@ai-matrx/auth 0.2.4 → 0.2.5

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog — @ai-matrx/auth
 
+## 0.2.5
+
+Automatic changed-only republish (docs/metadata drift since the last tag — see
+`git diff npm/auth/v0.2.4..npm/auth/v0.2.5 -- apps/shared/auth`).
+No source changes intended and no consumer action required.
+
 ## 0.2.4
 ### active organization options (round 2)
 
@@ -48,7 +54,7 @@ No source changes intended and no consumer action required.
   attaches (bounded wait, one retry after the session re-resolves, a foreign-authority token is signed out
   and never retried, every firing reported). Host-neutral: the host injects `report`, `isAnonymousByDesign`,
   `bypassesSessionWait`, `endUnverifiable`. From the website's `utils/supabase/sessionBarrier.ts`.
-- `/guest` (new section) — `createGuestHandover(...)`: a visitor's guest data survives sign-in (claim into the
+- `/guest` (new section) — `createGuestHandover(...)` (the host injects `readGuestClaims`; the section builds no Supabase client): a visitor's guest data survives sign-in (claim into the
   account the session ends in, cookie kept on failure so the next sign-in retries) and sign-up (the same
   account is promoted in place); `guestClientCookieOptions` (the guest client's own cookie name, injected);
   `createGuestSessionEnsurer` (mint a guest once per tab/browser). From the website's `lib/guest/*`.
@@ -67,7 +73,8 @@ Tests: `session-barrier.test.ts`, `guest.test.ts`.
   (injectable `messages`), `resolveOrganizationWithLink` (the one ladder + the link, share admission injected).
 - `organization-gate` — `createOrganizationBootstrapGate`, `isNotAMemberRefusal`, `createNotAMemberRefusalNotice`,
   `resolveChildOrganizationId`, `resolveAdminSeat`, `adminSeatReplacesUserContext`.
-Tests: active-organization (+5), organization-gate (9).
+- `readMembershipRows(db, containerType)` — the paged `mbr_for_user` raw-row read (any container type), returning the failing page's `{error,status}` so a host can wrap it in its own session retry.
+Tests: active-organization (+5), organization-gate (11).
 
 ## 0.2.0
 

package/dist/{active-organization-Cxm6GDIy.d.cts → active-organization-DHitxVeN.d.cts}

@@ -647,4 +647,4 @@ declare function storageHeldOrganization(storage: Pick<Storage, "getItem" | "set
 declare function memoryHeldOrganization(): HeldOrganizationStore;
 declare function createActiveOrganization(options: CreateActiveOrganizationOptions): ActiveOrganization;
 
-export { createNotAMemberRefusalNotice as $, type AuthClient as A, NoActiveOrganizationError as B, type CachedActiveOrganization as C, NotAMemberError as D, type NotAMemberRefusalNotice as E, ORGANIZATION_RESOLUTION_TIMEOUT_MS as F, type OrganizationBootstrapGate as G, type HeldOrganizationStore as H, type OrganizationLapse as I, type OrganizationMembership as J, type OrganizationRefusal as K, LINK_ORGANIZATION_QUERY_KEY as L, type OrganizationRung as M, NOT_A_MEMBER_RECHECK_GAP_MS as N, ORGANIZATION_ENTITY_TYPE as O, type OrganizationsDb as P, type ParentOrganization as Q, type ReadMembershipsOptions as R, type SessionSourceLike as S, type ResolveWithLinkInput as T, type UserCredentialsPort as U, type ResolvedOrganization as V, type ResolvedWithLink as W, adminSeatReplacesUserContext as X, classifyLinkOrganizationValue as Y, classifyOrganizationRefusal as Z, createActiveOrganization as _, SignInError as a, createOrganizationBootstrapGate as a0, decideLinkOrganization as a1, isNotAMemberRefusal as a2, linkOrganizationMalformedMessage as a3, linkOrganizationNotAMemberMessage as a4, linkOrganizationOfferMessage as a5, linkOrganizationSwitchAnnouncement as a6, memoryHeldOrganization as a7, oldestMembership as a8, orderOrganizations as a9, organizationMatches as aa, readAccountOrganizationChoices as ab, readLinkOrganizationParam as ac, readMemberships as ad, readOrganizationFavourites as ae, resolveActiveOrganization as af, resolveActiveOrganizationLazily as ag, resolveAdminSeat as ah, resolveChildOrganizationId as ai, resolveOrganizationWithLink as aj, setOrganizationFavourite as ak, storageHeldOrganization as al, toAccountOrganizationChoices as am, writeLastActiveOrganization as an, writeStartupOrganization as ao, getSession as b, signInWithOAuth as c, signInWithPassword as d, signOut as e, userCredentials as f, getPerson as g, type AccountOrganizationChoices as h, invalidatePerson as i, type ActiveOrganization as j, type ActiveOrganizationSnapshot as k, type ActiveOrganizationStatus as l, type AdminSeat as m, type AdminSeatInput as n, onSessionChange as o, type ArchiveFilter as p, type CreateActiveOrganizationOptions as q, refreshSession as r, sessionCredentials as s, type LadderInput as t, updatePerson as u, type LinkOrganizationDecision as v, type LinkOrganizationDecisionInput as w, type LinkOrganizationMembership as x, type LinkOrganizationMessages as y, type LinkOrganizationParam as z };
+export { createNotAMemberRefusalNotice as $, type AuthClient as A, NoActiveOrganizationError as B, type CachedActiveOrganization as C, NotAMemberError as D, type NotAMemberRefusalNotice as E, ORGANIZATION_ENTITY_TYPE as F, ORGANIZATION_RESOLUTION_TIMEOUT_MS as G, type HeldOrganizationStore as H, type OrganizationBootstrapGate as I, type OrganizationLapse as J, type OrganizationMembership as K, LINK_ORGANIZATION_QUERY_KEY as L, type OrganizationRefusal as M, NOT_A_MEMBER_RECHECK_GAP_MS as N, type OrganizationsDb as O, type OrganizationRung as P, type ParentOrganization as Q, type ReadMembershipsOptions as R, type SessionSourceLike as S, type ResolveWithLinkInput as T, type UserCredentialsPort as U, type ResolvedOrganization as V, type ResolvedWithLink as W, adminSeatReplacesUserContext as X, classifyLinkOrganizationValue as Y, classifyOrganizationRefusal as Z, createActiveOrganization as _, SignInError as a, createOrganizationBootstrapGate as a0, decideLinkOrganization as a1, isNotAMemberRefusal as a2, linkOrganizationMalformedMessage as a3, linkOrganizationNotAMemberMessage as a4, linkOrganizationOfferMessage as a5, linkOrganizationSwitchAnnouncement as a6, memoryHeldOrganization as a7, oldestMembership as a8, orderOrganizations as a9, organizationMatches as aa, readAccountOrganizationChoices as ab, readLinkOrganizationParam as ac, readMemberships as ad, readOrganizationFavourites as ae, resolveActiveOrganization as af, resolveActiveOrganizationLazily as ag, resolveAdminSeat as ah, resolveChildOrganizationId as ai, resolveOrganizationWithLink as aj, setOrganizationFavourite as ak, storageHeldOrganization as al, toAccountOrganizationChoices as am, writeLastActiveOrganization as an, writeStartupOrganization as ao, getSession as b, signInWithOAuth as c, signInWithPassword as d, signOut as e, userCredentials as f, getPerson as g, type AccountOrganizationChoices as h, invalidatePerson as i, type ActiveOrganization as j, type ActiveOrganizationSnapshot as k, type ActiveOrganizationStatus as l, type AdminSeat as m, type AdminSeatInput as n, onSessionChange as o, type ArchiveFilter as p, type CreateActiveOrganizationOptions as q, refreshSession as r, sessionCredentials as s, type LadderInput as t, updatePerson as u, type LinkOrganizationDecision as v, type LinkOrganizationDecisionInput as w, type LinkOrganizationMembership as x, type LinkOrganizationMessages as y, type LinkOrganizationParam as z };

