@noodleseed/one 0.63.0 → 0.64.0

package/node_modules/@noodle-borg/service/dist/platform-auth-migration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-migration.d.ts","sourceRoot":"","sources":["../src/platform-auth-migration.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,uBAAuB,GAC/B,wBAAwB,GACxB,kCAAkC,GAClC,uBAAuB,GACvB,sBAAsB,GACtB,yBAAyB,GACzB,sCAAsC,CAAC;AAE3C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,4GAA4G;AAC5G,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS;QAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;KAC5C,EAAE,CAAC;IACJ,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,EAAE,SAAS;QACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,WAAW,CAAC;KAClE,EAAE,CAAC;IACJ,QAAQ,CAAC,cAAc,EAAE,SAAS;QAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,EACT,UAAU,GACV,WAAW,GACX,WAAW,GACX,YAAY,GACZ,UAAU,GACV,WAAW,GACX,YAAY,GACZ,gBAAgB,GAChB,YAAY,CAAC;KAClB,EAAE,CAAC;IACJ,QAAQ,CAAC,WAAW,EAAE,SAAS;QAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;QACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;KAC5B,EAAE,CAAC;CACL;AAED,+GAA+G;AAC/G,qBAAa,4BAA4B;IACjC,OAAO,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,qBAAqB,CAAC;CA+CjF;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,4FAA4F;AAC5F,MAAM,WAAW,qBAAqB;IACpC,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAAC;IACzF,0BAA0B,CACxB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,SAAS,yBAAyB,EAAE,CAAC,CAAC;IACjD,kBAAkB,CAAC,KAAK,EAAE;QACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;KAClC,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACvC,2FAA2F;IAC3F,aAAa,CAAC,IAAI,OAAO,CAAC,SAAS,yBAAyB,EAAE,CAAC,CAAC;IAChE,gGAAgG;IAChG,iBAAiB,CAAC,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACtF,QAAQ,CAAC,KAAK,EAAE,SAAS,yBAAyB,EAAE,CAAC;QACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC,CAAC;CACJ;AAED,MAAM,MAAM,gCAAgC,GACxC,UAAU,GACV,cAAc,GACd,WAAW,GACX,WAAW,GACX,cAAc,CAAC;AAEnB,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,gCAAgC,CAAC;IAChD,0FAA0F;IAC1F,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,0BAA2B,SAAQ,KAAK;IAEjD,QAAQ,CAAC,IAAI,EACT,wBAAwB,GACxB,sBAAsB,GACtB,aAAa,GACb,gBAAgB,GAChB,sBAAsB,GACtB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB,GAClB,gCAAgC,GAChC,4BAA4B,GAC5B,8BAA8B,GAC9B,uBAAuB;gBAZlB,IAAI,EACT,wBAAwB,GACxB,sBAAsB,GACtB,aAAa,GACb,gBAAgB,GAChB,sBAAsB,GACtB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB,GAClB,gCAAgC,GAChC,4BAA4B,GAC5B,8BAA8B,GAC9B,uBAAuB;CAK9B;AAED,UAAU,WAAW;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,SAAS,GAAG,oBAAoB,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC,cAAc,CAAC,KAAK,EAAE;QACpB,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;YAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;YACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;SAC1B,CAAC;QACF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,YAAY,GAAG,oBAAoB,CAAC,CAAC;IACjD,WAAW,CACT,KAAK,EAAE,uBAAuB,EAC9B,OAAO,CAAC,EAAE;QACR,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,6BAA6B,CAAC;KACxD,GACA,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,YAAY,CACV,KAAK,EAAE,uBAAuB,EAC9B,MAAM,EAAE;QACN,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,oBAAoB,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;QACnF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,GACA,OAAO,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,oBAAoB,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;KACpF,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,gGAAgG;AAChG,qBAAa,kCAAmC,YAAW,0BAA0B;;IAc7E,cAAc,CAAC,KAAK,EAAE;QAC1B,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;YAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;YACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;SAC1B,CAAC;QACF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,YAAY,GAAG,oBAAoB,CAAC;IAU1C,WAAW,CACf,KAAK,EAAE,uBAAuB,EAC9B,OAAO,GAAE;QACP,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;QAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,6BAA6B,CAAC;KACnD,GACL,OAAO,CAAC,uBAAuB,CAAC;IA2B7B,YAAY,CAChB,KAAK,EAAE,uBAAuB,EAC9B,MAAM,EAAE;QACN,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;QACrC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,GACA,OAAO,CAAC;QAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IAiBpD,UAAU,IAAI,wBAAwB;IAGtC,UAAU,CAAC,KAAK,EAAE,wBAAwB,GAAG,IAAI;IAGjD,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS;IAMrF,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,GAAG,IAAI;CAGxF;AAED,qBAAa,yBAAyB;;gBAIxB,KAAK,EAAE,0BAA0B,EAAE,SAAS,EAAE,qBAAqB;IAKzE,QAAQ,CAAC,KAAK,EAAE;QACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;YAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;YACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;SAC1B,CAAC;QACF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,oBAAoB,CAAA;KAAE,CAAC;IAKpE,SAAS,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IAG5F,YAAY,CACV,KAAK,EAAE,uBAAuB,EAC9B,OAAO,GAAE;QAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,6BAA6B,CAAA;KAAO,GACvE,OAAO,CAAC;QAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;CAqErD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,WAAW,CAAC;CACvD;AACD,KAAK,gBAAgB,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,CAAC;AAE7D,qBAAa,0BAA0B;;gBAIzB,KAAK,EAAE,kCAAkC,EAAE,SAAS,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAKvF,OAAO,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;QACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;KAC7C,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAQjE,MAAM,CAAC,KAAK,EAAE;QAClB,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;QACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;KAClC,GAAG,OAAO,CAAC,wBAAwB,CAAC;CA8CtC"}

package/node_modules/@noodle-borg/service/dist/platform-auth-migration.js

@@ -0,0 +1,313 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { normalizePlatformIdentityEmail } from './platform-identity.js';
+/** Computes aggregate-only inventory. Its return value deliberately cannot be used to enumerate identities. */
+export class PlatformAuthInventoryService {
+    async inspect(input) {
+        const candidates = new Map(input.principals.map((principal) => [principal.principalId, principal]));
+        for (const subject of [
+            ...input.orgMemberships,
+            ...input.googleBillingOwners,
+            ...input.activeRefreshFamilies,
+            ...input.developerGrants,
+            ...input.ownerOnlyDeployers
+                .filter((actor) => actor.kind === 'human')
+                .map((actor) => actor.subject),
+        ]) {
+            if (!candidates.has(subject))
+                continue; // Ambiguous evidence is not a license to create a migration root.
