@ai-matrx/auth 0.2.1 → 0.2.3

package/dist/organizations.d.ts

@@ -1,477 +1,5 @@
-import { SupabaseClient } from '@supabase/supabase-js';
-import { A as AuthClient } from './session-DdQiStp6.js';
-
-/**
- * @ai-matrx/auth/organizations (moved from @ai-matrx/data/organizations, 2026-10-09) — THE active-organization ladder and the account's organization
- * facts, for every Matrx client (the web, Matrx 2, the extension, Studio).
- *
- * 🚨 ONE ACTIVE ORGANIZATION, SET ONCE WHEN THE APP LOADS, NEVER NONE (Arman, 2026-10-07;
- * organizations STATE rules 10–15). The ladder picks what the UI OPENS to; from then on every
- * request carries the one active organization the person can see. Reads never filter by it.
- *
- * THE RUNGS, each kept only if it is a CURRENT membership:
- *   1. HELD     — what this tab (web) or this running app (desktop, in memory) already works in;
- *   2. LAST ACTIVE — `users.user_preferences.last_active_organization_id` (follows the person
- *                 across devices: STATE rule 12);
- *   3. START-UP — `users.user_preferences.startup_organization_id` (the "Start-up organization"
- *                 setting);
- *   4. FIRST    — the oldest active membership.
- * Zero memberships → null. A failed read THROWS (the host shows "could not check" and a retry,
- * never a guess). The ladder's own answer never writes anything (rule 14): only a person's click
- * writes last active.
- *
- * Hosts with extra rungs keep them (the web's `?org=` link rung) and call the pure core here.
- */
-
-/** One organization the person is an active member of, as every picker draws it. */
-interface OrganizationMembership {
-    readonly id: string;
-    readonly name: string;
-    readonly slug: string | null;
-    /** The database-validated 2–3 letters, when the organization has them. */
-    readonly abbreviation: string | null;
-    readonly logoUrl: string | null;
-    /** owner | admin | member (the membership's role). */
-    readonly role: string;
-    /** The person created it (drawn under the favourites, before the rest). */
-    readonly isOwn: boolean;
-    /** Classified in `iam.organizations.settings.test_fixture` — never guessed from a name. */
-    readonly isTestFixture: boolean;
-    /** When the membership began (ISO): the oldest is rung 4. */
-    readonly joinedAt: string;
-}
-interface AccountOrganizationChoices {
-    readonly lastActiveOrganizationId: string | null;
-    readonly startupOrganizationId: string | null;
-}
-type OrganizationRung = "held" | "last-active" | "startup" | "first";
-interface ResolvedOrganization<T extends {
-    id: string;
-}> {
-    readonly organization: T;
-    /** Which rung answered (for logs and tests; never shown as a choice). */
-    readonly rung: OrganizationRung;
-}
-interface LadderInput<T extends {
-    id: string;
-}> {
-    readonly memberships: readonly T[];
-    readonly held?: string | null;
-    readonly account?: AccountOrganizationChoices | null;
-    /** Rung 4: the oldest active membership. Omitted: the oldest by `joinedAt`, else the first given. */
-    readonly first?: T | null;
-}
-/**
- * THE LADDER. Pure: no read, no write. Null only when there are no memberships.
- */
-declare function resolveActiveOrganization<T extends {
-    id: string;
-    joinedAt?: string;
-}>(input: LadderInput<T>): ResolvedOrganization<T> | null;
-/**
- * The ladder with its reads deferred: the account's choices are read only when no held
- * organization answers, and the first membership only when nothing else does. A failed read
- * throws through.
- */
-declare function resolveActiveOrganizationLazily<T extends {
-    id: string;
-    joinedAt?: string;
-}>(input: {
-    readonly memberships: readonly T[];
-    readonly held?: string | null;
-    readonly readAccount: () => Promise<AccountOrganizationChoices>;
-    readonly first?: () => Promise<T | null>;
-}): Promise<ResolvedOrganization<T> | null>;
-/** The oldest membership by `joinedAt` (ties and missing dates keep the given order). */
-declare function oldestMembership<T extends {
-    joinedAt?: string;
-}>(memberships: readonly T[]): T | null;
-/**
- * THE ORDER every organization list uses (the shared OrganizationPicker's): favourites, then the
- * person's own organizations, then the rest; inside each band the given order is kept.
