@ai-matrx/messaging 0.13.1 → 0.14.0

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # Changelog — `@ai-matrx/messaging`
 
+## 0.14.0
+
+### Changed
+
+- **Messaging runs with no organization selected** (access belongs to the
+  person, 2026-09-23). `<MessagingProvider organizationId={null}>` used to stay
+  inert — every inbox and conversation spun forever — and
+  `createMessagingRepository` threw at construction without an org, although
+  no read here filters by organization. Now the provider starts and every read
+  works as the signed-in person. The organization is only a write destination:
+  - starting a NEW conversation (`getOrCreateDirectConversation`,
+    `createGroupConversation`, `useConversations().startDirect`) without one is
+    refused with the new error code **`organization-required`**, before
+    anything reaches the database;
+  - a message or member added to an EXISTING conversation with no active
+    organization is stamped with that conversation's own organization;
+  - AI actions do not render without an organization (a run is filed under one).
+- `MessagingIdentity.organizationId` and `MessagingRepository.organizationId`
+  are now `OrganizationId | null`; `RepositoryOptions.organizationId` is
+  optional. `MessagingErrorCode` gains `"organization-required"`.
+
+### Consumer action
+
+- Pass the active organization as before, including `null` when none is
+  selected — do not gate `<MessagingProvider>` on having one.
+- Where the host starts a conversation, ask the person to choose an
+  organization when none is selected (or handle `error.code ===
+  "organization-required"`).
+- Code that read `host.identity.organizationId` as non-null must handle `null`.
+
 ## 0.13.1
 
 ### Fixed

package/README.md

@@ -82,7 +82,11 @@ notifications race it into two "direct" conversations for one pair, forever.
 RLS plus auth-checked SECURITY DEFINER RPCs. There is not one permission branch in this package —
 an RPC that says no becomes a `forbidden` error, never a client-side re-decision. And every
 conversation and message write carries an explicit `organization_id`; the package refuses the
-write rather than letting an unscoped row reach the database.
+write rather than letting an unscoped row reach the database. The organization is a write
+DESTINATION only: `organizationId={null}` is a valid state in which every read works (the inbox,
+a deep-linked conversation, replying — a reply is stamped with its conversation's organization),
+and starting a NEW conversation is refused as `organization-required` so the host can ask the
+person to choose one.
 