+        }
+        const blockers = {};
+        const emails = new Map();
+        for (const [principalId, principal] of candidates) {
+            const verified = [...new Set(principal.verifiedEmails.map(normalizePlatformIdentityEmail))];
+            if (verified.length === 0)
+                increment(blockers, 'missing_verified_email');
+            if (verified.length > 1)
+                increment(blockers, 'multiple_current_verified_emails');
+            if (principalId.length > 64)
+                increment(blockers, 'external_id_too_long');
+            for (const email of verified)
+                emails.set(email, (emails.get(email) ?? 0) + 1);
+        }
+        for (const count of emails.values())
+            if (count > 1)
+                increment(blockers, 'shared_verified_email');
+        for (const user of input.workosUsers) {
+            const email = normalizePlatformIdentityEmail(user.normalizedEmail);
+            const externalCandidate = user.externalId === undefined ? undefined : candidates.get(user.externalId);
+            const externalIdDisagrees = externalCandidate !== undefined &&
+                !externalCandidate.verifiedEmails.map(normalizePlatformIdentityEmail).includes(email);
+            const emailDisagrees = emails.has(email) &&
+                (!user.verified || user.externalId === undefined || externalCandidate === undefined);
+            if (externalIdDisagrees || emailDisagrees)
+                increment(blockers, 'conflicting_workos_user');
+        }
+        const safe = {
+            candidateCount: candidates.size,
+            excludedCount: input.excludedActors.length +
+                input.ownerOnlyDeployers.filter((actor) => actor.kind !== 'human').length,
+            blockers,
+        };
+        return { ...safe, checksum: fingerprint(safe) };
+    }
+}
+export class PlatformAuthMigrationError extends Error {
+    code;
+    constructor(code) {
+        super(code);
+        this.code = code;
+        this.name = 'PlatformAuthMigrationError';
+    }
+}
+/** In-memory contract store; the Postgres implementation uses the same lease fencing fields. */
+export class InMemoryPlatformAuthMigrationStore {
+    #backfills = new Map();
+    #imports = new Map();
+    #rolloutOperations = new Map();
+    #rollout = {
+        generation: 0,
+        workosPercentage: 0,
+        canaryClientIds: [],
+        lifecycle: 'google',
+    };
+    async recordBackfill(input) {
+        const key = `${input.source.provider}\0${input.source.realm}\0${input.source.subject}`;
+        const prior = this.#backfills.get(key);
+        if (prior !== undefined && prior !== input.principalId)
+            throw new PlatformAuthMigrationError('source_remap_forbidden');
+        if (prior !== undefined)
+            return 'already_backfilled';
+        this.#backfills.set(key, input.principalId);
+        return 'backfilled';
+    }
+    async claimImport(input, options = {}) {
+        const normalized = normalizeImport(input);
+        const key = importKey(normalized);
+        const previous = this.#imports.get(key);
+        if (previous?.leaseToken !== undefined && !options.forceExpired)
+            throw new PlatformAuthMigrationError('stale_lease');
+        if (previous?.retryAt !== undefined && previous.retryAt > Date.now())
+            throw new PlatformAuthMigrationError('stale_lease');
+        if (previous?.state === 'linked' ||
+            ((previous?.state === 'blocked' || previous?.state === 'failed') &&
+                options.terminalRetry !== 'explicit_operator_reconcile'))
+            throw new PlatformAuthMigrationError('stale_lease');
+        const entry = previous ?? {
+            ...normalized,
+            email: normalized.verifiedEmail,
+            state: 'pending',
+            attempt: 0,
+        };
+        entry.attempt += 1;
+        entry.leaseToken = randomUUID();
+        entry.leaseExpiresAt = Date.now() + 30_000;
+        this.#imports.set(key, entry);
+        return { key, leaseToken: entry.leaseToken, attempt: entry.attempt };
+    }
+    async finishImport(lease, result) {
+        const entry = this.#imports.get(lease.key);
+        if (entry?.leaseToken !== lease.leaseToken || entry.attempt !== lease.attempt)
+            throw new PlatformAuthMigrationError('stale_lease');
+        entry.state = result.state;
+        if (result.remoteUserId === undefined)
+            delete entry.remoteUserId;
+        else
+            entry.remoteUserId = result.remoteUserId;
+        if (result.state === 'reconcile_required') {
+            const retryAt = result.retryAt === undefined ? Date.now() : Date.parse(result.retryAt);
+            if (!Number.isFinite(retryAt))
+                throw new PlatformAuthMigrationError('invalid_import');
+            entry.retryAt = retryAt;
+        }
+        else
+            delete entry.retryAt;
+        delete entry.leaseToken;
+        delete entry.leaseExpiresAt;
+        return { state: entry.state };
+    }
+    getRollout() {
+        return this.#rollout;
+    }
+    setRollout(state) {
+        this.#rollout = state;
+    }
+    replayRollout(keyHash, request) {
+        const existing = this.#rolloutOperations.get(keyHash);
+        if (existing === undefined)
+            return undefined;
+        if (existing.request !== request)
+            throw new PlatformAuthMigrationError('idempotency_conflict');
+        return existing.result;
+    }
+    recordRollout(keyHash, request, result) {
+        this.#rolloutOperations.set(keyHash, { request, result });
+    }
+}
+export class PlatformAuthImportService {
+    #store;
+    #directory;
+    constructor(store, directory) {
+        this.#store = store;
+        this.#directory = directory;
+    }
+    async backfill(input) {
+        if (input.source.provider !== 'google')
+            throw new PlatformAuthMigrationError('invalid_import');
+        return { state: await this.#store.recordBackfill(input) };
+    }
+    importOne(input) {
+        return this.#run(input);
+    }
+    reconcileOne(input, options = {}) {
+        return this.#run(input, options);
+    }
+    async #run(input, options = {}) {
+        const normalized = normalizeImport(input);
+        const lease = await this.#store.claimImport(normalized, options);
+        // The lease claim completed above. No directory call is ever made while a database transaction is open.
