tapimo 0.14.0 → 0.15.0

package/dist/db/tables/apiKeyRevocations.js

@@ -0,0 +1,98 @@
+/** Retains fences beyond KV propagation and the one-minute in-process auth cache. */
+export const retentionMs = 7 * 24 * 60 * 60_000;
+/** Non-expiring fence used until KV deletion is confirmed. */
+export const pendingExpiresAt = '9999-12-31T23:59:59.999Z';
+/** Maximum expired fences reclaimed by one revocation. */
+export const pruneLimit = 1_000;
+/** Returns whether one stable API-key id has been revoked. */
+export async function exists(db, id) {
+    return ((await db.kysely
+        .selectFrom('api_key_revocations')
+        .select('id')
+        .where('id', '=', id)
+        .where('expiresAt', '>', new Date().toISOString())
+        .executeTakeFirst()) !== undefined);
+}
+/** Fences one API-key id through the propagation window. Rotations use a new id. */
+export async function mark(db, id, orgId) {
+    const time = new Date();
+    await prune(db, time);
+    const organization = orgId
+        ? await db.kysely
+            .selectFrom('organizations')
+            .select('id')
+            .where('id', '=', orgId)
+            .executeTakeFirst()
+        : undefined;
+    await db.kysely
+        .insertInto('api_key_revocations')
+        .values({
+        expiresAt: new Date(time.getTime() + retentionMs).toISOString(),
+        id,
+        orgId: organization?.id ?? null,
+        revokedAt: time.toISOString(),
+    })
+        .onConflict((conflict) => conflict.column('id').doUpdateSet({
+        expiresAt: new Date(time.getTime() + retentionMs).toISOString(),
+    }))
+        .execute();
+}
+/** Fences one API-key id without releasing its slot until KV deletion succeeds. */
+export async function markPending(db, id, orgId) {
+    const time = new Date();
+    const now = time.toISOString();
+    const organization = orgId
+        ? await db.kysely
+            .selectFrom('organizations')
+            .select('id')
+            .where('id', '=', orgId)
+            .executeTakeFirst()
+        : undefined;
+    await db.kysely
+        .insertInto('api_key_revocations')
+        .values({
+        expiresAt: pendingExpiresAt,
+        id,
+        orgId: organization?.id ?? null,
+        revokedAt: time.toISOString(),
+    })
+        .onConflict((conflict) => conflict
+        .column('id')
+        .doUpdateSet({ expiresAt: pendingExpiresAt })
+        .where('api_key_revocations.expiresAt', '<=', now))
+        .execute();
+}
+/** Deletes pending fences whose admission slots are being removed with an owner. */
+export async function deletePending(db, ids) {
+    if (ids.length === 0)
+        return;
+    await db.kysely
+        .deleteFrom('api_key_revocations')
+        .where('id', 'in', ids)
+        .where('expiresAt', '=', pendingExpiresAt)
+        .execute();
+}
+/** Reclaims a bounded batch of fences after stale KV and auth entries have expired. */
+export async function prune(db, time = new Date()) {
+    const result = await db.kysely
+        .with((cte) => cte('expired').materialized(), (qb) => qb
+        .selectFrom('api_key_revocations')
+        .select('id')
+        .where('expiresAt', '<=', time.toISOString())
+        .orderBy('expiresAt')
+        .orderBy('id')
+        .limit(pruneLimit)
+        .forUpdate()
+        .skipLocked())
+        .with('deleted_admissions', (qb) => qb
+        .deleteFrom('api_key_admissions')
+        .using('expired')
+        .whereRef('api_key_admissions.id', '=', 'expired.id'))
+        .deleteFrom('api_key_revocations')
+        .using('expired')
+        .whereRef('api_key_revocations.id', '=', 'expired.id')
+        .returning('api_key_revocations.id')
+        .execute();
+    return result.length;
+}
+//# sourceMappingURL=apiKeyRevocations.js.map