- */
-declare function orderOrganizations<T extends {
-    id: string;
-    isOwn?: boolean;
-}>(organizations: readonly T[], favouriteIds: readonly string[]): T[];
-/** Search over the two things a person types: the name and the abbreviation. */
-declare function organizationMatches(org: {
-    name: string;
-    abbreviation?: string | null;
-}, query: string): boolean;
-/** Any supabase-js client (typed or not). */
-type OrganizationsDb = SupabaseClient<any, any, any>;
-/**
- * Every organization the signed-in person is an ACTIVE member of (archived organizations left
- * out), through the canonical membership door (`mbr_for_user`, paged) and the organizations'
- * own rows. Throws when either read fails; [] when there are none. Ordered by name.
- */
-declare function readMemberships(db: OrganizationsDb, userId: string): Promise<OrganizationMembership[]>;
-interface ChoicesRow {
-    last_active_organization_id: string | null;
-    startup_organization_id: string | null;
-}
-/** The two columns as the ladder's input. A person with no preferences row has neither. */
-declare function toAccountOrganizationChoices(row: Partial<ChoicesRow> | null | undefined): AccountOrganizationChoices;
-/**
- * The account's last active and start-up organizations. 🚨 ONLY THE LADDER READS THESE: they
- * choose what the shell opens to and nothing else. Throws when the read fails.
- */
-declare function readAccountOrganizationChoices(db: OrganizationsDb, userId: string): Promise<AccountOrganizationChoices>;
-/** Save where the person now works, for their next load on any device. Only a click calls this. Throws on refusal. */
-declare function writeLastActiveOrganization(db: OrganizationsDb, organizationId: string): Promise<void>;
-/** Set (or clear, with null) the Start-up organization setting. Throws on refusal. */
-declare function writeStartupOrganization(db: OrganizationsDb, organizationId: string | null): Promise<void>;
-/** The favourites store's entity type (`platform.user_entity_state`). */
-declare const ORGANIZATION_ENTITY_TYPE = "organization";
-/**
- * The person's favourite organizations: the platform's per-person flag store
- * (`public.ues_list`, kind favorite), the same store agent and model favourites use. Throws on
- * failure.
- */
-declare function readOrganizationFavourites(db: OrganizationsDb): Promise<string[]>;
-/** Star (true) or unstar (false) one organization. `ues_set` refuses one the person cannot open. Throws on refusal. */
-declare function setOrganizationFavourite(db: OrganizationsDb, organizationId: string, favourite: boolean): Promise<void>;
-/**
- * What the AI Matrx server's refusal of a request's organization means for the ladder
- * (`matrx_connect` AuthMiddleware._organization_admission_words via `organization_free.py`):
- *   - 400 with `detail.organization_admission` "denied" (not a member), "unknown" (no such
- *     organization) or "archived" → the organization is gone for this person: re-run the ladder;
- *   - 503 with "unverifiable" (the lookup failed; Retry-After 5) → keep it and retry;
- *   - anything else → not an organization refusal.
- */
-type OrganizationRefusal = "lapsed" | "retry" | null;
-declare function classifyOrganizationRefusal(status: number, body: unknown): OrganizationRefusal;
-
-/**
- * Organization-question plumbing that is LOGIC, not store binding (moved from the website's
- * `orgBootstrapGate`, `organizationRefusal`, `childOrganization`, `adminOrganization`).
- * Pure: every host input is injected; no Redux, no Next, no window.
