@ai-matrx/auth 0.0.0 → 0.1.1

package/dist/organizations.d.cts

@@ -0,0 +1,226 @@
+import { SupabaseClient } from '@supabase/supabase-js';
+import { A as AuthClient } from './session-DhRO4euL.cjs';
+
+/**
+ * @ai-matrx/auth/organizations (moved from @ai-matrx/data/organizations, 2026-10-09) — THE active-organization ladder and the account's organization
+ * facts, for every Matrx client (the web, Matrx 2, the extension, Studio).
+ *
+ * 🚨 ONE ACTIVE ORGANIZATION, SET ONCE WHEN THE APP LOADS, NEVER NONE (Arman, 2026-10-07;
+ * organizations STATE rules 10–15). The ladder picks what the UI OPENS to; from then on every
+ * request carries the one active organization the person can see. Reads never filter by it.
+ *
+ * THE RUNGS, each kept only if it is a CURRENT membership:
+ *   1. HELD     — what this tab (web) or this running app (desktop, in memory) already works in;
+ *   2. LAST ACTIVE — `users.user_preferences.last_active_organization_id` (follows the person
+ *                 across devices: STATE rule 12);
+ *   3. START-UP — `users.user_preferences.startup_organization_id` (the "Start-up organization"
+ *                 setting);
+ *   4. FIRST    — the oldest active membership.
+ * Zero memberships → null. A failed read THROWS (the host shows "could not check" and a retry,
+ * never a guess). The ladder's own answer never writes anything (rule 14): only a person's click
+ * writes last active.
+ *
+ * Hosts with extra rungs keep them (the web's `?org=` link rung) and call the pure core here.
+ */
+
+/** One organization the person is an active member of, as every picker draws it. */
+interface OrganizationMembership {
+    readonly id: string;
+    readonly name: string;
+    readonly slug: string | null;
+    /** The database-validated 2–3 letters, when the organization has them. */
+    readonly abbreviation: string | null;
+    readonly logoUrl: string | null;
+    /** owner | admin | member (the membership's role). */
+    readonly role: string;
+    /** The person created it (drawn under the favourites, before the rest). */
+    readonly isOwn: boolean;
+    /** Classified in `iam.organizations.settings.test_fixture` — never guessed from a name. */
+    readonly isTestFixture: boolean;
+    /** When the membership began (ISO): the oldest is rung 4. */
+    readonly joinedAt: string;
+}
+interface AccountOrganizationChoices {
+    readonly lastActiveOrganizationId: string | null;
+    readonly startupOrganizationId: string | null;
+}
+type OrganizationRung = "held" | "last-active" | "startup" | "first";
+interface ResolvedOrganization<T extends {
+    id: string;
+}> {
+    readonly organization: T;
+    /** Which rung answered (for logs and tests; never shown as a choice). */
+    readonly rung: OrganizationRung;
+}
+interface LadderInput<T extends {
+    id: string;
+}> {
+    readonly memberships: readonly T[];
+    readonly held?: string | null;
+    readonly account?: AccountOrganizationChoices | null;
+    /** Rung 4: the oldest active membership. Omitted: the oldest by `joinedAt`, else the first given. */
+    readonly first?: T | null;
+}
+/**
+ * THE LADDER. Pure: no read, no write. Null only when there are no memberships.
+ */
+declare function resolveActiveOrganization<T extends {
+    id: string;
+    joinedAt?: string;
+}>(input: LadderInput<T>): ResolvedOrganization<T> | null;
+/**
+ * The ladder with its reads deferred: the account's choices are read only when no held
+ * organization answers, and the first membership only when nothing else does. A failed read
+ * throws through.
+ */
+declare function resolveActiveOrganizationLazily<T extends {
+    id: string;
+    joinedAt?: string;
+}>(input: {
+    readonly memberships: readonly T[];
+    readonly held?: string | null;
+    readonly readAccount: () => Promise<AccountOrganizationChoices>;
+    readonly first?: () => Promise<T | null>;
+}): Promise<ResolvedOrganization<T> | null>;
+/** The oldest membership by `joinedAt` (ties and missing dates keep the given order). */
+declare function oldestMembership<T extends {
+    joinedAt?: string;
+}>(memberships: readonly T[]): T | null;
+/**
+ * THE ORDER every organization list uses (the shared OrganizationPicker's): favourites, then the
+ * person's own organizations, then the rest; inside each band the given order is kept.