package/dist/db/tables/apiKeyRevocations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiKeyRevocations.js","sourceRoot":"","sources":["../../../src/db/tables/apiKeyRevocations.ts"],"names":[],"mappings":"AAMA,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAA;AAE/C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,gBAAgB,GAAG,0BAA0B,CAAA;AAE1D,0DAA0D;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,CAAA;AAE/B,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,EAAS,EAAE,EAAU;IAChD,OAAO,CACL,CAAC,MAAM,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,qBAAqB,CAAC;SACjC,MAAM,CAAC,IAAI,CAAC;SACZ,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SACjD,gBAAgB,EAAE,CAAC,KAAK,SAAS,CACrC,CAAA;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,EAAS,EAAE,EAAU,EAAE,KAAoB;IACpE,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAA;IACvB,MAAM,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;IACrB,MAAM,YAAY,GAAG,KAAK;QACxB,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM;aACZ,UAAU,CAAC,eAAe,CAAC;aAC3B,MAAM,CAAC,IAAI,CAAC;aACZ,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC;aACvB,gBAAgB,EAAE;QACvB,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,EAAE,CAAC,MAAM;SACZ,UAAU,CAAC,qBAAqB,CAAC;SACjC,MAAM,CAAC;QACN,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE;QAC/D,EAAE;QACF,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,IAAI;QAC/B,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE;KAC9B,CAAC;SACD,UAAU,CAAC,CAAC,QAAQ,EAAE,EAAE,CACvB,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC;QAChC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE;KAChE,CAAC,CACH;SACA,OAAO,EAAE,CAAA;AACd,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,EAAS,EAAE,EAAU,EAAE,KAAoB;IAC3E,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAA;IACvB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IAC9B,MAAM,YAAY,GAAG,KAAK;QACxB,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM;aACZ,UAAU,CAAC,eAAe,CAAC;aAC3B,MAAM,CAAC,IAAI,CAAC;aACZ,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC;aACvB,gBAAgB,EAAE;QACvB,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,EAAE,CAAC,MAAM;SACZ,UAAU,CAAC,qBAAqB,CAAC;SACjC,MAAM,CAAC;QACN,SAAS,EAAE,gBAAgB;QAC3B,EAAE;QACF,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,IAAI;QAC/B,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE;KAC9B,CAAC;SACD,UAAU,CAAC,CAAC,QAAQ,EAAE,EAAE,CACvB,QAAQ;SACL,MAAM,CAAC,IAAI,CAAC;SACZ,WAAW,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;SAC5C,KAAK,CAAC,+BAA+B,EAAE,IAAI,EAAE,GAAG,CAAC,CACrD;SACA,OAAO,EAAE,CAAA;AACd,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAS,EAAE,GAAsB;IACnE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAC5B,MAAM,EAAE,CAAC,MAAM;SACZ,UAAU,CAAC,qBAAqB,CAAC;SACjC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC;SACtB,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,gBAAgB,CAAC;SACzC,OAAO,EAAE,CAAA;AACd,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,EAAS,EAAE,IAAI,GAAG,IAAI,IAAI,EAAE;IACtD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM;SAC3B,IAAI,CACH,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,YAAY,EAAE,EACtC,CAAC,EAAE,EAAE,EAAE,CACL,EAAE;SACC,UAAU,CAAC,qBAAqB,CAAC;SACjC,MAAM,CAAC,IAAI,CAAC;SACZ,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;SAC5C,OAAO,CAAC,WAAW,CAAC;SACpB,OAAO,CAAC,IAAI,CAAC;SACb,KAAK,CAAC,UAAU,CAAC;SACjB,SAAS,EAAE;SACX,UAAU,EAAE,CAClB;SACA,IAAI,CAAC,oBAAoB,EAAE,CAAC,EAAE,EAAE,EAAE,CACjC,EAAE;SACC,UAAU,CAAC,oBAAoB,CAAC;SAChC,KAAK,CAAC,SAAS,CAAC;SAChB,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,YAAY,CAAC,CACxD;SACA,UAAU,CAAC,qBAAqB,CAAC;SACjC,KAAK,CAAC,SAAS,CAAC;SAChB,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,YAAY,CAAC;SACrD,SAAS,CAAC,wBAAwB,CAAC;SACnC,OAAO,EAAE,CAAA;IACZ,OAAO,MAAM,CAAC,MAAM,CAAA;AACtB,CAAC"}

package/dist/db/tables/authAccounts.d.ts

@@ -0,0 +1,47 @@
+import type { ColumnType } from 'kysely';
+import type * as Db from '../Db.js';
+import type * as db_Schema from '../Schema.js';
+/** A Better Auth `Date` written as canonical ISO text. */
+type Timestamp = ColumnType<string, Date | string, Date | string>;
+/** Columns of Better Auth's pinned `account` model. */
+export type Table = Omit<db_Schema.AuthAccount, 'accessTokenExpiresAt' | 'createdAt' | 'refreshTokenExpiresAt' | 'updatedAt'> & {
+    accessTokenExpiresAt: Timestamp | null;
+    createdAt: Timestamp;
+    refreshTokenExpiresAt: Timestamp | null;
+    updatedAt: Timestamp;
+};
+/**
+ * Reads the user linked to a SIWE wallet.
+ *
+ * @param db - The database.
+ * @param address - The wallet address.
+ * @returns The linked user id, or `undefined` when absent.
+ */
+export declare function getWalletUserId(db: Db.Db, address: string): Promise<string | undefined>;
+/**
+ * Reads the wallet linked to a user.
+ *
+ * @param db - The database.
+ * @param userId - The user id.
+ * @returns The linked wallet address, or `undefined` when absent.
+ */
+export declare function getWalletAddress(db: Db.Db, userId: string): Promise<string | undefined>;
+/**
+ * Sets a SIWE wallet's stable user and returns the stored user id.
+ *
+ * @param db - The database.
+ * @param options - Wallet link fields.
+ * @returns The stored user id.
+ */
+export declare function setWalletUser(db: Db.Db, options: setWalletUser.Options): Promise<string>;
+export declare namespace setWalletUser {
+    /** Fields accepted when setting a SIWE wallet user. */
+    type Options = {
+        /** Wallet address to link. */
+        address: string;
+        /** Stable owning user id. */
+        userId: string;
+    };
+}
+export {};
+//# sourceMappingURL=authAccounts.d.ts.map

package/dist/db/tables/authAccounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authAccounts.d.ts","sourceRoot":"","sources":["../../../src/db/tables/authAccounts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAGxC,OAAO,KAAK,KAAK,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAE9C,0DAA0D;AAC1D,KAAK,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,EAAE,IAAI,GAAG,MAAM,CAAC,CAAA;AAEjE,uDAAuD;AACvD,MAAM,MAAM,KAAK,GAAG,IAAI,CACtB,SAAS,CAAC,WAAW,EACrB,sBAAsB,GAAG,WAAW,GAAG,uBAAuB,GAAG,WAAW,CAC7E,GAAG;IACF,oBAAoB,EAAE,SAAS,GAAG,IAAI,CAAA;IACtC,SAAS,EAAE,SAAS,CAAA;IACpB,qBAAqB,EAAE,SAAS,GAAG,IAAI,CAAA;IACvC,SAAS,EAAE,SAAS,CAAA;CACrB,CAAA;AAID;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAQ7F;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAS7F;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA8B9F;AAED,MAAM,CAAC,OAAO,WAAW,aAAa,CAAC;IACrC,uDAAuD;IACvD,KAAK,OAAO,GAAG;QACb,8BAA8B;QAC9B,OAAO,EAAE,MAAM,CAAA;QACf,6BAA6B;QAC7B,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;CACF"}

