@noodleseed/one 0.82.0 → 0.84.0

package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-rollback-postgres.js

@@ -0,0 +1,71 @@
+import { canonicalJson } from './platform-account-reset-fingerprint.js';
+/**
+ * Reintroduces only exact frozen owner-only app locators into rollback discovery. The current row must
+ * still carry this operation's quarantine archive stamp; broader archived deployment scans are forbidden.
+ */
+export async function loadPlatformAccountResetFrozenOwnerOnlyApps(pool, operationId, targetPrincipalIds, cleanupResources) {
+    const applications = new Set(cleanupResources
+        .filter((resource) => resource.provider === 'postgres' && resource.resourceKind === 'application')
+        .map((resource) => frozenApplication(resource.locator))
+        .filter((application) => application !== undefined)
+        .map(applicationKey));
+    const deployments = cleanupResources
+        .filter((resource) => resource.provider === 'postgres' && resource.resourceKind === 'deployment')
+        .map((resource) => frozenDeployment(resource.locator))
+        .filter((deployment) => deployment !== undefined && applications.has(applicationKey(deployment)));
+    if (deployments.length === 0)
+        return [];
+    const stored = await pool.query(`SELECT deployment.deployment_id, deployment.org_slug, deployment.app_slug,
+            deployment.environment, deployment.active, deployment.access_mode,
+            deployment.created_by_subject,
+            deployment.archived_at = operation.quarantined_at AS operation_archived
+       FROM deploy_records deployment
+       JOIN platform_account_reset_operations operation
+         ON operation.operation_id = $1
+      WHERE deployment.deployment_id = ANY($2::text[])`, [operationId, deployments.map((deployment) => deployment.deploymentId)]);
+    const frozenById = new Map(deployments.map((deployment) => [deployment.deploymentId, deployment]));
+    return [
+        ...new Map(stored.rows
+            .filter((row) => {
+            const frozen = frozenById.get(row.deployment_id);
+            return (frozen !== undefined &&
+                row.operation_archived &&
+                row.org_slug === frozen.org &&
+                row.app_slug === frozen.app &&
+                row.environment === frozen.environment &&
+                row.active === frozen.active &&
+                row.access_mode === 'owner-only' &&
+                row.created_by_subject !== null &&
+                targetPrincipalIds.includes(row.created_by_subject));
+        })
+            .map((row) => [
+            applicationKey({ org: row.org_slug, app: row.app_slug }),
+            { org_slug: row.org_slug, app_slug: row.app_slug },
+        ])).values(),
+    ].sort((left, right) => canonicalJson(left).localeCompare(canonicalJson(right)));
+}
+function frozenApplication(locator) {
+    return typeof locator.org === 'string' && typeof locator.app === 'string'
+        ? { org: locator.org, app: locator.app }
+        : undefined;
+}
+function frozenDeployment(locator) {
+    const application = frozenApplication(locator);
+    return application !== undefined &&
+        typeof locator.deploymentId === 'string' &&
+        typeof locator.environment === 'string' &&
+        locator.active === true &&
+        locator.archived === false
+        ? {
+            ...application,
+            deploymentId: locator.deploymentId,
+            environment: locator.environment,
+            active: true,
+            archived: false,
+        }
+        : undefined;
+}
+function applicationKey(application) {
+    return `${application.org}\u0000${application.app}`;
+}
