@aglyn/tenant-data-admin 1.0.0-beta.160 → 1.0.0-beta.161

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aglyn/tenant-data-admin",
-  "version": "1.0.0-beta.160",
+  "version": "1.0.0-beta.161",
   "license": "Apache-2.0",
   "homepage": "https://aglyn.com",
   "repository": {
@@ -25,11 +25,11 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@aglyn/aglyn": "1.0.0-beta.160",
-    "@aglyn/shared-util-email": "1.0.0-beta.160",
-    "@aglyn/shared-util-fbserver": "1.0.0-beta.160",
-    "@aglyn/shared-util-http": "1.0.0-beta.160",
-    "@aglyn/shared-util-tools": "1.0.0-beta.160",
+    "@aglyn/aglyn": "1.0.0-beta.161",
+    "@aglyn/shared-util-email": "1.0.0-beta.161",
+    "@aglyn/shared-util-fbserver": "1.0.0-beta.161",
+    "@aglyn/shared-util-http": "1.0.0-beta.161",
+    "@aglyn/shared-util-tools": "1.0.0-beta.161",
     "@msgpack/msgpack": "^3.1.3",
     "@swc/helpers": "0.5.23",
     "sharp": "^0.35.3",

package/src/lib/server/org-member-notice.d.ts

@@ -0,0 +1,52 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * A NOTICE TO NAMED MEMBERS OF AN ORGANIZATION, BY EMAIL (AGL-3244).
+ *
+ * The console notification (`notifications.ts`) is the record, and its email
+ * channel is a preference that defaults off. Some things cannot wait on a
+ * preference: a sequence mailbox that paused itself holds every enrollment
+ * on it until its owner acts, and the owner is not watching the page. This
+ * sends the email regardless, to the members named and — when asked — to
+ * the organization's owners and admins beside them, one send per address
+ * so nobody is shown anyone else's.
+ *
+ * Addresses come from the roster (`orgs/{orgId}/members/{uid}.email`), and
+ * for a member whose row carries none, from the directory. Suppressed
+ * addresses are skipped, the send is metered to the organization, and
+ * nothing here throws: the notice is a courtesy beside a state the caller
+ * already wrote.
+ */
+export interface OrgMemberNoticeInput {
+    orgId: string;
+    /** The members to write to, by uid. */
+    uids: readonly string[];
+    /** Also the organization's owners and admins. */
+    includeAdmins?: boolean;
+    subject: string;
+    text: string;
+    /** Resend tag / log label. */
+    context: string;
+}
+export interface OrgMemberNoticeResult {
+    /** Addresses the notice went to. */
+    sent: number;
+    /** Why nothing could be sent at all, when nothing could. */
+    reason?: 'unconfigured' | 'no-recipients' | 'failed';
+}
+/** Sends one notice to each member — see the module note. */
+export declare function sendOrgMemberNotice(input: OrgMemberNoticeInput): Promise<OrgMemberNoticeResult>;

package/src/lib/server/org-member-notice.js

@@ -0,0 +1,90 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { isEmailConfigured, sendEmail } from "@aglyn/shared-util-email";
+import { findUserByUidAcrossPools } from "./auth-pools.js";
+import { filterSuppressedEmails } from "./email-suppression.js";
+import { listOrgMembers } from "./organizations.js";
+/** At most this many directory lookups, and this many sends, per notice. */ const MAX_LOOKUPS = 10;
+const MAX_SENDS = 25;
+/** Sends one notice to each member — see the module note. */ export async function sendOrgMemberNotice(input) {
+    if (!isEmailConfigured()) return {
+        sent: 0,
+        reason: 'unconfigured'
+    };
+    try {
+        const members = await listOrgMembers(input.orgId);
+        const rosterEmail = new Map();
+        for (const member of members){
+            var _member_email;
+            const address = String((_member_email = member.email) != null ? _member_email : '').trim().toLowerCase();
+            if (address.includes('@')) rosterEmail.set(member.$id, address);
+        }
+        const uids = new Set(input.uids.filter(Boolean));
+        if (input.includeAdmins) {
+            for (const member of members){
+                if (member.role === 'owner' || member.role === 'admin') uids.add(member.$id);
+            }
+        }
+        const addresses = new Set();
+        let lookups = 0;
+        for (const uid of uids){
+            var _rosterEmail_get;
+            let address = (_rosterEmail_get = rosterEmail.get(uid)) != null ? _rosterEmail_get : '';
+            if (!address && lookups < MAX_LOOKUPS) {
+                var _ref;
+                var _pooled_record;
+                lookups += 1;
+                const pooled = await findUserByUidAcrossPools(uid).catch(()=>null);
+                address = String((_ref = pooled == null ? void 0 : (_pooled_record = pooled.record) == null ? void 0 : _pooled_record.email) != null ? _ref : '').trim().toLowerCase();
+            }
+            if (address.includes('@')) addresses.add(address);
+        }
+        const recipients = await filterSuppressedEmails([
+            ...addresses
+        ]);
+        if (!recipients.length) return {
+            sent: 0,
+            reason: 'no-recipients'
+        };
+        let sent = 0;
+        for (const to of recipients.slice(0, MAX_SENDS)){
+            const result = await sendEmail({
+                to,
+                subject: input.subject,
+                text: input.text,
+                context: input.context
+            });
+            if (!result.sent) continue;
+            sent += 1;
+            const { meterOrgEmail } = await import("./email-metering.js");
+            await meterOrgEmail(input.orgId).catch(()=>undefined);
+        }
+        return sent ? {
+            sent
+        } : {
+            sent: 0,
+            reason: 'failed'
+        };
+    } catch (error) {
+        console.error('[org-member-notice] send failed', error);
+        return {
+            sent: 0,
+            reason: 'failed'
+        };
+    }
+}
+
+//# sourceMappingURL=org-member-notice.js.map