package/dist/db/tables/authAccounts.js

@@ -0,0 +1,72 @@
+import * as Id from '../../internal/Id.js';
+const walletIssuer = 'tempo:siwe';
+/**
+ * Reads the user linked to a SIWE wallet.
+ *
+ * @param db - The database.
+ * @param address - The wallet address.
+ * @returns The linked user id, or `undefined` when absent.
+ */
+export async function getWalletUserId(db, address) {
+    const account = await db.kysely
+        .selectFrom('auth_accounts')
+        .select('userId')
+        .where('accountId', '=', address.toLowerCase())
+        .where('issuer', '=', walletIssuer)
+        .executeTakeFirst();
+    return account?.userId;
+}
+/**
+ * Reads the wallet linked to a user.
+ *
+ * @param db - The database.
+ * @param userId - The user id.
+ * @returns The linked wallet address, or `undefined` when absent.
+ */
+export async function getWalletAddress(db, userId) {
+    const account = await db.kysely
+        .selectFrom('auth_accounts')
+        .select('accountId')
+        .where('issuer', '=', walletIssuer)
+        .where('userId', '=', userId)
+        .orderBy('createdAt', 'asc')
+        .executeTakeFirst();
+    return account?.accountId;
+}
+/**
+ * Sets a SIWE wallet's stable user and returns the stored user id.
+ *
+ * @param db - The database.
+ * @param options - Wallet link fields.
+ * @returns The stored user id.
+ */
+export async function setWalletUser(db, options) {
+    const accountId = options.address.toLowerCase();
+    const now = new Date().toISOString();
+    const account = await db.kysely
+        .insertInto('auth_accounts')
+        .values({
+        accessToken: null,
+        accessTokenExpiresAt: null,
+        accountId,
+        createdAt: now,
+        id: Id.generate('acc'),
+        idToken: null,
+        issuer: walletIssuer,
+        password: null,
+        providerId: 'siwe',
+        refreshToken: null,
+        refreshTokenExpiresAt: null,
+        scope: null,
+        updatedAt: now,
+        userId: options.userId,
+    })
+        .onConflict((oc) => oc.columns(['issuer', 'accountId']).doUpdateSet({
+        updatedAt: now,
+        userId: options.userId,
+    }))
+        .returning('userId')
+        .executeTakeFirstOrThrow();
+    return account.userId;
+}
+//# sourceMappingURL=authAccounts.js.map

package/dist/db/tables/authAccounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authAccounts.js","sourceRoot":"","sources":["../../../src/db/tables/authAccounts.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAkB1C,MAAM,YAAY,GAAG,YAAY,CAAA;AAEjC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAS,EAAE,OAAe;IAC9D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM;SAC5B,UAAU,CAAC,eAAe,CAAC;SAC3B,MAAM,CAAC,QAAQ,CAAC;SAChB,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;SAC9C,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC;SAClC,gBAAgB,EAAE,CAAA;IACrB,OAAO,OAAO,EAAE,MAAM,CAAA;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAS,EAAE,MAAc;IAC9D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM;SAC5B,UAAU,CAAC,eAAe,CAAC;SAC3B,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC;SAClC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;SAC5B,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC;SAC3B,gBAAgB,EAAE,CAAA;IACrB,OAAO,OAAO,EAAE,SAAS,CAAA;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAS,EAAE,OAA8B;IAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,CAAA;IAC/C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,MAAM;SAC5B,UAAU,CAAC,eAAe,CAAC;SAC3B,MAAM,CAAC;QACN,WAAW,EAAE,IAAI;QACjB,oBAAoB,EAAE,IAAI;QAC1B,SAAS;QACT,SAAS,EAAE,GAAG;QACd,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,MAAM;QAClB,YAAY,EAAE,IAAI;QAClB,qBAAqB,EAAE,IAAI;QAC3B,KAAK,EAAE,IAAI;QACX,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;QAC9C,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CACH;SACA,SAAS,CAAC,QAAQ,CAAC;SACnB,uBAAuB,EAAE,CAAA;IAC5B,OAAO,OAAO,CAAC,MAAM,CAAA;AACvB,CAAC"}

package/dist/db/tables/authSessions.d.ts

@@ -0,0 +1,12 @@
+import type { ColumnType } from 'kysely';
+import type * as db_Schema from '../Schema.js';
+/** A Better Auth `Date` written as canonical ISO text. */
+type Timestamp = ColumnType<string, Date, Date>;
+/** Columns of Better Auth's pinned `session` model. */
+export type Table = Omit<db_Schema.AuthSession, 'createdAt' | 'expiresAt' | 'updatedAt'> & {
+    createdAt: Timestamp;
+    expiresAt: Timestamp;
+    updatedAt: Timestamp;
+};
+export {};
+//# sourceMappingURL=authSessions.d.ts.map

package/dist/db/tables/authSessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authSessions.d.ts","sourceRoot":"","sources":["../../../src/db/tables/authSessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAExC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAE9C,0DAA0D;AAC1D,KAAK,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AAE/C,uDAAuD;AACvD,MAAM,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC,GAAG;IACzF,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,EAAE,SAAS,CAAA;CACrB,CAAA"}

package/dist/db/tables/authSessions.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=authSessions.js.map

package/dist/db/tables/authSessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authSessions.js","sourceRoot":"","sources":["../../../src/db/tables/authSessions.ts"],"names":[],"mappings":""}

