@noodleseed/one 0.63.0 → 0.64.0

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-postgres.js

@@ -0,0 +1,367 @@
+import { PlatformAuthOperationPreviewSchema, PlatformAuthOperatorError, PlatformAuthOperatorSnapshotSchema, } from './platform-auth-operator.js';
+import { executePlatformAuthReconcile, executePlatformAuthStartImport, } from './platform-auth-operator-batches.js';
+import { executePlatformAuthRollout, platformAuthRecoveryResult, platformAuthRolloutResult, recoverPlatformAuthOutbox, resolvePlatformAuthRolloutLineage, } from './platform-auth-operator-effects.js';
+import { PostgresPlatformAuthOperatorOperationStore } from './platform-auth-operator-operation-postgres.js';
+import { platformAuthOperatorRemoteVerificationStatus } from './platform-auth-operator-remote-status.js';
+import { platformAuthExecutionPreviewRequest, platformAuthFinalizationEvidence, platformAuthPreviewBlockers, platformAuthPreviewTarget, platformAuthRolloutCohort, platformAuthRolloutPercentage, } from './platform-auth-operator-rollout.js';
+import { PostgresPlatformAuthOperatorState, platformAuthOperatorHash, } from './platform-auth-operator-state-postgres.js';
+import { mapPlatformAuthRecoveryError, platformAuthErrorHasCode, platformAuthInventoryGeneration, platformAuthPreviewSnapshotFingerprint, platformAuthRecoveryEvidence, } from './platform-auth-operator-support.js';
+/** Durable aggregate-only orchestration. Upstream identity calls happen only in bounded explicit batches. */
+export class PostgresPlatformAuthOperator {
+    #state;
+    #operations;
+    #inventoryStore;
+    #migrationStore;
+    #importService;
+    #rolloutStore;
+    #releaseSha;
+    #workosRealm;
+    #realmFingerprint;
+    #outboxProcessor;
+    #outboxRecoveryStore;
+    #eventsProcessor;
+    #remoteVerificationWorker;
+    #remoteVerificationStore;
+    constructor(options) {
+        if (!/^[0-9a-f]{40}$/.test(options.releaseSha) || options.workosRealm.trim().length === 0)
+            throw new Error('invalid platform-auth operator configuration');
+        this.#state = new PostgresPlatformAuthOperatorState(options.pool);
+        this.#operations = new PostgresPlatformAuthOperatorOperationStore(options.pool);
+        this.#inventoryStore = options.inventoryStore;
+        this.#migrationStore = options.migrationStore;
+        this.#importService = options.importService;
+        this.#rolloutStore = options.rolloutStore;
+        this.#releaseSha = options.releaseSha;
+        this.#workosRealm = options.workosRealm;
+        this.#realmFingerprint = hash(options.workosRealm);
+        this.#outboxProcessor = options.outboxProcessor;
+        this.#outboxRecoveryStore = options.outboxRecoveryStore;
+        this.#eventsProcessor = options.eventsProcessor;
+        this.#remoteVerificationWorker = options.remoteVerificationWorker;
+        this.#remoteVerificationStore = options.remoteVerificationStore;
+    }
+    async inventory(input) {
+        const generation = input.generation ?? 0;
+        if (!Number.isSafeInteger(generation) || generation < 0)
+            throw new PlatformAuthOperatorError('stale_generation');
+        const selector = this.#inventorySelector();
+        const runId = `inventory-${this.#releaseSha}-${this.#realmFingerprint.slice(0, 16)}-generation-${generation}`;
+        const advanceRunId = await this.#state.withInventoryLock(selector, async () => {
+            const latest = await this.#state.currentInventoryRun(selector);
+            if (latest !== undefined) {
+                const latestGeneration = platformAuthInventoryGeneration(latest.runId);
+                if (generation === latestGeneration) {
+                    return latest.state === 'running' ? latest.runId : undefined;
+                }
+                if (generation !== latestGeneration + 1)
+                    throw new PlatformAuthOperatorError('stale_generation');
+                if (latest.state === 'running' && !latest.terminal)
+                    throw new PlatformAuthOperatorError('stale_generation');
+            }
+            else if (generation !== 0) {
+                throw new PlatformAuthOperatorError('stale_generation');
+            }
+            await this.#migrationStore.createRun({
+                runId,
+                kind: 'inventory',
+                releaseSha: this.#releaseSha,
+                workosRealm: this.#workosRealm,
+                actorFingerprint: input.actorFingerprint,
+            });
+            return runId;
+        });
+        if (advanceRunId !== undefined) {
+            if (this.#inventoryStore.advance === undefined)
+                await this.#inventoryStore.inspect(advanceRunId);
+            else
+                await this.#inventoryStore.advance(advanceRunId);
+        }
+        return this.status();
+    }
+    async status() {
+        const rollout = await this.#rolloutStore.status();
+        const selector = this.#inventorySelector();
+        const [inventory, inventoryStatus] = await Promise.all([
+            this.#state.latestInventory(selector),
+            this.#state.inventoryStatus(selector),
+        ]);
+        const latestCampaign = await this.#state.latestCampaign(this.#inventorySelector());
+        const campaign = latestCampaign?.inventoryRunId === inventory?.runId ? latestCampaign : undefined;
+        const [imports, synchronization, remoteVerification] = await Promise.all([
+            this.#state.importAggregate(inventory, campaign),
+            this.#state.synchronization({
+                outboxConfigured: this.#outboxProcessor !== undefined,