package/src/lib/server/org-member-notice.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../../libs/tenant/data/admin/src/lib/server/org-member-notice.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { isEmailConfigured, sendEmail } from '@aglyn/shared-util-email'\nimport { findUserByUidAcrossPools } from './auth-pools'\nimport { filterSuppressedEmails } from './email-suppression'\nimport { listOrgMembers } from './organizations'\n\n/**\n * A NOTICE TO NAMED MEMBERS OF AN ORGANIZATION, BY EMAIL (AGL-3244).\n *\n * The console notification (`notifications.ts`) is the record, and its email\n * channel is a preference that defaults off. Some things cannot wait on a\n * preference: a sequence mailbox that paused itself holds every enrollment\n * on it until its owner acts, and the owner is not watching the page. This\n * sends the email regardless, to the members named and — when asked — to\n * the organization's owners and admins beside them, one send per address\n * so nobody is shown anyone else's.\n *\n * Addresses come from the roster (`orgs/{orgId}/members/{uid}.email`), and\n * for a member whose row carries none, from the directory. Suppressed\n * addresses are skipped, the send is metered to the organization, and\n * nothing here throws: the notice is a courtesy beside a state the caller\n * already wrote.\n */\n\nexport interface OrgMemberNoticeInput {\n  orgId: string\n  /** The members to write to, by uid. */\n  uids: readonly string[]\n  /** Also the organization's owners and admins. */\n  includeAdmins?: boolean\n  subject: string\n  text: string\n  /** Resend tag / log label. */\n  context: string\n}\n\nexport interface OrgMemberNoticeResult {\n  /** Addresses the notice went to. */\n  sent: number\n  /** Why nothing could be sent at all, when nothing could. */\n  reason?: 'unconfigured' | 'no-recipients' | 'failed'\n}\n\n/** At most this many directory lookups, and this many sends, per notice. */\nconst MAX_LOOKUPS = 10\nconst MAX_SENDS = 25\n\n/** Sends one notice to each member — see the module note. */\nexport async function sendOrgMemberNotice(input: OrgMemberNoticeInput): Promise<OrgMemberNoticeResult> {\n  if (!isEmailConfigured()) return { sent: 0, reason: 'unconfigured' }\n  try {\n    const members = await listOrgMembers(input.orgId)\n    const rosterEmail = new Map<string, string>()\n    for (const member of members) {\n      const address = String(member.email ?? '')\n        .trim()\n        .toLowerCase()\n      if (address.includes('@')) rosterEmail.set(member.$id, address)\n    }\n    const uids = new Set(input.uids.filter(Boolean))\n    if (input.includeAdmins) {\n      for (const member of members) {\n        if (member.role === 'owner' || member.role === 'admin') uids.add(member.