package/dist/db/tables/authVerifications.d.ts

@@ -0,0 +1,12 @@
+import type { ColumnType } from 'kysely';
+import type * as db_Schema from '../Schema.js';
+/** A Better Auth `Date` written as canonical ISO text. */
+type Timestamp = ColumnType<string, Date, Date>;
+/** Columns of Better Auth's pinned `verification` model. */
+export type Table = Omit<db_Schema.AuthVerification, 'createdAt' | 'expiresAt' | 'updatedAt'> & {
+    createdAt: Timestamp;
+    expiresAt: Timestamp;
+    updatedAt: Timestamp;
+};
+export {};
+//# sourceMappingURL=authVerifications.d.ts.map

package/dist/db/tables/authVerifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authVerifications.d.ts","sourceRoot":"","sources":["../../../src/db/tables/authVerifications.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAExC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAE9C,0DAA0D;AAC1D,KAAK,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AAE/C,4DAA4D;AAC5D,MAAM,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC,GAAG;IAC9F,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,EAAE,SAAS,CAAA;IACpB,SAAS,EAAE,SAAS,CAAA;CACrB,CAAA"}

package/dist/db/tables/authVerifications.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=authVerifications.js.map

package/dist/db/tables/authVerifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authVerifications.js","sourceRoot":"","sources":["../../../src/db/tables/authVerifications.ts"],"names":[],"mappings":""}

package/dist/db/tables/invitations.d.ts

@@ -21,6 +21,8 @@ export declare function create(db: Db.Db, input: create.Input): Promise<Record>;
 export declare namespace create {
     /** Fields accepted when inserting an invitation. */
     type Input = {
+        /** Session user whose current organization role authorizes this write. */
+        callerUserId?: string | undefined;
         /** Invitee email. */
         email: string;
         /** When the invitation expires (ISO 8601). */
@@ -66,9 +68,19 @@ export declare function listByEmail(db: Db.Db, email: string): Promise<(Record &
  *
  * @param db - The database.
  * @param id - The invitation id (`inv_…`).
+ * @param options - Organization and session authority constraints.
  * @returns The revoked record, or `undefined` when absent or already settled.
  */
-export declare function revoke(db: Db.Db, id: string): Promise<Record | undefined>;
+export declare function revoke(db: Db.Db, id: string, options?: revoke.Options): Promise<Record | undefined>;
+export declare namespace revoke {
+    /** Optional scope and session authority constraints for a revocation. */
+    type Options = {
+        /** Session user whose current organization role authorizes this write. */
+        callerUserId?: string | undefined;
+        /** Organization that must own the invitation. */
+        orgId?: string | undefined;
+    };
+}
 /**
  * Accepts a pending invitation into a membership, atomically: the conditional
  * update settles the invitation exactly once (double accepts lose the race).
@@ -81,4 +93,8 @@ export declare function revoke(db: Db.Db, id: string): Promise<Record | undefine
  * @returns The accepted record, or `undefined` when absent, settled, or expired.
  */
 export declare function accept(db: Db.Db, id: string, userId: string): Promise<Record | undefined>;
+/** The caller's current role cannot manage the invitation. */
+export declare class InvitationRoleForbiddenError extends Error {
+    name: string;
+}
 //# sourceMappingURL=invitations.d.ts.map

package/dist/db/tables/invitations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../../src/db/tables/invitations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAGxC,OAAO,KAAK,KAAK,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAE/C,4EAA4E;AAC5E,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAA;AAExC,+BAA+B;AAC/B,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;AAEtC;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAgCtE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,oDAAoD;IACpD,KAAK,KAAK,GAAG;QACX,qBAAqB;QACrB,KAAK,EAAE,MAAM,CAAA;QACb,8CAA8C;QAC9C,SAAS,EAAE,MAAM,CAAA;QACjB,kDAAkD;QAClD,SAAS,EAAE,MAAM,CAAA;QACjB,sDAAsD;QACtD,KAAK,EAAE,MAAM,CAAA;QACb,8BAA8B;QAC9B,IAAI,EAAE,WAAW,CAAC,IAAI,CAAA;KACvB,CAAA;CACF;AAED;;;;;;GAMG;AACH,wBAAgB,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEtE;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAErE;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,CAAC,CAY/F;AAED;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAUzE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAyCzF"}
+{"version":3,"file":"invitations.d.ts","sourceRoot":"","sources":["../../../src/db/tables/invitations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAGxC,OAAO,KAAK,KAAK,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAC9C,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAE/C,4EAA4E;AAC5E,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAA;AAExC,+BAA+B;AAC/B,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;AAEtC;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAqEtE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,oDAAoD;IACpD,KAAK,KAAK,GAAG;QACX,0EAA0E;QAC1E,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACjC,qBAAqB;QACrB,KAAK,EAAE,MAAM,CAAA;QACb,8CAA8C;QAC9C,SAAS,EAAE,MAAM,CAAA;QACjB,kDAAkD;QAClD,SAAS,EAAE,MAAM,CAAA;QACjB,sDAAsD;QACtD,KAAK,EAAE,MAAM,CAAA;QACb,8BAA8B;QAC9B,IAAI,EAAE,WAAW,CAAC,IAAI,CAAA;KACvB,CAAA;CACF;AAED;;;;;;GAMG;AACH,wBAAgB,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEtE;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAErE;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,CAAC,CAY/F;AAED;;;;;;;GAOG;AACH,wBAAgB,MAAM,CACpB,EAAE,EAAE,EAAE,CAAC,EAAE,EACT,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,MAAM,CAAC,OAAY,GAC3B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAsC7B;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,yEAAyE;IACzE,KAAK,OAAO,GAAG;QACb,0EAA0E;QAC1E,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QACjC,iDAAiD;QACjD,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAC3B,CAAA;CACF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmDzF;AAYD,8DAA8D;AAC9D,qBAAa,4BAA6B,SAAQ,KAAK;IAC5C,IAAI,SAA6C;CAC3D"}