package/dist/{active-organization-Cxm6GDIy.d.ts → active-organization-DHitxVeN.d.ts}

@@ -647,4 +647,4 @@ declare function storageHeldOrganization(storage: Pick<Storage, "getItem" | "set
 declare function memoryHeldOrganization(): HeldOrganizationStore;
 declare function createActiveOrganization(options: CreateActiveOrganizationOptions): ActiveOrganization;
 
-export { createNotAMemberRefusalNotice as $, type AuthClient as A, NoActiveOrganizationError as B, type CachedActiveOrganization as C, NotAMemberError as D, type NotAMemberRefusalNotice as E, ORGANIZATION_RESOLUTION_TIMEOUT_MS as F, type OrganizationBootstrapGate as G, type HeldOrganizationStore as H, type OrganizationLapse as I, type OrganizationMembership as J, type OrganizationRefusal as K, LINK_ORGANIZATION_QUERY_KEY as L, type OrganizationRung as M, NOT_A_MEMBER_RECHECK_GAP_MS as N, ORGANIZATION_ENTITY_TYPE as O, type OrganizationsDb as P, type ParentOrganization as Q, type ReadMembershipsOptions as R, type SessionSourceLike as S, type ResolveWithLinkInput as T, type UserCredentialsPort as U, type ResolvedOrganization as V, type ResolvedWithLink as W, adminSeatReplacesUserContext as X, classifyLinkOrganizationValue as Y, classifyOrganizationRefusal as Z, createActiveOrganization as _, SignInError as a, createOrganizationBootstrapGate as a0, decideLinkOrganization as a1, isNotAMemberRefusal as a2, linkOrganizationMalformedMessage as a3, linkOrganizationNotAMemberMessage as a4, linkOrganizationOfferMessage as a5, linkOrganizationSwitchAnnouncement as a6, memoryHeldOrganization as a7, oldestMembership as a8, orderOrganizations as a9, organizationMatches as aa, readAccountOrganizationChoices as ab, readLinkOrganizationParam as ac, readMemberships as ad, readOrganizationFavourites as ae, resolveActiveOrganization as af, resolveActiveOrganizationLazily as ag, resolveAdminSeat as ah, resolveChildOrganizationId as ai, resolveOrganizationWithLink as aj, setOrganizationFavourite as ak, storageHeldOrganization as al, toAccountOrganizationChoices as am, writeLastActiveOrganization as an, writeStartupOrganization as ao, getSession as b, signInWithOAuth as c, signInWithPassword as d, signOut as e, userCredentials as f, getPerson as g, type AccountOrganizationChoices as h, invalidatePerson as i, type ActiveOrganization as j, type ActiveOrganizationSnapshot as k, type ActiveOrganizationStatus as l, type AdminSeat as m, type AdminSeatInput as n, onSessionChange as o, type ArchiveFilter as p, type CreateActiveOrganizationOptions as q, refreshSession as r, sessionCredentials as s, type LadderInput as t, updatePerson as u, type LinkOrganizationDecision as v, type LinkOrganizationDecisionInput as w, type LinkOrganizationMembership as x, type LinkOrganizationMessages as y, type LinkOrganizationParam as z };
+export { createNotAMemberRefusalNotice as $, type AuthClient as A, NoActiveOrganizationError as B, type CachedActiveOrganization as C, NotAMemberError as D, type NotAMemberRefusalNotice as E, ORGANIZATION_ENTITY_TYPE as F, ORGANIZATION_RESOLUTION_TIMEOUT_MS as G, type HeldOrganizationStore as H, type OrganizationBootstrapGate as I, type OrganizationLapse as J, type OrganizationMembership as K, LINK_ORGANIZATION_QUERY_KEY as L, type OrganizationRefusal as M, NOT_A_MEMBER_RECHECK_GAP_MS as N, type OrganizationsDb as O, type OrganizationRung as P, type ParentOrganization as Q, type ReadMembershipsOptions as R, type SessionSourceLike as S, type ResolveWithLinkInput as T, type UserCredentialsPort as U, type ResolvedOrganization as V, type ResolvedWithLink as W, adminSeatReplacesUserContext as X, classifyLinkOrganizationValue as Y, classifyOrganizationRefusal as Z, createActiveOrganization as _, SignInError as a, createOrganizationBootstrapGate as a0, decideLinkOrganization as a1, isNotAMemberRefusal as a2, linkOrganizationMalformedMessage as a3, linkOrganizationNotAMemberMessage as a4, linkOrganizationOfferMessage as a5, linkOrganizationSwitchAnnouncement as a6, memoryHeldOrganization as a7, oldestMembership as a8, orderOrganizations as a9, organizationMatches as aa, readAccountOrganizationChoices as ab, readLinkOrganizationParam as ac, readMemberships as ad, readOrganizationFavourites as ae, resolveActiveOrganization as af, resolveActiveOrganizationLazily as ag, resolveAdminSeat as ah, resolveChildOrganizationId as ai, resolveOrganizationWithLink as aj, setOrganizationFavourite as ak, storageHeldOrganization as al, toAccountOrganizationChoices as am, writeLastActiveOrganization as an, writeStartupOrganization as ao, getSession as b, signInWithOAuth as c, signInWithPassword as d, signOut as e, userCredentials as f, getPerson as g, type AccountOrganizationChoices as h, invalidatePerson as i, type ActiveOrganization as j, type ActiveOrganizationSnapshot as k, type ActiveOrganizationStatus as l, type AdminSeat as m, type AdminSeatInput as n, onSessionChange as o, type ArchiveFilter as p, type CreateActiveOrganizationOptions as q, refreshSession as r, sessionCredentials as s, type LadderInput as t, updatePerson as u, type LinkOrganizationDecision as v, type LinkOrganizationDecisionInput as w, type LinkOrganizationMembership as x, type LinkOrganizationMessages as y, type LinkOrganizationParam as z };

