@ai-matrx/messaging 0.13.1 → 0.15.0

package/dist/index.d.cts

@@ -207,7 +207,11 @@ interface Page<TItem, TCursor> {
 /** What the host injects. Identity ONLY — every hard part is in the package. */
 interface MessagingIdentity {
     readonly userId: UserId;
-    readonly organizationId: OrganizationId;
+    /**
+     * The active organization, or `null` when none is selected. Reads never
+     * depend on it; it is only where a NEW conversation lands.
+     */
+    readonly organizationId: OrganizationId | null;
 }
 interface DraftMessage {
     readonly conversationId: ConversationId;
@@ -628,7 +632,9 @@ declare function createOutbox(options: OutboxOptions): Outbox;
  * errors in 0.6 seconds. A missing session is a NORMAL lifecycle moment — it
  * warns and retries; it is never a red error.
  */
-type MessagingErrorCode = "session-unavailable" | "contention" | "forbidden" | "not-found" | "conflict" | "transport" | "invalid-response" | "misconfigured" | "unknown";
+type MessagingErrorCode = "session-unavailable" | "contention" | "forbidden" | "not-found" | "conflict" | "transport" | "invalid-response" | "misconfigured"
+/** A NEW conversation needs an organization to land in and none is selected. */
+ | "organization-required" | "unknown";
 declare class MessagingError extends Error {
     readonly code: MessagingErrorCode;
     /** The remedy. Nothing fails silently, and nothing fails without saying what to do. */
@@ -920,15 +926,21 @@ interface RepositoryOptions {
      */
     client: MessagingSupabaseClient;
     /**
-     * The active organization. Every conversation and message write carries it
-     * explicitly (R5).
+     * The active organization, or `null`/omitted when none is selected.
+     *
+     * 🚨 READS NEVER NEED IT (access belongs to the person, 2026-09-23). Every
+     * read here is answered by RLS as the session's user; the organization is
+     * only the DESTINATION of a NEW conversation. Without one, starting a
+     * conversation is refused with `organization-required` (the host asks the
+     * person to choose), and a message or member added to an EXISTING
+     * conversation is stamped with that conversation's own organization.
      *
      * 🚨 THERE IS NO `userId` HERE, AND THERE WILL NOT BE ONE (DD-241). Who is
      * acting is read from `client`'s own session — see `session-identity.ts` for
      * the class that closed and why a handed-in id could not be made safe by
      * convention. A caller that still passes `identity` is IGNORED and told so.
      */
-    organizationId: string;
+    organizationId?: string | null | undefined;
     /**
      * INTERNAL. The React provider already runs one session reader for its own
      * render loop and hands it here so the two cannot answer differently and so
@@ -949,8 +961,11 @@ interface RepositoryOptions {
     now?: (() => number) | undefined;
 }
 interface MessagingRepository {
-    /** The organization every write here is stamped with. */
-    readonly organizationId: OrganizationId;
+    /**
+     * The active organization new conversations land in, or `null` when none is
+     * selected — reads work either way.
+     */
+    readonly organizationId: OrganizationId | null;
     /**
      * Who the session says is acting — awaited, because the first `getSession()`
      * is a real read. Rejects with `session-unavailable` when nobody is signed
@@ -1107,11 +1122,18 @@ interface MessagingSnapshot {
     } | null;
     /** Conversations whose last open failed, keyed by id. Cleared on the next open. */
     readonly conversationReadFailures: ReadonlyMap<ConversationId, ConversationReadFailure>;
+    /**
+     * The inbox read FAILED (and no later read succeeded). Without it a failed
+     * first read left `hasLoadedConversations` false forever — a skeleton that
+     * never resolves is a screen telling a lie (RC-B12 round 11).
+     */
+    readonly conversationsLoadError: string | null;
 }
 interface MessagingStore {
     snapshot(): MessagingSnapshot;
     subscribe(listener: (snapshot: MessagingSnapshot) => void): () => void;
     setConversations(items: readonly ConversationSummary[], hasMore: boolean): void;
+    setConversationsLoadError(message: string | null): void;
     /**
      * Switch the archive axis. Clears the list and marks it UNLOADED: the rows
      * on screen belong to the old filter, and leaving them there while the new
@@ -1221,6 +1243,8 @@ interface MessagingEngine {
      * refreshes the archived count the reveal label prints.
      */
     setArchiveFilter(next: MessagingArchiveFilter): Promise<void>;
+    /** Read the inbox again (the failed-read view's Try again). Never throws; a failure lands in the snapshot. */
+    refreshInbox(): Promise<void>;
     /** Re-read how many archived conversations exist, for the reveal's label. */
     refreshArchivedCount(): Promise<void>;
     /** Open a conversation: load its thread and subscribe to its channel. */
@@ -1311,9 +1335,13 @@ declare function formatLastSeen(lastSeenMs: number | null, now?: number): string
 