package/dist/db/tables/invitations.js

@@ -13,34 +13,66 @@ import * as Memberships from './memberships.js';
  */
 export function create(db, input) {
     const now = new Date().toISOString();
-    return db.kysely
-        .insertInto('invitations')
-        .values({
-        acceptedAt: null,
-        createdAt: now,
-        email: input.email.toLowerCase(),
-        expiresAt: input.expiresAt,
-        // Keep the legacy column inert until it can be removed safely.
-        grantsEarlyAccess: false,
-        id: Id.generate('inv'),
-        invitedBy: input.invitedBy,
-        orgId: input.orgId,
-        revokedAt: null,
-        role: input.role,
-    })
-        .onConflict((oc) => oc
-        .columns(['orgId', 'email'])
-        .where('acceptedAt', 'is', null)
-        .where('revokedAt', 'is', null)
-        .doUpdateSet({
-        createdAt: now,
-        expiresAt: input.expiresAt,
-        grantsEarlyAccess: false,
-        invitedBy: input.invitedBy,
-        role: input.role,
-    }))
-        .returningAll()
-        .executeTakeFirstOrThrow();
+    return db.kysely.transaction().execute(async (trx) => {
+        const existingRoleAtMost = await (async () => {
+            const callerUserId = input.callerUserId;
+            if (callerUserId === undefined)
+                return undefined;
+            const caller = await trx
+                .selectFrom('memberships')
+                .select('role')
+                .where('orgId', '=', input.orgId)
+                .where('userId', '=', callerUserId)
+                .forUpdate()
+                .executeTakeFirst();
+            if (!caller ||
+                Memberships.rank[caller.role] < Memberships.rank.admin ||
+                Memberships.rank[input.role] > Memberships.rank[caller.role])
+                throw new InvitationRoleForbiddenError();
+            return caller.role;
+        })();
+        return trx
+            .insertInto('invitations')
+            .values({
+            acceptedAt: null,
+            createdAt: now,
+            email: input.email.toLowerCase(),
+            expiresAt: input.expiresAt,
+            // Keep the legacy column inert until it can be removed safely.
+            grantsEarlyAccess: false,
+            id: Id.generate('inv'),
+            invitedBy: input.invitedBy,
+            orgId: input.orgId,
+            revokedAt: null,
+            role: input.role,
+        })
+            .onConflict((oc) => {
+            const update = oc
+                .columns(['orgId', 'email'])
+                .where('acceptedAt', 'is', null)
+                .where('revokedAt', 'is', null)
+                .doUpdateSet({
+                createdAt: now,
+                expiresAt: input.expiresAt,
+                grantsEarlyAccess: false,
+                invitedBy: input.invitedBy,
+                role: input.role,
+            });
+            if (existingRoleAtMost === undefined)
+                return update;
+            return update.where((eb) => eb.or([
+                eb('invitations.expiresAt', '<=', now),
+                eb('invitations.role', 'in', Memberships.roles.filter((role) => Memberships.rank[role] <= Memberships.rank[existingRoleAtMost])),
+            ]));
+        })
+            .returningAll()
+            .executeTakeFirst()
+            .then((record) => {
+            if (!record)
+                throw new InvitationRoleForbiddenError();
+            return record;
+        });
+    });
 }
 /**
  * Reads an invitation by id.
@@ -89,18 +121,51 @@ export function listByEmail(db, email) {
  *
  * @param db - The database.
  * @param id - The invitation id (`inv_…`).
+ * @param options - Organization and session authority constraints.
  * @returns The revoked record, or `undefined` when absent or already settled.
  */
-export function revoke(db, id) {
+export function revoke(db, id, options = {}) {
     const now = new Date().toISOString();
-    return db.kysely
-        .updateTable('invitations')
-        .set({ revokedAt: now })
-        .where('id', '=', id)
-        .where('acceptedAt', 'is', null)
-        .where('revokedAt', 'is', null)
-        .returningAll()
-        .executeTakeFirst();
+    return db.kysely.transaction().execute(async (trx) => {
+        const caller = await (async () => {
+            const callerUserId = options.callerUserId;
+            if (callerUserId === undefined)
+                return undefined;
+            const orgId = options.orgId;
+            if (orgId === undefined)
+                throw new Error('Caller authority requires an organization');
+            const record = await trx
+                .selectFrom('memberships')
+                .select('role')
+                .where('orgId', '=', orgId)
+                .where('userId', '=', callerUserId)
+                .forUpdate()
+                .executeTakeFirst();
+            if (!record || Memberships.rank[record.role] < Memberships.rank.admin)
+                throw new InvitationRoleForbiddenError();
+            return record;
+        })();
+        let query = trx
+            .selectFrom('invitations')
+            .selectAll()
+            .where('id', '=', id)
+            .where('acceptedAt', 'is', null)
+            .where('revokedAt', 'is', null)
+            .where('expiresAt', '>', now);
+        if (options.orgId !== undefined)
+            query = query.where('orgId', '=', options.orgId);
+        const invitation = await query.forUpdate().executeTakeFirst();
+        if (!invitation)
+            return undefined;
+        if (caller && Memberships.rank[invitation.role] > Memberships.rank[caller.role])
+            throw new InvitationRoleForbiddenError();
+        return trx
+            .updateTable('invitations')
+            .set({ revokedAt: now })
+            .where('id', '=', invitation.id)
+            .returningAll()
+            .executeTakeFirst();
+    });
 }
 /**
  * Accepts a pending invitation into a membership, atomically: the conditional
@@ -116,23 +181,34 @@ export function revoke(db, id) {
 export function accept(db, id, userId) {
     const now = new Date().toISOString();
     return db.kysely.transaction().execute(async (trx) => {
-        const invitation = await trx
-            .updateTable('invitations')
-            .set({ acceptedAt: now })
+        const candidate = await trx
+            .selectFrom('invitations')
+            .select('orgId')
             .where('id', '=', id)
             .where('acceptedAt', 'is', null)
             .where('revokedAt', 'is', null)
             .where('expiresAt', '>', now)
-            .returningAll()
             .executeTakeFirst();
-        if (!invitation)
+        if (!candidate)
             return undefined;
         const existing = await trx
             .selectFrom('memberships')
             .selectAll()
-            .where('orgId', '=', invitation.orgId)
+            .where('orgId', '=', candidate.orgId)
             .where('userId', '=', userId)
+            .forUpdate()
             .executeTakeFirst();
+        const invitation = await trx
+            .updateTable('invitations')
+            .set({ acceptedAt: now })
+            .where('id', '=', id)
+            .where('acceptedAt', 'is', null)
+            .where('revokedAt', 'is', null)
+            .where('expiresAt', '>', now)
+            .returningAll()
+            .executeTakeFirst();
+        if (!invitation)
+            return undefined;
         if (!existing)
             await trx
                 .insertInto('memberships')
@@ -165,4 +241,8 @@ function pending(db) {
         .where('revokedAt', 'is', null)
         .where('expiresAt', '>', new Date().toISOString());
 }
+/** The caller's current role cannot manage the invitation. */
+export class InvitationRoleForbiddenError extends Error {
+    name = 'Invitations.InvitationRoleForbiddenError';
+}
 //# sourceMappingURL=invitations.js.map