+        let byExternalId;
+        try {
+            byExternalId = await this.#directory.findUserByExternalId(normalized.principalId);
+        }
+        catch (error) {
+            return this.#finishDirectoryFailure(lease, error);
+        }
+        if (byExternalId !== undefined)
+            return this.#finishMatched(lease, normalized, byExternalId);
+        let byEmail;
+        try {
+            byEmail = await this.#directory.listUsersByNormalizedEmail(normalized.verifiedEmail);
+        }
+        catch (error) {
+            return this.#finishDirectoryFailure(lease, error);
+        }
+        if (byEmail.length > 0) {
+            if (byEmail.length === 1 && byEmail[0] !== undefined)
+                return this.#finishMatched(lease, normalized, byEmail[0]);
+            return this.#store.finishImport(lease, { state: 'blocked' });
+        }
+        let created;
+        try {
+            created = await this.#directory.createVerifiedUser({
+                externalId: normalized.principalId,
+                normalizedEmail: normalized.verifiedEmail,
+            });
+        }
+        catch (error) {
+            return this.#finishDirectoryFailure(lease, error);
+        }
+        return this.#finishMatched(lease, normalized, created);
+    }
+    #finishDirectoryFailure(lease, error) {
+        const failure = directoryFailure(error);
+        if (failure === undefined)
+            throw error;
+        return this.#store.finishImport(lease, {
+            state: failure.kind === 'permanent' || failure.kind === 'unauthorized'
+                ? 'failed'
+                : 'reconcile_required',
+            ...(failure.retryAt === undefined ? {} : { retryAt: failure.retryAt }),
+        });
+    }
+    async #finishMatched(lease, input, user) {
+        if (!user.verified ||
+            user.externalId !== input.principalId ||
+            normalizePlatformIdentityEmail(user.normalizedEmail) !== input.verifiedEmail)
+            return this.#store.finishImport(lease, { state: 'blocked' });
+        return this.#store.finishImport(lease, { state: 'linked', remoteUserId: user.id });
+    }
+}
+export class PlatformAuthRolloutService {
+    #store;
+    #buildInfo;
+    constructor(store, buildInfo) {
+        this.#store = store;
+        this.#buildInfo = buildInfo;
+    }
+    async preview(input) {
+        const state = this.#store.getRollout();
+        return {
+            generation: state.generation,
+            checksum: fingerprint({ state, ...input, releaseSha: this.#buildInfo.gitSha }),
+        };
+    }
+    async mutate(input) {
+        if (!/^[0-9a-f]{40}$/.test(input.releaseSha) || input.releaseSha !== this.#buildInfo.gitSha)
+            throw new PlatformAuthMigrationError('release_sha_mismatch');
+        const request = fingerprint({ ...input, idempotencyKey: undefined });
+        const replay = this.#store.replayRollout(fingerprint(input.idempotencyKey), request);
+        if (replay !== undefined)
+            return replay;
+        const state = this.#store.getRollout();
+        if (state.generation !== input.expectedGeneration)
+            throw new PlatformAuthMigrationError('stale_generation');
+        const expected = (await this.preview({
+            operation: input.operation,
+            percentage: input.percentage,
+            canaryClientIds: input.canaryClientIds ?? [],
+        })).checksum;
+        if (expected !== input.previewChecksum)
+            throw new PlatformAuthMigrationError('preview_mismatch');
+        if (!Number.isInteger(input.percentage) ||
+            input.percentage < 0 ||
+            input.percentage > 100 ||
+            (input.operation === 'activate' && input.percentage < state.workosPercentage) ||
+            (input.operation === 'rollback' && input.percentage !== 0))
+            throw new PlatformAuthMigrationError('rollout_transition_invalid');
+        if (input.operation === 'finalize' &&
+            (state.workosPercentage !== 100 || input.percentage !== 100))
+            throw new PlatformAuthMigrationError('finalize_precondition_failed');
+        const canaries = input.operation === 'rollback'
+            ? state.canaryClientIds
+            : [...new Set(input.canaryClientIds ?? state.canaryClientIds)].sort();
+        const result = {
+            generation: state.generation + 1,
+            workosPercentage: input.percentage,
+            canaryClientIds: canaries,
+            lifecycle: input.operation === 'finalize' ? 'finalized' : input.percentage === 0 ? 'google' : 'workos',
+        };
+        this.#store.setRollout(result);
+        this.#store.recordRollout(fingerprint(input.idempotencyKey), request, result);
+        return result;
+    }
+}
+function normalizeImport(input) {
+    if (input.principalId.length === 0 ||
+        input.principalId.length > 64 ||
+        input.realm.trim().length === 0)
+        throw new PlatformAuthMigrationError('invalid_import');
+    return {
+        ...input,
+        realm: input.realm.trim(),
+        verifiedEmail: normalizePlatformIdentityEmail(input.verifiedEmail),
+    };
+}
+function importKey(input) {
+    return `${input.runId}\0${input.realm}\0${input.principalId}`;
+}
+function directoryFailure(error) {
+    if (typeof error === 'object' && error !== null && 'kind' in error) {
+        const candidate = error;
+        const kind = candidate.kind;
+        if (kind === 'conflict' ||
+            kind === 'rate_limited' ||
+            kind === 'transient' ||
+            kind === 'permanent' ||
+            kind === 'unauthorized')
+            return {
+                kind,
+                ...(validRetryAt(candidate.retryAt) ? { retryAt: candidate.retryAt } : {}),
+            };
+    }
+    return undefined;
+}
+function validRetryAt(value) {
+    return typeof value === 'string' && Number.isFinite(Date.parse(value));
+}
+function increment(target, code) {
+    target[code] = (target[code] ?? 0) + 1;
+}
+function fingerprint(value) {
+    return createHash('sha256').update(JSON.stringify(value)).digest('hex');
