perf(schemas): index organization_user_relations on (tenant_id, user_id)

[simeng-li]

Summary

Refs LOG-13472. First task in the Phase 0.5 performance milestone surfaced by the audit before LOG-13462 lands.

What changed

• packages/schemas/alterations/next-1778500000-add-organization-user-relations-user-id-index.ts — new migration that adds create index concurrently if not exists organization_user_relations__tenant_id_user_id on organization_user_relations (tenant_id, user_id). Built concurrently via the beforeUp hook so no table lock is held during the build. Reversible via beforeDown running drop index concurrently if exists.
• packages/schemas/tables/organization_user_relations.sql — mirrors the new index inline so fresh installs get it without replaying the alteration.
• .changeset/index-organization-user-relations-user-id.md — @logto/schemas patch.

Expected result

• Queries that filter by (tenant_id, user_id) without specifying organization_id switch from a partial PK scan to an Index Scan on the new secondary index. The two hot call sites this fixes:
  • getOrganizationsByUserId (packages/core/src/queries/organization/user-relations.ts:78-99) — runs on every token exchange / sign-in / org-list endpoint.
  • The membership-existence middleware on /organizations/:id/users/:userId/roles and /users/:userId/scopes (packages/core/src/utils/RelationQueries.ts:249-265 invoked from routes/organization/user/role-relations.ts:34).
• No schema, API, or behavior change. Index is purely additive.

Reviewer notes

• The PK column order (tenant_id, organization_id, user_id) does not serve user_id-only lookups, so they currently degrade. The FK constraint added in 1.30.0-1753669579-add-organization-user-relations-foreign-key.ts only indexes the referenced side (users (tenant_id, id)) — Postgres does not auto-index the referencing side.
• Build runs via the beforeUp / beforeDown non-transactional hooks so CONCURRENTLY can be used without holding the write-blocking SHARE lock that a plain CREATE INDEX would hold for the duration of the build. This matches the pattern in 1.35.0-1765183934-add-logs-created-at-id-index.ts, 1.35.0-1765631949-drop-redundant-logs-id-index.ts, and 1.38.0-1772615848-add-oidc-model-instances-grant-id-partial-index.ts. if not exists / if exists keep both directions idempotent against transient failures.
• Index name follows the repo's <table>__<columns> convention. Confirmed unique via grep.

Testing

Tested locally

Checklist

• .changeset
• unit tests
• integration tests
• necessary TSDoc comments

[github-actions]

COMPARE TO master

Total Size Diff 📈 +2.21 KB

Diff by File

Name	Diff
.changeset/index-organization-user-relations-user-id.md	📈 +505 Bytes
.gitignore	📈 +18 Bytes
packages/schemas/alterations/next-1778500000-add-organization-user-relations-user-id-index.ts	📈 +1.58 KB
packages/schemas/tables/organization_user_relations.sql	📈 +116 Bytes

[Copilot]

Pull request overview

Adds a secondary DB index to improve performance of organization membership reverse lookups (by tenant_id + user_id) that are on the hot path for sign-in/token exchange and membership checks.

Changes:

• Add a new schema alteration to create (tenant_id, user_id) index on organization_user_relations.
• Add a changeset bumping @logto/schemas as a patch release.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 2 comments.

File	Description
packages/schemas/alterations/next-1778500000-add-organization-user-relations-user-id-index.ts	Adds an alteration to create/drop the new secondary index for (tenant_id, user_id) lookups.
.changeset/index-organization-user-relations-user-id.md	Publishes the schema change via a Changeset patch release note for @logto/schemas.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 4 changed files in this pull request and generated no new comments.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 4 changed files in this pull request and generated 1 comment.