cgalo5758
88db730fcc
Introduce a commercial license option alongside AGPL-3.0-only, require a CLA for contributors, and document the terms in COMMERCIAL.md and NOTICE. Add a script to stamp SPDX headers on Go files and apply it across the tree.
100 lines
4.1 KiB
Go
100 lines
4.1 KiB
Go
// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-Commercial
|
|
// SPDX-FileCopyrightText: 2025-2026 Christian Galo
|
|
|
|
package provisioning
|
|
|
|
import (
|
|
"context"
|
|
"database/sql"
|
|
"errors"
|
|
"fmt"
|
|
|
|
"git.coopcloud.tech/wiki-cafe/member-console/internal/entitlements"
|
|
"git.coopcloud.tech/wiki-cafe/member-console/internal/organization"
|
|
)
|
|
|
|
// DefaultPoolKey is the key the console writes on every organization's
|
|
// default resource pool (entity-keys §4: the system writes a key only as a
|
|
// fixed constant for a row it creates by design). It is scoped to the
|
|
// organization by uq_resource_pools_org_id_key, so every organization has its
|
|
// own `default`.
|
|
const DefaultPoolKey = "default"
|
|
|
|
// WorkspaceCreationResult carries the records
|
|
// CreateWorkspaceWithPrimaryAssignment creates: the workspace and its primary
|
|
// assignment to the organization's default resource pool.
|
|
type WorkspaceCreationResult struct {
|
|
Workspace organization.Workspace
|
|
Pool entitlements.ResourcePool
|
|
PoolAssignment entitlements.PoolAssignment
|
|
}
|
|
|
|
// CreateWorkspaceWithPrimaryAssignment creates a workspace for orgID and gives
|
|
// it a primary assignment to the organization's default resource pool, all on
|
|
// the caller's transaction so the workspace insert, the default-pool
|
|
// resolution, and the assignment insert commit or roll back together. Both
|
|
// first-login auto-provisioning (AutoProvision) and the member "create
|
|
// workspace" handler call this, so the rule "a workspace never exists without
|
|
// a pool assignment" has exactly one implementation instead of two
|
|
// hand-synchronized copies (schema-hardening design D2).
|
|
//
|
|
// The organization's default pool is resolved by lookup; if none exists yet
|
|
// (a brand-new organization, as at signup) one is created here. An
|
|
// organization that already has a default pool (the ordinary
|
|
// member-created-workspace case) gets that pool, never a second one.
|
|
//
|
|
// The name is the only thing this function is given, and nothing is derived
|
|
// from it. The workspace gets no key: a key is a declarative address a caller
|
|
// outside the database supplies, and deriving one from a display name is the
|
|
// defect the retired derived-identifier column had (entity-keys §4). A name that duplicates
|
|
// a live workspace in the same organization is refused by
|
|
// uq_workspaces_org_id_name_ci, and the caller renders that as a field-level
|
|
// message rather than silently picking another name.
|
|
//
|
|
// The default pool, by contrast, does get a key: `default` is a fixed
|
|
// constant for the one pool the console creates for every organization by
|
|
// design, so a seed, a script, or an API client can name it without knowing
|
|
// the organization's generated pool ID. uq_resource_pools_one_default_per_org
|
|
// already guarantees at most one per organization, so the constant cannot
|
|
// collide with a second pool.
|
|
func CreateWorkspaceWithPrimaryAssignment(ctx context.Context, tx *sql.Tx, orgID, name string) (WorkspaceCreationResult, error) {
|
|
orgQ := organization.New(tx)
|
|
entQ := entitlements.New(tx)
|
|
|
|
workspace, err := orgQ.CreateWorkspace(ctx, organization.CreateWorkspaceParams{
|
|
OrgID: orgID,
|
|
Name: name,
|
|
})
|
|
if err != nil {
|
|
return WorkspaceCreationResult{}, fmt.Errorf("create workspace: %w", err)
|
|
}
|
|
|
|
pool, err := entQ.GetDefaultPoolByOrgID(ctx, orgID)
|
|
if err != nil {
|
|
if !errors.Is(err, sql.ErrNoRows) {
|
|
return WorkspaceCreationResult{}, fmt.Errorf("resolve default pool for org %s: %w", orgID, err)
|
|
}
|
|
pool, err = entQ.CreateResourcePool(ctx, entitlements.CreateResourcePoolParams{
|
|
OrgID: orgID,
|
|
Name: "Default",
|
|
PoolType: "default",
|
|
IsAutoManaged: true,
|
|
Key: sql.NullString{String: DefaultPoolKey, Valid: true},
|
|
})
|
|
if err != nil {
|
|
return WorkspaceCreationResult{}, fmt.Errorf("create default pool: %w", err)
|
|
}
|
|
}
|
|
|
|
assignment, err := entQ.CreatePoolAssignment(ctx, entitlements.CreatePoolAssignmentParams{
|
|
PoolID: pool.PoolID,
|
|
WorkspaceID: workspace.WorkspaceID,
|
|
IsPrimary: true,
|
|
})
|
|
if err != nil {
|
|
return WorkspaceCreationResult{}, fmt.Errorf("create pool assignment: %w", err)
|
|
}
|
|
|
|
return WorkspaceCreationResult{Workspace: workspace, Pool: pool, PoolAssignment: assignment}, nil
|
|
}
|