package/dist/guest.cjs

@@ -28,7 +28,6 @@ __export(guest_exports, {
   looksLikeVisitorId: () => looksLikeVisitorId
 });
 module.exports = __toCommonJS(guest_exports);
-var import_ssr = require("@supabase/ssr");
 var VISITOR_ID = /^[A-Za-z0-9]{16,200}$/;
 function looksLikeVisitorId(id) {
   return typeof id === "string" && !id.startsWith("temp_") && VISITOR_ID.test(id);
@@ -42,21 +41,11 @@ function createGuestHandover(options) {
   const loud = options.log ?? ((m) => console.error(`[session-handover] LOUD: ${m}`));
   const isGuestCookie = (name) => isGuestCookieName(options.guestCookieName, name);
   const msg = (err) => err instanceof Error ? err.message : String(err);
-  async function readClaims(jar) {
-    if (options.readGuestClaims) return options.readGuestClaims(jar);
-    if (!options.supabase) return null;
-    const guest = (0, import_ssr.createServerClient)(options.supabase.url, options.supabase.publishableKey, {
-      cookieOptions: { name: options.guestCookieName },
-      cookies: { getAll: () => jar.getAll(), setAll: () => void 0 }
-    });
-    const { data } = await guest.auth.getClaims();
-    return data?.claims ?? null;
-  }
   async function readGuestPossession(visitorId) {
     const jar = await options.cookies();
     if (jar.getAll().some((c) => isGuestCookie(c.name))) {
       try {
-        const claims = await readClaims(jar);
+        const claims = await options.readGuestClaims(jar);
         if (claims?.sub && claims.is_anonymous === true) return { guestId: claims.sub, proof: "guest_session" };
       } catch (err) {
         loud(`the guest cookie could not be verified: ${msg(err)}`);

