Backbone infrastructure
for every application.

import { InMemoryIdentityStore } from "@flametrench/identity";
import { InMemoryTenancyStore } from "@flametrench/tenancy";

const identity = new InMemoryIdentityStore();
const tenancy = new InMemoryTenancyStore();

// ─── 1. Registration ─────────────────────────────────────────────
const alice = await identity.createUser();
await identity.createPasswordCredential({
  usrId: alice.id,
  type: "password",
  identifier: "alice@example.com",
  password: "correcthorsebatterystaple",
});

// ─── 2. Sign-in returns a bearer token ──────────────────────────
// Argon2id at the OWASP floor (m=19456, t=2, p=1). The hash a Node
// SDK produces verifies byte-identically in PHP, Python, and Java.
const verified = await identity.verifyPassword({
  type: "password",
  identifier: "alice@example.com",
  password: "correcthorsebatterystaple",
});
const { session, token } = await identity.createSession({
  usrId: verified.usrId,
  credId: verified.credId,
  ttlSeconds: 3600,
});
// `token` is opaque and separate from `session.id`. Server-side
// only SHA-256(token) is stored; verifySessionToken is constant-time.

// ─── 3. Atomic invitation with pre-attached project grant ───────
const { org, ownerMembership } = await tenancy.createOrg(alice.id);
const inv = await tenancy.createInvitation({
  orgId: org.id,
  identifier: "bob@example.com",
  role: "member",
  invitedBy: alice.id,
  expiresAt: new Date(Date.now() + 7 * 86_400_000),
  preTuples: [
    { relation: "editor", objectType: "proj", objectId: "proj_42" },
  ],
});

// One transition: Bob's user + membership + the editor tuple on
// proj_42. Postgres: BEGIN/COMMIT. In-memory: equivalent atomicity.
// No half-state observable.
const { membership } = await tenancy.acceptInvitation({ invId: inv.id });

// ─── 4. Sole-owner protection ───────────────────────────────────
// Alice is the only active owner. Demoting her would leave the org
// owner-less. The SDK refuses — at the API boundary, before any
// query reaches Postgres.
try {
  await tenancy.changeRole({
    memId: ownerMembership.id,
    newRole: "member",
  });
} catch (e) {
  // SoleOwnerError — code: "forbidden.sole_owner"
}

// To leave gracefully, transfer ownership atomically. The SDK promotes
// the target first so the donor is never the sole owner of a roleless
// org during the swap.
await tenancy.transferOwnership({
  orgId: org.id,
  fromMemId: ownerMembership.id,
  toMemId: membership.id,
});
// Bob is now owner; Alice is member. Two role tuples swapped in one tx.