+//# sourceMappingURL=platform-account-reset-ownership-rollback-postgres.js.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-ownership-rollback-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-ownership-rollback-postgres.js","sourceRoot":"","sources":["../src/platform-account-reset-ownership-rollback-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AA2BxE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2CAA2C,CAC/D,IAA+B,EAC/B,WAAmB,EACnB,kBAAqC,EACrC,gBAAgE;IAEhE,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,gBAAgB;SACb,MAAM,CACL,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,YAAY,KAAK,aAAa,CAC1F;SACA,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SACtD,MAAM,CAAC,CAAC,WAAW,EAAoC,EAAE,CAAC,WAAW,KAAK,SAAS,CAAC;SACpF,GAAG,CAAC,cAAc,CAAC,CACvB,CAAC;IACF,MAAM,WAAW,GAAG,gBAAgB;SACjC,MAAM,CACL,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,YAAY,KAAK,YAAY,CACzF;SACA,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SACrD,MAAM,CACL,CAAC,UAAU,EAAkC,EAAE,CAC7C,UAAU,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAC3E,CAAC;IACJ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;;;;;;uDAOmD,EACnD,CAAC,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CACxE,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CACvE,CAAC;IACF,OAAO;QACL,GAAG,IAAI,GAAG,CACR,MAAM,CAAC,IAAI;aACR,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YACd,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACjD,OAAO,CACL,MAAM,KAAK,SAAS;gBACpB,GAAG,CAAC,kBAAkB;gBACtB,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,GAAG;gBAC3B,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,GAAG;gBAC3B,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;gBACtC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;gBAC5B,GAAG,CAAC,WAAW,KAAK,YAAY;gBAChC,GAAG,CAAC,kBAAkB,KAAK,IAAI;gBAC/B,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CACpD,CAAC;QACJ,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;YACZ,cAAc,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;YACxD,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;SACnD,CAAC,CACL,CAAC,MAAM,EAAE;KACX,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,iBAAiB,CACxB,OAA0C;IAE1C,OAAO,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QACvE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QACxC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CACvB,OAA0C;IAE1C,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,WAAW,KAAK,SAAS;QAC9B,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ;QACxC,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,OAAO,CAAC,MAAM,KAAK,IAAI;QACvB,OAAO,CAAC,QAAQ,KAAK,KAAK;QAC1B,CAAC,CAAC;YACE,GAAG,WAAW;YACd,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;SAChB;QACH,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,WAA8B;IACpD,OAAO,GAAG,WAAW,CAAC,GAAG,SAAS,WAAW,CAAC,GAAG,EAAE,CAAC;AACtD,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-account-reset-ports.d.ts

@@ -0,0 +1,12 @@
+import type { PlatformAccountResetExecuteRequest, PlatformAccountResetOperatorPreviewRequest, PlatformAccountResetResult, PlatformAccountResetStatusRequest } from './platform-account-reset.js';
+/** Route and CLI boundary for the private, aggregate-only account-reset operator. */
+export interface PlatformAccountResetOperatorPort {
+    preview(input: PlatformAccountResetOperatorPreviewRequest): Promise<PlatformAccountResetResult>;
+    execute(input: PlatformAccountResetExecuteRequest): Promise<PlatformAccountResetResult>;
+    status(input: PlatformAccountResetStatusRequest): Promise<PlatformAccountResetResult | undefined>;
+}
+/** Persistence boundary; implementations must never return reservation emails or provider locators. */
+export interface PlatformAccountResetStorePort {
+    readSafeResult(operationId: string): Promise<PlatformAccountResetResult | undefined>;
+}
+//# sourceMappingURL=platform-account-reset-ports.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-ports.d.ts","sourceRoot":"","sources":["../src/platform-account-reset-ports.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kCAAkC,EAClC,0CAA0C,EAC1C,0BAA0B,EAC1B,iCAAiC,EAClC,MAAM,6BAA6B,CAAC;AAErC,qFAAqF;AACrF,MAAM,WAAW,gCAAgC;IAC/C,OAAO,CAAC,KAAK,EAAE,0CAA0C,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAChG,OAAO,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACxF,MAAM,CAAC,KAAK,EAAE,iCAAiC,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;CACnG;AAED,uGAAuG;AACvG,MAAM,WAAW,6BAA6B;IAC5C,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;CACtF"}

