fix: handle verified organization identity collisions

[skwowet]

Summary

• Recover from verified organization identity uniqueness collisions during member enrichment.
• Demote the colliding enriched identity to unverified, then add a merge suggestion for the existing verified owner and enriched org.
• Respect organization no-merge records before creating merge suggestions.

---

Note

Medium Risk
Touches organization creation/identity handling inside the member enrichment transaction and introduces merge-suggestion side effects; mistakes could create incorrect org identities or noisy merge queues.

Overview
Member enrichment now recovers when creating an organization fails due to a verified organization-identity uniqueness collision.

On collision, it finds the existing organization that owns the verified identity, retries org creation without the colliding verified identities, re-adds those identities to the enriched org as unverified signals, and records high-similarity merge suggestions (skipping pairs marked as no-merge). Organization sync is also performed per created/updated org with structured logging instead of batching IDs.

^{Reviewed by Cursor Bugbot for commit a0c387c. Bugbot is set up for automated code reviews on this repo. Configure here.}

[github-actions]

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

• feat: add user authentication (CM-123)
• feat: add user authentication (IN-123)

Projects:

• CM: Community Data Platform
• IN: Insights

Please add a Jira issue key to your PR title.

[github-actions]

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

• feat: add user authentication (CM-123)
• feat: add user authentication (IN-123)

Projects:

• CM: Community Data Platform
• IN: Insights

Please add a Jira issue key to your PR title.

[github-actions]

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

• feat: add user authentication (CM-123)
• feat: add user authentication (IN-123)

Projects:

• CM: Community Data Platform
• IN: Insights

Please add a Jira issue key to your PR title.

[github-actions]

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

• feat: add user authentication (CM-123)
• feat: add user authentication (IN-123)

Projects:

• CM: Community Data Platform
• IN: Insights

Please add a Jira issue key to your PR title.

[github-actions]

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

• feat: add user authentication (CM-123)
• feat: add user authentication (IN-123)

Projects:

• CM: Community Data Platform
• IN: Insights

Please add a Jira issue key to your PR title.

[Copilot]

Pull request overview

This PR improves the members enrichment worker’s organization upsert flow to recover from unique constraint collisions on verified organization identities, and to create organization merge suggestions when an enriched org’s verified identity is already owned by another organization.

Changes:

• Add collision recovery around findOrCreateOrganization for the verified-identity unique index by retrying with the colliding identity demoted to verified: false.
• When a collision occurs and the verified owner is found, create merge suggestions (raw + filtered) unless a no-merge record exists.
• Simplify org syncing by syncing the organization immediately after it is created/updated (instead of maintaining an accumulating orgIdsToSync list).

Comments suppressed due to low confidence (1)

services/apps/members_enrichment_worker/src/activities/enrichment.ts:530

• orgPromises are awaited via Promise.all(...) while each promise can open a nested qx.tx(...) (pg-promise SAVEPOINT). Running multiple nested transactions concurrently on the same underlying connection can interleave SAVEPOINT begin/release statements and break savepoint nesting, leaving the outer member update transaction in a failed/aborted state. Consider processing these org upserts sequentially (or otherwise ensure only one qx.tx runs at a time) when using savepoints for error recovery.

        )
      }

      await Promise.all(orgPromises)
      // ignore all organizations that were not created

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

• feat: add user authentication (CM-123)
• feat: add user authentication (IN-123)

Projects:

• CM: Community Data Platform
• IN: Insights

Please add a Jira issue key to your PR title.