Something went wrong. Try again.
[READ-ONLY] Mirror of https://github.com/openstatusHQ/openstatus. 🫖 Status page with uptime monitoring & API monitoring as code 🫖 openstatus.dev
bun drizzle-orm monitoring monitoring-as-code nextjs observability on-call open-source shadcn-ui status-page statuspage synthetic-monitoring tinybird turso uptime uptime-checker uptime-monitor
Something went wrong. Try again.
2.0 kB · 64 lines
TypeScript
1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465import { and, eq } from "@openstatus/db";import { usersToWorkspaces } from "@openstatus/db/src/schema";import { z } from "zod";
import { emitAudit } from "../audit";import { type DB, type ServiceContext } from "../context";import { revokeGrantsForUser } from "../oauth/revoke";
// Composite-PK rows: drizzle's createSelectSchema would flatten the join,// but the membership row has no auto-generated columns we'd want to drop// from a snapshot. Inline parser keeps the audit `before` shape stable// even if a column is added to `users_to_workspaces` later.export const memberRowSnapshot = z.object({ userId: z.number(), workspaceId: z.number(), role: z.string(), createdAt: z.coerce.date().nullable(),});
/** * Shared delete+audit body for a single membership row — the sole place * the `member.delete` write lives. `deleteMember` wraps this with its * owner-actor / self-removal guards; the Stripe downgrade cascade calls it * directly as a `system` actor. This is an extraction, not a duplicate: * the guard-bearing entry point (`deleteMember`) delegates here so the two * callers can't drift on the workspace-scoping or the audit snapshot. * * No authorization guard of its own — callers own that. Idempotent on the * target row: a missing membership deletes nothing and emits no audit row. */export async function removeMemberInWorkspace(args: { tx: DB; ctx: ServiceContext; userId: number;}): Promise<void> { const { tx, ctx, userId } = args;
const [removed] = await tx .delete(usersToWorkspaces) .where( and( eq(usersToWorkspaces.workspaceId, ctx.workspace.id), eq(usersToWorkspaces.userId, userId), ), ) .returning();
if (!removed) return;
await emitAudit(tx, ctx, { action: "member.delete", entityType: "member", entityId: userId, before: memberRowSnapshot.parse(removed), });
await revokeGrantsForUser({ tx, ctx, userId, workspaceId: ctx.workspace.id, reason: "member_removed", });}