 ### 7. A missing session is a lifecycle moment, not an error.
 

package/dist/index.cjs

@@ -931,7 +931,7 @@ function projectMessage(row, fallbackOrganizationId) {
     id: requiredStr(row, "id", operation),
     conversationId: requiredStr(row, "conversation_id", operation),
     senderId: requiredStr(row, "sender_id", operation),
-    organizationId: str(row, "organization_id") ?? fallbackOrganizationId,
+    organizationId: str(row, "organization_id") ?? fallbackOrganizationId ?? "",
     content: typeof row["content"] === "string" ? row["content"] : "",
     kind: MESSAGE_KINDS.has(kindRaw) ? kindRaw : "text",
     // A row read from the DB is at least `sent`. `sending`/`failed` are outbox
@@ -979,7 +979,7 @@ function projectConversationSummary(row, viewerId, fallbackOrganizationId) {
       groupName,
       groupImageUrl,
       createdBy: createdBy === null ? null : createdBy,
-      organizationId: str(row, "organization_id") ?? fallbackOrganizationId,
+      organizationId: str(row, "organization_id") ?? fallbackOrganizationId ?? "",
       createdAt,
       updatedAt,
       metadata: jsonObject(row["metadata"])
@@ -1312,7 +1312,11 @@ function createMessagingEngine(options) {
           optimisticMessage({
             conversationId: entry.draft.conversationId,
             senderId: identity.userId,
-            organizationId: identity.organizationId,
+            // Client-only until the confirmed row replaces it: the active
+            // organization, else the conversation's own.
+            organizationId: identity.organizationId ?? store.snapshot().conversations.find(
+              (item) => item.conversation.id === entry.draft.conversationId
+            )?.conversation.organizationId ?? "",
             content: entry.draft.content,
             clientMessageId: entry.clientMessageId,
             ...entry.draft.kind !== void 0 ? { kind: entry.draft.kind } : {},
@@ -1844,12 +1848,15 @@ var RPCS = {
 };
 var MESSAGE_COLUMNS = "id,conversation_id,sender_id,organization_id,content,message_type,status,reply_to_id,client_message_id,action_data,media_url,media_thumbnail_url,media_metadata,created_at,edited_at,deleted_at,deleted_for_everyone,metadata";
 var CONVERSATION_COLUMNS = "id,type,group_name,group_image_url,created_by,organization_id,created_at,updated_at,metadata";
+function optionalOrg(organizationId) {
+  return typeof organizationId === "string" && organizationId.length > 0 ? organizationId : null;
+}
 function requireOrg(organizationId, operation) {
-  if (typeof organizationId !== "string" || organizationId.length === 0) {
+  if (organizationId === null) {
     throw new MessagingError(
-      "misconfigured",
-      `${operation}: no organization_id`,
-      "Every conversation and message write carries an explicit organization_id (R5). Pass a real org on <MessagingProvider>; the package refuses the write rather than letting an unscoped row reach the database."
+      "organization-required",
+      `${operation}: no organization selected`,
+      "A new conversation is filed under one organization. Ask the person to choose one, then pass it as organizationId on <MessagingProvider>. Reading and replying to existing conversations never needs it."
     );
   }
   return organizationId;
@@ -1861,7 +1868,7 @@ function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, jittered));
 }
 function createMessagingRepository(options) {
-  const org = requireOrg(options.organizationId, "createMessagingRepository");
+  const org = optionalOrg(options.organizationId);
   const handedIn = options.identity;
   if (handedIn !== void 0 && handedIn !== null && handedIn.userId !== void 0) {
     options.onDiagnostic?.(
@@ -1931,6 +1938,11 @@ function createMessagingRepository(options) {
     });
     return found;
   }
+  async function organizationOfExisting(conversationId) {
+    if (org !== null) return org;
+    const conversation = await repository.getConversation(conversationId);
+    return conversation.organizationId;
+  }
   const repository = {
     organizationId: org,
     actingUserId,
@@ -2063,6 +2075,7 @@ function createMessagingRepository(options) {
     },
     async getOrCreateDirectConversation(otherUserId) {
       const operation = "getOrCreateDirectConversation";
+      const destination = requireOrg(org, operation);
       const me = await actingUser(operation);
       const id = await withSessionRetry(
         operation,
@@ -2074,7 +2087,7 @@ function createMessagingRepository(options) {
             // not a preference.
             p_user1_id: me,
             p_user2_id: otherUserId,
-            p_organization_id: org
+            p_organization_id: destination
           },
           operation
         )
@@ -2086,13 +2099,14 @@ function createMessagingRepository(options) {
     },
     async createGroupConversation({ name, memberIds }) {
       const operation = "createGroupConversation";
+      const destination = requireOrg(org, operation);
       const me = await actingUser(operation);
       const { data, error } = await withSessionRetry(
         operation,
         async () => db().from(TABLES.conversations).insert({
           type: "group",
           group_name: name,
-          organization_id: org,
+          organization_id: destination,
           created_by: me
         }).select("id").single()
       );
@@ -2107,7 +2121,7 @@ function createMessagingRepository(options) {
           conversation_id: conversationId,
           user_id: userId,
           role: userId === me ? "owner" : "member",
-          organization_id: org,
+          organization_id: destination,
           created_by: me
         }))
       );
@@ -2117,10 +2131,11 @@ function createMessagingRepository(options) {
     async insertMessage(draft, clientMessageId) {
       const operation = "insertMessage";
       const me = await actingUser(operation);
+      const destination = await organizationOfExisting(draft.conversationId);
       const { data, error } = await db().from(TABLES.messages).insert({
         conversation_id: draft.conversationId,
         sender_id: me,
-        organization_id: org,
+        organization_id: destination,
         created_by: me,
         content: draft.content,
         message_type: draft.kind ?? "text",
@@ -2181,12 +2196,13 @@ function createMessagingRepository(options) {
     async addMembers(conversationId, memberIds) {
       const operation = "addMembers";
       const me = await actingUser(operation);
+      const destination = await organizationOfExisting(conversationId);
       const { error } = await db().from(TABLES.participants).insert(
         memberIds.map((userId) => ({
           conversation_id: conversationId,
           user_id: userId,
           role: "member",
-          organization_id: org,
+          organization_id: destination,
           created_by: me
         }))
       );