+                eventsConfigured: this.#eventsProcessor !== undefined,
+            }),
+            platformAuthOperatorRemoteVerificationStatus({
+                store: this.#remoteVerificationStore,
+                inventory,
+                campaign,
+                realm: this.#workosRealm,
+            }),
+        ]);
+        return PlatformAuthOperatorSnapshotSchema.parse({
+            schemaVersion: 1,
+            releaseSha: this.#releaseSha,
+            rollout,
+            inventory: inventoryStatus === undefined
+                ? {
+                    state: 'unavailable',
+                    phase: null,
+                    remotePages: 0,
+                    remoteUsers: 0,
+                    localSubjects: 0,
+                    candidateCount: 0,
+                    excludedCount: 0,
+                    checksum: null,
+                    blockers: [],
+                }
+                : inventoryStatus,
+            import: imports,
+            synchronization,
+            remoteVerification,
+        });
+    }
+    async markMaintenanceSuccess(components) {
+        const unique = [...new Set(components)];
+        for (const component of unique) {
+            if ((component === 'outbox' && this.#outboxProcessor === undefined) ||
+                (component === 'events' && this.#eventsProcessor === undefined))
+                throw new Error(`cannot mark unconfigured platform-auth ${component} maintenance`);
+        }
+        await this.#state.markSynchronizationSuccess(unique);
+    }
+    async preview(input) {
+        const snapshot = await this.status();
+        const blockers = [...platformAuthPreviewBlockers(input, snapshot)];
+        let target = platformAuthPreviewTarget(input, snapshot.rollout);
+        if (input.operation === 'recover_outbox') {
+            if (this.#outboxRecoveryStore === undefined) {
+                blockers.push({ code: 'outbox_recovery_not_configured', count: 1 });
+            }
+            else {
+                const recovery = await this.#outboxRecoveryStore.previewTerminalRecovery({
+                    limit: input.batchSize,
+                });
+                target = {
+                    batchSize: input.batchSize,
+                    terminalCount: recovery.terminal,
+                    terminalSetHash: recovery.checksum,
+                };
+            }
+        }
+        let previewChecksum = null;
+        if (blockers.length === 0) {
+            if (input.operation === 'start_import' ||
+                input.operation === 'reconcile' ||
+                input.operation === 'recover_outbox') {
+                const snapshotFingerprint = platformAuthPreviewSnapshotFingerprint(snapshot);
+                const targetFingerprint = hash(target);
+                previewChecksum = hash({
+                    schemaVersion: 1,
+                    operation: input.operation,
+                    expectedGeneration: snapshot.rollout.generation,
+                    releaseSha: this.#releaseSha,
+                    targetFingerprint,
+                    snapshotFingerprint,
+                });
+                await this.#state.savePreview({
+                    checksum: previewChecksum,
+                    operation: input.operation,
+                    expectedGeneration: snapshot.rollout.generation,
+                    releaseSha: this.#releaseSha,
+                    targetFingerprint,
+                    snapshotFingerprint,
+                });
+            }
+            else {
+                const lineage = await resolvePlatformAuthRolloutLineage(input.operation, this.#rolloutStore, () => this.#lineage());
+                try {
+                    const rolloutPreview = await this.#rolloutStore.preview({
+                        ...platformAuthFinalizationEvidence(input),
+                        percentage: platformAuthRolloutPercentage(input),
+                        ...lineage,
+                        workosRealm: this.#workosRealm,
+                        releaseSha: this.#releaseSha,
+                        ...platformAuthRolloutCohort(input),
+                    });
+                    if (rolloutPreview.generation !== snapshot.rollout.generation)
+                        throw new PlatformAuthOperatorError('stale_generation');
+                    previewChecksum = rolloutPreview.checksum;
+                }
+                catch (error) {
+                    if (!platformAuthErrorHasCode(error, 'remote_verification_incomplete'))
+                        throw error;
+                    blockers.push({ code: 'remote_verification_incomplete', count: 1 });
+                }
+            }
+        }
+        return PlatformAuthOperationPreviewSchema.parse({
+            ...snapshot,
+            operation: input.operation,
+            ready: blockers.length === 0,
+            previewChecksum,
+            blockers,
+            target,
+        });
+    }
+    async execute(input) {
+        if (input.releaseSha !== this.#releaseSha)
+            throw new PlatformAuthOperatorError('release_sha_mismatch');
+        if (input.operation === 'recover_outbox')
+            this.#requireRecoveryStore();
+        const requestFingerprint = hash({ ...input, idempotencyKey: undefined });
+        const claim = await this.#operations.claim({
+            idempotencyKey: input.idempotencyKey,
+            requestFingerprint,
+            actorFingerprint: input.actorFingerprint,
+            reasonFingerprint: hash(input.reason),