 declare function projectUserSummary(row: Record<string, unknown>): UserSummary;
 declare function projectMessageAction(value: unknown): MessageAction | null;
-declare function projectMessage(row: Record<string, unknown>, fallbackOrganizationId: OrganizationId): Message;
+declare function projectMessage(row: Record<string, unknown>, 
+/** The active organization, or `null` when none is selected (reads never need one). */
+fallbackOrganizationId: OrganizationId | null): Message;
 declare function projectParticipantRole(value: unknown): ParticipantRole;
-declare function projectConversationSummary(row: Record<string, unknown>, viewerId: UserId, fallbackOrganizationId: OrganizationId): ConversationSummary;
+declare function projectConversationSummary(row: Record<string, unknown>, viewerId: UserId, 
+/** The active organization, or `null` when none is selected (reads never need one). */
+fallbackOrganizationId: OrganizationId | null): ConversationSummary;
 
 /**
  * MATRX REFERENCES — a message can name a platform entity, and everything it

package/dist/index.d.ts

@@ -207,7 +207,11 @@ interface Page<TItem, TCursor> {
 /** What the host injects. Identity ONLY — every hard part is in the package. */
 interface MessagingIdentity {
     readonly userId: UserId;
-    readonly organizationId: OrganizationId;
+    /**
+     * The active organization, or `null` when none is selected. Reads never
+     * depend on it; it is only where a NEW conversation lands.
+     */
+    readonly organizationId: OrganizationId | null;
 }
 interface DraftMessage {
     readonly conversationId: ConversationId;
@@ -628,7 +632,9 @@ declare function createOutbox(options: OutboxOptions): Outbox;
  * errors in 0.6 seconds. A missing session is a NORMAL lifecycle moment — it
  * warns and retries; it is never a red error.
  */
-type MessagingErrorCode = "session-unavailable" | "contention" | "forbidden" | "not-found" | "conflict" | "transport" | "invalid-response" | "misconfigured" | "unknown";
+type MessagingErrorCode = "session-unavailable" | "contention" | "forbidden" | "not-found" | "conflict" | "transport" | "invalid-response" | "misconfigured"
+/** A NEW conversation needs an organization to land in and none is selected. */
+ | "organization-required" | "unknown";
 declare class MessagingError extends Error {
     readonly code: MessagingErrorCode;
     /** The remedy. Nothing fails silently, and nothing fails without saying what to do. */
@@ -920,15 +926,21 @@ interface RepositoryOptions {
      */
     client: MessagingSupabaseClient;
     /**
-     * The active organization. Every conversation and message write carries it
-     * explicitly (R5).
+     * The active organization, or `null`/omitted when none is selected.
+     *
+     * 🚨 READS NEVER NEED IT (access belongs to the person, 2026-09-23). Every
+     * read here is answered by RLS as the session's user; the organization is
+     * only the DESTINATION of a NEW conversation. Without one, starting a
+     * conversation is refused with `organization-required` (the host asks the
+     * person to choose), and a message or member added to an EXISTING
+     * conversation is stamped with that conversation's own organization.
      *
      * 🚨 THERE IS NO `userId` HERE, AND THERE WILL NOT BE ONE (DD-241). Who is
      * acting is read from `client`'s own session — see `session-identity.ts` for
      * the class that closed and why a handed-in id could not be made safe by
      * convention. A caller that still passes `identity` is IGNORED and told so.