+ */
+declare function orderOrganizations<T extends {
+    id: string;
+    isOwn?: boolean;
+}>(organizations: readonly T[], favouriteIds: readonly string[]): T[];
+/** Search over the two things a person types: the name and the abbreviation. */
+declare function organizationMatches(org: {
+    name: string;
+    abbreviation?: string | null;
+}, query: string): boolean;
+/** Any supabase-js client (typed or not). */
+type OrganizationsDb = SupabaseClient<any, any, any>;
+/**
+ * Every organization the signed-in person is an ACTIVE member of (archived organizations left
+ * out), through the canonical membership door (`mbr_for_user`, paged) and the organizations'
+ * own rows. Throws when either read fails; [] when there are none. Ordered by name.
+ */
+declare function readMemberships(db: OrganizationsDb, userId: string): Promise<OrganizationMembership[]>;
+interface ChoicesRow {
+    last_active_organization_id: string | null;
+    startup_organization_id: string | null;
+}
+/** The two columns as the ladder's input. A person with no preferences row has neither. */
+declare function toAccountOrganizationChoices(row: Partial<ChoicesRow> | null | undefined): AccountOrganizationChoices;
+/**
+ * The account's last active and start-up organizations. 🚨 ONLY THE LADDER READS THESE: they
+ * choose what the shell opens to and nothing else. Throws when the read fails.
+ */
+declare function readAccountOrganizationChoices(db: OrganizationsDb, userId: string): Promise<AccountOrganizationChoices>;
+/** Save where the person now works, for their next load on any device. Only a click calls this. Throws on refusal. */
+declare function writeLastActiveOrganization(db: OrganizationsDb, organizationId: string): Promise<void>;
+/** Set (or clear, with null) the Start-up organization setting. Throws on refusal. */
+declare function writeStartupOrganization(db: OrganizationsDb, organizationId: string | null): Promise<void>;
+/** The favourites store's entity type (`platform.user_entity_state`). */
+declare const ORGANIZATION_ENTITY_TYPE = "organization";
+/**
+ * The person's favourite organizations: the platform's per-person flag store
+ * (`public.ues_list`, kind favorite), the same store agent and model favourites use. Throws on
+ * failure.
+ */
+declare function readOrganizationFavourites(db: OrganizationsDb): Promise<string[]>;
+/** Star (true) or unstar (false) one organization. `ues_set` refuses one the person cannot open. Throws on refusal. */
+declare function setOrganizationFavourite(db: OrganizationsDb, organizationId: string, favourite: boolean): Promise<void>;
+/**
+ * What the AI Matrx server's refusal of a request's organization means for the ladder
+ * (`matrx_connect` AuthMiddleware._organization_admission_words via `organization_free.py`):
+ *   - 400 with `detail.organization_admission` "denied" (not a member), "unknown" (no such
+ *     organization) or "archived" → the organization is gone for this person: re-run the ladder;
+ *   - 503 with "unverifiable" (the lookup failed; Retry-After 5) → keep it and retry;
+ *   - anything else → not an organization refusal.
+ */
+type OrganizationRefusal = "lapsed" | "retry" | null;
+declare function classifyOrganizationRefusal(status: number, body: unknown): OrganizationRefusal;
+
+/**
+ * THE ACTIVE ORGANIZATION — one per tab / running app, set once when the app loads, never none
+ * while the person has a membership (Arman, 2026-10-07; organizations STATE rules 10–15).
+ *
+ *   const active = createActiveOrganization({ client: supabase });
+ *   await active.load();                       // the ladder: held → last active → start-up → first
+ *   const orgId = await active.ensureOrgId();  // HELD until the ladder answers; never a guess
+ *   await active.switchTo(otherId);            // a person's click: saves last active for next load
+ *
+ * HELD-REQUEST SEMANTICS. A write or server call that needs the organization asks
+ * `ensureOrgId()`: while the ladder is still resolving the call WAITS (it is held, never sent
+ * without an organization and never sent with a guessed one); once resolved it gets the one
+ * active organization; with zero memberships or a failed read it is REFUSED with a named error.
+ * Acting on a record passes that record's own organization (`ensureOrgId(record.organization_id)`),
+ * which wins and never switches the active one.