package/dist/guest.d.cts

@@ -1,3 +1,25 @@
+/**
+ * @ai-matrx/auth/guest — a visitor's guest data survives sign-up and sign-in (moved from the
+ * website's `lib/guest/{session-handover,guest-supabase-client,ensure-guest-session}.ts`, 2026-10-12).
+ *
+ * A signed-out visitor who saves holds a GUEST session: a real, not-yet-permanent account that lives in
+ * its OWN cookie (never the main auth cookie, so a guest never looks signed in). Every place a session is
+ * REPLACED (password login, OAuth callback, email confirm, dev-login) runs through `handOverSession`:
+ *
+ *   1. read who the browser's guest is BEFORE the replacement (the verified claims of the guest cookie,
+ *      else the visitor id mapped through the registry — the lost-session case);
+ *   2. replace the session;
+ *   3. when the result is a permanent account other than the guest, CLAIM the guest's workspace into it
+ *      (all or nothing) and drop the guest cookie. A failed claim keeps the cookie, so the next replacement
+ *      (or `settlePendingGuestClaim` on a signed-in load) tries again — it screams, never silently.
+ *
+ * Sign-up with email + password keeps the SAME account (`promoteGuest`): revive, promote in place, revive
+ * again, stamp the registry. Never falls back to a fresh account (that would orphan the guest).
+ *
+ * Host-neutral: the host injects the cookie jar, the guest store (admin reads and the claim/revive doors)
+ * and the cookie names. The browser half is `createGuestClientOptions` (the guest client's own cookie name,
+ * injected) and `createGuestSessionEnsurer` (mint a guest once per tab / per browser).
+ */
 type HandoverVia = "password_login" | "oauth_callback" | "email_otp" | "dev_login" | "sign_up";
 interface GuestPossession {
     guestId: string;
@@ -93,15 +115,15 @@ interface GuestHandoverOptions {
     /** Server cookie jar for this request. */
     cookies(): Promise<GuestCookieJar>;
     store: GuestStore;
-    /** Verified claims of the guest cookie. Default: a server client over `supabase` url + key. */
-    readGuestClaims?(jar: GuestCookieJar): Promise<{
+    /**
+     * Verified claims of the guest cookie (the anonymous JWT in this very request is the proof of possession).
+     * The host builds a server client over the guest cookie name and reads `getClaimsUser`; this section builds no
+     * Supabase client of its own.
+     */
+    readGuestClaims(jar: GuestCookieJar): Promise<{
         sub?: string;
         is_anonymous?: boolean;
     } | null>;
-    supabase?: {
-        url: string;
-        publishableKey: string;
-    };
     /** `Secure` on the carrier cookie. */
     secureCookies?: boolean;
     log?(message: string): void;

package/dist/guest.d.ts

@@ -1,3 +1,25 @@
+/**
+ * @ai-matrx/auth/guest — a visitor's guest data survives sign-up and sign-in (moved from the
+ * website's `lib/guest/{session-handover,guest-supabase-client,ensure-guest-session}.ts`, 2026-10-12).
+ *
+ * A signed-out visitor who saves holds a GUEST session: a real, not-yet-permanent account that lives in
+ * its OWN cookie (never the main auth cookie, so a guest never looks signed in). Every place a session is
+ * REPLACED (password login, OAuth callback, email confirm, dev-login) runs through `handOverSession`:
+ *
+ *   1. read who the browser's guest is BEFORE the replacement (the verified claims of the guest cookie,
+ *      else the visitor id mapped through the registry — the lost-session case);
+ *   2. replace the session;
+ *   3. when the result is a permanent account other than the guest, CLAIM the guest's workspace into it
+ *      (all or nothing) and drop the guest cookie. A failed claim keeps the cookie, so the next replacement
+ *      (or `settlePendingGuestClaim` on a signed-in load) tries again — it screams, never silently.
+ *
+ * Sign-up with email + password keeps the SAME account (`promoteGuest`): revive, promote in place, revive
+ * again, stamp the registry. Never falls back to a fresh account (that would orphan the guest).
+ *
+ * Host-neutral: the host injects the cookie jar, the guest store (admin reads and the claim/revive doors)
+ * and the cookie names. The browser half is `createGuestClientOptions` (the guest client's own cookie name,
+ * injected) and `createGuestSessionEnsurer` (mint a guest once per tab / per browser).
+ */
 type HandoverVia = "password_login" | "oauth_callback" | "email_otp" | "dev_login" | "sign_up";
 interface GuestPossession {
     guestId: string;
@@ -93,15 +115,15 @@ interface GuestHandoverOptions {
     /** Server cookie jar for this request. */
     cookies(): Promise<GuestCookieJar>;
     store: GuestStore;
-    /** Verified claims of the guest cookie. Default: a server client over `supabase` url + key. */
-    readGuestClaims?(jar: GuestCookieJar): Promise<{
+    /**
+     * Verified claims of the guest cookie (the anonymous JWT in this very request is the proof of possession).
+     * The host builds a server client over the guest cookie name and reads `getClaimsUser`; this section builds no
+     * Supabase client of its own.
+     */
+    readGuestClaims(jar: GuestCookieJar): Promise<{
         sub?: string;
         is_anonymous?: boolean;
     } | null>;
-    supabase?: {
-        url: string;
-        publishableKey: string;
-    };
     /** `Secure` on the carrier cookie. */
     secureCookies?: boolean;
     log?(message: string): void;

package/dist/guest.js

@@ -1,5 +1,4 @@
 // src/guest.ts
-import { createServerClient } from "@supabase/ssr";
 var VISITOR_ID = /^[A-Za-z0-9]{16,200}$/;
 function looksLikeVisitorId(id) {
   return typeof id === "string" && !id.startsWith("temp_") && VISITOR_ID.test(id);
@@ -13,21 +12,11 @@ function createGuestHandover(options) {
   const loud = options.log ?? ((m) => console.error(`[session-handover] LOUD: ${m}`));
   const isGuestCookie = (name) => isGuestCookieName(options.guestCookieName, name);
   const msg = (err) => err instanceof Error ? err.message : String(err);
-  async function readClaims(jar) {
-    if (options.readGuestClaims) return options.readGuestClaims(jar);
-    if (!options.supabase) return null;
-    const guest = createServerClient(options.supabase.url, options.supabase.publishableKey, {
-      cookieOptions: { name: options.guestCookieName },
-      cookies: { getAll: () => jar.getAll(), setAll: () => void 0 }
-    });
-    const { data } = await guest.auth.getClaims();
-    return data?.claims ?? null;
-  }
   async function readGuestPossession(visitorId) {
     const jar = await options.cookies();
     if (jar.getAll().some((c) => isGuestCookie(c.name))) {
       try {
-        const claims = await readClaims(jar);
+        const claims = await options.readGuestClaims(jar);
         if (claims?.sub && claims.is_anonymous === true) return { guestId: claims.sub, proof: "guest_session" };
       } catch (err) {
         loud(`the guest cookie could not be verified: ${msg(err)}`);

