tenseleyflow/shithub / 621070d

+	// S29 — notification subscribe/unsubscribe per thread.

+	"threads":       {},

+	// S30 — invitation accept/decline.

+	"invitations":   {},

+// SPDX-License-Identifier: AGPL-3.0-or-later

+

+package orgs

+

+import (

+	"context"

+	"errors"

+	"fmt"

+	"regexp"

+	"strings"

+

+	"github.com/jackc/pgx/v5/pgtype"

+

+	"github.com/tenseleyFlow/shithub/internal/auth"

+	orgsdb "github.com/tenseleyFlow/shithub/internal/orgs/sqlc"

+)

+

+// CreateParams describes a create-org request.

+type CreateParams struct {

+	Slug             string

+	DisplayName      string

+	Description      string

+	BillingEmail     string

+	CreatedByUserID  int64

+}

+

+// slugRE mirrors the username pattern (lowercase letters, digits,

+// hyphens; cannot start or end with a hyphen). Same shape as

+// users.username so the namespace unification is genuinely uniform.

+var slugRE = regexp.MustCompile(`^[a-z0-9](?:[a-z0-9-]{0,37}[a-z0-9])?$`)

+

+// Create validates the slug, opens a tx, inserts the org, and adds

+// the creator as the sole owner. Slug uniqueness against the

+// principals table is enforced by the DB-level PK on principals — a

+// concurrent insert with the same slug fails with a unique-violation

+// from the trigger, which we translate to ErrSlugTaken.

+func Create(ctx context.Context, deps Deps, p CreateParams) (orgsdb.Org, error) {

+	slug := strings.ToLower(strings.TrimSpace(p.Slug))

+	if slug == "" {

+		return orgsdb.Org{}, ErrEmptySlug

+	}

+	if len(slug) > 39 {

+		return orgsdb.Org{}, ErrSlugTooLong

+	}

+	if !slugRE.MatchString(slug) {

+		return orgsdb.Org{}, ErrSlugInvalid

+	}

+	if auth.IsReserved(slug) {

+		return orgsdb.Org{}, ErrSlugReserved

+	}

+	if p.CreatedByUserID == 0 {

+		return orgsdb.Org{}, errors.New("orgs: CreatedByUserID is required")

+	}

+

+	tx, err := deps.Pool.Begin(ctx)

+	if err != nil {

+		return orgsdb.Org{}, err

+	}

+	committed := false

+	defer func() {

+		if !committed {

+			_ = tx.Rollback(ctx)

+		}

+	}()

+

+	q := orgsdb.New()

+	displayName := strings.TrimSpace(p.DisplayName)

+	if displayName == "" {

+		displayName = slug

+	}

+	row, err := q.CreateOrg(ctx, tx, orgsdb.CreateOrgParams{

+		Slug:            slug,

+		DisplayName:     displayName,

+		Description:     strings.TrimSpace(p.Description),

+		BillingEmail:    strings.TrimSpace(p.BillingEmail),

+		CreatedByUserID: pgtype.Int8{Int64: p.CreatedByUserID, Valid: true},

+	})

+	if err != nil {

+		if isUniqueViolation(err) {

+			// Either the orgs.slug UNIQUE index OR the principals PK

+			// fired. Either way, the slug is taken (by another org or

+			// by an existing user/redirect).

+			return orgsdb.Org{}, ErrSlugTaken

+		}

+		return orgsdb.Org{}, fmt.Errorf("create org: %w", err)

+	}

+

+	if err := q.AddOrgMember(ctx, tx, orgsdb.AddOrgMemberParams{

+		OrgID:            row.ID,

+		UserID:           p.CreatedByUserID,

+		Role:             orgsdb.OrgRoleOwner,

+		InvitedByUserID:  pgtype.Int8{Valid: false},

+	}); err != nil {

+		return orgsdb.Org{}, fmt.Errorf("seed owner: %w", err)

+	}

+

+	if err := tx.Commit(ctx); err != nil {

+		return orgsdb.Org{}, fmt.Errorf("commit: %w", err)

+	}

+	committed = true

+	return row, nil

+}

+

+// isUniqueViolation reports whether err is a Postgres unique-key

+// violation (SQLSTATE 23505). The orgs.slug UNIQUE index, the

+// principals PK, and any concurrent-insert race surface as 23505.

+func isUniqueViolation(err error) bool {

+	var pgErr *pgconnError

+	return errors.As(err, &pgErr) && pgErr.Code == "23505"

+}

+// SPDX-License-Identifier: AGPL-3.0-or-later

+

+// Package orgs owns the organization domain: create, members,

+// invitations, suspend/restore, soft-delete, and the principals

+// resolver that unifies /{slug} routing across users + orgs.

+//

+// The package is the single entry point for the rest of the runtime —

+// web handlers, the policy engine, and the worker pool import here

+// rather than poking the sqlc surface directly.

