schema from '../Schema.js';
+import type * as Memberships from './memberships.js';
 /** Columns of the `organizations` table, derived from `Schema.Organization`. */
 export type Table = db_Schema.Organization;
 /** A stored organization row. */
@@ -23,8 +24,36 @@ export declare namespace create {
         id?: string | undefined;
         /** Human-readable organization name. */
         name: string;
+        /** Owning user id (`usr_…`); null for organizations created by the super admin. */
+        userId?: string | undefined;
     };
 }
+/**
+ * Inserts an organization owned by `userId` — the org row plus its `owner`
+ * membership, atomically.
+ *
+ * @param db - The database.
+ * @param input - The organization to insert.
+ * @returns The stored record.
+ */
+export declare function createOwned(db: Db.Db, input: createOwned.Input): Promise<Record>;
+export declare namespace createOwned {
+    /** Fields accepted when inserting a user-owned organization. */
+    type Input = {
+        /** Human-readable organization name. */
+        name: string;
+        /** Owning user id (`usr_…`), granted the `owner` membership. */
+        userId: string;
+    };
+}
+/**
+ * Deletes an organization and its owned rows atomically.
+ *
+ * @param db - The database.
+ * @param id - The organization id (`org_…`).
+ * @returns Whether the organization existed and was deleted.
+ */
+export declare function deleteOrganization(db: Db.Db, id: string): Promise<boolean>;
 /**
  * Reads an organization by id.
  *
@@ -40,6 +69,25 @@ export declare function get(db: Db.Db, id: string): Promise<Record | undefined>;
  * @returns The records.
  */
 export declare function list(db: Db.Db): Promise<Record[]>;
+/**
+ * Lists organizations owned by `userId`, newest first.
+ *
+ * @param db - The database.
+ * @param userId - The owning user id (`usr_…`).
+ * @returns The records.
+ */
+export declare function listByUser(db: Db.Db, userId: string): Promise<Record[]>;
+/**
+ * Lists organizations `userId` is a member of (any role), newest first. Each
+ * row carries the caller's membership `role`.
+ *
+ * @param db - The database.
+ * @param userId - The member user id (`usr_…`).
+ * @returns The records.
+ */
+export declare function listByMember(db: Db.Db, userId: string): Promise<(Record & {
+    role: Memberships.Role;
+})[]>;
 /**
  * Renames an organization, bumping `updatedAt`.
  *

package/dist/db/tables/organizations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../../src/db/tables/organizations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAGxC,OAAO,KAAK,KAAK,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAE9C,gFAAgF;AAChF,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAA;AAE1C,iCAAiC;AACjC,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;AAEtC;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAatE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,sDAAsD;IACtD,KAAK,KAAK,GAAG;QACX,iFAAiF;QACjF,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC9B,oEAAoE;QACpE,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACvB,wCAAwC;QACxC,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;CACF;AAED;;;;;;GAMG;AACH,wBAAgB,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEtE;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAEjD;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO9F;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,mCAAmC;IACnC,KAAK,KAAK,GAAG;QACX,4CAA4C;QAC5C,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;CACF;AAED;;;;;;;GAOG;AACH,wBAAsB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAa1E;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,4DAA4D;IAC5D,KAAK,KAAK,GAAG;QACX,8DAA8D;QAC9D,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC9B,gEAAgE;QAChE,EAAE,EAAE,MAAM,CAAA;QACV,4DAA4D;QAC5D,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC1B,CAAA;CACF"}
+{"version":3,"file":"organizations.d.ts","sourceRoot":"","sources":["../../../src/db/tables/organizations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAGxC,OAAO,KAAK,KAAK,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAEpD,gFAAgF;AAChF,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,CAAA;AAE1C,iCAAiC;AACjC,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;AAEtC;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CActE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,sDAAsD;IACtD,KAAK,KAAK,GAAG;QACX,iFAAiF;QACjF,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC9B,oEAAoE;QACpE,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACvB,wCAAwC;QACxC,IAAI,EAAE,MAAM,CAAA;QACZ,mFAAmF;QACnF,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC5B,CAAA;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CA2BhF;AAED,MAAM,CAAC,OAAO,WAAW,WAAW,CAAC;IACnC,gEAAgE;IAChE,KAAK,KAAK,GAAG;QACX,wCAAwC;QACxC,IAAI,EAAE,MAAM,CAAA;QACZ,gEAAgE;QAChE,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;CACF;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAiB1E;AAED;;;;;;GAMG;AACH,wBAAgB,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEtE;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAEjD;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOvE;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,EAAE,EAAE,EAAE,CAAC,EAAE,EACT,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,MAAM,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAA;CAAE,CAAC,EAAE,CAAC,CASlD;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO9F;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,mCAAmC;IACnC,KAAK,KAAK,GAAG;QACX,4CAA4C;QAC5C,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;CACF;AAED;;;;;;;GAOG;AACH,wBAAsB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAa1E;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,4DAA4D;IAC5D,KAAK,KAAK,GAAG;QACX,8DAA8D;QAC9D,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC9B,gEAAgE;QAChE,EAAE,EAAE,MAAM,CAAA;QACV,4DAA4D;QAC5D,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC1B,CAAA;CACF"}