+}
+//# sourceMappingURL=platform-auth-migration.js.map

package/node_modules/@noodle-borg/service/dist/platform-auth-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-migration.js","sourceRoot":"","sources":["../src/platform-auth-migration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAmDxE,+GAA+G;AAC/G,MAAM,OAAO,4BAA4B;IACvC,KAAK,CAAC,OAAO,CAAC,KAAiC;QAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CACxE,CAAC;QACF,KAAK,MAAM,OAAO,IAAI;YACpB,GAAG,KAAK,CAAC,cAAc;YACvB,GAAG,KAAK,CAAC,mBAAmB;YAC5B,GAAG,KAAK,CAAC,qBAAqB;YAC9B,GAAG,KAAK,CAAC,eAAe;YACxB,GAAG,KAAK,CAAC,kBAAkB;iBACxB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;iBACzC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;SACjC,EAAE,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS,CAAC,kEAAkE;QAC5G,CAAC;QACD,MAAM,QAAQ,GAAqD,EAAE,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,UAAU,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC,CAAC;YAC5F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;YACzE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,CAAC,QAAQ,EAAE,kCAAkC,CAAC,CAAC;YACjF,IAAI,WAAW,CAAC,MAAM,GAAG,EAAE;gBAAE,SAAS,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;YACzE,KAAK,MAAM,KAAK,IAAI,QAAQ;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;YACjC,IAAI,KAAK,GAAG,CAAC;gBAAE,SAAS,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QAC9D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACnE,MAAM,iBAAiB,GACrB,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9E,MAAM,mBAAmB,GACvB,iBAAiB,KAAK,SAAS;gBAC/B,CAAC,iBAAiB,CAAC,cAAc,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACxF,MAAM,cAAc,GAClB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;gBACjB,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,iBAAiB,KAAK,SAAS,CAAC,CAAC;YACvF,IAAI,mBAAmB,IAAI,cAAc;gBAAE,SAAS,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,IAAI,GAAG;YACX,cAAc,EAAE,UAAU,CAAC,IAAI;YAC/B,aAAa,EACX,KAAK,CAAC,cAAc,CAAC,MAAM;gBAC3B,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM;YAC3E,QAAQ;SACT,CAAC;QACF,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;IAClD,CAAC;CACF;AAyCD,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAExC;IADX,YACW,IAYkB;QAE3B,KAAK,CAAC,IAAI,CAAC,CAAC;QAdH,SAAI,GAAJ,IAAI,CAYc;QAG3B,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AA0DD,gGAAgG;AAChG,MAAM,OAAO,kCAAkC;IACpC,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1C,kBAAkB,GAAG,IAAI,GAAG,EAGlC,CAAC;IACJ,QAAQ,GAA6B;QACnC,UAAU,EAAE,CAAC;QACb,gBAAgB,EAAE,CAAC;QACnB,eAAe,EAAE,EAAE;QACnB,SAAS,EAAE,QAAQ;KACpB,CAAC;IAEF,KAAK,CAAC,cAAc,CAAC,KASpB;QACC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACvF,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,CAAC,WAAW;YACpD,MAAM,IAAI,0BAA0B,CAAC,wBAAwB,CAAC,CAAC;QACjE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,oBAAoB,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5C,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAA8B,EAC9B,UAGI,EAAE;QAEN,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,YAAY;YAC7D,MAAM,IAAI,0BAA0B,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,QAAQ,EAAE,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE;YAClE,MAAM,IAAI,0BAA0B,CAAC,aAAa,CAAC,CAAC;QACtD,IACE,QAAQ,EAAE,KAAK,KAAK,QAAQ;YAC5B,CAAC,CAAC,QAAQ,EAAE,KAAK,KAAK,SAAS,IAAI,QAAQ,EAAE,KAAK,KAAK,QAAQ,CAAC;gBAC9D,OAAO,CAAC,aAAa,KAAK,6BAA6B,CAAC;YAE1D,MAAM,IAAI,0BAA0B,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,KAAK,GAAgB,QAAQ,IAAI;YACrC,GAAG,UAAU;YACb,KAAK,EAAE,UAAU,CAAC,aAAa;YAC/B,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,CAAC;SACX,CAAC;QACF,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QACnB,KAAK,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,KAA8B,EAC9B,MAIC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAC3E,MAAM,IAAI,0BAA0B,CAAC,aAAa,CAAC,CAAC;QACtD,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,YAAY,CAAC;;YAC5D,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAC9C,IAAI,MAAM,CAAC,KAAK,KAAK,oBAAoB,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;YACtF,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;;YAAM,OAAO,KAAK,CAAC,OAAO,CAAC;QAC5B,OAAO,KAAK,CAAC,UAAU,CAAC;QACxB,OAAO,KAAK,CAAC,cAAc,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IACD,UAAU,CAAC,KAA+B;QACxC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,aAAa,CAAC,OAAe,EAAE,OAAe;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC7C,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO;YAAE,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;QAC/F,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,aAAa,CAAC,OAAe,EAAE,OAAe,EAAE,MAAgC;QAC9E,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;CACF;AAED,MAAM,OAAO,yBAAyB;IAC3B,MAAM,CAA6B;IACnC,UAAU,CAAwB;IAE3C,YAAY,KAAiC,EAAE,SAAgC;QAC7E,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KASd;QACC,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;QAC/F,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5D,CAAC;IAED,SAAS,CAAC,KAA8B;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,YAAY,CACV,KAA8B,EAC9B,UAAsE,EAAE;QAExE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAA8B,EAC9B,UAAsE,EAAE;QAExE,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACjE,wGAAwG;QACxG,IAAI,YAAmD,CAAC;QACxD,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAC5F,IAAI,OAA6C,CAAC;QAClD,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,0BAA0B,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS;gBAClD,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,OAAkC,CAAC;QACvC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBACjD,UAAU,EAAE,UAAU,CAAC,WAAW;gBAClC,eAAe,EAAE,UAAU,CAAC,aAAa;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,uBAAuB,CACrB,KAA8B,EAC9B,KAAc;QAEd,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE;YACrC,KAAK,EACH,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc;gBAC7D,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,oBAAoB;YAC1B,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;SACvE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAA8B,EAC9B,KAAyC,EACzC,IAA+B;QAE/B,IACE,CAAC,IAAI,CAAC,QAAQ;YACd,