feat: add organization and member management APIs for admin and internal use

backend/app/repositories/users_repo.py

@@ -1,4 +1,4 @@
-from sqlalchemy import select
+from sqlalchemy import func, or_, select
 from sqlalchemy.orm import Session
 
 from app.models.user import User
@@ -12,6 +12,35 @@ class UsersRepository:
         stmt = select(User).where(User.authentik_sub == authentik_sub)
         return self.db.scalar(stmt)
 
+    def get_by_id(self, user_id: str) -> User | None:
+        stmt = select(User).where(User.id == user_id)
+        return self.db.scalar(stmt)
+
+    def list(
+        self,
+        keyword: str | None = None,
+        is_active: bool | None = None,
+        limit: int = 50,
+        offset: int = 0,
+    ) -> tuple[list[User], int]:
+        stmt = select(User)
+        count_stmt = select(func.count()).select_from(User)
+
+        if keyword:
+            pattern = f"%{keyword}%"
+            cond = or_(User.authentik_sub.ilike(pattern), User.email.ilike(pattern), User.display_name.ilike(pattern))
+            stmt = stmt.where(cond)
+            count_stmt = count_stmt.where(cond)
+
+        if is_active is not None:
+            stmt = stmt.where(User.is_active == is_active)
+            count_stmt = count_stmt.where(User.is_active == is_active)
+
+        stmt = stmt.order_by(User.created_at.desc()).limit(limit).offset(offset)
+        items = list(self.db.scalars(stmt).all())
+        total = int(self.db.scalar(count_stmt) or 0)
+        return items, total
+
     def upsert_by_sub(
         self,
         authentik_sub: str,
@@ -40,3 +69,21 @@ class UsersRepository:
         self.db.commit()
         self.db.refresh(user)
         return user
+
+    def update_member(
+        self,
+        user: User,
+        *,
+        email: str | None = None,
+        display_name: str | None = None,
+        is_active: bool | None = None,
+    ) -> User:
+        if email is not None:
+            user.email = email
+        if display_name is not None:
+            user.display_name = display_name
+        if is_active is not None:
+            user.is_active = is_active
+        self.db.commit()
+        self.db.refresh(user)
+        return user