- */
-/** How long a write may wait for the first answer before it is refused anyway. */
-declare const ORGANIZATION_RESOLUTION_TIMEOUT_MS = 10000;
-interface OrganizationBootstrapGate {
-    isResolved(): boolean;
-    /** The organization question has been answered (with an organization or without). Idempotent. */
-    markResolved(): void;
-    /** Wait for the answer or the timeout, whichever first. Always resolves; never rejects. */
-    whenResolved(timeoutMs?: number): Promise<void>;
-    /** Tests and in-place identity swaps only. */
-    reset(): void;
-}
-/** "Nobody has looked yet" is a race, not a fact: a held write waits on this, bounded. */
-declare function createOrganizationBootstrapGate(defaultTimeoutMs?: number): OrganizationBootstrapGate;
-/** True when an error body is the server's "you are not a member of the organization you carried". */
-declare function isNotAMemberRefusal(body: unknown): boolean;
-declare const NOT_A_MEMBER_RECHECK_GAP_MS = 30000;
-interface NotAMemberRefusalNotice {
-    /** True when a recheck was started (at most one per gap, so a burst reads memberships once). */
-    notice(body: unknown, now?: number): boolean;
-    reset(): void;
-}
-declare function createNotAMemberRefusalNotice(recheck: () => void, gapMs?: number): NotAMemberRefusalNotice;
-type ParentOrganization = string | {
-    organization_id?: string | null;
-} | null | undefined;
-/**
- * A record created as part of an existing parent lives in the PARENT's organization; the explicit
- * one applies only when the parent names none. A disagreement is announced (`onDisagree`,
- * default console.warn), never obeyed.
- */
-declare function resolveChildOrganizationId(parent: ParentOrganization, explicit?: string | null, label?: string, onDisagree?: (message: string) => void): string | null;
-/** What the host knows about the admin lane. */
-interface AdminSeatInput {
-    readonly laneOpen: boolean;
-    readonly organizationId?: string | null;
-    readonly organizationName?: string | null;
-}
-interface AdminSeat {
-    readonly id: string;
-    readonly name: string | null;
-}
-/** The admin organization in force right now, or null (off the lane, or none set). */
-declare function resolveAdminSeat(input: AdminSeatInput | null | undefined): AdminSeat | null;
-/** True when the admin seat differs from the person's own active organization (scope/project/task never ride across). */
-declare function adminSeatReplacesUserContext(input: AdminSeatInput | null | undefined, personOrganizationId: string | null | undefined): boolean;
-
-/**
- * The query key, platform-wide. The server stamps this on every deep link it
- * emits; `features/admin/users/components/OrganizationsAdminClient.tsx` has
- * read it since before this module existed. One spelling, in one place.
- */
-declare const LINK_ORGANIZATION_QUERY_KEY = "org";
-type LinkOrganizationParam = 
-/** No link said anything about an organization. The ladder is untouched. */
-{
-    kind: "absent";
-}
-/** Something was said and it is neither a uuid nor an address. Refused in words, never used. */
- | {
-    kind: "malformed";
-    raw: string;
-}
-/** A well-formed organization id. Still has to survive the membership check. */
- | {
-    kind: "named";
-    organizationId: string;
-}
-/** An organization's address (slug). Survives only by matching a membership's slug. */
- | {
-    kind: "addressed";
-    slug: string;
-};
-/**
- * Classify one bare `org=` value. The ONE rule for what a value may be, shared
- * by the URL reader below and the boot resolver's bare-value path.
- */
-declare function classifyLinkOrganizationValue(raw: string): LinkOrganizationParam;
-/**
- * Read the key out of a query string, a `URLSearchParams`, or a full URL.
- * Never throws: a URL this cannot parse is `absent`, because a crash on
- * arrival is a worse answer than the ladder's own.
- */
-declare function readLinkOrganizationParam(source: string | URLSearchParams | null | undefined): LinkOrganizationParam;
-interface LinkOrganizationMembership {
-    id: string;
-    name: string;
-    /** The organization's address, so an `addressed` link can be matched. */
-    slug?: string | null;
-}
-interface LinkOrganizationDecisionInput {
-    param: LinkOrganizationParam;
-    /** The person's LIVE memberships. The only authority on what they may open. */
-    memberships: ReadonlyArray<LinkOrganizationMembership>;
-    /** The organization they are working in right now, or null. */
-    currentOrganizationId: string | null;
-    currentOrganizationName?: string | null;
-    /**
-     * The knob `userPreferences.organization.switchOnLinkPrompt` — "switch
-     * organization when a link asks". DEFAULT ON, so an omitted value is `true`.