package/dist/db/tables/invitations.js.map

@@ -1 +1 @@
-{"version":3,"file":"invitations.js","sourceRoot":"","sources":["../../../src/db/tables/invitations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAG1C,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAQ/C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAmB;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,MAAM,CAAC;QACN,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,+DAA+D;QAC/D,iBAAiB,EAAE,KAAK;QACxB,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC;SACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CACjB,EAAE;SACC,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;SAC3B,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,WAAW,CAAC;QACX,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,iBAAiB,EAAE,KAAK;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CACL;SACA,YAAY,EAAE;SACd,uBAAuB,EAAE,CAAA;AAC9B,CAAC;AAkBD;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,EAAS,EAAE,EAAU;IACvC,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAA;AAChG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,EAAS,EAAE,KAAa;IAChD,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAA;AACtF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,EAAS,EAAE,KAAa;IAClD,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,CAAC,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;SACnE,KAAK,CAAC,wBAAwB,EAAE,IAAI,EAAE,IAAI,CAAC;SAC3C,KAAK,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,CAAC;SAC1C,KAAK,CAAC,uBAAuB,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAC7D,KAAK,CAAC,mBAAmB,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACpD,SAAS,CAAC,aAAa,CAAC;SACxB,MAAM,CAAC,+BAA+B,CAAC;SACvC,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC;SACxC,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,EAAU;IAC1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM;SACb,WAAW,CAAC,aAAa,CAAC;SAC1B,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;SACvB,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;SACpB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,YAAY,EAAE;SACd,gBAAgB,EAAE,CAAA;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,EAAU,EAAE,MAAc;IAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,UAAU,GAAG,MAAM,GAAG;aACzB,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;aACxB,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;aAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;aAC9B,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC;aAC5B,YAAY,EAAE;aACd,gBAAgB,EAAE,CAAA;QACrB,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,GAAG;aACvB,UAAU,CAAC,aAAa,CAAC;aACzB,SAAS,EAAE;aACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC;aACrC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,gBAAgB,EAAE,CAAA;QACrB,IAAI,CAAC,QAAQ;YACX,MAAM,GAAG;iBACN,UAAU,CAAC,aAAa,CAAC;iBACzB,MAAM,CAAC;gBACN,SAAS,EAAE,GAAG;gBACd,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,SAAS,EAAE,GAAG;gBACd,MAAM;aACP,CAAC;gBACF,qEAAqE;iBACpE,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;iBAC/D,OAAO,EAAE,CAAA;aACT,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC1E,MAAM,GAAG;iBACN,WAAW,CAAC,aAAa,CAAC;iBAC1B,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;iBAC9C,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC;iBACrC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;iBAC5B,OAAO,EAAE,CAAA;QACd,OAAO,UAAU,CAAA;IACnB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,OAAO,CAAC,EAAS;IACxB,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,EAAE;SACX,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;AACtD,CAAC"}
+{"version":3,"file":"invitations.js","sourceRoot":"","sources":["../../../src/db/tables/invitations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAG1C,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAQ/C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,KAAmB;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,kBAAkB,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;YAC3C,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;YACvC,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YAChD,MAAM,MAAM,GAAG,MAAM,GAAG;iBACrB,UAAU,CAAC,aAAa,CAAC;iBACzB,MAAM,CAAC,MAAM,CAAC;iBACd,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC;iBAChC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC;iBAClC,SAAS,EAAE;iBACX,gBAAgB,EAAE,CAAA;YACrB,IACE,CAAC,MAAM;gBACP,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK;gBACtD,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAE5D,MAAM,IAAI,4BAA4B,EAAE,CAAA;YAC1C,OAAO,MAAM,CAAC,IAAI,CAAA;QACpB,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,GAAG;aACP,UAAU,CAAC,aAAa,CAAC;aACzB,MAAM,CAAC;YACN,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,+DAA+D;YAC/D,iBAAiB,EAAE,KAAK;YACxB,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC;aACD,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE;YACjB,MAAM,MAAM,GAAG,EAAE;iBACd,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;iBAC3B,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;iBAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;iBAC9B,WAAW,CAAC;gBACX,