+ *
+ * 🚨 NEVER A LIST FILTER. Reads show everything the person can see across all their
+ * organizations; nothing here narrows a read. The active organization is only where new things
+ * are saved and which organization a server call runs in.
+ *
+ * The held id is identity-keyed: a different person signing in on the same device never inherits
+ * the last person's organization, and a sign-out resets the store.
+ */
+
+/** Where this tab / app remembers its organization between reloads (identity-keyed). */
+interface HeldOrganizationStore {
+    read(userId: string): string | null | Promise<string | null>;
+    write(userId: string, organizationId: string): void | Promise<void>;
+    clear(): void | Promise<void>;
+}
+type ActiveOrganizationStatus = "idle" | "resolving" | "ready" | "none" | "error";
+interface ActiveOrganizationSnapshot {
+    readonly status: ActiveOrganizationStatus;
+    readonly userId: string | null;
+    readonly organizationId: string | null;
+    readonly organization: OrganizationMembership | null;
+    readonly memberships: readonly OrganizationMembership[];
+    /** Which ladder rung answered (or "switched" after a person's click). */
+    readonly rung: OrganizationRung | "switched" | null;
+    readonly error: string | null;
+}
+declare class NoActiveOrganizationError extends Error {
+    readonly reason: "signed-out" | "no-memberships" | "unreadable";
+    constructor(reason: "signed-out" | "no-memberships" | "unreadable", detail?: string);
+}
+declare class NotAMemberError extends Error {
+    readonly organizationId: string;
+    constructor(organizationId: string);
+}
+interface ActiveOrganization {
+    snapshot(): ActiveOrganizationSnapshot;
+    subscribe(listener: () => void): () => void;
+    /** Run the ladder (again). Resolves with the settled snapshot; never throws. */
+    load(): Promise<ActiveOrganizationSnapshot>;
+    /** The active organization id now, or null while resolving / with none. Sync (api's getter). */
+    current(): string | null;
+    /** THE HELD REQUEST: the record's own organization, else the active one once resolved. */
+    ensureOrgId(recordOrganizationId?: string | null): Promise<string>;
+    /** A person's click: switch, remember for this tab, save as last active for the next load. */
+    switchTo(organizationId: string): Promise<void>;
+    /** Feed a server refusal in: a lapsed organization re-runs the ladder. Returns the class. */
+    handleRefusal(status: number, body: unknown): Promise<"lapsed" | "retry" | null>;
+    dispose(): void;
+}
+interface CreateActiveOrganizationOptions {
+    /** The person's Supabase client (any supabase-js client). */
+    readonly client: OrganizationsDb & AuthClient;
+    /** Where this tab/app holds its choice. Default: browser `sessionStorage` (per tab), else memory. */
+    readonly held?: HeldOrganizationStore | undefined;
+    /** An extra first rung (the web's `?org=` link). Kept only if it is a current membership. */
+    readonly linked?: (() => string | null | undefined) | undefined;
+    /** Load as soon as it is created (default true). */
+    readonly autoLoad?: boolean | undefined;
+}
+/** A held store over a `Storage` (browser `sessionStorage` = per tab), identity-keyed. */
+declare function storageHeldOrganization(storage: Pick<Storage, "getItem" | "setItem" | "removeItem">, key?: string): HeldOrganizationStore;
+/** Held in memory: the running app's own choice (desktop, scripts, tests). */
+declare function memoryHeldOrganization(): HeldOrganizationStore;
+declare function createActiveOrganization(options: CreateActiveOrganizationOptions): ActiveOrganization;
+
+export { type AccountOrganizationChoices, type ActiveOrganization, type ActiveOrganizationSnapshot, type ActiveOrganizationStatus, type CreateActiveOrganizationOptions, type HeldOrganizationStore, type LadderInput, NoActiveOrganizationError, NotAMemberError, ORGANIZATION_ENTITY_TYPE, type OrganizationMembership, type OrganizationRefusal, type OrganizationRung, type OrganizationsDb, type ResolvedOrganization, classifyOrganizationRefusal, createActiveOrganization, memoryHeldOrganization, oldestMembership, orderOrganizations, organizationMatches, readAccountOrganizationChoices, readMemberships, readOrganizationFavourites, resolveActiveOrganization, resolveActiveOrganizationLazily, setOrganizationFavourite, storageHeldOrganization, toAccountOrganizationChoices, writeLastActiveOrganization, writeStartupOrganization };

package/dist/organizations.d.ts

@@ -0,0 +1,226 @@
+import { SupabaseClient } from '@supabase/supabase-js';
+import { A as AuthClient } from './session-DhRO4euL.js';
+
+/**
+ * @ai-matrx/auth/organizations (moved from @ai-matrx/data/organizations, 2026-10-09) — THE active-organization ladder and the account's organization
+ * facts, for every Matrx client (the web, Matrx 2, the extension, Studio).