package/node_modules/@noodle-borg/service/dist/platform-account-reset-ports.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=platform-account-reset-ports.js.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-ports.js","sourceRoot":"","sources":["../src/platform-account-reset-ports.ts"],"names":[],"mappings":""}

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-evidence-postgres.d.ts

@@ -0,0 +1,22 @@
+import type { PlatformAccountResetCleanupResource } from './platform-account-reset-ownership-postgres.js';
+import type { PlatformAuthInventorySourceManifest } from './platform-auth-inventory-sources.js';
+import type { PlatformIdentityQueryable } from './platform-identity-postgres.js';
+import type { PlatformAccountResetDirectory, PlatformAccountResetDirectoryReadOptions } from './workos-directory.js';
+export interface PlatformAccountResetContactEvidence {
+    readonly normalizedContacts: ReadonlyMap<string, string>;
+    readonly evidenceByTarget: ReadonlyMap<string, unknown>;
+    readonly missingCount: number;
+    readonly ambiguousCount: number;
+}
+export interface PlatformAccountResetWorkosEvidence {
+    readonly resources: readonly PlatformAccountResetCleanupResource[];
+    readonly providerUnavailableCount: number;
+    readonly conflictCount: number;
+}
+export declare function loadPlatformAccountResetCustomerEvidence(connection: PlatformIdentityQueryable, targets: readonly string[]): Promise<readonly {
+    readonly subject: string;
+    readonly source: string;
+}[]>;
+export declare function loadPlatformAccountResetContactEvidence(connection: PlatformIdentityQueryable, targets: readonly string[], configured: PlatformAuthInventorySourceManifest): Promise<PlatformAccountResetContactEvidence>;
+export declare function loadPlatformAccountResetWorkosEvidence(contacts: ReadonlyMap<string, string>, directory: PlatformAccountResetDirectory, workosRealm: string, options: PlatformAccountResetDirectoryReadOptions): Promise<PlatformAccountResetWorkosEvidence>;
+//# sourceMappingURL=platform-account-reset-preview-evidence-postgres.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-evidence-postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-preview-evidence-postgres.d.ts","sourceRoot":"","sources":["../src/platform-account-reset-preview-evidence-postgres.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,sCAAsC,CAAC;AAEhG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,KAAK,EACV,6BAA6B,EAC7B,wCAAwC,EAEzC,MAAM,uBAAuB,CAAC;AAQ/B,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,SAAS,mCAAmC,EAAE,CAAC;IACnE,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,wBAAsB,wCAAwC,CAC5D,UAAU,EAAE,yBAAyB,EACrC,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB,OAAO,CAAC,SAAS;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAY3E;AAED,wBAAsB,uCAAuC,CAC3D,UAAU,EAAE,yBAAyB,EACrC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,UAAU,EAAE,mCAAmC,GAC9C,OAAO,CAAC,mCAAmC,CAAC,CA4E9C;AAED,wBAAsB,sCAAsC,CAC1D,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EACrC,SAAS,EAAE,6BAA6B,EACxC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,wCAAwC,GAChD,OAAO,CAAC,kCAAkC,CAAC,CA2D7C"}

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-evidence-postgres.js

@@ -0,0 +1,177 @@
+import { sha256Canonical } from './platform-account-reset-fingerprint.js';
+import { normalizePlatformIdentityEmail } from './platform-identity.js';
+export async function loadPlatformAccountResetCustomerEvidence(connection, targets) {
+    return queryRows(connection, `SELECT owner_subject AS subject, 'oauth_refresh_tokens'::text AS source
+       FROM oauth_refresh_tokens
+      WHERE owner_subject = ANY($1::text[]) AND identity_kind = 'customer'
+     UNION ALL
+     SELECT owner_subject AS subject, 'oauth_device_authorizations'::text AS source
+       FROM oauth_device_authorizations
+      WHERE owner_subject = ANY($1::text[]) AND identity_kind = 'customer'`, [targets]);
+}
+export async function loadPlatformAccountResetContactEvidence(connection, targets, configured) {
+    const statements = [];
+    if (configured.org_members === 'configured')
+        statements.push(`SELECT subject, email, 'org_members'::text AS source