+            operation: input.operation,
+            previewChecksum: input.previewChecksum,
+        });
+        if (claim.kind === 'replay')
+            return claim.result;
+        if (input.operation === 'recover_outbox') {
+            const recoveryStore = this.#requireRecoveryStore();
+            let replay;
+            try {
+                replay = await recoveryStore.replayTerminalRecovery(platformAuthRecoveryEvidence(input, requestFingerprint));
+            }
+            catch (error) {
+                throw mapPlatformAuthRecoveryError(error);
+            }
+            if (replay !== undefined) {
+                const result = await platformAuthRecoveryResult(input, replay, () => this.status());
+                await this.#operations.recordApplied({
+                    idempotencyKey: input.idempotencyKey,
+                    leaseToken: claim.leaseToken,
+                    result,
+                });
+                await this.#operations.complete({
+                    idempotencyKey: input.idempotencyKey,
+                    leaseToken: claim.leaseToken,
+                });
+                return result;
+            }
+        }
+        if (input.operation === 'activate' ||
+            input.operation === 'rollback' ||
+            input.operation === 'finalize') {
+            const replay = await this.#rolloutStore.replayMutation({
+                idempotencyKey: input.idempotencyKey,
+                requestFingerprint,
+            });
+            if (replay !== undefined) {
+                const result = await platformAuthRolloutResult(input, replay, true, () => this.status());
+                await this.#operations.recordApplied({
+                    idempotencyKey: input.idempotencyKey,
+                    leaseToken: claim.leaseToken,
+                    result,
+                });
+                await this.#operations.complete({
+                    idempotencyKey: input.idempotencyKey,
+                    leaseToken: claim.leaseToken,
+                });
+                return result;
+            }
+        }
+        const before = await this.status();
+        if (before.rollout.generation !== input.expectedGeneration)
+            throw new PlatformAuthOperatorError('stale_generation');
+        if (input.operation === 'activate' ||
+            input.operation === 'rollback' ||
+            input.operation === 'finalize') {
+            const blockers = platformAuthPreviewBlockers(platformAuthExecutionPreviewRequest(input), before);
+            if (blockers.length > 0) {
+                if (input.operation === 'finalize')
+                    throw new PlatformAuthOperatorError('finalize_precondition_failed');
+                if (blockers.some((blocker) => blocker.code === 'rollout_transition_invalid'))
+                    throw new PlatformAuthOperatorError('rollout_transition_invalid');
+                throw new PlatformAuthOperatorError('reconciliation_drift');
+            }
+        }
+        const result = input.operation === 'start_import'
+            ? await executePlatformAuthStartImport({
+                request: input,
+                snapshot: before,
+                state: this.#state,
+                migrationStore: this.#migrationStore,
+                releaseSha: this.#releaseSha,
+                workosRealm: this.#workosRealm,
+                realmFingerprint: this.#realmFingerprint,
+                inventorySelector: this.#inventorySelector(),
+                status: () => this.status(),
+            })
+            : input.operation === 'reconcile'
+                ? await executePlatformAuthReconcile({
+                    request: input,
+                    snapshot: before,
+                    state: this.#state,
+                    migrationStore: this.#migrationStore,
+                    importService: this.#importService,
+                    workosRealm: this.#workosRealm,
+                    currentLineage: () => this.#lineage(),
+                    ...(this.#outboxProcessor === undefined
+                        ? {}
+                        : { outboxProcessor: this.#outboxProcessor }),
+                    ...(this.#eventsProcessor === undefined
+                        ? {}
+                        : { eventsProcessor: this.#eventsProcessor }),
+                    ...(this.#remoteVerificationWorker === undefined
+                        ? {}
+                        : { remoteVerificationWorker: this.#remoteVerificationWorker }),
+                    markMaintenanceSuccess: (components) => this.markMaintenanceSuccess(components),
+                    status: () => this.status(),
+                })
+                : input.operation === 'recover_outbox'
+                    ? await recoverPlatformAuthOutbox({
+                        request: input,
+                        snapshot: before,
+                        requestFingerprint,
+                        store: this.#requireRecoveryStore(),
+                        state: this.#state,
+                        status: () => this.status(),
+                    })
+                    : await executePlatformAuthRollout({
+                        request: input,
+                        requestFingerprint,
+                        rolloutStore: this.#rolloutStore,
+                        releaseSha: this.#releaseSha,
+                        workosRealm: this.#workosRealm,
+                        currentLineage: () => this.#lineage(),
+                        status: () => this.status(),
+                    });