-     */
-    switchWhenALinkAsks?: boolean;
-    /** The account they are signed in as, for the refusal sentence. */
-    signedInAs?: string | null;
-    /**
-     * The link's organization is one this person is not a member of but IS let into
-     * by a share they accepted (`lib/organizations/linkOrganizationAdmission.ts`).
-     * A share admits and never makes a member, so the answer is `admitted`: nobody
-     * is moved, nothing is refused, and the page opens it as that organization's
-     * guest. Omitted, the answer is exactly what it was before (VERIFIER-15 H4).
-     */
-    admittedByAShare?: boolean;
-    /** Replace any of the default English sentences (a localising host). */
-    messages?: Partial<LinkOrganizationMessages>;
-}
-interface LinkOrganizationMessages {
-    notAMember(signedInAs?: string | null): string;
-    malformed(raw: string): string;
-    switched(toName: string, fromName: string | null): string;
-    offer(toName: string, fromName: string | null): string;
-    offerAction(toName: string): string;
-}
-type LinkOrganizationDecision = 
-/** Nothing to do. No toast, no change. */
-{
-    kind: "no-link";
-}
-/** The link names the organization they are already in. Silent no-op. */
- | {
-    kind: "already-current";
-    organizationId: string;
-}
-/** Use this organization for this session. `announcement` non-null = they moved. */
- | {
-    kind: "honoured";
-    organizationId: string;
-    organizationName: string;
-    announcement: string | null;
-}
-/** The knob is off and this would be a real switch. Offer it as a click. */
- | {
-    kind: "offered";
-    organizationId: string;
-    organizationName: string;
-    message: string;
-    actionLabel: string;
-}
-/**
- * Not a member, but let in by a share they accepted. Silent: nobody is moved
- * (a share never makes a member) and nothing was refused (the page opens it).
- */
- | {
-    kind: "admitted";
-    organizationId: string;
-}
-/** Malformed, or not theirs. Changes nothing; says so. */
- | {
-    kind: "refused";
-    reason: "malformed" | "not-a-member";
-    message: string;
-};
-/** What a person reads when the link's organization is not theirs to open. */
-declare function linkOrganizationNotAMemberMessage(signedInAs?: string | null): string;
-/** What a person reads when `org=` is not an organization id at all. */
-declare function linkOrganizationMalformedMessage(raw: string): string;
-/** What a person reads when a link actually moved them. Law 4: never silent. */
-declare function linkOrganizationSwitchAnnouncement(toName: string, fromName: string | null): string;
-/** What a person reads with the knob turned off and a link asking to move them. */
-declare function linkOrganizationOfferMessage(toName: string, fromName: string | null): string;
-/**
- * The decision. One function, every branch, no side effects.
- *
- * 🚨 WHY THE KNOB GOVERNS ONLY A REAL SWITCH. The knob protects the
- * organization a person is WORKING IN from being yanked out from under them by
- * a link someone else composed. With `currentOrganizationId === null` there is
- * nothing to protect and nothing to switch away from: the alternative to
- * honouring the link is the picker, which is the very dead end this module was
- * built to end. So the knob turns a SWITCH into an offer; it never turns an
- * arrival into a refusal. This is deliberate and it is not a hidden default —
- * with no link present, a null selection stays null exactly as before.
- */
-declare function decideLinkOrganization(input: LinkOrganizationDecisionInput): LinkOrganizationDecision;
-interface ResolveWithLinkInput<T extends {
-    id: string;
-    name: string;
-    slug?: string | null;
-    joinedAt?: string;
-}> {
-    readonly memberships: readonly T[];
-    /** This tab's held organization (rung 1; a refresh keeps it). */
-    readonly held?: string | null;
-    readonly readAccount: () => Promise<AccountOrganizationChoices>;
-    readonly first?: () => Promise<T | null>;
-    /** The raw `?org=` value, a query string, a URL or URLSearchParams. Omitted = no link. */
-    readonly link?: string | URLSearchParams | null;
-    readonly switchWhenALinkAsks?: boolean | undefined;
-    readonly signedInAs?: string | null | undefined;
-    readonly messages?: Partial<LinkOrganizationMessages> | undefined;
-    /** Asked only when the link already failed the membership check (a share admits, never joins). */
-    readonly admittedByAShare?: ((organizationId: string) => Promise<boolean>) | undefined;
-}
-interface ResolvedWithLink<T> {
-    readonly organization: T;
-    readonly rung: OrganizationRung | "link";
-    /** What the link meant, when it said anything — the host SAYS it (refused / announced / offered). */
-    readonly link: LinkOrganizationDecision;
-}
-/**
- * The ONE load ladder with the link folded in: held → last active → start-up → first, then the
- * link's own organization wins ONLY when it is a current membership. Every other link outcome
- * (refused, offered, already-current, admitted) leaves the ladder's answer standing. Null when
- * the person has no memberships. A failed read throws through.