+         FROM org_members WHERE subject = ANY($1::text[])`);
+    if (configured.billing_account_members === 'configured')
+        statements.push(`SELECT subject, email, 'billing_account_members'::text AS source
+         FROM billing_account_members WHERE subject = ANY($1::text[])`);
+    if (configured.oauth_refresh_tokens === 'configured')
+        statements.push(`SELECT owner_subject AS subject, owner_email AS email,
+              'oauth_refresh_tokens'::text AS source
+         FROM oauth_refresh_tokens
+        WHERE owner_subject = ANY($1::text[]) AND identity_kind <> 'customer'`);
+    if (configured.deploy_records === 'configured')
+        statements.push(`SELECT created_by_subject AS subject, created_by_email AS email,
+              'deploy_records'::text AS source
+         FROM deploy_records
+        WHERE created_by_subject = ANY($1::text[]) AND active AND archived_at IS NULL`);
+    if (configured.oauth_device_authorizations === 'configured')
+        statements.push(`SELECT owner_subject AS subject, owner_email AS email,
+              'oauth_device_authorizations'::text AS source
+         FROM oauth_device_authorizations
+        WHERE owner_subject = ANY($1::text[]) AND identity_kind <> 'customer'`);
+    if (configured.welcome_email_outbox === 'configured')
+        statements.push(`SELECT subject, email, 'welcome_email_outbox'::text AS source
+         FROM welcome_email_outbox WHERE subject = ANY($1::text[])`);
+    const rows = statements.length === 0
+        ? []
+        : await queryRows(connection, statements.join(' UNION ALL '), [targets]);
+    const rowsByTarget = groupBy(rows, (row) => row.subject);
+    const normalizedContacts = new Map();
+    const evidenceByTarget = new Map();
+    let missingCount = 0;
+    let ambiguousCount = 0;
+    for (const target of targets) {
+        const targetRows = rowsByTarget.get(target) ?? [];
+        const candidates = [
+            ...new Set(targetRows
+                .map((row) => safelyNormalizeEmail(row.email))
+                .filter((email) => email !== undefined)),
+        ].sort(compareText);
+        if (candidates.length === 0)
+            missingCount += 1;
+        else if (candidates.length !== 1)
+            ambiguousCount += 1;
+        else
+            normalizedContacts.set(target, candidates[0]);
+        evidenceByTarget.set(target, {
+            candidates: candidates.map((email) => sha256Canonical({ email })),
+            contributions: targetRows.map((row) => {
+                const normalized = safelyNormalizeEmail(row.email);
+                return {
+                    source: row.source,
+                    valueFingerprint: normalized === undefined ? 'invalid' : sha256Canonical({ normalized }),
+                };
+            }),
+        });
+    }
+    return {
+        normalizedContacts,
+        evidenceByTarget,
+        missingCount,
+        ambiguousCount,
+    };
+}
+export async function loadPlatformAccountResetWorkosEvidence(contacts, directory, workosRealm, options) {
+    const resources = [];
+    let providerUnavailableCount = 0;
+    let conflictCount = 0;
+    const orderedContacts = [...contacts].sort(([left], [right]) => compareText(left, right));
+    for (const [principalId, normalizedEmail] of orderedContacts) {
+        if (providerReadAborted(options))
+            return unavailableWorkosEvidence(orderedContacts.length);
+        let users;
+        try {
+            users = await directory.listUsersByNormalizedEmail(normalizedEmail, options);
+        }
+        catch {
+            if (providerReadAborted(options))
+                return unavailableWorkosEvidence(orderedContacts.length);
+            providerUnavailableCount += 1;
+            continue;
+        }
+        if (providerReadAborted(options))
+            return unavailableWorkosEvidence(orderedContacts.length);
+        const exact = users
+            .filter((user) => safelyNormalizeEmail(user.normalizedEmail) === normalizedEmail)
+            .sort((left, right) => compareText(left.id, right.id));
+        if (exact.length > 1 || exact.some((user) => user.externalId !== undefined)) {