+        await this.#operations.recordApplied({
+            idempotencyKey: input.idempotencyKey,
+            leaseToken: claim.leaseToken,
+            result,
+        });
+        await this.#operations.complete({
+            idempotencyKey: input.idempotencyKey,
+            leaseToken: claim.leaseToken,
+        });
+        return result;
+    }
+    #requireRecoveryStore() {
+        if (this.#outboxRecoveryStore === undefined)
+            throw new PlatformAuthOperatorError('outbox_recovery_not_configured');
+        return this.#outboxRecoveryStore;
+    }
+    async #lineage() {
+        const inventory = await this.#state.latestInventory(this.#inventorySelector());
+        if (inventory === undefined)
+            throw new PlatformAuthOperatorError('inventory_unavailable');
+        const campaign = await this.#state.latestCampaign(this.#inventorySelector());
+        if (campaign === undefined || campaign.inventoryRunId !== inventory.runId)
+            throw new PlatformAuthOperatorError('import_not_started');
+        return { inventory, campaign };
+    }
+    #inventorySelector() {
+        return {
+            releaseSha: this.#releaseSha,
+            workosRealmFingerprint: this.#realmFingerprint,
+        };
+    }
+}
+const hash = platformAuthOperatorHash;
+//# sourceMappingURL=platform-auth-operator-postgres.js.map

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-operator-postgres.js","sourceRoot":"","sources":["../src/platform-auth-operator-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,kCAAkC,EAGlC,yBAAyB,EAEzB,kCAAkC,GAInC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EACzB,yBAAyB,EACzB,iCAAiC,GAClC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,0CAA0C,EAAE,MAAM,gDAAgD,CAAC;AAS5G,OAAO,EAAE,4CAA4C,EAAE,MAAM,2CAA2C,CAAC;AACzG,OAAO,EACL,mCAAmC,EACnC,gCAAgC,EAChC,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAGL,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,+BAA+B,EAC/B,sCAAsC,EACtC,4BAA4B,GAC7B,MAAM,qCAAqC,CAAC;AAQ7C,6GAA6G;AAC7G,MAAM,OAAO,4BAA4B;IAG9B,MAAM,CAAoC;IAC1C,WAAW,CAA6C;IACxD,eAAe,CAAiC;IAChD,eAAe,CAAiC;IAChD,cAAc,CAAgC;IAC9C,aAAa,CAA+B;IAC5C,WAAW,CAAS;IACpB,YAAY,CAAS;IACrB,iBAAiB,CAAS;IAC1B,gBAAgB,CAA0C;IAC1D,oBAAoB,CAAgD;IACpE,gBAAgB,CAA0C;IAC1D,yBAAyB,CAAuD;IAChF,wBAAwB,CAAiE;IAElG,YAAY,OAA4C;QACtD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,GAAG,IAAI,iCAAiC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,WAAW,GAAG,IAAI,0CAA0C,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChF,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;QAC9C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;QAChD,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACxD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;QAChD,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,wBAAwB,CAAC;QAClE,IAAI,CAAC,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAGf;QACC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;YACrD,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,aAAa,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,UAAU,EAAE,CAAC;QAC9G,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC/D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,gBAAgB,GAAG,+BAA+B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,IAAI,UAAU,KAAK,gBAAgB,EAAE,CAAC;oBACpC,OAAO,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC/D,CAAC;gBACD,IAAI,UAAU,KAAK,gBAAgB,GAAG,CAAC;oBACrC,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;gBAC1D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAChD,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;YAC5D,CAAC;iBAAM,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC;gBACnC,KAAK;gBACL,IAAI,EAAE,WAAW;gBACjB,UAAU,EAAE,IAAI,CAAC,WAAW;gBAC5B,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aACzC,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;QACH,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,KAAK,SAAS;gBAC5C,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;;gBAC9C,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC3C,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrD,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC;SACtC,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACnF,MAAM,QAAQ,GACZ,cAAc,EAAE,cAAc,KAAK,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,kBAAkB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;gBAC1B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,KAAK,SAAS;gBACrD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,KAAK,SAAS;aACtD,CAAC;YACF,4CAA4C,CAAC;gBAC3C,KAAK,EAAE,IAAI,CAAC,wBAAwB;gBACpC,SAAS;gBACT,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,YAAY;aACzB,CAAC;SACH,CAAC,CAAC;QACH,OAAO,kCAAkC,CAAC,KAAK,CAAC;YAC9C,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,OAAO;YACP,SAAS,EACP,eAAe,KAAK,SAAS;gBAC3B,CAAC,CAAC;oBACE,KAAK,EAAE,aAAa;oBACpB,KAAK,EAAE,IAAI;oBACX,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,CAAC;oBAChB,cAAc,EAAE,CAAC;oBACjB,aAAa,EAAE,CAAC;oBAChB,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,EAAE;iBACb;gBACH,CAAC,CAAC,eAAe;YACrB,MAAM,EAAE,OAAO;YACf,eAAe;YACf,kBAAkB;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,UAA2D;QAE3D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QACxC,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;YAC/B,IACE,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC;gBAC/D,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC;gBAE/D,MAAM,IAAI,KAAK,CAAC,0CAA0C,SAAS,cAAc,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAiC;QAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,CAAC,GAAG,2BAA2B,