// ---------------------------------------------------------------------------
// Account & Organization storage — minimal mirror of WorkOS data
// ---------------------------------------------------------------------------
//
// AuthKit owns the canonical data for users, organizations, memberships,
// and invitations. We keep tiny local mirrors of accounts and organizations
// so domain tables can foreign-key against them and so we can resolve org
// metadata without an API call on every request.

import { eq } from "drizzle-orm";

import { accounts, organizations } from "../db/schema";
import type { DrizzleDb } from "../db/db";

export type Account = typeof accounts.$inferSelect;
export type Organization = typeof organizations.$inferSelect;

export const makeUserStore = (db: DrizzleDb) => ({
  // --- Accounts ---

  ensureAccount: async (id: string) => {
    const [result] = await db.insert(accounts).values({ id }).onConflictDoNothing().returning();
    return result ?? (await db.select().from(accounts).where(eq(accounts.id, id)))[0]!;
  },

  getAccount: async (id: string) => {
    const rows = await db.select().from(accounts).where(eq(accounts.id, id));
    return rows[0] ?? null;
  },

  // --- Organizations ---

  upsertOrganization: async (org: { id: string; name: string }) => {
    const [result] = await db
      .insert(organizations)
      .values(org)
      .onConflictDoUpdate({
        target: organizations.id,
        set: { name: org.name },
      })
      .returning();
    return result!;
  },

  getOrganization: async (id: string) => {
    const rows = await db.select().from(organizations).where(eq(organizations.id, id));
    return rows[0] ?? null;
  },
});