+            conflictCount += 1;
+            continue;
+        }
+        const user = exact[0];
+        if (user === undefined)
+            continue;
+        if (providerReadAborted(options))
+            return unavailableWorkosEvidence(orderedContacts.length);
+        let byId;
+        try {
+            byId = await directory.findUserById(user.id, options);
+        }
+        catch {
+            if (providerReadAborted(options))
+                return unavailableWorkosEvidence(orderedContacts.length);
+            providerUnavailableCount += 1;
+            continue;
+        }
+        if (providerReadAborted(options))
+            return unavailableWorkosEvidence(orderedContacts.length);
+        if (byId === undefined ||
+            byId.id !== user.id ||
+            safelyNormalizeEmail(byId.normalizedEmail) !== normalizedEmail ||
+            byId.externalId !== undefined) {
+            conflictCount += 1;
+            continue;
+        }
+        const locator = { principalId, userId: user.id, normalizedEmail, realm: workosRealm };
+        const resourceKind = 'unlinked_user';
+        resources.push({
+            provider: 'workos',
+            resourceKind,
+            locator,
+            locatorFingerprint: sha256Canonical({
+                schemaVersion: 1,
+                label: `platform_account_reset_locator:workos:${resourceKind}`,
+                locator,
+            }),
+        });
+    }
+    if (providerReadAborted(options))
+        return unavailableWorkosEvidence(orderedContacts.length);
+    return { resources, providerUnavailableCount, conflictCount };
+}
+function providerReadAborted(options) {
+    return options.signal.aborted || options.deadline.getTime() <= Date.now();
+}
+function unavailableWorkosEvidence(contactCount) {
+    return {
+        resources: [],
+        providerUnavailableCount: contactCount,
+        conflictCount: 0,
+    };
+}
+function queryRows(pool, text, values) {
+    return pool.query(text, values).then((result) => result.rows);
+}
+function groupBy(values, key) {
+    const grouped = new Map();
+    for (const value of values) {
+        const itemKey = key(value);
+        grouped.set(itemKey, [...(grouped.get(itemKey) ?? []), value]);
+    }
+    return grouped;
+}
+function compareText(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+function safelyNormalizeEmail(value) {
+    try {
+        return normalizePlatformIdentityEmail(value);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=platform-account-reset-preview-evidence-postgres.js.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-evidence-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-preview-evidence-postgres.js","sourceRoot":"","sources":["../src/platform-account-reset-preview-evidence-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAG1E,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AA2BxE,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,UAAqC,EACrC,OAA0B;IAE1B,OAAO,SAAS,CACd,UAAU,EACV;;;;;;2EAMuE,EACvE,CAAC,OAAO,CAAC,CACV,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,UAAqC,EACrC,OAA0B,EAC1B,UAA+C;IAE/C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,WAAW,KAAK,YAAY;QACzC,UAAU,CAAC,IAAI,CACb;0DACoD,CACrD,CAAC;IACJ,IAAI,UAAU,CAAC,uBAAuB,KAAK,YAAY;QACrD,UAAU,CAAC,IAAI,CACb;sEACgE,CACjE,CAAC;IACJ,IAAI,UAAU,CAAC,oBAAoB,KAAK,YAAY;QAClD,UAAU,CAAC,IAAI,CACb;;;8EAGwE,CACzE,CAAC;IACJ,IAAI,UAAU,CAAC,cAAc,KAAK,YAAY;QAC5C,UAAU,CAAC,IAAI,CACb;;;sFAGgF,CACjF,CAAC;IACJ,IAAI,UAAU,CAAC,2BAA2B,KAAK,YAAY;QACzD,UAAU,CAAC,IAAI,CACb;;;8EAGwE,CACzE,CAAC;IACJ,IAAI,UAAU,CAAC,oBAAoB,KAAK,YAAY;QAClD,UAAU,CAAC,IAAI,CACb;mEAC6D,CAC9D,CAAC;IACJ,MAAM,IAAI,GACR,UAAU,CAAC,MAAM,KAAK,CAAC;QACrB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,SAAS,CAAa,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzF,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAmB,CAAC;IACpD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG;YACjB,GAAG,IAAI,GAAG,CACR,UAAU;iBACP,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;iBAC7C,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAC3D;SACF,