+package orgs

+

+import (

+	"errors"

+	"log/slog"

+

+	"github.com/jackc/pgx/v5/pgxpool"

+

+	"github.com/tenseleyFlow/shithub/internal/auth/audit"

+	"github.com/tenseleyFlow/shithub/internal/auth/email"

+)

+

+// Deps wires this package against the runtime. Pool is required;

+// EmailSender is optional — when nil, invitation + role-change

+// notifications are skipped (matches the "headless test" pattern

+// the rest of the auth surface uses).

+type Deps struct {

+	Pool   *pgxpool.Pool

+	Logger *slog.Logger

+	Audit  *audit.Recorder

+	// Email side: only used by the invitation flow today; the

+	// org-suspend / org-deletion notification kinds are deferred

+	// to S29's lifecycle email work.

+	EmailSender email.Sender

+	EmailFrom   string

+	SiteName    string

+	BaseURL     string

+}

+

+// Errors surfaced by the orchestrator. Web handlers map these to

+// status codes + friendly messages.

+var (

+	ErrEmptySlug             = errors.New("orgs: slug is required")

+	ErrSlugTooLong           = errors.New("orgs: slug too long (max 39)")

+	ErrSlugInvalid           = errors.New("orgs: slug must be lowercase letters, digits, and hyphens")

+	ErrSlugReserved          = errors.New("orgs: slug is reserved")

+	ErrSlugTaken             = errors.New("orgs: slug is already in use")

+	ErrOrgNotFound           = errors.New("orgs: org not found")

+	ErrUserNotFound          = errors.New("orgs: user not found")

+	ErrNotAMember            = errors.New("orgs: user is not a member of this org")

+	ErrAlreadyMember         = errors.New("orgs: user is already a member of this org")

+	ErrLastOwner             = errors.New("orgs: cannot remove or demote the only owner; transfer ownership first")

+	ErrInvitationNotFound    = errors.New("orgs: invitation not found")

+	ErrInvitationExpired     = errors.New("orgs: invitation has expired")

+	ErrInvitationConsumed    = errors.New("orgs: invitation already accepted, declined, or canceled")

+	ErrInvitationDuplicate   = errors.New("orgs: a pending invitation for this target already exists")

+	ErrInvalidInvitationKind = errors.New("orgs: invitation must target either a user or an email")

+	ErrSuspended             = errors.New("orgs: org is suspended")

+	ErrDeleted               = errors.New("orgs: org is soft-deleted")

+)

+

+// InvitationLifetime is how long a fresh invitation is honored before

+// the recipient must request a new one. 7 days matches the spec.

+const InvitationLifetime = 7 * 24 * 60 * 60 // seconds; converted to time.Duration at call sites

+// SPDX-License-Identifier: AGPL-3.0-or-later

+

+package orgs

+

+import "github.com/jackc/pgx/v5/pgconn"

+

+// pgconnError aliases pgconn.PgError so create.go's isUniqueViolation

+// helper can errors.As to a private name without leaking the import

+// to every file in the package.

+type pgconnError = pgconn.PgError

+		"Title":         cc.row.Name + " · " + cc.owner,

+		"CSRFToken":     middleware.CSRFTokenForRequest(r),

+		"Owner":         cc.owner,

+		"Repo":          cc.row,

+		"Ref":           cc.ref,

+		"Path":          cc.subpath,

+		"Crumbs":        breadcrumbs(cc.owner, cc.row.Name, cc.ref, cc.subpath),

+		"Entries":       entries,

+		"Branches":      cc.refs.Branches,

+		"Tags":          cc.refs.Tags,

+		"README":        template.HTML(readmeHTML), //nolint:gosec // sanitized by mdrender

+		"HTTPSCloneURL": h.cloneHTTPS(cc.owner, cc.row.Name),

+		"SSHEnabled":    h.d.CloneURLs.SSHEnabled,

+		"SSHCloneURL":   h.cloneSSH(cc.owner, cc.row.Name),

+// cloneHTTPS / cloneSSH compose the per-repo URL strings that every

+// "Code" view drops into the clone dropdown. Centralized so the

+// per-template plumbing in code views and the repo home stay

+// consistent (and switching to a `git://` later is a one-line edit).

+func (h *Handlers) cloneHTTPS(owner, name string) string {

+	return h.d.CloneURLs.BaseURL + "/" + owner + "/" + name + ".git"

+}

+func (h *Handlers) cloneSSH(owner, name string) string {

+	return h.d.CloneURLs.SSHHost + ":" + owner + "/" + name + ".git"

+}

+

+		"HTTPSCloneURL": h.cloneHTTPS(owner, row.Name),

+		"SSHCloneURL":   h.cloneSSH(owner, row.Name),

+		// Repo "Code" dropdown chrome (clone widget).