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,WAAW;YACrC,8BAA8B,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,KAAK,CAAC,aAAa;YAE5E,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;CACF;AAWD,MAAM,OAAO,0BAA0B;IAC5B,MAAM,CAAqC;IAC3C,UAAU,CAA8B;IAEjD,YAAY,KAAyC,EAAE,SAAsC;QAC3F,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAIb;QACC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvC,OAAO;YACL,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;SAC/E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAQZ;QACC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC,MAAM;YACzF,MAAM,IAAI,0BAA0B,CAAC,sBAAsB,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;QACrF,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,kBAAkB;YAC/C,MAAM,IAAI,0BAA0B,CAAC,kBAAkB,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,CACf,MAAM,IAAI,CAAC,OAAO,CAAC;YACjB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,EAAE;SAC7C,CAAC,CACH,CAAC,QAAQ,CAAC;QACX,IAAI,QAAQ,KAAK,KAAK,CAAC,eAAe;YACpC,MAAM,IAAI,0BAA0B,CAAC,kBAAkB,CAAC,CAAC;QAC3D,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC;YACnC,KAAK,CAAC,UAAU,GAAG,CAAC;YACpB,KAAK,CAAC,UAAU,GAAG,GAAG;YACtB,CAAC,KAAK,CAAC,SAAS,KAAK,UAAU,IAAI,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,gBAAgB,CAAC;YAC7E,CAAC,KAAK,CAAC,SAAS,KAAK,UAAU,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC;YAE1D,MAAM,IAAI,0BAA0B,CAAC,4BAA4B,CAAC,CAAC;QACrE,IACE,KAAK,CAAC,SAAS,KAAK,UAAU;YAC9B,CAAC,KAAK,CAAC,gBAAgB,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,CAAC;YAE5D,MAAM,IAAI,0BAA0B,CAAC,8BAA8B,CAAC,CAAC;QACvE,MAAM,QAAQ,GACZ,KAAK,CAAC,SAAS,KAAK,UAAU;YAC5B,CAAC,CAAC,KAAK,CAAC,eAAe;YACvB,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1E,MAAM,MAAM,GAA6B;YACvC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,CAAC;YAChC,gBAAgB,EAAE,KAAK,CAAC,UAAU;YAClC,eAAe,EAAE,QAAQ;YACzB,SAAS,EACP,KAAK,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;SAC9F,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9E,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,SAAS,eAAe,CACtB,KAA8B;IAE9B,IACE,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QAC9B,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE;QAC7B,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAE/B,MAAM,IAAI,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IACzD,OAAO;QACL,GAAG,KAAK;QACR,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;QACzB,aAAa,EAAE,8BAA8B,CAAC,KAAK,CAAC,aAAa,CAAC;KACnE,CAAC;AACJ,CAAC;AACD,SAAS,SAAS,CAAC,KAA8B;IAC/C,OAAO,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;AAChE,CAAC;AACD,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QACnE,MAAM,SAAS,GAAG,KAAgE,CAAC;QACnF,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC5B,IACE,IAAI,KAAK,UAAU;YACnB,IAAI,KAAK,cAAc;YACvB,IAAI,KAAK,WAAW;YACpB,IAAI,KAAK,WAAW;YACpB,IAAI,KAAK,cAAc;YAEvB,OAAO;gBACL,IAAI;gBACJ,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3E,CAAC;IACN,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AACD,SAAS,SAAS,CAChB,MAAwD,EACxD,IAA6B;IAE7B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AACD,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-batches.d.ts

@@ -0,0 +1,48 @@
+import type { PlatformAuthExecuteInput, PlatformAuthOperationResult, PlatformAuthOperatorSnapshot, PlatformAuthSynchronizationComponent } from './platform-auth-operator.js';
+import type { PlatformAuthImportServicePort, PlatformAuthMigrationStorePort, PlatformAuthOperatorCurrentLineage, PlatformAuthRemoteVerificationWorkerPort } from './platform-auth-operator-ports.js';
+import type { PostgresPlatformAuthOperatorState } from './platform-auth-operator-state-postgres.js';
+export declare function executePlatformAuthStartImport(input: {
+    readonly request: Extract<PlatformAuthExecuteInput, {
+        readonly operation: 'start_import';
+    }>;
+    readonly snapshot: PlatformAuthOperatorSnapshot;
+    readonly state: PostgresPlatformAuthOperatorState;
+    readonly migrationStore: PlatformAuthMigrationStorePort;
+    readonly releaseSha: string;
+    readonly workosRealm: string;
+    readonly realmFingerprint: string;
+    readonly inventorySelector: {
+        readonly releaseSha: string;
+        readonly workosRealmFingerprint: string;
+    };
+    readonly status: () => Promise<PlatformAuthOperatorSnapshot>;
+}): Promise<PlatformAuthOperationResult>;
+export declare function executePlatformAuthReconcile(input: {
+    readonly request: Extract<PlatformAuthExecuteInput, {
+        readonly operation: 'reconcile';
+    }>;
+    readonly snapshot: PlatformAuthOperatorSnapshot;
+    readonly state: PostgresPlatformAuthOperatorState;
+    readonly migrationStore: PlatformAuthMigrationStorePort;
+    readonly importService: PlatformAuthImportServicePort;
+    readonly workosRealm: string;
+    readonly currentLineage: () => Promise<PlatformAuthOperatorCurrentLineage>;
+    readonly outboxProcessor?: {
+        processOnce(limit?: number): Promise<{
+            readonly attempted: number;
+            readonly delivered: number;
+            readonly blocked: number;
+            readonly retryRequired: number;
+        }>;
+    };
+    readonly eventsProcessor?: {
+        processOnce(): Promise<{
+            readonly processed: number;
+            readonly cursor?: string;
+        }>;
+    };
+    readonly remoteVerificationWorker?: PlatformAuthRemoteVerificationWorkerPort;
+    readonly markMaintenanceSuccess: (components: readonly PlatformAuthSynchronizationComponent[]) => Promise<void>;
+    readonly status: () => Promise<PlatformAuthOperatorSnapshot>;
+}): Promise<PlatformAuthOperationResult>;