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,YAAY,IAAI,CAAC,CAAC;aAC1C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,cAAc,IAAI,CAAC,CAAC;;YACjD,kBAAkB,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAW,CAAC,CAAC;QAC7D,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE;YAC3B,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,aAAa,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBACpC,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACnD,OAAO;oBACL,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,gBAAgB,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC;iBACzF,CAAC;YACJ,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,kBAAkB;QAClB,gBAAgB;QAChB,YAAY;QACZ,cAAc;KACf,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,QAAqC,EACrC,SAAwC,EACxC,WAAmB,EACnB,OAAiD;IAEjD,MAAM,SAAS,GAA0C,EAAE,CAAC;IAC5D,IAAI,wBAAwB,GAAG,CAAC,CAAC;IACjC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,eAAe,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1F,KAAK,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,IAAI,eAAe,EAAE,CAAC;QAC7D,IAAI,mBAAmB,CAAC,OAAO,CAAC;YAAE,OAAO,yBAAyB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3F,IAAI,KAAmD,CAAC;QACxD,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,SAAS,CAAC,0BAA0B,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,mBAAmB,CAAC,OAAO,CAAC;gBAAE,OAAO,yBAAyB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC3F,wBAAwB,IAAI,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,mBAAmB,CAAC,OAAO,CAAC;YAAE,OAAO,yBAAyB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,KAAK;aAChB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,eAAe,CAAC;aAChF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,EAAE,CAAC;YAC5E,aAAa,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,IAAI,mBAAmB,CAAC,OAAO,CAAC;YAAE,OAAO,yBAAyB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3F,IAAI,IAAmD,CAAC;QACxD,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,mBAAmB,CAAC,OAAO,CAAC;gBAAE,OAAO,yBAAyB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC3F,wBAAwB,IAAI,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,mBAAmB,CAAC,OAAO,CAAC;YAAE,OAAO,yBAAyB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3F,IACE,IAAI,KAAK,SAAS;YAClB,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;YACnB,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,eAAe;YAC9D,IAAI,CAAC,UAAU,KAAK,SAAS,EAC7B,CAAC;YACD,aAAa,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACtF,MAAM,YAAY,GAAG,eAAe,CAAC;QACrC,SAAS,CAAC,IAAI,CAAC;YACb,QAAQ,EAAE,QAAQ;YAClB,YAAY;YACZ,OAAO;YACP,kBAAkB,EAAE,eAAe,CAAC;gBAClC,aAAa,EAAE,CAAC;gBAChB,KAAK,EAAE,yCAAyC,YAAY,EAAE;gBAC9D,OAAO;aACR,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IACD,IAAI,mBAAmB,CAAC,OAAO,CAAC;QAAE,OAAO,yBAAyB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3F,OAAO,EAAE,SAAS,EAAE,wBAAwB,EAAE,aAAa,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAiD;IAC5E,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,yBAAyB,CAAC,YAAoB;IACrD,OAAO;QACL,SAAS,EAAE,EAAE;QACb,wBAAwB,EAAE,YAAY;QACtC,aAAa,EAAE,CAAC;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,IAA+B,EAC/B,IAAY,EACZ,MAA2B;IAE3B,OAAO,IAAI,CAAC,KAAK,CAAI,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,OAAO,CACd,MAAoB,EACpB,GAAyB;IAEzB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAe,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,CAAC;QACH,OAAO,8BAA8B,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-local-postgres.d.ts

@@ -0,0 +1,35 @@
+import type { PlatformAccountResetBlockerCode, PlatformAccountResetPreviewRequest, PlatformAccountResetResult } from './platform-account-reset.js';
+import { type PlatformAccountResetCleanupResource } from './platform-account-reset-ownership-postgres.js';
+import type { PlatformAuthInventorySourceManifest } from './platform-auth-inventory-sources.js';
+import type { PlatformIdentityQueryable } from './platform-identity-postgres.js';
+export interface PlatformAccountResetLocalInspection {
+    readonly operationId: string;
+    readonly request: PlatformAccountResetPreviewRequest;
+    readonly targets: readonly string[];
+    readonly normalizedContacts: ReadonlyMap<string, string>;