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,iBAAiB,EAAE,KAAK;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAA;YACJ,IAAI,kBAAkB,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAA;YACnD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CACzB,EAAE,CAAC,EAAE,CAAC;gBACJ,EAAE,CAAC,uBAAuB,EAAE,IAAI,EAAE,GAAG,CAAC;gBACtC,EAAE,CACA,kBAAkB,EAClB,IAAI,EACJ,WAAW,CAAC,KAAK,CAAC,MAAM,CACtB,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CACzE,CACF;aACF,CAAC,CACH,CAAA;QACH,CAAC,CAAC;aACD,YAAY,EAAE;aACd,gBAAgB,EAAE;aAClB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,4BAA4B,EAAE,CAAA;YACrD,OAAO,MAAM,CAAA;QACf,CAAC,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;AACJ,CAAC;AAoBD;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,EAAS,EAAE,EAAU;IACvC,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAA;AAChG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,EAAS,EAAE,KAAa;IAChD,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAA;AACtF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,EAAS,EAAE,KAAa;IAClD,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,CAAC,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;SACnE,KAAK,CAAC,wBAAwB,EAAE,IAAI,EAAE,IAAI,CAAC;SAC3C,KAAK,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,CAAC;SAC1C,KAAK,CAAC,uBAAuB,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAC7D,KAAK,CAAC,mBAAmB,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;SACpD,SAAS,CAAC,aAAa,CAAC;SACxB,MAAM,CAAC,+BAA+B,CAAC;SACvC,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC;SACxC,OAAO,EAAE,CAAA;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CACpB,EAAS,EACT,EAAU,EACV,OAAO,GAAmB,EAAE;IAE5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAA;YACzC,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;YAC3B,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;YACrF,MAAM,MAAM,GAAG,MAAM,GAAG;iBACrB,UAAU,CAAC,aAAa,CAAC;iBACzB,MAAM,CAAC,MAAM,CAAC;iBACd,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC;iBAC1B,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC;iBAClC,SAAS,EAAE;iBACX,gBAAgB,EAAE,CAAA;YACrB,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK;gBACnE,MAAM,IAAI,4BAA4B,EAAE,CAAA;YAC1C,OAAO,MAAM,CAAA;QACf,CAAC,CAAC,EAAE,CAAA;QACJ,IAAI,KAAK,GAAG,GAAG;aACZ,UAAU,CAAC,aAAa,CAAC;aACzB,SAAS,EAAE;aACX,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;aAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;aAC9B,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;QAC/B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;QACjF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,gBAAgB,EAAE,CAAA;QAC7D,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAA;QACjC,IAAI,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAC7E,MAAM,IAAI,4BAA4B,EAAE,CAAA;QAC1C,OAAO,GAAG;aACP,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;aACvB,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC;aAC/B,YAAY,EAAE;aACd,gBAAgB,EAAE,CAAA;IACvB,CAAC,CAAC,CAAA;AACJ,CAAC;AAYD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,EAAU,EAAE,MAAc;IAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,SAAS,GAAG,MAAM,GAAG;aACxB,UAAU,CAAC,aAAa,CAAC;aACzB,MAAM,CAAC,OAAO,CAAC;aACf,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;aAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;aAC9B,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC;aAC5B,gBAAgB,EAAE,CAAA;QACrB,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAA;QAChC,MAAM,QAAQ,GAAG,MAAM,GAAG;aACvB,UAAU,CAAC,aAAa,CAAC;aACzB,SAAS,EAAE;aACX,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC;aACpC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;aAC5B,SAAS,EAAE;aACX,gBAAgB,EAAE,CAAA;QACrB,MAAM,UAAU,GAAG,MAAM,GAAG;aACzB,WAAW,CAAC,aAAa,CAAC;aAC1B,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;aACxB,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;aACpB,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;aAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;aAC9B,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC;aAC5B,YAAY,EAAE;aACd,gBAAgB,EAAE,CAAA;QACrB,IAAI,CAAC,UAAU;YAAE,OAAO,SAAS,CAAA;QACjC,IAAI,CAAC,QAAQ;YACX,MAAM,GAAG;iBACN,UAAU,CAAC,aAAa,CAAC;iBACzB,MAAM,CAAC;gBACN,SAAS,EAAE,GAAG;gBACd,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,SAAS,EAAE,GAAG;gBACd,MAAM;aACP,CAAC;gBACF,qEAAqE;iBACpE,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;iBAC/D,OAAO,EAAE,CAAA;aACT,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC1E,MAAM,GAAG;iBACN,WAAW,CAAC,aAAa,CAAC;iBAC1B,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;iBAC9C,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC;iBACrC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC;iBAC5B,OAAO,EAAE,CAAA;QACd,OAAO,UAAU,CAAA;IACnB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,OAAO,CAAC,EAAS;IACxB,OAAO,EAAE,CAAC,MAAM;SACb,UAAU,CAAC,aAAa,CAAC;SACzB,SAAS,EAAE;SACX,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;SAC/B,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC;SAC9B,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;AACtD,CAAC;AAED,8DAA8D;AAC9D,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAC5C,IAAI,GAAG,0CAA0C,CAAA;CAC3D"}