+ *
+ * 🚨 ONE ACTIVE ORGANIZATION, SET ONCE WHEN THE APP LOADS, NEVER NONE (Arman, 2026-10-07;
+ * organizations STATE rules 10–15). The ladder picks what the UI OPENS to; from then on every
+ * request carries the one active organization the person can see. Reads never filter by it.
+ *
+ * THE RUNGS, each kept only if it is a CURRENT membership:
+ *   1. HELD     — what this tab (web) or this running app (desktop, in memory) already works in;
+ *   2. LAST ACTIVE — `users.user_preferences.last_active_organization_id` (follows the person
+ *                 across devices: STATE rule 12);
+ *   3. START-UP — `users.user_preferences.startup_organization_id` (the "Start-up organization"
+ *                 setting);
+ *   4. FIRST    — the oldest active membership.
+ * Zero memberships → null. A failed read THROWS (the host shows "could not check" and a retry,
+ * never a guess). The ladder's own answer never writes anything (rule 14): only a person's click
+ * writes last active.
+ *
+ * Hosts with extra rungs keep them (the web's `?org=` link rung) and call the pure core here.
+ */
+
+/** One organization the person is an active member of, as every picker draws it. */
+interface OrganizationMembership {
+    readonly id: string;
+    readonly name: string;
+    readonly slug: string | null;
+    /** The database-validated 2–3 letters, when the organization has them. */
+    readonly abbreviation: string | null;
+    readonly logoUrl: string | null;
+    /** owner | admin | member (the membership's role). */
+    readonly role: string;
+    /** The person created it (drawn under the favourites, before the rest). */
+    readonly isOwn: boolean;
+    /** Classified in `iam.organizations.settings.test_fixture` — never guessed from a name. */
+    readonly isTestFixture: boolean;
+    /** When the membership began (ISO): the oldest is rung 4. */
+    readonly joinedAt: string;
+}
+interface AccountOrganizationChoices {
+    readonly lastActiveOrganizationId: string | null;
+    readonly startupOrganizationId: string | null;
+}
+type OrganizationRung = "held" | "last-active" | "startup" | "first";
+interface ResolvedOrganization<T extends {
+    id: string;
+}> {
+    readonly organization: T;
+    /** Which rung answered (for logs and tests; never shown as a choice). */
+    readonly rung: OrganizationRung;
+}
+interface LadderInput<T extends {
+    id: string;
+}> {
+    readonly memberships: readonly T[];
+    readonly held?: string | null;
+    readonly account?: AccountOrganizationChoices | null;
+    /** Rung 4: the oldest active membership. Omitted: the oldest by `joinedAt`, else the first given. */
+    readonly first?: T | null;
+}
+/**
+ * THE LADDER. Pure: no read, no write. Null only when there are no memberships.
+ */
+declare function resolveActiveOrganization<T extends {
+    id: string;
+    joinedAt?: string;
+}>(input: LadderInput<T>): ResolvedOrganization<T> | null;
+/**
+ * The ladder with its reads deferred: the account's choices are read only when no held
+ * organization answers, and the first membership only when nothing else does. A failed read
+ * throws through.
+ */
+declare function resolveActiveOrganizationLazily<T extends {
+    id: string;
+    joinedAt?: string;
+}>(input: {
+    readonly memberships: readonly T[];
+    readonly held?: string | null;
+    readonly readAccount: () => Promise<AccountOrganizationChoices>;
+    readonly first?: () => Promise<T | null>;
+}): Promise<ResolvedOrganization<T> | null>;
+/** The oldest membership by `joinedAt` (ties and missing dates keep the given order). */
+declare function oldestMembership<T extends {
+    joinedAt?: string;
+}>(memberships: readonly T[]): T | null;
+/**
+ * THE ORDER every organization list uses (the shared OrganizationPicker's): favourites, then the
+ * person's own organizations, then the rest; inside each band the given order is kept.