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { H as HeldOrganizationStore, A as AuthClient } from './active-organization-Cxm6GDIy.cjs';
-export { S as SessionSourceLike, a as SignInError, U as UserCredentialsPort, g as getPerson, b as getSession, i as invalidatePerson, o as onSessionChange, r as refreshSession, s as sessionCredentials, c as signInWithOAuth, d as signInWithPassword, e as signOut, u as updatePerson, f as userCredentials } from './active-organization-Cxm6GDIy.cjs';
+import { H as HeldOrganizationStore, A as AuthClient } from './active-organization-DHitxVeN.cjs';
+export { S as SessionSourceLike, a as SignInError, U as UserCredentialsPort, g as getPerson, b as getSession, i as invalidatePerson, o as onSessionChange, r as refreshSession, s as sessionCredentials, c as signInWithOAuth, d as signInWithPassword, e as signOut, u as updatePerson, f as userCredentials } from './active-organization-DHitxVeN.cjs';
 import { S as SessionStorage, M as MatrxOAuthClient } from './matrx-oauth-_Ji8X5Wm.cjs';
 export { C as ChromeStorageAreaLike, a as StorageUnavailableError, b as browserStorage, e as extensionStorage, k as keyValueStorage, m as memoryStorage } from './matrx-oauth-_Ji8X5Wm.cjs';
 import { SupabaseClient, User } from '@supabase/supabase-js';

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { H as HeldOrganizationStore, A as AuthClient } from './active-organization-Cxm6GDIy.js';
-export { S as SessionSourceLike, a as SignInError, U as UserCredentialsPort, g as getPerson, b as getSession, i as invalidatePerson, o as onSessionChange, r as refreshSession, s as sessionCredentials, c as signInWithOAuth, d as signInWithPassword, e as signOut, u as updatePerson, f as userCredentials } from './active-organization-Cxm6GDIy.js';
+import { H as HeldOrganizationStore, A as AuthClient } from './active-organization-DHitxVeN.js';
+export { S as SessionSourceLike, a as SignInError, U as UserCredentialsPort, g as getPerson, b as getSession, i as invalidatePerson, o as onSessionChange, r as refreshSession, s as sessionCredentials, c as signInWithOAuth, d as signInWithPassword, e as signOut, u as updatePerson, f as userCredentials } from './active-organization-DHitxVeN.js';
 import { S as SessionStorage, M as MatrxOAuthClient } from './matrx-oauth-_Ji8X5Wm.js';
 export { C as ChromeStorageAreaLike, a as StorageUnavailableError, b as browserStorage, e as extensionStorage, k as keyValueStorage, m as memoryStorage } from './matrx-oauth-_Ji8X5Wm.js';
 import { SupabaseClient, User } from '@supabase/supabase-js';

package/dist/organizations.cjs

@@ -22,6 +22,7 @@ var organizations_exports = {};
 __export(organizations_exports, {
   LINK_ORGANIZATION_QUERY_KEY: () => LINK_ORGANIZATION_QUERY_KEY,
   MEMBERSHIPS_URL: () => MEMBERSHIPS_URL,
+  MEMBERSHIP_ROWS_PAGE: () => MEMBERSHIP_ROWS_PAGE,
   NOT_A_MEMBER_RECHECK_GAP_MS: () => NOT_A_MEMBER_RECHECK_GAP_MS,
   NoActiveOrganizationError: () => NoActiveOrganizationError,
   NotAMemberError: () => NotAMemberError,
@@ -57,6 +58,7 @@ __export(organizations_exports, {
   readAccountOrganizationChoices: () => readAccountOrganizationChoices,
   readCallerMemberships: () => readCallerMemberships,
   readLinkOrganizationParam: () => readLinkOrganizationParam,
+  readMembershipRows: () => readMembershipRows,
   readMemberships: () => readMemberships,
   readOrganizationFavourites: () => readOrganizationFavourites,
   resolveActiveOrganization: () => resolveActiveOrganization,
@@ -858,3 +860,17 @@ function organizationRequiredEnvelope(error, setOn = "request") {
 function organizationRequiredResponse(error) {
   return Response.json(organizationRequiredEnvelope(error), { status: 400 });
 }
+
+// src/organization-membership-rows.ts
+var MEMBERSHIP_ROWS_PAGE = 500;
+async function readMembershipRows(db, containerType, pageSize = MEMBERSHIP_ROWS_PAGE) {
+  const rows = [];
+  for (let from = 0; ; from += pageSize) {
+    const answer = await db.rpc("mbr_for_user", { p_container_type: containerType }).order("id", { ascending: true }).range(from, from + pageSize - 1);
+    if (answer.error) return { data: null, error: answer.error, status: answer.status };
+    const page = Array.isArray(answer.data) ? answer.data : [];
+    rows.push(...page);
+    if (page.length < pageSize) break;
+  }
+  return { data: rows, error: null };
+}