+		"download": trustedSVG(`<svg xmlns="http://www.w3.org/2000/svg" ` + cls +

+			`><path d="M2.75 14A1.75 1.75 0 0 1 1 12.25v-2.5a.75.75 0 0 1 1.5 0v2.5c0 .138.112.25.25.25h10.5a.25.25 0 0 0 .25-.25v-2.5a.75.75 0 0 1 1.5 0v2.5A1.75 1.75 0 0 1 13.25 14zm5.78-2.92a.749.749 0 0 1-1.06 0L3.72 7.78a.749.749 0 1 1 1.06-1.06L7.25 9.19V1.75a.75.75 0 0 1 1.5 0v7.44l2.47-2.47a.749.749 0 1 1 1.06 1.06z"/></svg>`),

+		"copy": trustedSVG(`<svg xmlns="http://www.w3.org/2000/svg" ` + cls +

+			`><path d="M0 6.75C0 5.784.784 5 1.75 5h1.5a.75.75 0 0 1 0 1.5h-1.5a.25.25 0 0 0-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 0 0 .25-.25v-1.5a.75.75 0 0 1 1.5 0v1.5A1.75 1.75 0 0 1 9.25 16h-7.5A1.75 1.75 0 0 1 0 14.25Z"/><path d="M5 1.75C5 .784 5.784 0 6.75 0h7.5C15.216 0 16 .784 16 1.75v7.5A1.75 1.75 0 0 1 14.25 11h-7.5A1.75 1.75 0 0 1 5 9.25Zm1.75-.25a.25.25 0 0 0-.25.25v7.5c0 .138.112.25.25.25h7.5a.25.25 0 0 0 .25-.25v-7.5a.25.25 0 0 0-.25-.25Z"/></svg>`),

+.shithub-clone-dropdown { position: relative; }

+.shithub-clone-dropdown > summary { list-style: none; display: inline-flex; align-items: center; gap: 0.35rem; cursor: pointer; }

+.shithub-clone-dropdown > summary::-webkit-details-marker { display: none; }

+.shithub-clone-panel {

+  position: absolute;

+  z-index: 30;

+  top: calc(100% + 0.4rem);

+  right: 0;

+  min-width: 320px;

+  background: var(--canvas-default);

+  border: 1px solid var(--border-default);

+  border-radius: 6px;

+  padding: 0.75rem;

+  box-shadow: 0 8px 24px rgba(0, 0, 0, 0.12);

+}

+.shithub-clone-row + .shithub-clone-row { margin-top: 0.6rem; }

+.shithub-clone-row label { display: block; font-size: 0.75rem; color: var(--fg-muted); margin-bottom: 0.25rem; }

+.shithub-clone-input { display: flex; gap: 0.4rem; }

+.shithub-clone-input input {

+  flex: 1;

+  padding: 0.3rem 0.5rem;

+  font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;

+  font-size: 0.8rem;

+  border: 1px solid var(--border-default);

+  border-radius: 4px;

+  background: var(--canvas-subtle);

+  color: var(--fg-default);

+}

+.shithub-clone-input button { padding: 0.3rem 0.5rem; }

+.shithub-clone-hint { margin: 0.6rem 0 0; font-size: 0.75rem; color: var(--fg-muted); }

+

+<script>

+  // Click-to-copy on clone-dropdown buttons. Walk every button with

+  // data-clone-copy="<selector>" and wire it once. Falls back to a

+  // visual flash on the input when navigator.clipboard is unavailable

+  // (older browsers, file:// dev pages, etc).

+  (function () {

+    var buttons = document.querySelectorAll("[data-clone-copy]");

+    buttons.forEach(function (btn) {

+      btn.addEventListener("click", function () {

+        var sel = btn.getAttribute("data-clone-copy");

+        var input = document.querySelector(sel);

+        if (!input) return;

+        var ok = false;

+        try {

+          if (navigator.clipboard) {

+            navigator.clipboard.writeText(input.value);

+            ok = true;

+          }

+        } catch (e) { ok = false; }

+        if (!ok) {

+          input.select();

+          try { document.execCommand("copy"); ok = true; } catch (e) {}

+        }

+        var prev = btn.getAttribute("title") || "";

+        btn.setAttribute("title", ok ? "Copied" : "Press ⌘/Ctrl-C to copy");

+        setTimeout(function () { btn.setAttribute("title", prev); }, 1200);

+      });

+    });

+  })();

+</script>

+      <details class="shithub-clone-dropdown">

+        <summary class="shithub-button shithub-button-primary">{{ octicon "download" }} Code</summary>

+        <div class="shithub-clone-panel" role="dialog" aria-label="Clone this repository">

+          <div class="shithub-clone-row">

+            <label for="clone-https">Clone with HTTPS</label>

+            <div class="shithub-clone-input">

+              <input id="clone-https" type="text" readonly value="{{ .HTTPSCloneURL }}" onclick="this.select()">

+              <button type="button" class="shithub-button" data-clone-copy="#clone-https" title="Copy">{{ octicon "copy" }}</button>

+            </div>

+          </div>

+          {{ if .SSHEnabled }}

+          <div class="shithub-clone-row">

+            <label for="clone-ssh">Clone with SSH</label>

+            <div class="shithub-clone-input">

+              <input id="clone-ssh" type="text" readonly value="{{ .SSHCloneURL }}" onclick="this.select()">

+              <button type="button" class="shithub-button" data-clone-copy="#clone-ssh" title="Copy">{{ octicon "copy" }}</button>

+            </div>

+          </div>

+          {{ end }}

+          <p class="shithub-clone-hint">Use Git or checkout with SVN using the web URL.</p>

+        </div>

+      </details>