$id)\n      }\n    }\n    const addresses = new Set<string>()\n    let lookups = 0\n    for (const uid of uids) {\n      let address = rosterEmail.get(uid) ?? ''\n      if (!address && lookups < MAX_LOOKUPS) {\n        lookups += 1\n        const pooled = await findUserByUidAcrossPools(uid).catch(() => null)\n        address = String(pooled?.record?.email ?? '')\n          .trim()\n          .toLowerCase()\n      }\n      if (address.includes('@')) addresses.add(address)\n    }\n    const recipients = await filterSuppressedEmails([...addresses])\n    if (!recipients.length) return { sent: 0, reason: 'no-recipients' }\n    let sent = 0\n    for (const to of recipients.slice(0, MAX_SENDS)) {\n      const result = await sendEmail({ to, subject: input.subject, text: input.text, context: input.context })\n      if (!result.sent) continue\n      sent += 1\n      const { meterOrgEmail } = await import('./email-metering')\n      await meterOrgEmail(input.orgId).catch(() => undefined)\n    }\n    return sent ? { sent } : { sent: 0, reason: 'failed' }\n  } catch (error) {\n    console.error('[org-member-notice] send failed', error)\n    return { sent: 0, reason: 'failed' }\n  }\n}\n"],"names":["isEmailConfigured","sendEmail","findUserByUidAcrossPools","filterSuppressedEmails","listOrgMembers","MAX_LOOKUPS","MAX_SENDS","sendOrgMemberNotice","input","sent","reason","members","orgId","rosterEmail","Map","member","address","String","email","trim","toLowerCase","includes","set","$id","uids","Set","filter","Boolean","includeAdmins","role","add","addresses","lookups","uid","get","pooled","catch","record","recipients","length","to","slice","result","subject","text","context","meterOrgEmail","undefined","error","console"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,iBAAiB,EAAEC,SAAS,QAAQ,2BAA0B;AACvE,SAASC,wBAAwB,QAAQ,kBAAc;AACvD,SAASC,sBAAsB,QAAQ,yBAAqB;AAC5D,SAASC,cAAc,QAAQ,qBAAiB;AAuChD,0EAA0E,GAC1E,MAAMC,cAAc;AACpB,MAAMC,YAAY;AAElB,2DAA2D,GAC3D,OAAO,eAAeC,oBAAoBC,KAA2B;IACnE,IAAI,CAACR,qBAAqB,OAAO;QAAES,MAAM;QAAGC,QAAQ;IAAe;IACnE,IAAI;QACF,MAAMC,UAAU,MAAMP,eAAeI,MAAMI,KAAK;QAChD,MAAMC,cAAc,IAAIC;QACxB,KAAK,MAAMC,UAAUJ,QAAS;gBACLI;YAAvB,MAAMC,UAAUC,QAAOF,gBAAAA,OAAOG,KAAK,YAAZH,gBAAgB,IACpCI,IAAI,GACJC,WAAW;YACd,IAAIJ,QAAQK,QAAQ,CAAC,MAAMR,YAAYS,GAAG,CAACP,OAAOQ,GAAG,EAAEP;QACzD;QACA,MAAMQ,OAAO,IAAIC,IAAIjB,MAAMgB,IAAI,CAACE,MAAM,CAACC;QACvC,IAAInB,MAAMoB,aAAa,EAAE;YACvB,KAAK,MAAMb,UAAUJ,QAAS;gBAC5B,IAAII,OAAOc,IAAI,KAAK,WAAWd,OAAOc,IAAI,KAAK,SAASL,KAAKM,GAAG,CAACf,OAAOQ,GAAG;YAC7E;QACF;QACA,MAAMQ,YAAY,IAAIN;QACtB,IAAIO,UAAU;QACd,KAAK,MAAMC,OAAOT,KAAM;gBACRX;YAAd,IAAIG,WAAUH,mBAAAA,YAAYqB,GAAG,CAACD,gBAAhBpB,mBAAwB;YACtC,IAAI,CAACG,WAAWgB,UAAU3B,aAAa;;oBAGpB8B;gBAFjBH,WAAW;gBACX,MAAMG,SAAS,MAAMjC,yBAAyB+B,KAAKG,KAAK,CAAC,IAAM;gBAC/DpB,UAAUC,eAAOkB,2BAAAA,iBAAAA,OAAQE,MAAM,qBAAdF,eAAgBjB,KAAK,mBAAI,IACvCC,IAAI,GACJC,WAAW;YAChB;YACA,IAAIJ,QAAQK,QAAQ,CAAC,MAAMU,UAAUD,GAAG,CAACd;QAC3C;QACA,MAAMsB,aAAa,MAAMnC,uBAAuB;eAAI4B;SAAU;QAC9D,IAAI,CAACO,WAAWC,MAAM,EAAE,OAAO;YAAE9B,MAAM;YAAGC,QAAQ;QAAgB;QAClE,IAAID,OAAO;QACX,KAAK,MAAM+B,MAAMF,WAAWG,KAAK,CAAC,GAAGnC,WAAY;YAC/C,MAAMoC,SAAS,MAAMzC,UAAU;gBAAEuC;gBAAIG,SAASnC,MAAMmC,OAAO;gBAAEC,MAAMpC,MAAMoC,IAAI;gBAAEC,SAASrC,MAAMqC,OAAO;YAAC;YACtG,IAAI,CAACH,OAAOjC,IAAI,EAAE;YAClBA,QAAQ;YACR,MAAM,EAAEqC,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC;YACvC,MAAMA,cAActC,MAAMI,KAAK,EAAEwB,KAAK,CAAC,IAAMW;QAC/C;QACA,OAAOtC,OAAO;YAAEA;QAAK,IAAI;YAAEA,MAAM;YAAGC,QAAQ;QAAS;IACvD,EAAE,OAAOsC,OAAO;QACdC,QAAQD,KAAK,CAAC,mCAAmCA;QACjD,OAAO;YAAEvC,MAAM;YAAGC,QAAQ;QAAS;IACrC;AACF"}