- */
-declare function resolveOrganizationWithLink<T extends {
-    id: string;
-    name: string;
-    slug?: string | null;
-    joinedAt?: string;
-}>(input: ResolveWithLinkInput<T>): Promise<ResolvedWithLink<T> | null>;
-
-/**
- * THE ACTIVE ORGANIZATION — one per tab / running app, set once when the app loads, never none
- * while the person has a membership (Arman, 2026-10-07; organizations STATE rules 10–15).
- *
- *   const active = createActiveOrganization({ client: supabase });
- *   await active.load();                       // the ladder: held → last active → start-up → first
- *   const orgId = await active.ensureOrgId();  // HELD until the ladder answers; never a guess
- *   await active.switchTo(otherId);            // a person's click: saves last active for next load
- *
- * HELD-REQUEST SEMANTICS. A write or server call that needs the organization asks
- * `ensureOrgId()`: while the ladder is still resolving the call WAITS (it is held, never sent
- * without an organization and never sent with a guessed one); once resolved it gets the one
- * active organization; with zero memberships or a failed read it is REFUSED with a named error.
- * Acting on a record passes that record's own organization (`ensureOrgId(record.organization_id)`),
- * which wins and never switches the active one.
- *
- * 🚨 NEVER A LIST FILTER. Reads show everything the person can see across all their
- * organizations; nothing here narrows a read. The active organization is only where new things
- * are saved and which organization a server call runs in.
- *
- * The held id is identity-keyed: a different person signing in on the same device never inherits
- * the last person's organization, and a sign-out resets the store.
- */
-
-/** Where this tab / app remembers its organization between reloads (identity-keyed). */
-interface HeldOrganizationStore {
-    read(userId: string): string | null | Promise<string | null>;
-    write(userId: string, organizationId: string): void | Promise<void>;
-    clear(): void | Promise<void>;
-}
-type ActiveOrganizationStatus = "idle" | "resolving" | "ready" | "none" | "error";
-interface ActiveOrganizationSnapshot {
-    readonly status: ActiveOrganizationStatus;
-    readonly userId: string | null;
-    readonly organizationId: string | null;
-    readonly organization: OrganizationMembership | null;
-    readonly memberships: readonly OrganizationMembership[];
-    /** Which ladder rung answered (or "switched" after a person's click). */
-    readonly rung: OrganizationRung | "switched" | "link" | null;
-    readonly error: string | null;
-}
-declare class NoActiveOrganizationError extends Error {
-    readonly reason: "signed-out" | "no-memberships" | "unreadable";
-    constructor(reason: "signed-out" | "no-memberships" | "unreadable", detail?: string);
-}
-declare class NotAMemberError extends Error {
-    readonly organizationId: string;
-    constructor(organizationId: string);
-}
-interface ActiveOrganization {
-    snapshot(): ActiveOrganizationSnapshot;
-    subscribe(listener: () => void): () => void;
-    /** Run the ladder (again). Resolves with the settled snapshot; never throws. */
-    load(): Promise<ActiveOrganizationSnapshot>;
-    /** The active organization id now, or null while resolving / with none. Sync (api's getter). */
-    current(): string | null;
-    /** THE HELD REQUEST: the record's own organization, else the active one once resolved. */
-    ensureOrgId(recordOrganizationId?: string | null): Promise<string>;
-    /** A person's click: switch, remember for this tab, save as last active for the next load. */
-    switchTo(organizationId: string): Promise<void>;
-    /** Feed a server refusal in: a lapsed organization re-runs the ladder. Returns the class. */
-    handleRefusal(status: number, body: unknown): Promise<"lapsed" | "retry" | null>;
-    dispose(): void;
-}
-interface CreateActiveOrganizationOptions {
-    /** The person's Supabase client (any supabase-js client). */
-    readonly client: OrganizationsDb & AuthClient;
-    /** Where this tab/app holds its choice. Default: browser `sessionStorage` (per tab), else memory. */
-    readonly held?: HeldOrganizationStore | undefined;
-    /** An extra first rung (the web's `?org=` link). Kept only if it is a current membership. */
-    readonly linked?: (() => string | null | undefined) | undefined;
-    /**
-     * The link's own organization (`?org=` uuid or address) as a first-class rung: honoured only when
-     * it is a current membership, otherwise the ladder stands and `onDecision` receives the refusal /
-     * offer / announcement for the host to SAY. Supersedes `linked` when both are given.