+ */
+declare function orderOrganizations<T extends {
+    id: string;
+    isOwn?: boolean;
+}>(organizations: readonly T[], favouriteIds: readonly string[]): T[];
+/** Search over the two things a person types: the name and the abbreviation. */
+declare function organizationMatches(org: {
+    name: string;
+    abbreviation?: string | null;
+}, query: string): boolean;
+/** Any supabase-js client (typed or not). */
+type OrganizationsDb = SupabaseClient<any, any, any>;
+/**
+ * Every organization the signed-in person is an ACTIVE member of (archived organizations left
+ * out), through the canonical membership door (`mbr_for_user`, paged) and the organizations'
+ * own rows. Throws when either read fails; [] when there are none. Ordered by name.
+ */
+declare function readMemberships(db: OrganizationsDb, userId: string): Promise<OrganizationMembership[]>;
+interface ChoicesRow {
+    last_active_organization_id: string | null;
+    startup_organization_id: string | null;
+}
+/** The two columns as the ladder's input. A person with no preferences row has neither. */
+declare function toAccountOrganizationChoices(row: Partial<ChoicesRow> | null | undefined): AccountOrganizationChoices;
+/**
+ * The account's last active and start-up organizations. 🚨 ONLY THE LADDER READS THESE: they
+ * choose what the shell opens to and nothing else. Throws when the read fails.
+ */
+declare function readAccountOrganizationChoices(db: OrganizationsDb, userId: string): Promise<AccountOrganizationChoices>;
+/** Save where the person now works, for their next load on any device. Only a click calls this. Throws on refusal. */
+declare function writeLastActiveOrganization(db: OrganizationsDb, organizationId: string): Promise<void>;
+/** Set (or clear, with null) the Start-up organization setting. Throws on refusal. */
+declare function writeStartupOrganization(db: OrganizationsDb, organizationId: string | null): Promise<void>;
+/** The favourites store's entity type (`platform.user_entity_state`). */
+declare const ORGANIZATION_ENTITY_TYPE = "organization";
+/**
+ * The person's favourite organizations: the platform's per-person flag store
+ * (`public.ues_list`, kind favorite), the same store agent and model favourites use. Throws on
+ * failure.
+ */
+declare function readOrganizationFavourites(db: OrganizationsDb): Promise<string[]>;
+/** Star (true) or unstar (false) one organization. `ues_set` refuses one the person cannot open. Throws on refusal. */
+declare function setOrganizationFavourite(db: OrganizationsDb, organizationId: string, favourite: boolean): Promise<void>;
+/**
+ * What the AI Matrx server's refusal of a request's organization means for the ladder
+ * (`matrx_connect` AuthMiddleware._organization_admission_words via `organization_free.py`):
+ *   - 400 with `detail.organization_admission` "denied" (not a member), "unknown" (no such
+ *     organization) or "archived" → the organization is gone for this person: re-run the ladder;
+ *   - 503 with "unverifiable" (the lookup failed; Retry-After 5) → keep it and retry;
+ *   - anything else → not an organization refusal.
+ */
+type OrganizationRefusal = "lapsed" | "retry" | null;
+declare function classifyOrganizationRefusal(status: number, body: unknown): OrganizationRefusal;
+
+/**
+ * THE ACTIVE ORGANIZATION — one per tab / running app, set once when the app loads, never none
+ * while the person has a membership (Arman, 2026-10-07; organizations STATE rules 10–15).
+ *
+ *   const active = createActiveOrganization({ client: supabase });
+ *   await active.load();                       // the ladder: held → last active → start-up → first
+ *   const orgId = await active.ensureOrgId();  // HELD until the ladder answers; never a guess
+ *   await active.switchTo(otherId);            // a person's click: saves last active for next load
+ *
+ * HELD-REQUEST SEMANTICS. A write or server call that needs the organization asks
+ * `ensureOrgId()`: while the ladder is still resolving the call WAITS (it is held, never sent
+ * without an organization and never sent with a guessed one); once resolved it gets the one
+ * active organization; with zero memberships or a failed read it is REFUSED with a named error.
+ * Acting on a record passes that record's own organization (`ensureOrgId(record.organization_id)`),
+ * which wins and never switches the active one.
