Struct GroupService 

pub struct GroupService {
    backend: Arc<dyn GroupBackend>,
}

Service for group management operations.

Encapsulates business logic for groups, members, and invites. Uses a GroupBackend for persistence.

Fields

backend: Arc<dyn GroupBackend>

Implementations

impl GroupService

pub fn new(backend: Arc<dyn GroupBackend>) -> Self

Creates a new group service with the given backend.

pub fn try_default() -> Result<Self>

Creates a new group service with a default SQLite backend.

Uses the user’s data directory for storage.

Errors

Returns an error if the backend cannot be initialized.

pub fn create_group( &self, org_id: &str, name: &str, description: &str, creator_email: &str, ) -> Result<Group>

Creates a new group in the organization.

The creator is automatically added as an admin.

Arguments

• org_id - Organization identifier
• name - Group name (must be unique within org)
• description - Optional description
• creator_email - Email of the group creator

Errors

Returns an error if:

• A group with the same name already exists
• Storage cannot be accessed

pub fn get_group(&self, group_id: &GroupId) -> Result<Option<Group>>

Gets a group by ID.

Errors

Returns an error if storage cannot be accessed.

pub fn get_group_by_name( &self, org_id: &str, name: &str, ) -> Result<Option<Group>>

Gets a group by name within an organization.

Errors

Returns an error if storage cannot be accessed.

pub fn list_groups(&self, org_id: &str) -> Result<Vec<Group>>

Lists all groups in an organization.

Errors

Returns an error if storage cannot be accessed.

pub fn delete_group( &self, group_id: &GroupId, requester_email: &str, ) -> Result<bool>

Deletes a group and all its members and invites.

Only admins can delete groups.

Arguments

• group_id - The group to delete
• requester_email - Email of the user requesting deletion

Errors

Returns an error if:

• The requester is not an admin
• Storage cannot be accessed

pub fn add_member( &self, group_id: &GroupId, email: &str, role: GroupRole, requester_email: &str, ) -> Result<GroupMember>

Adds a member to a group.

If the member already exists, updates their role. Only admins can add members.

Arguments

• group_id - The group to add to
• email - Email of the new member
• role - Role to assign
• requester_email - Email of the user adding the member

Errors

Returns an error if:

• The requester is not an admin
• The group doesn’t exist
• Storage cannot be accessed

pub fn get_member( &self, group_id: &GroupId, email: &str, ) -> Result<Option<GroupMember>>

Gets a member’s record in a group.

Errors

Returns an error if storage cannot be accessed.

pub fn update_member_role( &self, group_id: &GroupId, email: &str, new_role: GroupRole, requester_email: &str, ) -> Result<bool>

Updates a member’s role in a group.

Only admins can update roles. Cannot demote the last admin.

Arguments

• group_id - The group
• email - The member’s email
• new_role - The new role to assign
• requester_email - Email of the user updating the role

Errors

Returns an error if:

• The requester is not an admin
• Demoting the last admin
• Storage cannot be accessed

pub fn remove_member( &self, group_id: &GroupId, email: &str, requester_email: &str, ) -> Result<bool>

Removes a member from a group.

Only admins can remove members. Cannot remove the last admin.

Arguments

• group_id - The group
• email - The member’s email
• requester_email - Email of the user removing the member

Errors

Returns an error if:

• The requester is not an admin
• Removing the last admin
• Storage cannot be accessed

pub fn list_members(&self, group_id: &GroupId) -> Result<Vec<GroupMember>>

Lists all members of a group.

Errors

Returns an error if storage cannot be accessed.

pub fn get_user_groups( &self, org_id: &str, email: &str, ) -> Result<Vec<GroupMembership>>

Gets all groups a user is a member of.

Errors

Returns an error if storage cannot be accessed.

pub fn leave_group(&self, group_id: &GroupId, email: &str) -> Result<bool>

Allows a user to leave a group.

Cannot leave if the user is the last admin.

Arguments

• group_id - The group to leave
• email - Email of the user leaving

Errors

Returns an error if:

• The user is the last admin
• Storage cannot be accessed

pub fn create_invite( &self, group_id: &GroupId, role: GroupRole, creator_email: &str, expires_in_secs: Option<u64>, max_uses: Option<u32>, ) -> Result<(GroupInvite, String)>

Creates an invite for a group.

Only admins can create invites.

Arguments

• group_id - The group to invite to
• role - Role to assign when joined
• creator_email - Email of the admin creating the invite
• expires_in_secs - How long until expiration (default: 7 days)
• max_uses - Maximum number of uses (default: unlimited)

Returns

A tuple of (invite, plaintext_token). The token should be shared with invitees and never stored.

Errors

Returns an error if:

• The creator is not an admin
• Storage cannot be accessed

pub fn join_via_invite(&self, token: &str, email: &str) -> Result<GroupMember>

Joins a group using an invite token.

Validates the token and adds the user as a member with the invite’s role.

Arguments

• token - The plaintext invite token
• email - Email of the user joining

Returns

The created member record.

Errors

Returns an error if:

• The token is invalid or expired
• Storage cannot be accessed

pub fn list_invites( &self, group_id: &GroupId, include_expired: bool, ) -> Result<Vec<GroupInvite>>

Lists all invites for a group.

Arguments

• group_id - The group
• include_expired - Whether to include expired/revoked invites

Errors

Returns an error if storage cannot be accessed.

pub fn revoke_invite( &self, invite_id: &str, requester_email: &str, ) -> Result<bool>

Revokes an invite.

Only admins can revoke invites.

Arguments

• invite_id - The invite to revoke
• requester_email - Email of the admin revoking

Errors

Returns an error if:

• The requester is not an admin
• Storage cannot be accessed

pub fn cleanup_expired_invites(&self) -> Result<u64>

Cleans up expired invites.

Returns

Number of invites deleted.

Errors

Returns an error if storage cannot be accessed.

fn require_admin(&self, group_id: &GroupId, email: &str) -> Result<()>

Checks if a user has admin role in a group.

pub fn require_role( &self, group_id: &GroupId, email: &str, min_role: GroupRole, ) -> Result<()>

Checks if a user has at least the specified role in a group.

Role hierarchy: Admin > Write > Read

Errors

Returns an error if:

• The user is not a member of the group
• The user’s role is insufficient

pub fn is_member(&self, group_id: &GroupId, email: &str) -> Result<bool>

Checks if a user is a member of a group.

Errors

Returns an error if storage cannot be accessed.

pub fn get_user_role( &self, group_id: &GroupId, email: &str, ) -> Result<Option<GroupRole>>

Gets a user’s role in a group, if they are a member.

Errors

Returns an error if storage cannot be accessed.