-     */
-    readonly link?: {
-        readonly source: () => string | URLSearchParams | null | undefined;
-        readonly switchWhenALinkAsks?: (() => boolean | undefined) | undefined;
-        readonly signedInAs?: (() => string | null | undefined) | undefined;
-        readonly messages?: Partial<LinkOrganizationMessages> | undefined;
-        /** A share admits without making a member (asked only after a not-a-member verdict). */
-        readonly admittedByAShare?: ((organizationId: string) => Promise<boolean>) | undefined;
-        readonly onDecision?: ((decision: LinkOrganizationDecision) => void) | undefined;
-    } | undefined;
-    /**
-     * THE ADMIN SEAT: while the host's admin lane is open, the admin's own organization IS the active
-     * one for every reader (`current()`, `ensureOrgId()`); off the lane the person's own is untouched.
-     * Ignored unless the seat is a current membership. The snapshot always keeps the person's own.
-     */
-    readonly adminSeat?: (() => AdminSeatInput | null | undefined) | undefined;
-    /** Marked resolved whenever the ladder settles (organization or none). */
-    readonly bootstrapGate?: OrganizationBootstrapGate | undefined;
-    /** Minimum gap between ladder re-runs caused by a not-a-member refusal. Default 30 s. */
-    readonly refusalRecheckGapMs?: number | undefined;
-    /** Load as soon as it is created (default true). */
-    readonly autoLoad?: boolean | undefined;
-}
-/** A held store over a `Storage` (browser `sessionStorage` = per tab), identity-keyed. */
-declare function storageHeldOrganization(storage: Pick<Storage, "getItem" | "setItem" | "removeItem">, key?: string): HeldOrganizationStore & {
-    read(userId: string): string | null;
-};
-/** Held in memory: the running app's own choice (desktop, scripts, tests). */
-declare function memoryHeldOrganization(): HeldOrganizationStore;
-declare function createActiveOrganization(options: CreateActiveOrganizationOptions): ActiveOrganization;
+export { h as AccountOrganizationChoices, j as ActiveOrganization, k as ActiveOrganizationSnapshot, l as ActiveOrganizationStatus, m as AdminSeat, n as AdminSeatInput, p as ArchiveFilter, C as CreateActiveOrganizationOptions, H as HeldOrganizationStore, L as LINK_ORGANIZATION_QUERY_KEY, q as LadderInput, t as LinkOrganizationDecision, v as LinkOrganizationDecisionInput, w as LinkOrganizationMembership, x as LinkOrganizationMessages, y as LinkOrganizationParam, N as NOT_A_MEMBER_RECHECK_GAP_MS, z as NoActiveOrganizationError, B as NotAMemberError, D as NotAMemberRefusalNotice, O as ORGANIZATION_ENTITY_TYPE, E as ORGANIZATION_RESOLUTION_TIMEOUT_MS, F as OrganizationBootstrapGate, G as OrganizationMembership, I as OrganizationRefusal, J as OrganizationRung, K as OrganizationsDb, P as ParentOrganization, R as ReadMembershipsOptions, M as ResolveWithLinkInput, Q as ResolvedOrganization, T as ResolvedWithLink, V as adminSeatReplacesUserContext, W as classifyLinkOrganizationValue, X as classifyOrganizationRefusal, Y as createActiveOrganization, Z as createNotAMemberRefusalNotice, _ as createOrganizationBootstrapGate, $ as decideLinkOrganization, a0 as isNotAMemberRefusal, a1 as linkOrganizationMalformedMessage, a2 as linkOrganizationNotAMemberMessage, a3 as linkOrganizationOfferMessage, a4 as linkOrganizationSwitchAnnouncement, a5 as memoryHeldOrganization, a6 as oldestMembership, a7 as orderOrganizations, a8 as organizationMatches, a9 as readAccountOrganizationChoices, aa as readLinkOrganizationParam, ab as readMemberships, ac as readOrganizationFavourites, ad as resolveActiveOrganization, ae as resolveActiveOrganizationLazily, af as resolveAdminSeat, ag as resolveChildOrganizationId, ah as resolveOrganizationWithLink, ai as setOrganizationFavourite, aj as storageHeldOrganization, ak as toAccountOrganizationChoices, al as writeLastActiveOrganization, am as writeStartupOrganization } from './active-organization-CIvSdboO.js';