+ *
+ * 🚨 NEVER A LIST FILTER. Reads show everything the person can see across all their
+ * organizations; nothing here narrows a read. The active organization is only where new things
+ * are saved and which organization a server call runs in.
+ *
+ * The held id is identity-keyed: a different person signing in on the same device never inherits
+ * the last person's organization, and a sign-out resets the store.
+ */
+
+/** Where this tab / app remembers its organization between reloads (identity-keyed). */
+interface HeldOrganizationStore {
+    read(userId: string): string | null | Promise<string | null>;
+    write(userId: string, organizationId: string): void | Promise<void>;
+    clear(): void | Promise<void>;
+}
+type ActiveOrganizationStatus = "idle" | "resolving" | "ready" | "none" | "error";
+interface ActiveOrganizationSnapshot {
+    readonly status: ActiveOrganizationStatus;
+    readonly userId: string | null;
+    readonly organizationId: string | null;
+    readonly organization: OrganizationMembership | null;
+    readonly memberships: readonly OrganizationMembership[];
+    /** Which ladder rung answered (or "switched" after a person's click). */
+    readonly rung: OrganizationRung | "switched" | null;
+    readonly error: string | null;
+}
+declare class NoActiveOrganizationError extends Error {
+    readonly reason: "signed-out" | "no-memberships" | "unreadable";
+    constructor(reason: "signed-out" | "no-memberships" | "unreadable", detail?: string);
+}
+declare class NotAMemberError extends Error {
+    readonly organizationId: string;
+    constructor(organizationId: string);
+}
+interface ActiveOrganization {
+    snapshot(): ActiveOrganizationSnapshot;
+    subscribe(listener: () => void): () => void;
+    /** Run the ladder (again). Resolves with the settled snapshot; never throws. */
+    load(): Promise<ActiveOrganizationSnapshot>;
+    /** The active organization id now, or null while resolving / with none. Sync (api's getter). */
+    current(): string | null;
+    /** THE HELD REQUEST: the record's own organization, else the active one once resolved. */
+    ensureOrgId(recordOrganizationId?: string | null): Promise<string>;
+    /** A person's click: switch, remember for this tab, save as last active for the next load. */
+    switchTo(organizationId: string): Promise<void>;
+    /** Feed a server refusal in: a lapsed organization re-runs the ladder. Returns the class. */
+    handleRefusal(status: number, body: unknown): Promise<"lapsed" | "retry" | null>;
+    dispose(): void;
+}
+interface CreateActiveOrganizationOptions {
+    /** The person's Supabase client (any supabase-js client). */
+    readonly client: OrganizationsDb & AuthClient;
+    /** Where this tab/app holds its choice. Default: browser `sessionStorage` (per tab), else memory. */
+    readonly held?: HeldOrganizationStore | undefined;
+    /** An extra first rung (the web's `?org=` link). Kept only if it is a current membership. */
+    readonly linked?: (() => string | null | undefined) | undefined;
+    /** Load as soon as it is created (default true). */
+    readonly autoLoad?: boolean | undefined;
+}
+/** A held store over a `Storage` (browser `sessionStorage` = per tab), identity-keyed. */
+declare function storageHeldOrganization(storage: Pick<Storage, "getItem" | "setItem" | "removeItem">, key?: string): HeldOrganizationStore;
+/** Held in memory: the running app's own choice (desktop, scripts, tests). */
+declare function memoryHeldOrganization(): HeldOrganizationStore;
+declare function createActiveOrganization(options: CreateActiveOrganizationOptions): ActiveOrganization;
+
+export { type AccountOrganizationChoices, type ActiveOrganization, type ActiveOrganizationSnapshot, type ActiveOrganizationStatus, type CreateActiveOrganizationOptions, type HeldOrganizationStore, type LadderInput, NoActiveOrganizationError, NotAMemberError, ORGANIZATION_ENTITY_TYPE, type OrganizationMembership, type OrganizationRefusal, type OrganizationRung, type OrganizationsDb, type ResolvedOrganization, classifyOrganizationRefusal, createActiveOrganization, memoryHeldOrganization, oldestMembership, orderOrganizations, organizationMatches, readAccountOrganizationChoices, readMemberships, readOrganizationFavourites, resolveActiveOrganization, resolveActiveOrganizationLazily, setOrganizationFavourite, storageHeldOrganization, toAccountOrganizationChoices, writeLastActiveOrganization, writeStartupOrganization };