      */
-    organizationId: string;
+    organizationId?: string | null | undefined;
     /**
      * INTERNAL. The React provider already runs one session reader for its own
      * render loop and hands it here so the two cannot answer differently and so
@@ -949,8 +961,11 @@ interface RepositoryOptions {
     now?: (() => number) | undefined;
 }
 interface MessagingRepository {
-    /** The organization every write here is stamped with. */
-    readonly organizationId: OrganizationId;
+    /**
+     * The active organization new conversations land in, or `null` when none is
+     * selected — reads work either way.
+     */
+    readonly organizationId: OrganizationId | null;
     /**
      * Who the session says is acting — awaited, because the first `getSession()`
      * is a real read. Rejects with `session-unavailable` when nobody is signed
@@ -1107,11 +1122,18 @@ interface MessagingSnapshot {
     } | null;
     /** Conversations whose last open failed, keyed by id. Cleared on the next open. */
     readonly conversationReadFailures: ReadonlyMap<ConversationId, ConversationReadFailure>;
+    /**
+     * The inbox read FAILED (and no later read succeeded). Without it a failed
+     * first read left `hasLoadedConversations` false forever — a skeleton that
+     * never resolves is a screen telling a lie (RC-B12 round 11).
+     */
+    readonly conversationsLoadError: string | null;
 }
 interface MessagingStore {
     snapshot(): MessagingSnapshot;
     subscribe(listener: (snapshot: MessagingSnapshot) => void): () => void;
     setConversations(items: readonly ConversationSummary[], hasMore: boolean): void;
+    setConversationsLoadError(message: string | null): void;
     /**
      * Switch the archive axis. Clears the list and marks it UNLOADED: the rows
      * on screen belong to the old filter, and leaving them there while the new
@@ -1221,6 +1243,8 @@ interface MessagingEngine {
      * refreshes the archived count the reveal label prints.
      */
     setArchiveFilter(next: MessagingArchiveFilter): Promise<void>;
+    /** Read the inbox again (the failed-read view's Try again). Never throws; a failure lands in the snapshot. */
+    refreshInbox(): Promise<void>;
     /** Re-read how many archived conversations exist, for the reveal's label. */
     refreshArchivedCount(): Promise<void>;
     /** Open a conversation: load its thread and subscribe to its channel. */
@@ -1311,9 +1335,13 @@ declare function formatLastSeen(lastSeenMs: number | null, now?: number): string
 
 declare function projectUserSummary(row: Record<string, unknown>): UserSummary;
 declare function projectMessageAction(value: unknown): MessageAction | null;
-declare function projectMessage(row: Record<string, unknown>, fallbackOrganizationId: OrganizationId): Message;
+declare function projectMessage(row: Record<string, unknown>, 
+/** The active organization, or `null` when none is selected (reads never need one). */
+fallbackOrganizationId: OrganizationId | null): Message;
 declare function projectParticipantRole(value: unknown): ParticipantRole;
-declare function projectConversationSummary(row: Record<string, unknown>, viewerId: UserId, fallbackOrganizationId: OrganizationId): ConversationSummary;
+declare function projectConversationSummary(row: Record<string, unknown>, viewerId: UserId, 
+/** The active organization, or `null` when none is selected (reads never need one). */
+fallbackOrganizationId: OrganizationId | null): ConversationSummary;
 