+import '@supabase/supabase-js';
 
 /**
  * "This request needs an organization and names none" — the ONE recogniser, the server's throwable
@@ -579,4 +107,4 @@ declare function organizationRequiredEnvelope(error: OrganizationRequiredServerE
 /** The standard `Response` (status 400) a route answers the refusal with — no framework needed. */
 declare function organizationRequiredResponse(error: OrganizationRequiredServerError): Response;
 
-export { type AccountOrganizationChoices, type ActiveOrganization, type ActiveOrganizationSnapshot, type ActiveOrganizationStatus, type AdminSeat, type AdminSeatInput, type CreateActiveOrganizationOptions, type HeldOrganizationStore, LINK_ORGANIZATION_QUERY_KEY, type LadderInput, type LinkOrganizationDecision, type LinkOrganizationDecisionInput, type LinkOrganizationMembership, type LinkOrganizationMessages, type LinkOrganizationParam, MEMBERSHIPS_URL, type MembershipReadClient, NOT_A_MEMBER_RECHECK_GAP_MS, NoActiveOrganizationError, NotAMemberError, type NotAMemberRefusalNotice, ORGANIZATION_CONTEXT_REQUIRED_CODE, ORGANIZATION_ENTITY_TYPE, ORGANIZATION_REQUIRED_CODE, ORGANIZATION_REQUIRED_WIRE_CODE, ORGANIZATION_RESOLUTION_TIMEOUT_MS, type OrganizationBootstrapGate, type OrganizationHoldDetails, type OrganizationHoldSetOn, type OrganizationMembership, type OrganizationMembershipSummary, type OrganizationRefusal, type OrganizationRequiredEnvelope, OrganizationRequiredServerError, type OrganizationRequiredWireMembership, type OrganizationRung, type OrganizationsDb, type ParentOrganization, type ResolveWithLinkInput, type ResolvedOrganization, type ResolvedWithLink, adminSeatReplacesUserContext, classifyLinkOrganizationValue, classifyOrganizationRefusal, createActiveOrganization, createNotAMemberRefusalNotice, createOrganizationBootstrapGate, decideLinkOrganization, extractOrganizationHoldMemberships, isNotAMemberRefusal, isOrganizationRequiredEnvelope, isOrganizationRequiredError, isOrganizationRequiredServerError, linkOrganizationMalformedMessage, linkOrganizationNotAMemberMessage, linkOrganizationOfferMessage, linkOrganizationSwitchAnnouncement, memoryHeldOrganization, oldestMembership, orderOrganizations, organizationMatches, organizationRequired, organizationRequiredEnvelope, organizationRequiredResponse, readAccountOrganizationChoices, readCallerMemberships, readLinkOrganizationParam, readMemberships, readOrganizationFavourites, resolveActiveOrganization, resolveActiveOrganizationLazily, resolveAdminSeat, resolveChildOrganizationId, resolveOrganizationWithLink, setOrganizationFavourite, storageHeldOrganization, toAccountOrganizationChoices, writeLastActiveOrganization, writeStartupOrganization };
+export { MEMBERSHIPS_URL, type MembershipReadClient, ORGANIZATION_CONTEXT_REQUIRED_CODE, ORGANIZATION_REQUIRED_CODE, ORGANIZATION_REQUIRED_WIRE_CODE, type OrganizationHoldDetails, type OrganizationHoldSetOn, type OrganizationMembershipSummary, type OrganizationRequiredEnvelope, OrganizationRequiredServerError, type OrganizationRequiredWireMembership, extractOrganizationHoldMemberships, isOrganizationRequiredEnvelope, isOrganizationRequiredError, isOrganizationRequiredServerError, organizationRequired, organizationRequiredEnvelope, organizationRequiredResponse, readCallerMemberships };