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnE,IAAI,MAAM,GAAG,yBAAyB,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,uBAAuB,CAAC;oBACvE,KAAK,EAAE,KAAK,CAAC,SAAS;iBACvB,CAAC,CAAC;gBACH,MAAM,GAAG;oBACP,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,aAAa,EAAE,QAAQ,CAAC,QAAQ;oBAChC,eAAe,EAAE,QAAQ,CAAC,QAAQ;iBACnC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,eAAe,GAAkB,IAAI,CAAC;QAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,IACE,KAAK,CAAC,SAAS,KAAK,cAAc;gBAClC,KAAK,CAAC,SAAS,KAAK,WAAW;gBAC/B,KAAK,CAAC,SAAS,KAAK,gBAAgB,EACpC,CAAC;gBACD,MAAM,mBAAmB,GAAG,sCAAsC,CAAC,QAAQ,CAAC,CAAC;gBAC7E,MAAM,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvC,eAAe,GAAG,IAAI,CAAC;oBACrB,aAAa,EAAE,CAAC;oBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,kBAAkB,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;oBAC/C,UAAU,EAAE,IAAI,CAAC,WAAW;oBAC5B,iBAAiB;oBACjB,mBAAmB;iBACpB,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;oBAC5B,QAAQ,EAAE,eAAe;oBACzB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,kBAAkB,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;oBAC/C,UAAU,EAAE,IAAI,CAAC,WAAW;oBAC5B,iBAAiB;oBACjB,mBAAmB;iBACpB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,MAAM,iCAAiC,CACrD,KAAK,CAAC,SAAS,EACf,IAAI,CAAC,aAAa,EAClB,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CACtB,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;wBACtD,GAAG,gCAAgC,CAAC,KAAK,CAAC;wBAC1C,UAAU,EAAE,6BAA6B,CAAC,KAAK,CAAC;wBAChD,GAAG,OAAO;wBACV,WAAW,EAAE,IAAI,CAAC,YAAY;wBAC9B,UAAU,EAAE,IAAI,CAAC,WAAW;wBAC5B,GAAG,yBAAyB,CAAC,KAAK,CAAC;qBACpC,CAAC,CAAC;oBACH,IAAI,cAAc,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,CAAC,UAAU;wBAC3D,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;oBAC1D,eAAe,GAAG,cAAc,CAAC,QAAQ,CAAC;gBAC5C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,gCAAgC,CAAC;wBAAE,MAAM,KAAK,CAAC;oBACpF,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,kCAAkC,CAAC,KAAK,CAAC;YAC9C,GAAG,QAAQ;YACX,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC5B,eAAe;YACf,QAAQ;YACR,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA+B;QAC3C,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,WAAW;YACvC,MAAM,IAAI,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;QAC9D,IAAI,KAAK,CAAC,SAAS,KAAK,gBAAgB;YAAE,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACvE,MAAM,kBAAkB,GAAG,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;YACzC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,kBAAkB;YAClB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACrC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC;QACjD,IAAI,KAAK,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;YACzC,MAAM,aAAa,GAAG,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACnD,IAAI,MAAsD,CAAC;YAC3D,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,aAAa,CAAC,sBAAsB,CACjD,4BAA4B,CAAC,KAAK,EAAE,kBAAkB,CAAC,CACxD,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,4BAA4B,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBACpF,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;oBACnC,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM;iBACP,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;oBAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC7B,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IACE,KAAK,CAAC,SAAS,KAAK,UAAU;YAC9B,KAAK,CAAC,SAAS,KAAK,UAAU;YAC9B,KAAK,CAAC,SAAS,KAAK,UAAU,EAC9B,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;gBACrD,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,kBAAkB;aACnB,CAAC,CAAC;YACH,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBACzF,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;oBACnC,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,MAAM;iBACP,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;oBAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC7B,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,kBAAkB;YACxD,MAAM,IAAI,yBAAyB,CAAC,kBAAkB,CAAC,CAAC;QAC1D,IACE,KAAK,CAAC,SAAS,KAAK,UAAU;YAC9B,KAAK,CAAC,SAAS,KAAK,UAAU;YAC9B,KAAK,CAAC,SAAS,KAAK,UAAU,EAC9B,CAAC;YACD,MAAM,QAAQ,GAAG,2BAA2B,CAC1C,mCAAmC,CAAC,KAAK,CAAC,EAC1C,MAAM,CACP,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,IAAI,KAAK,CAAC,SAAS,KAAK,UAAU;oBAChC,MAAM,IAAI,yBAAyB,CAAC,8BAA8B,CAAC,CAAC;gBACtE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,4BAA4B,CAAC;oBAC3E,MAAM,IAAI,yBAAyB,CAAC,4BAA4B,CAAC,CAAC;gBACpE,MAAM,IAAI,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GACV,KAAK,CAAC,SAAS,KAAK,cAAc;YAChC,CAAC,CAAC,MAAM,8BAA8B,CAAC;gBACnC,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,IAAI,CAAC,MAAM;gBAClB,cAAc,EAAE,IAAI,CAAC,eAAe;gBACpC,UAAU,EAAE,IAAI,CAAC,WAAW;gBAC5B,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;gBACxC,iBAAiB,EAAE,IAAI,CAAC,kBAAkB,EAAE;gBAC5C,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE;aAC5B,CAAC;YACJ,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,WAAW;gBAC/B,CAAC,CAAC,MAAM,4BAA4B,CAAC;oBACjC,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,IAAI,CAAC,MAAM;oBAClB,cAAc,EAAE,IAAI,CAAC,eAAe;oBACpC,aAAa,EAAE,IAAI,CAAC,cAAc;oBAClC,WAAW,EAAE,IAAI,CAAC,YAAY;oBAC9B,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE;oBACrC,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS;wBACrC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAC/C,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS;wBACrC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAC/C,GAAG,CAAC,IAAI,CAAC,yBAAyB,KAAK,SAAS;wBAC9C,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,CAAC,yBAAyB,EAAE,CAAC;oBACjE,sBAAsB,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC;oBAC/E,