// ---------------------------------------------------------------------------// Account & Organization storage — minimal mirror of WorkOS data// ---------------------------------------------------------------------------//// AuthKit owns the canonical data for users, organizations, memberships,// and invitations. We keep tiny local mirrors of accounts and organizations// so domain tables can foreign-key against them and so we can resolve org// metadata without an API call on every request. import { eq } from "drizzle-orm"; import { generateOrgSlug } from "@executor-js/api"; import { accounts, organizations } from "../db/schema";import type { DrizzleDb } from "../db/db"; export type Account = typeof accounts.$inferSelect;export type Organization = typeof organizations.$inferSelect; export const makeUserStore = (db: DrizzleDb) => {  const getOrganization = async (id: string) => {    const rows = await db.select().from(organizations).where(eq(organizations.id, id));    return rows[0] ?? null;  };   const slugTaken = async (slug: string) => {    const rows = await db      .select({ id: organizations.id })      .from(organizations)      .where(eq(organizations.slug, slug));    return rows.length > 0;  };   // Insert a brand-new org row carrying a freshly-minted slug. `ON CONFLICT DO  // NOTHING` (no target) absorbs BOTH unique violations without throwing: an  // id collision (the org was mirrored concurrently) and a slug collision (the  // candidate was claimed by a different org). Returns the inserted row, or  // null when either conflict swallowed the insert — the caller decides whether  // to re-read (id race) or retry with a new candidate (slug race).  const tryInsertOrg = async (id: string, name: string, slug: string) => {    const [row] = await db      .insert(organizations)      .values({ id, name, slug })      .onConflictDoNothing()      .returning();    return row ?? null;  };   // Every new org row is born with a slug — there is no nullable window and no  // self-healing. Existing rows keep their slug (stable across renames, so org  // URLs survive) and only refresh their name.  const upsertOrganization = async (org: { id: string; name: string }) => {    const existing = await getOrganization(org.id);    if (existing) {      const [updated] = await db        .update(organizations)        .set({ name: org.name })        .where(eq(organizations.id, org.id))        .returning();      return updated ?? existing;    }    for (let attempt = 0; attempt < 4; attempt++) {      const slug = await generateOrgSlug(org.name, slugTaken);      const inserted = await tryInsertOrg(org.id, org.name, slug);      if (inserted) return inserted;      // The insert was swallowed by a conflict. If the id now exists, a      // concurrent request mirrored it — return that row. Otherwise the slug      // candidate collided; loop and mint a fresh one.      const fresh = await getOrganization(org.id);      if (fresh) return fresh;    }    // oxlint-disable-next-line executor/no-try-catch-or-throw, executor/no-error-constructor -- boundary: slug minting exhausted retries; surfacing loudly beats a silently unslugged org    throw new Error(`unable to mint a slug for organization ${org.id}`);  };   return {    // --- Accounts ---     ensureAccount: async (id: string) => {      const [result] = await db.insert(accounts).values({ id }).onConflictDoNothing().returning();      return result ?? (await db.select().from(accounts).where(eq(accounts.id, id)))[0]!;    },     getAccount: async (id: string) => {      const rows = await db.select().from(accounts).where(eq(accounts.id, id));      return rows[0] ?? null;    },     // --- Organizations ---     upsertOrganization,     getOrganization,     getOrganizationBySlug: async (slug: string) => {      const rows = await db.select().from(organizations).where(eq(organizations.slug, slug));      return rows[0] ?? null;    },  };};