package/dist/db/tables/memberships.d.ts

@@ -48,6 +48,14 @@ export declare namespace create {
  * @returns The record, or `undefined` when absent.
  */
 export declare function get(db: Db.Db, orgId: string, userId: string): Promise<Record | undefined>;
+/**
+ * Checks whether a user holds any organization membership.
+ *
+ * @param db - The database.
+ * @param userId - The member user id (`usr_…`).
+ * @returns Whether a membership exists.
+ */
+export declare function existsForUser(db: Db.Db, userId: string): Promise<boolean>;
 /**
  * Lists an organization's memberships, oldest first (stable member ordering).
  *

package/dist/db/tables/memberships.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memberships.d.ts","sourceRoot":"","sources":["../../../src/db/tables/memberships.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAExC,OAAO,KAAK,KAAK,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAE9C,4EAA4E;AAC5E,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAA;AAExC,+BAA+B;AAC/B,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;AAEtC,6DAA6D;AAC7D,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAA;AAEtF,yBAAyB;AACzB,MAAM,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;AAEjC,wDAAwD;AACxD,eAAO,MAAM,KAAK,uCAAkE,CAAA;AAEpF,oEAAoE;AACpE,eAAO,MAAM,IAAI;oBAAY,CAAC;qBAAU,CAAC;oBAAS,CAAC;CAAgD,CAAA;AAEnG;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAatE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,mDAAmD;IACnD,KAAK,KAAK,GAAG;QACX,iCAAiC;QACjC,KAAK,EAAE,MAAM,CAAA;QACb,oBAAoB;QACpB,IAAI,EAAE,IAAI,CAAA;QACV,gCAAgC;QAChC,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAOzF;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOrE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CASrF;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,EAAE,CAAC,EAAE,EACT,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,qBAAqB,CAAC,OAAO,GACrC,OAAO,CAAC,cAAc,EAAE,CAAC,CAuB3B;AAED,MAAM,CAAC,OAAO,WAAW,qBAAqB,CAAC;IAC7C,kEAAkE;IAClE,KAAK,MAAM,GAAG;QACZ,gCAAgC;QAChC,SAAS,EAAE,MAAM,CAAA;QACjB,2DAA2D;QAC3D,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;IAED,iDAAiD;IACjD,KAAK,OAAO,GAAG;QACb,qDAAqD;QACrD,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,2BAA2B;QAC3B,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CACpB,EAAE,EAAE,EAAE,CAAC,EAAE,EACT,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,CAAC,KAAK,GAClB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CA4BxB;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,iCAAiC;IACjC,KAAK,KAAK,GAAG;QACX,gBAAgB;QAChB,IAAI,EAAE,IAAI,CAAA;KACX,CAAA;IAED,wCAAwC;IACxC,KAAK,MAAM,GACP;QAAE,KAAK,EAAE,YAAY,GAAG,WAAW,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAA;KAAE,GACzD;QAAE,KAAK,CAAC,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAC1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAwBvF;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,oCAAoC;IACpC,KAAK,MAAM,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAA;CACrD"}
+{"version":3,"file":"memberships.d.ts","sourceRoot":"","sources":["../../../src/db/tables/memberships.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,QAAQ,CAAA;AAErD,OAAO,KAAK,KAAK,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,KAAK,SAAS,MAAM,cAAc,CAAA;AAE9C,4EAA4E;AAC5E,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAA;AAExC,+BAA+B;AAC/B,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;AAEtC,6DAA6D;AAC7D,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAA;AAEtF,yBAAyB;AACzB,MAAM,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;AAEjC,wDAAwD;AACxD,eAAO,MAAM,KAAK,uCAAkE,CAAA;AAEpF,oEAAoE;AACpE,eAAO,MAAM,IAAI;oBAAY,CAAC;qBAAU,CAAC;oBAAS,CAAC;CAAgD,CAAA;AAEnG;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAatE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,mDAAmD;IACnD,KAAK,KAAK,GAAG;QACX,iCAAiC;QACjC,KAAK,EAAE,MAAM,CAAA;QACb,oBAAoB;QACpB,IAAI,EAAE,IAAI,CAAA;QACV,gCAAgC;QAChC,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;CACF;AAED;;;;;;;GAOG;AACH,wBAAgB,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAOzF;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO/E;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOrE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CASrF;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,EAAE,CAAC,EAAE,EACT,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,qBAAqB,CAAC,OAAO,GACrC,OAAO,CAAC,cAAc,EAAE,CAAC,CAuB3B;AAED,MAAM,CAAC,OAAO,WAAW,qBAAqB,CAAC;IAC7C,kEAAkE;IAClE,KAAK,MAAM,GAAG;QACZ,gCAAgC;QAChC,SAAS,EAAE,MAAM,CAAA;QACjB,2DAA2D;QAC3D,MAAM,EAAE,MAAM,CAAA;KACf,CAAA;IAED,iDAAiD;IACjD,KAAK,OAAO,GAAG;QACb,qDAAqD;QACrD,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;QAC3B,2BAA2B;QAC3B,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,MAAM,CACpB,EAAE,EAAE,EAAE,CAAC,EAAE,EACT,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,CAAC,KAAK,GAClB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAsCxB;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,iCAAiC;IACjC,KAAK,KAAK,GAAG;QACX,gBAAgB;QAChB,IAAI,EAAE,IAAI,CAAA;KACX,CAAA;IAED,wCAAwC;IACxC,KAAK,MAAM,GACP;QAAE,KAAK,EAAE,YAAY,GAAG,WAAW,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,CAAA;KAAE,GACzD;QAAE,KAAK,CAAC,EAAE,SAAS,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAC1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAgCvF;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,oCAAoC;IACpC,KAAK,MAAM,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAA;CACrD"}