package/dist/organizations.d.cts

@@ -1,4 +1,5 @@
-export { h as AccountOrganizationChoices, j as ActiveOrganization, k as ActiveOrganizationSnapshot, l as ActiveOrganizationStatus, m as AdminSeat, n as AdminSeatInput, p as ArchiveFilter, C as CachedActiveOrganization, q as CreateActiveOrganizationOptions, H as HeldOrganizationStore, L as LINK_ORGANIZATION_QUERY_KEY, t as LadderInput, v as LinkOrganizationDecision, w as LinkOrganizationDecisionInput, x as LinkOrganizationMembership, y as LinkOrganizationMessages, z as LinkOrganizationParam, N as NOT_A_MEMBER_RECHECK_GAP_MS, B as NoActiveOrganizationError, D as NotAMemberError, E as NotAMemberRefusalNotice, O as ORGANIZATION_ENTITY_TYPE, F as ORGANIZATION_RESOLUTION_TIMEOUT_MS, G as OrganizationBootstrapGate, I as OrganizationLapse, J as OrganizationMembership, K as OrganizationRefusal, M as OrganizationRung, P as OrganizationsDb, Q as ParentOrganization, R as ReadMembershipsOptions, T as ResolveWithLinkInput, V as ResolvedOrganization, W as ResolvedWithLink, X as adminSeatReplacesUserContext, Y as classifyLinkOrganizationValue, Z as classifyOrganizationRefusal, _ as createActiveOrganization, $ as createNotAMemberRefusalNotice, a0 as createOrganizationBootstrapGate, a1 as decideLinkOrganization, a2 as isNotAMemberRefusal, a3 as linkOrganizationMalformedMessage, a4 as linkOrganizationNotAMemberMessage, a5 as linkOrganizationOfferMessage, a6 as linkOrganizationSwitchAnnouncement, a7 as memoryHeldOrganization, a8 as oldestMembership, a9 as orderOrganizations, aa as organizationMatches, ab as readAccountOrganizationChoices, ac as readLinkOrganizationParam, ad as readMemberships, ae as readOrganizationFavourites, af as resolveActiveOrganization, ag as resolveActiveOrganizationLazily, ah as resolveAdminSeat, ai as resolveChildOrganizationId, aj as resolveOrganizationWithLink, ak as setOrganizationFavourite, al as storageHeldOrganization, am as toAccountOrganizationChoices, an as writeLastActiveOrganization, ao as writeStartupOrganization } from './active-organization-Cxm6GDIy.cjs';
+import { O as OrganizationsDb } from './active-organization-DHitxVeN.cjs';
+export { h as AccountOrganizationChoices, j as ActiveOrganization, k as ActiveOrganizationSnapshot, l as ActiveOrganizationStatus, m as AdminSeat, n as AdminSeatInput, p as ArchiveFilter, C as CachedActiveOrganization, q as CreateActiveOrganizationOptions, H as HeldOrganizationStore, L as LINK_ORGANIZATION_QUERY_KEY, t as LadderInput, v as LinkOrganizationDecision, w as LinkOrganizationDecisionInput, x as LinkOrganizationMembership, y as LinkOrganizationMessages, z as LinkOrganizationParam, N as NOT_A_MEMBER_RECHECK_GAP_MS, B as NoActiveOrganizationError, D as NotAMemberError, E as NotAMemberRefusalNotice, F as ORGANIZATION_ENTITY_TYPE, G as ORGANIZATION_RESOLUTION_TIMEOUT_MS, I as OrganizationBootstrapGate, J as OrganizationLapse, K as OrganizationMembership, M as OrganizationRefusal, P as OrganizationRung, Q as ParentOrganization, R as ReadMembershipsOptions, T as ResolveWithLinkInput, V as ResolvedOrganization, W as ResolvedWithLink, X as adminSeatReplacesUserContext, Y as classifyLinkOrganizationValue, Z as classifyOrganizationRefusal, _ as createActiveOrganization, $ as createNotAMemberRefusalNotice, a0 as createOrganizationBootstrapGate, a1 as decideLinkOrganization, a2 as isNotAMemberRefusal, a3 as linkOrganizationMalformedMessage, a4 as linkOrganizationNotAMemberMessage, a5 as linkOrganizationOfferMessage, a6 as linkOrganizationSwitchAnnouncement, a7 as memoryHeldOrganization, a8 as oldestMembership, a9 as orderOrganizations, aa as organizationMatches, ab as readAccountOrganizationChoices, ac as readLinkOrganizationParam, ad as readMemberships, ae as readOrganizationFavourites, af as resolveActiveOrganization, ag as resolveActiveOrganizationLazily, ah as resolveAdminSeat, ai as resolveChildOrganizationId, aj as resolveOrganizationWithLink, ak as setOrganizationFavourite, al as storageHeldOrganization, am as toAccountOrganizationChoices, an as writeLastActiveOrganization, ao as writeStartupOrganization } from './active-organization-DHitxVeN.cjs';
 import '@supabase/supabase-js';
 
 /**
@@ -107,4 +108,26 @@ declare function organizationRequiredEnvelope(error: OrganizationRequiredServerE
 /** The standard `Response` (status 400) a route answers the refusal with — no framework needed. */
 declare function organizationRequiredResponse(error: OrganizationRequiredServerError): Response;
 