+//# sourceMappingURL=platform-auth-operator-batches.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-batches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-operator-batches.d.ts","sourceRoot":"","sources":["../src/platform-auth-operator-batches.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,2BAA2B,EAC3B,4BAA4B,EAC5B,oCAAoC,EACrC,MAAM,6BAA6B,CAAC;AAKrC,OAAO,KAAK,EACV,6BAA6B,EAC7B,8BAA8B,EAC9B,kCAAkC,EAClC,wCAAwC,EACzC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAKpG,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,wBAAwB,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IAC5F,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,8BAA8B,CAAC;IACxD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE;QAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;KACzC,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC9D,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAsDvC;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,wBAAwB,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAA;KAAE,CAAC,CAAC;IACzF,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,8BAA8B,CAAC;IACxD,QAAQ,CAAC,aAAa,EAAE,6BAA6B,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC3E,QAAQ,CAAC,eAAe,CAAC,EAAE;QACzB,WAAW,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;YACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;YAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;YAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;YACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;KACJ,CAAC;IACF,QAAQ,CAAC,eAAe,CAAC,EAAE;QACzB,WAAW,IAAI,OAAO,CAAC;YAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAClF,CAAC;IACF,QAAQ,CAAC,wBAAwB,CAAC,EAAE,wCAAwC,CAAC;IAC7E,QAAQ,CAAC,sBAAsB,EAAE,CAC/B,UAAU,EAAE,SAAS,oCAAoC,EAAE,KACxD,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC9D,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAqFvC"}

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-batches.js

@@ -0,0 +1,158 @@
+import { PlatformAuthOperationResultSchema, PlatformAuthOperatorError, } from './platform-auth-operator.js';
+import { platformAuthOperatorHash as hash } from './platform-auth-operator-state-postgres.js';
+import { platformAuthPreviewSnapshotFingerprint } from './platform-auth-operator-support.js';
+import { platformAuthRemoteVerificationFreshAfter } from './platform-auth-remote-verification.js';
+export async function executePlatformAuthStartImport(input) {
+    const { request } = input;
+    await assertPlatformAuthOwnPreview(request, input.snapshot, input.state, {
+        percentage: null,
+        batchSize: null,
+    });
+    const inventory = await input.state.latestInventory(input.inventorySelector);
+    if (inventory === undefined)
+        throw new PlatformAuthOperatorError('inventory_unavailable');
+    const suffix = hash(request.idempotencyKey).slice(0, 32);
+    const backfillRunId = `backfill-${suffix}`;
+    const importRunId = `import-${suffix}`;
+    return input.state.withStartImportLock({
+        releaseSha: input.releaseSha,
+        workosRealmFingerprint: input.realmFingerprint,
+        inventoryRunId: inventory.runId,
+        backfillRunId,
+        importRunId,
+    }, async () => {
+        const common = {
+            releaseSha: input.releaseSha,
+            workosRealm: input.workosRealm,
+            actorFingerprint: request.actorFingerprint,
+            inventoryRunId: inventory.runId,
+            inventoryChecksum: inventory.checksum,
+        };
+        const backfill = await input.migrationStore.createRun({
+            ...common,
+            runId: backfillRunId,
+            kind: 'backfill',
+        });
+        const imports = await input.migrationStore.createRun({
+            ...common,
+            runId: importRunId,
+            kind: 'import',
+        });
+        await input.state.insertCampaign({
+            importRunId: imports.runId,
+            backfillRunId: backfill.runId,
+            inventoryRunId: inventory.runId,
+            inventoryChecksum: inventory.checksum,
+            importLineageChecksum: imports.lineageChecksum,
+            workosRealmFingerprint: input.realmFingerprint,
+            releaseSha: input.releaseSha,
+        });
+        return PlatformAuthOperationResultSchema.parse({
+            ...(await input.status()),
+            operation: request.operation,
+            replayed: false,
+            batch: null,
+        });
+    });
+}
+export async function executePlatformAuthReconcile(input) {
+    const { request } = input;
+    await assertPlatformAuthOwnPreview(request, input.snapshot, input.state, {
+        percentage: null,
+        batchSize: request.batchSize,
+    });
+    const lineage = await input.currentLineage();
+    const candidates = (await input.migrationStore.listFrozenCandidateBatch(lineage.campaign.importRunId, {
+        limit: request.batchSize,
+        eligibility: 'operator_reconcile',
+    })).candidates;
+    const counts = { attempted: 0, linked: 0, blocked: 0, retryRequired: 0, failed: 0 };
+    for (const candidate of candidates) {
+        await input.importService.backfill({
+            runId: lineage.campaign.backfillRunId,
+            source: candidate.source,
+            principalId: candidate.principalId,
+            verifiedEmail: candidate.verifiedEmail,
+        });
+        const outcome = await input.importService.reconcileOne({
+            runId: lineage.campaign.importRunId,
+            realm: input.workosRealm,
+            principalId: candidate.principalId,
+            verifiedEmail: candidate.verifiedEmail,
+        }, { terminalRetry: 'explicit_operator_reconcile' });
+        counts.attempted += 1;
+        if (outcome.state === 'linked')
+            counts.linked += 1;
+        else if (outcome.state === 'blocked')
+            counts.blocked += 1;
+        else if (outcome.state === 'failed')
+            counts.failed += 1;
+        else
+            counts.retryRequired += 1;
+    }
+    const [outbox, events] = await Promise.all([
+        input.outboxProcessor?.processOnce(request.batchSize),
+        input.eventsProcessor?.processOnce(),
+    ]);
+    await input.markMaintenanceSuccess([
+        ...(outbox === undefined ? [] : ['outbox']),
+        ...(events === undefined ? [] : ['events']),
+    ]);
+    let after = await input.status();
+    if (after.import.state === 'completed') {
+        await Promise.all([
+            input.migrationStore.completeRun(lineage.campaign.backfillRunId),
+            input.migrationStore.completeRun(lineage.campaign.importRunId),
+        ]);