 /**
  * MATRX REFERENCES — a message can name a platform entity, and everything it

package/dist/index.js

@@ -861,7 +861,7 @@ function projectMessage(row, fallbackOrganizationId) {
     id: requiredStr(row, "id", operation),
     conversationId: requiredStr(row, "conversation_id", operation),
     senderId: requiredStr(row, "sender_id", operation),
-    organizationId: str(row, "organization_id") ?? fallbackOrganizationId,
+    organizationId: str(row, "organization_id") ?? fallbackOrganizationId ?? "",
     content: typeof row["content"] === "string" ? row["content"] : "",
     kind: MESSAGE_KINDS.has(kindRaw) ? kindRaw : "text",
     // A row read from the DB is at least `sent`. `sending`/`failed` are outbox
@@ -909,7 +909,7 @@ function projectConversationSummary(row, viewerId, fallbackOrganizationId) {
       groupName,
       groupImageUrl,
       createdBy: createdBy === null ? null : createdBy,
-      organizationId: str(row, "organization_id") ?? fallbackOrganizationId,
+      organizationId: str(row, "organization_id") ?? fallbackOrganizationId ?? "",
       createdAt,
       updatedAt,
       metadata: jsonObject(row["metadata"])
@@ -975,6 +975,7 @@ function createMessagingStore() {
   let threads = /* @__PURE__ */ new Map();
   let activeConversationId = null;
   let conversationReadFailures = /* @__PURE__ */ new Map();
+  let conversationsLoadError = null;
   const listeners = /* @__PURE__ */ new Set();
   let cached = null;
   function snapshot() {
@@ -988,7 +989,8 @@ function createMessagingStore() {
       totalUnreadConversations: conversations.filter((item) => item.unreadCount > 0).length,
       archiveFilter,
       archivedCount,
-      conversationReadFailures
+      conversationReadFailures,
+      conversationsLoadError
     };
     return cached;
   }
@@ -1033,6 +1035,12 @@ function createMessagingStore() {
       conversations = normalizeConversations(items);
       hasMoreConversations = hasMore;
       hasLoadedConversations = true;
+      conversationsLoadError = null;
+      emit();
+    },
+    setConversationsLoadError(message) {
+      if (message === conversationsLoadError) return;
+      conversationsLoadError = message;
       emit();
     },
     setArchiveFilter(next) {
@@ -1242,7 +1250,11 @@ function createMessagingEngine(options) {
           optimisticMessage({
             conversationId: entry.draft.conversationId,
             senderId: identity.userId,
-            organizationId: identity.organizationId,
+            // Client-only until the confirmed row replaces it: the active
+            // organization, else the conversation's own.
+            organizationId: identity.organizationId ?? store.snapshot().conversations.find(
+              (item) => item.conversation.id === entry.draft.conversationId
+            )?.conversation.organizationId ?? "",
             content: entry.draft.content,
             clientMessageId: entry.clientMessageId,
             ...entry.draft.kind !== void 0 ? { kind: entry.draft.kind } : {},
@@ -1261,10 +1273,20 @@ function createMessagingEngine(options) {
   }
   async function reloadInbox() {
     if (disposed) return;
-    const page = await repository.listConversations({
-      limit: conversationPageSize,
-      archived: store.snapshot().archiveFilter
-    });
+    let page;
+    try {
+      page = await repository.listConversations({
+        limit: conversationPageSize,
+        archived: store.snapshot().archiveFilter
+      });
+    } catch (error) {
+      if (!disposed) {
+        store.setConversationsLoadError(
+          error instanceof Error ? error.message : typeof error === "string" ? error : "The conversation list could not be read."
+        );
+      }
+      throw error;
+    }
     if (disposed) return;
     conversationCursor = page.nextCursor;
     store.setConversations(page.items, page.hasMore);
@@ -1349,6 +1371,13 @@ function createMessagingEngine(options) {
         }
       });
     },
+    async refreshInbox() {
+      try {
+        await reloadInbox();
+      } catch (error) {
+        reportError(error, "inboxRefresh");
+      }
+    },
     async setArchiveFilter(next) {
       if (next === store.snapshot().archiveFilter) return;
       store.setArchiveFilter(next);
@@ -1774,12 +1803,15 @@ var RPCS = {
 };
 var MESSAGE_COLUMNS = "id,conversation_id,sender_id,organization_id,content,message_type,status,reply_to_id,client_message_id,action_data,media_url,media_thumbnail_url,media_metadata,created_at,edited_at,deleted_at,deleted_for_everyone,metadata";
 var CONVERSATION_COLUMNS = "id,type,group_name,group_image_url,created_by,organization_id,created_at,updated_at,metadata";