package/dist/organizations.js

@@ -45,7 +45,8 @@ function organizationMatches(org, query) {
 }
 var MEMBERSHIP_PAGE = 500;
 var ID_CHUNK = 100;
-async function readMemberships(db, userId) {
+async function readMemberships(db, userId, options = {}) {
+  const filter = options.archived ?? "active";
   const memberships = [];
   for (let from = 0; ; from += MEMBERSHIP_PAGE) {
     const { data, error } = await db.rpc("mbr_for_user", { p_container_type: "organization" }).order("id", { ascending: true }).range(from, from + MEMBERSHIP_PAGE - 1);
@@ -68,7 +69,7 @@ async function readMemberships(db, userId) {
     if (error) throw new Error(`Your organizations could not be read: ${error.message}`);
     rows.push(...data ?? []);
   }
-  return rows.filter((r) => !r.archived_at).map((r) => {
+  return rows.filter((r) => filter === "all" ? true : filter === "archived" ? !!r.archived_at : !r.archived_at).map((r) => {
     const m = active.get(r.id);
     const settings = r.settings && typeof r.settings === "object" ? r.settings : {};
     return {
@@ -80,7 +81,8 @@ async function readMemberships(db, userId) {
       role: m?.role ?? "member",
       isOwn: !!r.created_by && r.created_by === userId,
       isTestFixture: settings["test_fixture"] === true,
-      joinedAt: m?.created_at ?? ""
+      joinedAt: m?.created_at ?? "",
+      archivedAt: r.archived_at ?? null
     };
   }).sort((a, b) => a.name.localeCompare(b.name));
 }

package/dist/react.d.cts

@@ -61,6 +61,8 @@ interface OrganizationMembership {
     readonly isTestFixture: boolean;
     /** When the membership began (ISO): the oldest is rung 4. */
     readonly joinedAt: string;
+    /** When the organization was archived (ISO), or null. Present on every row `readMemberships` returns. */
+    readonly archivedAt?: string | null;
 }
 type OrganizationRung = "held" | "last-active" | "startup" | "first";
 

package/dist/react.d.ts

@@ -61,6 +61,8 @@ interface OrganizationMembership {
     readonly isTestFixture: boolean;
     /** When the membership began (ISO): the oldest is rung 4. */
     readonly joinedAt: string;
+    /** When the organization was archived (ISO), or null. Present on every row `readMemberships` returns. */
+    readonly archivedAt?: string | null;
 }
 type OrganizationRung = "held" | "last-active" | "startup" | "first";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-matrx/auth",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "AI Matrx sign-in, session and organizations for every app: sign in/out, session storage and refresh per platform (browser, Next.js, extension, desktop, Node), the current person, their organizations and favourites, the one active organization (held requests, never a list filter), and the credentials @ai-matrx/data and @ai-matrx/api read.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -132,6 +132,16 @@
         "default": "./dist/matrx-oauth.cjs"
       }
     },
+    "./guest": {
+      "import": {
+        "types": "./dist/guest.d.ts",
+        "default": "./dist/guest.js"
+      },
+      "require": {
+        "types": "./dist/guest.d.cts",
+        "default": "./dist/guest.cjs"
+      }
+    },
     "./package.json": "./package.json"
   },
   "devDependencies": {
@@ -201,5 +211,5 @@
     "test": "vitest run",
     "verify:tarball": "node ./scripts/verify-tarball.mjs"
   },
-  "gitHead": "51416dab018cb60548d2baeed471c4b27a0cb44b"
+  "gitHead": "2d910d0280828c62bf8f52534665eba32abe02ad"
 }