feat: connect workspace access lifecycle to admin api

crates/crank-registry/src/error.rs

@@ -14,6 +14,11 @@ pub enum RegistryError {
     UserNotFound { user_id: String },
     #[error("user with email {email} already exists")]
     UserEmailAlreadyExists { email: String },
+    #[error("membership for user {user_id} in workspace {workspace_id} was not found")]
+    MembershipNotFound {
+        workspace_id: String,
+        user_id: String,
+    },
     #[error("invitation {invitation_id} was not found")]
     InvitationNotFound { invitation_id: String },
     #[error("platform api key {key_id} was not found")]

crates/crank-registry/src/postgres.rs

@@ -415,6 +415,57 @@ impl PostgresRegistry {
         rows.iter().map(map_membership_record).collect()
     }
 
+    pub async fn update_membership_role(
+        &self,
+        workspace_id: &WorkspaceId,
+        user_id: &UserId,
+        role: MembershipRole,
+    ) -> Result<(), RegistryError> {
+        let result = sqlx::query(
+            "update memberships
+             set role = $3
+             where workspace_id = $1 and user_id = $2",
+        )
+        .bind(workspace_id.as_str())
+        .bind(user_id.as_str())
+        .bind(serialize_enum_text(&role, "role")?)
+        .execute(&self.pool)
+        .await?;
+
+        if result.rows_affected() == 0 {
+            return Err(RegistryError::MembershipNotFound {
+                workspace_id: workspace_id.as_str().to_owned(),
+                user_id: user_id.as_str().to_owned(),
+            });
+        }
+
+        Ok(())
+    }
+
+    pub async fn delete_membership(
+        &self,
+        workspace_id: &WorkspaceId,
+        user_id: &UserId,
+    ) -> Result<(), RegistryError> {
+        let result = sqlx::query(
+            "delete from memberships
+             where workspace_id = $1 and user_id = $2",
+        )
+        .bind(workspace_id.as_str())
+        .bind(user_id.as_str())
+        .execute(&self.pool)
+        .await?;
+
+        if result.rows_affected() == 0 {
+            return Err(RegistryError::MembershipNotFound {
+                workspace_id: workspace_id.as_str().to_owned(),
+                user_id: user_id.as_str().to_owned(),
+            });
+        }
+
+        Ok(())
+    }
+
     pub async fn list_invitations(
         &self,
         workspace_id: &WorkspaceId,
@@ -493,6 +544,21 @@ impl PostgresRegistry {
         Ok(())
     }
 
+    pub async fn delete_workspace(&self, workspace_id: &WorkspaceId) -> Result<(), RegistryError> {
+        let result = sqlx::query("delete from workspaces where id = $1")
+            .bind(workspace_id.as_str())
+            .execute(&self.pool)
+            .await?;
+
+        if result.rows_affected() == 0 {
+            return Err(RegistryError::WorkspaceNotFound {
+                workspace_id: workspace_id.as_str().to_owned(),
+            });
+        }
+
+        Ok(())
+    }
+
     pub async fn list_platform_api_keys(
         &self,
         workspace_id: &WorkspaceId,