+function optionalOrg(organizationId) {
+  return typeof organizationId === "string" && organizationId.length > 0 ? organizationId : null;
+}
 function requireOrg(organizationId, operation) {
-  if (typeof organizationId !== "string" || organizationId.length === 0) {
+  if (organizationId === null) {
     throw new MessagingError(
-      "misconfigured",
-      `${operation}: no organization_id`,
-      "Every conversation and message write carries an explicit organization_id (R5). Pass a real org on <MessagingProvider>; the package refuses the write rather than letting an unscoped row reach the database."
+      "organization-required",
+      `${operation}: no organization selected`,
+      "A new conversation is filed under one organization. Ask the person to choose one, then pass it as organizationId on <MessagingProvider>. Reading and replying to existing conversations never needs it."
     );
   }
   return organizationId;
@@ -1791,7 +1823,7 @@ function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, jittered));
 }
 function createMessagingRepository(options) {
-  const org = requireOrg(options.organizationId, "createMessagingRepository");
+  const org = optionalOrg(options.organizationId);
   const handedIn = options.identity;
   if (handedIn !== void 0 && handedIn !== null && handedIn.userId !== void 0) {
     options.onDiagnostic?.(
@@ -1861,6 +1893,11 @@ function createMessagingRepository(options) {
     });
     return found;
   }
+  async function organizationOfExisting(conversationId) {
+    if (org !== null) return org;
+    const conversation = await repository.getConversation(conversationId);
+    return conversation.organizationId;
+  }
   const repository = {
     organizationId: org,
     actingUserId,
@@ -1993,6 +2030,7 @@ function createMessagingRepository(options) {
     },
     async getOrCreateDirectConversation(otherUserId) {
       const operation = "getOrCreateDirectConversation";
+      const destination = requireOrg(org, operation);
       const me = await actingUser(operation);
       const id = await withSessionRetry(
         operation,
@@ -2004,7 +2042,7 @@ function createMessagingRepository(options) {
             // not a preference.
             p_user1_id: me,
             p_user2_id: otherUserId,
-            p_organization_id: org
+            p_organization_id: destination
           },
           operation
         )
@@ -2016,13 +2054,14 @@ function createMessagingRepository(options) {
     },
     async createGroupConversation({ name, memberIds }) {
       const operation = "createGroupConversation";
+      const destination = requireOrg(org, operation);
       const me = await actingUser(operation);
       const { data, error } = await withSessionRetry(
         operation,
         async () => db().from(TABLES.conversations).insert({
           type: "group",
           group_name: name,
-          organization_id: org,
+          organization_id: destination,
           created_by: me
         }).select("id").single()
       );
@@ -2037,7 +2076,7 @@ function createMessagingRepository(options) {
           conversation_id: conversationId,
           user_id: userId,
           role: userId === me ? "owner" : "member",
-          organization_id: org,
+          organization_id: destination,
           created_by: me
         }))
       );
@@ -2047,10 +2086,11 @@ function createMessagingRepository(options) {
     async insertMessage(draft, clientMessageId) {
       const operation = "insertMessage";
       const me = await actingUser(operation);
+      const destination = await organizationOfExisting(draft.conversationId);
       const { data, error } = await db().from(TABLES.messages).insert({
         conversation_id: draft.conversationId,
         sender_id: me,
-        organization_id: org,
+        organization_id: destination,
         created_by: me,
         content: draft.content,
         message_type: draft.kind ?? "text",
@@ -2111,12 +2151,13 @@ function createMessagingRepository(options) {
     async addMembers(conversationId, memberIds) {
       const operation = "addMembers";
       const me = await actingUser(operation);
+      const destination = await organizationOfExisting(conversationId);
       const { error } = await db().from(TABLES.participants).insert(
         memberIds.map((userId) => ({
           conversation_id: conversationId,
           user_id: userId,
           role: "member",
-          organization_id: org,
+          organization_id: destination,
           created_by: me
         }))
       );