+        await input.state.markCampaignComplete(lineage.campaign);
+        after = await input.status();
+    }
+    if (after.import.state === 'completed' && input.remoteVerificationWorker !== undefined) {
+        await input.remoteVerificationWorker.verify({
+            inventoryRunId: lineage.inventory.runId,
+            importRunId: lineage.campaign.importRunId,
+            realm: input.workosRealm,
+            freshAfter: platformAuthRemoteVerificationFreshAfter(),
+            limit: request.batchSize,
+        });
+        after = await input.status();
+    }
+    return PlatformAuthOperationResultSchema.parse({
+        ...after,
+        operation: request.operation,
+        replayed: false,
+        batch: {
+            ...counts,
+            outbox: outbox === undefined
+                ? {
+                    status: 'not_configured',
+                    attempted: 0,
+                    delivered: 0,
+                    blocked: 0,
+                    retryRequired: 0,
+                }
+                : { status: 'ready', ...outbox },
+            events: events === undefined
+                ? { status: 'not_configured', processed: 0 }
+                : { status: 'ready', processed: events.processed },
+        },
+    });
+}
+async function assertPlatformAuthOwnPreview(input, snapshot, state, target) {
+    await state.assertPreview({
+        checksum: input.previewChecksum,
+        operation: input.operation,
+        expectedGeneration: input.expectedGeneration,
+        releaseSha: input.releaseSha,
+        targetFingerprint: hash({
+            ...target,
+            cohortMode: null,
+            canaryClientSetHash: hash([]),
+            canaryClientCount: 0,
+            recoveryClientSetHash: hash([]),
+            recoveryClientCount: 0,
+        }),
+        snapshotFingerprint: platformAuthPreviewSnapshotFingerprint(snapshot),
+    });
+}
+//# sourceMappingURL=platform-auth-operator-batches.js.map

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-batches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-operator-batches.js","sourceRoot":"","sources":["../src/platform-auth-operator-batches.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,iCAAiC,EACjC,yBAAyB,GAC1B,MAAM,6BAA6B,CAAC;AAQrC,OAAO,EAAE,wBAAwB,IAAI,IAAI,EAAE,MAAM,4CAA4C,CAAC;AAC9F,OAAO,EAAE,sCAAsC,EAAE,MAAM,qCAAqC,CAAC;AAC7F,OAAO,EAAE,wCAAwC,EAAE,MAAM,wCAAwC,CAAC;AAElG,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAapD;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,MAAM,4BAA4B,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE;QACvE,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC7E,IAAI,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,YAAY,MAAM,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,UAAU,MAAM,EAAE,CAAC;IACvC,OAAO,KAAK,CAAC,KAAK,CAAC,mBAAmB,CACpC;QACE,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,sBAAsB,EAAE,KAAK,CAAC,gBAAgB;QAC9C,cAAc,EAAE,SAAS,CAAC,KAAK;QAC/B,aAAa;QACb,WAAW;KACZ,EACD,KAAK,IAAI,EAAE;QACT,MAAM,MAAM,GAAG;YACb,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,cAAc,EAAE,SAAS,CAAC,KAAK;YAC/B,iBAAiB,EAAE,SAAS,CAAC,QAAQ;SAC7B,CAAC;QACX,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC;YACpD,GAAG,MAAM;YACT,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC;YACnD,GAAG,MAAM;YACT,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC;YAC/B,WAAW,EAAE,OAAO,CAAC,KAAK;YAC1B,aAAa,EAAE,QAAQ,CAAC,KAAK;YAC7B,cAAc,EAAE,SAAS,CAAC,KAAK;YAC/B,iBAAiB,EAAE,SAAS,CAAC,QAAQ;YACrC,qBAAqB,EAAE,OAAO,CAAC,eAAe;YAC9C,sBAAsB,EAAE,KAAK,CAAC,gBAAgB;YAC9C,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;QACH,OAAO,iCAAiC,CAAC,KAAK,CAAC;YAC7C,GAAG,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YACzB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAwBlD;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,MAAM,4BAA4B,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE;QACvE,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,CACjB,MAAM,KAAK,CAAC,cAAc,CAAC,wBAAwB,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE;QAChF,KAAK,EAAE,OAAO,CAAC,SAAS;QACxB,WAAW,EAAE,oBAAoB;KAClC,CAAC,CACH,CAAC,UAAU,CAAC;IACb,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACpF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC;YACjC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,aAAa;YACrC,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,aAAa,EAAE,SAAS,CAAC,aAAa;SACvC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,YAAY,CACpD;YACE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW;YACnC,KAAK,EAAE,KAAK,CAAC,WAAW;YACxB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,aAAa,EAAE,SAAS,CAAC,aAAa;SACvC,EACD,EAAE,aAAa,EAAE,6BAA6B,EAAE,CACjD,CAAC;QACF,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QACtB,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ;YAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;aAC9C,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;aACrD,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ;YAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;;YACnD,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzC,KAAK,CAAC,eAAe,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;QACrD,KAAK,CAAC,eAAe,EAAE,WAAW,EAAE;KACrC,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,sBAAsB,CAAC;QACjC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAW,CAAC;QACtD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAW,CAAC;KACvD,CAAC,CAAC;IACH,IAAI,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACvC,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;YAChE,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;SAC/D,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzD,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,wBAAwB,KAAK,SAAS,EAAE,CAAC;QACvF,MAAM,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC;YAC1C,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK;YACvC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW;YACzC,KAAK,EAAE,KAAK,CAAC,WAAW;YACxB,UAAU,EAAE,wCAAwC,EAAE;YACtD,KAAK,EAAE,OAAO,CAAC,SAAS;SACzB,CAAC,CAAC;QACH,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