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE;iBAC5B,CAAC;gBACJ,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,gBAAgB;oBACpC,CAAC,CAAC,MAAM,yBAAyB,CAAC;wBAC9B,OAAO,EAAE,KAAK;wBACd,QAAQ,EAAE,MAAM;wBAChB,kBAAkB;wBAClB,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE;wBACnC,KAAK,EAAE,IAAI,CAAC,MAAM;wBAClB,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE;qBAC5B,CAAC;oBACJ,CAAC,CAAC,MAAM,0BAA0B,CAAC;wBAC/B,OAAO,EAAE,KAAK;wBACd,kBAAkB;wBAClB,YAAY,EAAE,IAAI,CAAC,aAAa;wBAChC,UAAU,EAAE,IAAI,CAAC,WAAW;wBAC5B,WAAW,EAAE,IAAI,CAAC,YAAY;wBAC9B,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE;wBACrC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE;qBAC5B,CAAC,CAAC;QACb,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;YACnC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM;SACP,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;YAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,qBAAqB;QACnB,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS;YACzC,MAAM,IAAI,yBAAyB,CAAC,gCAAgC,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,oBAAoB,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,QAAQ;QAIZ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC/E,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC7E,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,CAAC,KAAK;YACvE,MAAM,IAAI,yBAAyB,CAAC,oBAAoB,CAAC,CAAC;QAC5D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,kBAAkB;QAChB,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,sBAAsB,EAAE,IAAI,CAAC,iBAAiB;SAC/C,CAAC;IACJ,CAAC;CACF;AAED,MAAM,IAAI,GAAG,wBAAwB,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-remote-status.d.ts

@@ -0,0 +1,10 @@
+import type { PlatformAuthOperatorSnapshot } from './platform-auth-operator.js';
+import type { OperatorCampaignLineage, OperatorInventoryLineage } from './platform-auth-operator-state-postgres.js';
+import { type PlatformAuthRemoteVerificationStore } from './platform-auth-remote-verification.js';
+export declare function platformAuthOperatorRemoteVerificationStatus(input: {
+    readonly store: Pick<PlatformAuthRemoteVerificationStore, 'readiness'> | undefined;
+    readonly inventory: OperatorInventoryLineage | undefined;
+    readonly campaign: OperatorCampaignLineage | undefined;
+    readonly realm: string;
+}): Promise<PlatformAuthOperatorSnapshot['remoteVerification']>;
+//# sourceMappingURL=platform-auth-operator-remote-status.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-remote-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-operator-remote-status.d.ts","sourceRoot":"","sources":["../src/platform-auth-operator-remote-status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,KAAK,mCAAmC,EAEzC,MAAM,wCAAwC,CAAC;AAQhD,wBAAsB,4CAA4C,CAAC,KAAK,EAAE;IACxE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,mCAAmC,EAAE,WAAW,CAAC,GAAG,SAAS,CAAC;IACnF,QAAQ,CAAC,SAAS,EAAE,wBAAwB,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,4BAA4B,CAAC,oBAAoB,CAAC,CAAC,CA6B9D"}

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-remote-status.js

@@ -0,0 +1,37 @@
+import { platformAuthRemoteVerificationFreshAfter, } from './platform-auth-remote-verification.js';
+const EMPTY_PROGRESS = {
+    checkedCount: 0,
+    verifiedCount: 0,
+    retryAt: null,
+};
+export async function platformAuthOperatorRemoteVerificationStatus(input) {
+    if (input.store === undefined) {
+        return {
+            state: 'not_configured',
+            candidateCount: input.inventory?.candidateCount ?? 0,
+            ...EMPTY_PROGRESS,
+        };
+    }
+    if (input.inventory === undefined || input.campaign === undefined) {
+        return {
+            state: 'not_started',
+            candidateCount: input.inventory?.candidateCount ?? 0,
+            ...EMPTY_PROGRESS,
+        };
+    }
+    const readiness = await input.store.readiness({
+        inventoryRunId: input.inventory.runId,
+        importRunId: input.campaign.importRunId,
+        provider: 'workos',
+        realm: input.realm,
+        freshAfter: platformAuthRemoteVerificationFreshAfter(),
+    });
+    return {
+        state: readiness.state,
+        checkedCount: readiness.checkedCount,
+        candidateCount: readiness.candidateCount,
+        verifiedCount: readiness.verifiedCount,
+        retryAt: readiness.retryAt?.toISOString() ?? null,
+    };
+}
+//# sourceMappingURL=platform-auth-operator-remote-status.js.map

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-remote-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-operator-remote-status.js","sourceRoot":"","sources":["../src/platform-auth-operator-remote-status.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,wCAAwC,GACzC,MAAM,wCAAwC,CAAC;AAEhD,MAAM,cAAc,GAAG;IACrB,YAAY,EAAE,CAAC;IACf,aAAa,EAAE,CAAC;IAChB,OAAO,EAAE,IAAI;CACL,CAAC;AAEX,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAAC,KAKlE;IACC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE,gBAAgB;YACvB,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,cAAc,IAAI,CAAC;YACpD,GAAG,cAAc;SAClB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClE,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,cAAc,IAAI,CAAC;YACpD,GAAG,cAAc;SAClB,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;QAC5C,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK;QACrC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;QACvC,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,wCAAwC,EAAE;KACvD,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,cAAc,EAAE,SAAS,CAAC,cAAc;QACxC,aAAa,EAAE,SAAS,CAAC,aAAa;QACtC,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI;KAClD,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-rollout.d.ts