-export { MEMBERSHIPS_URL, type MembershipReadClient, ORGANIZATION_CONTEXT_REQUIRED_CODE, ORGANIZATION_REQUIRED_CODE, ORGANIZATION_REQUIRED_WIRE_CODE, type OrganizationHoldDetails, type OrganizationHoldSetOn, type OrganizationMembershipSummary, type OrganizationRequiredEnvelope, OrganizationRequiredServerError, type OrganizationRequiredWireMembership, extractOrganizationHoldMemberships, isOrganizationRequiredEnvelope, isOrganizationRequiredError, isOrganizationRequiredServerError, organizationRequired, organizationRequiredEnvelope, organizationRequiredResponse, readCallerMemberships };
+/**
+ * The person's raw membership rows for ONE container type, PAGED — the canonical `mbr_for_user`
+ * door (moved from the website's membershipsService). PostgREST caps one answer at its max-rows
+ * (1000): a person in 1,043 organizations lost the last 43, so the read pages in stable id order
+ * until a short page.
+ *
+ * It does NOT throw: it returns the first failing page's `{ error, status }` so a host can wrap
+ * the whole read in its own session retry (a 401 on a recovering session) and map the error its
+ * own way.
+ */
+
+declare const MEMBERSHIP_ROWS_PAGE = 500;
+interface MembershipRowsAnswer<Row> {
+    readonly data: Row[] | null;
+    readonly error: {
+        message: string;
+        code?: string;
+    } | null;
+    readonly status?: number | undefined;
+}
+declare function readMembershipRows<Row = Record<string, unknown>>(db: OrganizationsDb, containerType: string, pageSize?: number): Promise<MembershipRowsAnswer<Row>>;
+
+export { MEMBERSHIPS_URL, MEMBERSHIP_ROWS_PAGE, type MembershipReadClient, type MembershipRowsAnswer, ORGANIZATION_CONTEXT_REQUIRED_CODE, ORGANIZATION_REQUIRED_CODE, ORGANIZATION_REQUIRED_WIRE_CODE, type OrganizationHoldDetails, type OrganizationHoldSetOn, type OrganizationMembershipSummary, type OrganizationRequiredEnvelope, OrganizationRequiredServerError, type OrganizationRequiredWireMembership, OrganizationsDb, extractOrganizationHoldMemberships, isOrganizationRequiredEnvelope, isOrganizationRequiredError, isOrganizationRequiredServerError, organizationRequired, organizationRequiredEnvelope, organizationRequiredResponse, readCallerMemberships, readMembershipRows };

package/dist/organizations.d.ts

@@ -1,4 +1,5 @@
-export { h as AccountOrganizationChoices, j as ActiveOrganization, k as ActiveOrganizationSnapshot, l as ActiveOrganizationStatus, m as AdminSeat, n as AdminSeatInput, p as ArchiveFilter, C as CachedActiveOrganization, q as CreateActiveOrganizationOptions, H as HeldOrganizationStore, L as LINK_ORGANIZATION_QUERY_KEY, t as LadderInput, v as LinkOrganizationDecision, w as LinkOrganizationDecisionInput, x as LinkOrganizationMembership, y as LinkOrganizationMessages, z as LinkOrganizationParam, N as NOT_A_MEMBER_RECHECK_GAP_MS, B as NoActiveOrganizationError, D as NotAMemberError, E as NotAMemberRefusalNotice, O as ORGANIZATION_ENTITY_TYPE, F as ORGANIZATION_RESOLUTION_TIMEOUT_MS, G as OrganizationBootstrapGate, I as OrganizationLapse, J as OrganizationMembership, K as OrganizationRefusal, M as OrganizationRung, P as OrganizationsDb, Q as ParentOrganization, R as ReadMembershipsOptions, T as ResolveWithLinkInput, V as ResolvedOrganization, W as ResolvedWithLink, X as adminSeatReplacesUserContext, Y as classifyLinkOrganizationValue, Z as classifyOrganizationRefusal, _ as createActiveOrganization, $ as createNotAMemberRefusalNotice, a0 as createOrganizationBootstrapGate, a1 as decideLinkOrganization, a2 as isNotAMemberRefusal, a3 as linkOrganizationMalformedMessage, a4 as linkOrganizationNotAMemberMessage, a5 as linkOrganizationOfferMessage, a6 as linkOrganizationSwitchAnnouncement, a7 as memoryHeldOrganization, a8 as oldestMembership, a9 as orderOrganizations, aa as organizationMatches, ab as readAccountOrganizationChoices, ac as readLinkOrganizationParam, ad as readMemberships, ae as readOrganizationFavourites, af as resolveActiveOrganization, ag as resolveActiveOrganizationLazily, ah as resolveAdminSeat, ai as resolveChildOrganizationId, aj as resolveOrganizationWithLink, ak as setOrganizationFavourite, al as storageHeldOrganization, am as toAccountOrganizationChoices, an as writeLastActiveOrganization, ao as writeStartupOrganization } from './active-organization-Cxm6GDIy.js';
+import { O as OrganizationsDb } from './active-organization-DHitxVeN.js';
+export { h as AccountOrganizationChoices, j as ActiveOrganization, k as ActiveOrganizationSnapshot, l as ActiveOrganizationStatus, m as AdminSeat, n as AdminSeatInput, p as ArchiveFilter, C as CachedActiveOrganization, q as CreateActiveOrganizationOptions, H as HeldOrganizationStore, L as LINK_ORGANIZATION_QUERY_KEY, t as LadderInput, v as LinkOrganizationDecision, w as LinkOrganizationDecisionInput, x as LinkOrganizationMembership, y as LinkOrganizationMessages, z as LinkOrganizationParam, N as NOT_A_MEMBER_RECHECK_GAP_MS, B as NoActiveOrganizationError, D as NotAMemberError, E as NotAMemberRefusalNotice, F as ORGANIZATION_ENTITY_TYPE, G as ORGANIZATION_RESOLUTION_TIMEOUT_MS, I as OrganizationBootstrapGate, J as OrganizationLapse, K as OrganizationMembership, M as OrganizationRefusal, P as OrganizationRung, Q as ParentOrganization, R as ReadMembershipsOptions, T as ResolveWithLinkInput, V as ResolvedOrganization, W as ResolvedWithLink, X as adminSeatReplacesUserContext, Y as classifyLinkOrganizationValue, Z as classifyOrganizationRefusal, _ as createActiveOrganization, $ as createNotAMemberRefusalNotice, a0 as createOrganizationBootstrapGate, a1 as decideLinkOrganization, a2 as isNotAMemberRefusal, a3 as linkOrganizationMalformedMessage, a4 as linkOrganizationNotAMemberMessage, a5 as linkOrganizationOfferMessage, a6 as linkOrganizationSwitchAnnouncement, a7 as memoryHeldOrganization, a8 as oldestMembership, a9 as orderOrganizations, aa as organizationMatches, ab as readAccountOrganizationChoices, ac as readLinkOrganizationParam, ad as readMemberships, ae as readOrganizationFavourites, af as resolveActiveOrganization, ag as resolveActiveOrganizationLazily, ah as resolveAdminSeat, ai as resolveChildOrganizationId, aj as resolveOrganizationWithLink, ak as setOrganizationFavourite, al as storageHeldOrganization, am as toAccountOrganizationChoices, an as writeLastActiveOrganization, ao as writeStartupOrganization } from './active-organization-DHitxVeN.js';
 import '@supabase/supabase-js';
 