,iCAAiC,CAAC,KAAK,CAAC;QAC7C,GAAG,KAAK;QACR,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE;YACL,GAAG,MAAM;YACT,MAAM,EACJ,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC;oBACE,MAAM,EAAE,gBAAgB;oBACxB,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,CAAC;oBACZ,OAAO,EAAE,CAAC;oBACV,aAAa,EAAE,CAAC;iBACjB;gBACH,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE;YACpC,MAAM,EACJ,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,EAAE;gBAC5C,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;SACvD;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,KAA8F,EAC9F,QAAsC,EACtC,KAAwC,EACxC,MAAwE;IAExE,MAAM,KAAK,CAAC,aAAa,CAAC;QACxB,QAAQ,EAAE,KAAK,CAAC,eAAe;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,iBAAiB,EAAE,IAAI,CAAC;YACtB,GAAG,MAAM;YACT,UAAU,EAAE,IAAI;YAChB,mBAAmB,EAAE,IAAI,CAAC,EAAE,CAAC;YAC7B,iBAAiB,EAAE,CAAC;YACpB,qBAAqB,EAAE,IAAI,CAAC,EAAE,CAAC;YAC/B,mBAAmB,EAAE,CAAC;SACvB,CAAC;QACF,mBAAmB,EAAE,sCAAsC,CAAC,QAAQ,CAAC;KACtE,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-effects.d.ts

@@ -0,0 +1,43 @@
+import type { PlatformAuthExecuteInput, PlatformAuthOperationResult, PlatformAuthOperatorSnapshot } from './platform-auth-operator.js';
+import type { PlatformAuthOperatorCurrentLineage, PlatformAuthRolloutStorePort } from './platform-auth-operator-ports.js';
+import type { PostgresPlatformAuthOperatorState } from './platform-auth-operator-state-postgres.js';
+import type { PlatformAuthRolloutLineage, PlatformAuthRolloutMutationInput, PlatformAuthRolloutSafeResult } from './platform-auth-rollout-postgres.js';
+import type { PlatformIdentitySyncRecoveryResult, PlatformIdentitySyncRecoveryStore } from './platform-identity-sync.js';
+type RolloutInput = Extract<PlatformAuthExecuteInput, {
+    readonly operation: 'activate' | 'rollback' | 'finalize';
+}>;
+export declare function recoverPlatformAuthOutbox(input: {
+    readonly request: Extract<PlatformAuthExecuteInput, {
+        readonly operation: 'recover_outbox';
+    }>;
+    readonly snapshot: PlatformAuthOperatorSnapshot;
+    readonly requestFingerprint: string;
+    readonly store: PlatformIdentitySyncRecoveryStore;
+    readonly state: PostgresPlatformAuthOperatorState;
+    readonly status: () => Promise<PlatformAuthOperatorSnapshot>;
+}): Promise<PlatformAuthOperationResult>;
+export declare function platformAuthRecoveryResult(input: Extract<PlatformAuthExecuteInput, {
+    readonly operation: 'recover_outbox';
+}>, recovery: PlatformIdentitySyncRecoveryResult, status: () => Promise<PlatformAuthOperatorSnapshot>): Promise<PlatformAuthOperationResult>;
+export declare function executePlatformAuthRollout(input: {
+    readonly request: RolloutInput;
+    readonly requestFingerprint: string;
+    readonly rolloutStore: PlatformAuthRolloutStorePort;
+    readonly releaseSha: string;
+    readonly workosRealm: string;
+    readonly currentLineage: () => Promise<PlatformAuthOperatorCurrentLineage>;
+    readonly status: () => Promise<PlatformAuthOperatorSnapshot>;
+}): Promise<PlatformAuthOperationResult>;
+export declare function platformAuthRolloutMutation(input: {
+    readonly request: RolloutInput;
+    readonly requestFingerprint: string;
+    readonly rolloutStore: PlatformAuthRolloutStorePort;
+    readonly releaseSha: string;
+    readonly workosRealm: string;
+    readonly currentLineage: () => Promise<PlatformAuthOperatorCurrentLineage>;
+    readonly operation: 'activate' | 'rollback' | 'finalize';
+}): Promise<PlatformAuthRolloutMutationInput>;
+export declare function platformAuthRolloutResult(input: RolloutInput, rollout: PlatformAuthRolloutSafeResult, replayed: boolean, status: () => Promise<PlatformAuthOperatorSnapshot>): Promise<PlatformAuthOperationResult>;
+export declare function resolvePlatformAuthRolloutLineage(operation: 'activate' | 'rollback' | 'finalize', rolloutStore: PlatformAuthRolloutStorePort, currentLineage: () => Promise<PlatformAuthOperatorCurrentLineage>): Promise<PlatformAuthRolloutLineage>;
+export {};
+//# sourceMappingURL=platform-auth-operator-effects.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-effects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-operator-effects.d.ts","sourceRoot":"","sources":["../src/platform-auth-operator-effects.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,2BAA2B,EAC3B,4BAA4B,EAC7B,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EACV,kCAAkC,EAClC,4BAA4B,EAC7B,MAAM,mCAAmC,CAAC;AAM3C,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,4CAA4C,CAAC;AAOpG,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EAChC,6BAA6B,EAC9B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EACV,kCAAkC,EAClC,iCAAiC,EAClC,MAAM,6BAA6B,CAAC;AAErC,KAAK,YAAY,GAAG,OAAO,CACzB,wBAAwB,EACxB;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,CAAA;CAAE,CAC7D,CAAC;AAEF,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,wBAAwB,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IAC9F,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;IAChD,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC9D,GAAG,OAAO,CAAC,2BAA2B,CAAC,CA0BvC;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,OAAO,CAAC,wBAAwB,EAAE;IAAE,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;CAAE,CAAC,EAClF,QAAQ,EAAE,kCAAkC,EAC5C,MAAM,EAAE,MAAM,OAAO,CAAC,4BAA4B,CAAC,GAClD,OAAO,CAAC,2BAA2B,CAAC,CAWtC;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,4BAA4B,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC9D,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAQvC;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,4BAA4B,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC3E,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,CAAC;CAC1D,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAoB5C;AAED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,6BAA6B,EACtC,QAAQ,EAAE,OAAO,EACjB,MAAM,EAAE,MAAM,OAAO,CAAC,4BAA4B,CAAC,GAClD,OAAO,CAAC,2BAA2B,CAAC,CAQtC;AAED,wBAAsB,iCAAiC,CACrD,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,EAC/C,YAAY,EAAE,4BAA4B,EAC1C,cAAc,EAAE,MAAM,OAAO,CAAC,kCAAkC,CAAC,GAChE,OAAO,CAAC,0BAA0B,CAAC,CAYrC"}