@@ -0,0 +1,36 @@
+import type { PlatformAuthExecuteInput, PlatformAuthOperationPreview, PlatformAuthOperatorSnapshot, PlatformAuthPreviewRequest } from './platform-auth-operator.js';
+export type PlatformAuthOperatorRolloutTarget = {
+    readonly cohortMode: 'preserve';
+} | {
+    readonly cohortMode: 'replace';
+    readonly canaryClientIds: readonly string[];
+    readonly recoveryClientIds: readonly string[];
+};
+export declare const PLATFORM_AUTH_FINALIZATION_SOAK_MILLISECONDS: number;
+export declare function platformAuthPreviewBlockers(input: PlatformAuthPreviewRequest, snapshot: PlatformAuthOperatorSnapshot, now?: Date): PlatformAuthOperationPreview['blockers'];
+export declare function platformAuthPreviewTarget(input: PlatformAuthPreviewRequest, rollout: PlatformAuthOperatorSnapshot['rollout']): PlatformAuthOperationPreview['target'];
+export declare function platformAuthRolloutCohort(input: Extract<PlatformAuthPreviewRequest, {
+    readonly operation: 'activate' | 'rollback' | 'finalize';
+}> | Extract<PlatformAuthExecuteInput, {
+    readonly operation: 'activate' | 'rollback' | 'finalize';
+}>): PlatformAuthOperatorRolloutTarget;
+export declare function platformAuthRolloutPercentage(input: Extract<PlatformAuthPreviewRequest, {
+    readonly operation: 'activate' | 'rollback' | 'finalize';
+}> | Extract<PlatformAuthExecuteInput, {
+    readonly operation: 'activate' | 'rollback' | 'finalize';
+}>): number;
+export declare function platformAuthFinalizationEvidence(input: Extract<PlatformAuthPreviewRequest, {
+    readonly operation: 'activate' | 'rollback' | 'finalize';
+}> | Extract<PlatformAuthExecuteInput, {
+    readonly operation: 'activate' | 'rollback' | 'finalize';
+}>): {
+    readonly operation: 'finalize';
+    readonly rollbackRehearsalChecksum: string;
+    readonly stagingWorkosOnlySmokeChecksum: string;
+} | {
+    readonly operation: 'activate' | 'rollback';
+};
+export declare function platformAuthExecutionPreviewRequest(input: Extract<PlatformAuthExecuteInput, {
+    readonly operation: 'activate' | 'rollback' | 'finalize';
+}>): PlatformAuthPreviewRequest;
+//# sourceMappingURL=platform-auth-operator-rollout.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-rollout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-auth-operator-rollout.d.ts","sourceRoot":"","sources":["../src/platform-auth-operator-rollout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,4BAA4B,EAC5B,4BAA4B,EAC5B,0BAA0B,EAC3B,MAAM,6BAA6B,CAAC;AAGrC,MAAM,MAAM,iCAAiC,GACzC;IAAE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GACnC;IACE,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C,CAAC;AAEN,eAAO,MAAM,4CAA4C,QAA4B,CAAC;AAEtF,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,0BAA0B,EACjC,QAAQ,EAAE,4BAA4B,EACtC,GAAG,OAAa,GACf,4BAA4B,CAAC,UAAU,CAAC,CAuD1C;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,0BAA0B,EACjC,OAAO,EAAE,4BAA4B,CAAC,SAAS,CAAC,GAC/C,4BAA4B,CAAC,QAAQ,CAAC,CA8CxC;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EACD,OAAO,CACL,0BAA0B,EAC1B;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,CAAA;CAAE,CAC7D,GACD,OAAO,CACL,wBAAwB,EACxB;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,CAAA;CAAE,CAC7D,GACJ,iCAAiC,CAQnC;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EACD,OAAO,CACL,0BAA0B,EAC1B;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,CAAA;CAAE,CAC7D,GACD,OAAO,CACL,wBAAwB,EACxB;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,CAAA;CAAE,CAC7D,GACJ,MAAM,CAMR;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EACD,OAAO,CACL,0BAA0B,EAC1B;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,CAAA;CAAE,CAC7D,GACD,OAAO,CACL,wBAAwB,EACxB;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,CAAA;CAAE,CAC7D,GAEH;IACE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,8BAA8B,EAAE,MAAM,CAAC;CACjD,GACD;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,CAAA;CAAE,CAQlD;AAED,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,OAAO,CACZ,wBAAwB,EACxB;IAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,CAAA;CAAE,CAC7D,GACA,0BAA0B,CA0B5B"}

package/node_modules/@noodle-borg/service/dist/platform-auth-operator-rollout.js

@@ -0,0 +1,156 @@
+import { platformAuthOperatorHash as hash } from './platform-auth-operator-state-postgres.js';
+export const PLATFORM_AUTH_FINALIZATION_SOAK_MILLISECONDS = 14 * 24 * 60 * 60 * 1_000;
+export function platformAuthPreviewBlockers(input, snapshot, now = new Date()) {
+    if (input.operation === 'recover_outbox')
+        return [];
+    if (input.operation === 'rollback')
+        return snapshot.rollout.lifecycle === 'finalized'
+            ? [{ code: 'rollout_transition_invalid', count: 1 }]
+            : [];
+    const blockers = [
+        ...snapshot.inventory.blockers,
+    ];
+    if (snapshot.inventory.state === 'unavailable' || snapshot.inventory.candidateCount === 0)
+        blockers.push({ code: 'inventory_unavailable', count: 1 });
+    if (input.operation === 'start_import') {
+        if (snapshot.import.state !== 'not_started')
+            blockers.push({ code: 'import_already_started', count: 1 });
+        return blockers;
+    }
+    if (snapshot.import.state === 'not_started')
+        blockers.push({ code: 'import_not_started', count: 1 });
+    if (input.operation === 'reconcile')
+        return blockers;
+    const unresolved = snapshot.import.pending +
+        snapshot.import.reconcileRequired +
+        snapshot.import.blocked +
+        snapshot.import.failed;
+    if (unresolved > 0)