 /**
@@ -107,4 +108,26 @@ declare function organizationRequiredEnvelope(error: OrganizationRequiredServerE
 /** The standard `Response` (status 400) a route answers the refusal with — no framework needed. */
 declare function organizationRequiredResponse(error: OrganizationRequiredServerError): Response;
 
-export { MEMBERSHIPS_URL, type MembershipReadClient, ORGANIZATION_CONTEXT_REQUIRED_CODE, ORGANIZATION_REQUIRED_CODE, ORGANIZATION_REQUIRED_WIRE_CODE, type OrganizationHoldDetails, type OrganizationHoldSetOn, type OrganizationMembershipSummary, type OrganizationRequiredEnvelope, OrganizationRequiredServerError, type OrganizationRequiredWireMembership, extractOrganizationHoldMemberships, isOrganizationRequiredEnvelope, isOrganizationRequiredError, isOrganizationRequiredServerError, organizationRequired, organizationRequiredEnvelope, organizationRequiredResponse, readCallerMemberships };
+/**
+ * The person's raw membership rows for ONE container type, PAGED — the canonical `mbr_for_user`
+ * door (moved from the website's membershipsService). PostgREST caps one answer at its max-rows
+ * (1000): a person in 1,043 organizations lost the last 43, so the read pages in stable id order
+ * until a short page.
+ *
+ * It does NOT throw: it returns the first failing page's `{ error, status }` so a host can wrap
+ * the whole read in its own session retry (a 401 on a recovering session) and map the error its
+ * own way.
+ */
+
+declare const MEMBERSHIP_ROWS_PAGE = 500;
+interface MembershipRowsAnswer<Row> {
+    readonly data: Row[] | null;
+    readonly error: {
+        message: string;
+        code?: string;
+    } | null;
+    readonly status?: number | undefined;
+}
+declare function readMembershipRows<Row = Record<string, unknown>>(db: OrganizationsDb, containerType: string, pageSize?: number): Promise<MembershipRowsAnswer<Row>>;
+
+export { MEMBERSHIPS_URL, MEMBERSHIP_ROWS_PAGE, type MembershipReadClient, type MembershipRowsAnswer, ORGANIZATION_CONTEXT_REQUIRED_CODE, ORGANIZATION_REQUIRED_CODE, ORGANIZATION_REQUIRED_WIRE_CODE, type OrganizationHoldDetails, type OrganizationHoldSetOn, type OrganizationMembershipSummary, type OrganizationRequiredEnvelope, OrganizationRequiredServerError, type OrganizationRequiredWireMembership, OrganizationsDb, extractOrganizationHoldMemberships, isOrganizationRequiredEnvelope, isOrganizationRequiredError, isOrganizationRequiredServerError, organizationRequired, organizationRequiredEnvelope, organizationRequiredResponse, readCallerMemberships, readMembershipRows };

package/dist/organizations.js

@@ -784,9 +784,24 @@ function organizationRequiredEnvelope(error, setOn = "request") {
 function organizationRequiredResponse(error) {
   return Response.json(organizationRequiredEnvelope(error), { status: 400 });
 }
+
+// src/organization-membership-rows.ts
+var MEMBERSHIP_ROWS_PAGE = 500;
+async function readMembershipRows(db, containerType, pageSize = MEMBERSHIP_ROWS_PAGE) {
+  const rows = [];
+  for (let from = 0; ; from += pageSize) {
+    const answer = await db.rpc("mbr_for_user", { p_container_type: containerType }).order("id", { ascending: true }).range(from, from + pageSize - 1);
+    if (answer.error) return { data: null, error: answer.error, status: answer.status };
+    const page = Array.isArray(answer.data) ? answer.data : [];
+    rows.push(...page);
+    if (page.length < pageSize) break;
+  }
+  return { data: rows, error: null };
+}
 export {
   LINK_ORGANIZATION_QUERY_KEY,
   MEMBERSHIPS_URL,
+  MEMBERSHIP_ROWS_PAGE,
   NOT_A_MEMBER_RECHECK_GAP_MS,
   NoActiveOrganizationError,
   NotAMemberError,
@@ -822,6 +837,7 @@ export {
   readAccountOrganizationChoices,
   readCallerMemberships,
   readLinkOrganizationParam,
+  readMembershipRows,
   readMemberships,
   readOrganizationFavourites,
   resolveActiveOrganization,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-matrx/auth",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "AI Matrx sign-in, session and organizations for every app: sign in/out, session storage and refresh per platform (browser, Next.js, extension, desktop, Node), the current person, their organizations and favourites, the one active organization (held requests, never a list filter), and the credentials @ai-matrx/data and @ai-matrx/api read.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -211,5 +211,5 @@
     "test": "vitest run",
     "verify:tarball": "node ./scripts/verify-tarball.mjs"
   },
-  "gitHead": "f9020cf33c7ac2b8b854856131eb0b1268eb220d"
+  "gitHead": "9517977774bcd6e3ed1018bd331ca397a8e7ddfd"
 }