+        blockers.push({ code: 'unresolved_imports', count: unresolved });
+    if (snapshot.import.activeLeases > 0)
+        blockers.push({ code: 'active_import_leases', count: snapshot.import.activeLeases });
+    if (snapshot.synchronization.outbox.pending > 0)
+        blockers.push({ code: 'pending_outbox', count: snapshot.synchronization.outbox.pending });
+    if (snapshot.synchronization.outbox.status === 'not_configured')
+        blockers.push({ code: 'outbox_processor_not_configured', count: 1 });
+    else if (snapshot.synchronization.outbox.status === 'pending')
+        blockers.push({ code: 'outbox_reconciliation_pending', count: 1 });
+    if (snapshot.synchronization.events.status === 'not_configured')
+        blockers.push({ code: 'events_processor_not_configured', count: 1 });
+    else if (snapshot.synchronization.events.status === 'pending')
+        blockers.push({ code: 'events_reconciliation_pending', count: 1 });
+    if ((input.operation === 'activate' && input.percentage < snapshot.rollout.workosPercentage) ||
+        snapshot.rollout.lifecycle === 'finalized')
+        blockers.push({ code: 'rollout_transition_invalid', count: 1 });
+    if (input.operation === 'finalize') {
+        const defaultSince = snapshot.rollout.workosDefaultSince === null
+            ? Number.NaN
+            : Date.parse(snapshot.rollout.workosDefaultSince);
+        if (snapshot.rollout.workosPercentage !== 100 ||
+            !Number.isFinite(defaultSince) ||
+            defaultSince > now.getTime() - PLATFORM_AUTH_FINALIZATION_SOAK_MILLISECONDS)
+            blockers.push({ code: 'finalize_precondition_failed', count: 1 });
+    }
+    return blockers;
+}
+export function platformAuthPreviewTarget(input, rollout) {
+    if (input.operation === 'recover_outbox') {
+        return {
+            batchSize: input.batchSize,
+            terminalCount: 0,
+            terminalSetHash: hash([]),
+        };
+    }
+    const cohort = input.operation === 'activate' && input.cohortMode === 'replace'
+        ? {
+            cohortMode: input.cohortMode,
+            canaryClientSetHash: hash(sorted(input.canaryClientIds)),
+            canaryClientCount: sorted(input.canaryClientIds).length,
+            recoveryClientSetHash: hash(sorted(input.recoveryClientIds)),
+            recoveryClientCount: sorted(input.recoveryClientIds).length,
+        }
+        : input.operation === 'activate' ||
+            input.operation === 'rollback' ||
+            input.operation === 'finalize'
+            ? {
+                cohortMode: 'preserve',
+                canaryClientSetHash: rollout.canaryClientSetHash,
+                canaryClientCount: rollout.canaryClientCount,
+                recoveryClientSetHash: rollout.recoveryClientSetHash,
+                recoveryClientCount: rollout.recoveryClientCount,
+            }
+            : {
+                cohortMode: null,
+                canaryClientSetHash: hash([]),
+                canaryClientCount: 0,
+                recoveryClientSetHash: hash([]),
+                recoveryClientCount: 0,
+            };
+    return {
+        percentage: input.operation === 'activate'
+            ? input.percentage
+            : input.operation === 'rollback'
+                ? 0
+                : input.operation === 'finalize'
+                    ? 100
+                    : null,
+        batchSize: input.operation === 'reconcile' ? input.batchSize : null,
+        ...cohort,
+    };
+}
+export function platformAuthRolloutCohort(input) {
+    return input.operation === 'activate' && input.cohortMode === 'replace'
+        ? {
+            cohortMode: input.cohortMode,
+            canaryClientIds: input.canaryClientIds,
+            recoveryClientIds: input.recoveryClientIds,
+        }
+        : { cohortMode: 'preserve' };
+}
+export function platformAuthRolloutPercentage(input) {
+    return input.operation === 'activate'
+        ? input.percentage
+        : input.operation === 'rollback'
+            ? 0
+            : 100;
+}
+export function platformAuthFinalizationEvidence(input) {
+    return input.operation === 'finalize'
+        ? {
+            operation: input.operation,
+            rollbackRehearsalChecksum: input.rollbackRehearsalChecksum,
+            stagingWorkosOnlySmokeChecksum: input.stagingWorkosOnlySmokeChecksum,
+        }
+        : { operation: input.operation };
+}
+export function platformAuthExecutionPreviewRequest(input) {
+    if (input.operation === 'activate') {
+        return input.cohortMode === 'replace'
+            ? {
+                schemaVersion: 1,
+                operation: input.operation,
+                percentage: input.percentage,
+                cohortMode: input.cohortMode,
+                canaryClientIds: [...input.canaryClientIds],
+                recoveryClientIds: [...input.recoveryClientIds],
+            }
+            : {
+                schemaVersion: 1,
+                operation: input.operation,
+                percentage: input.percentage,
+                cohortMode: input.cohortMode,
+            };
+    }
+    return input.operation === 'finalize'
+        ? {
+            schemaVersion: 1,
+            operation: input.operation,
+            rollbackRehearsalChecksum: input.rollbackRehearsalChecksum,
+            stagingWorkosOnlySmokeChecksum: input.stagingWorkosOnlySmokeChecksum,
+        }
+        : { schemaVersion: 1, operation: input.operation };
+}
+function sorted(values) {
+    return [...new Set(values)].sort();
+}
+//# sourceMappingURL=platform-auth-operator-rollout.js.map