+    readonly targetEvidence: ReadonlyMap<string, Readonly<Record<string, unknown>>>;
+    readonly cleanupResources: readonly PlatformAccountResetCleanupResource[];
+    readonly ownershipFingerprint: string;
+    readonly localCleanupSetFingerprint: string;
+    readonly requestFingerprint: string;
+    readonly workosRealmFingerprint: string;
+    readonly counts: PlatformAccountResetResult['counts'];
+    readonly blockers: readonly {
+        readonly code: PlatformAccountResetBlockerCode;
+        readonly count: number;
+    }[];
+    readonly evidenceFingerprint: string;
+}
+export interface PlatformAccountResetLocalInspectionOptions {
+    readonly sourceAvailability: PlatformAuthInventorySourceManifest;
+    readonly googleRealm: string;
+    readonly workosRealm: string;
+    readonly releaseSha: string;
+    readonly excludedSubjects: readonly {
+        readonly subject: string;
+        readonly kind: 'workload' | 'synthetic';
+    }[];
+    readonly ignoreCurrentOperation?: boolean;
+}
+export declare function inspectPlatformAccountResetLocalEvidence(connection: PlatformIdentityQueryable, request: PlatformAccountResetPreviewRequest, operationId: string, options: PlatformAccountResetLocalInspectionOptions): Promise<PlatformAccountResetLocalInspection>;
+//# sourceMappingURL=platform-account-reset-preview-local-postgres.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-local-postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-preview-local-postgres.d.ts","sourceRoot":"","sources":["../src/platform-account-reset-preview-local-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,+BAA+B,EAC/B,kCAAkC,EAClC,0BAA0B,EAC3B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAEL,KAAK,mCAAmC,EACzC,MAAM,gDAAgD,CAAC;AAMxD,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,sCAAsC,CAAC;AAChG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AA6BjF,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,kCAAkC,CAAC;IACrD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzD,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAChF,QAAQ,CAAC,gBAAgB,EAAE,SAAS,mCAAmC,EAAE,CAAC;IAC1E,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,SAAS;QAC1B,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC;QAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,EAAE,CAAC;IACJ,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,kBAAkB,EAAE,mCAAmC,CAAC;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,SAAS;QAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,CAAC;KACzC,EAAE,CAAC;IACJ,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAC3C;AAED,wBAAsB,wCAAwC,CAC5D,UAAU,EAAE,yBAAyB,EACrC,OAAO,EAAE,kCAAkC,EAC3C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,0CAA0C,GAClD,OAAO,CAAC,mCAAmC,CAAC,CAoN9C"}

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-local-postgres.js

@@ -0,0 +1,184 @@
+import { sha256Canonical } from './platform-account-reset-fingerprint.js';
+import { loadPlatformAccountResetOwnershipSnapshot, } from './platform-account-reset-ownership-postgres.js';
+import { loadPlatformAccountResetContactEvidence, loadPlatformAccountResetCustomerEvidence, } from './platform-account-reset-preview-evidence-postgres.js';
+import { readPlatformAuthInventorySourceEpoch } from './platform-auth-inventory-source-fence-postgres.js';
+export async function inspectPlatformAccountResetLocalEvidence(connection, request, operationId, options) {
+    const targets = [...request.targetSet.principalIds].sort(compareText);
+    const targetSet = new Set(targets);
+    const targetFingerprints = targets.map((target) => sha256Canonical(target));
+    const blockers = new Map();
+    const rollout = await connection.query(`SELECT generation::text FROM platform_auth_rollout_state
+      WHERE singleton = true FOR SHARE`);
+    const generation = Number(rollout.rows[0]?.generation);
+    const sourceEpoch = Number(await readPlatformAuthInventorySourceEpoch(connection));
+    if (request.releaseSha !== options.releaseSha)
+        increment(blockers, 'release_mismatch');
+    if (request.expectedGeneration !== generation)
+        increment(blockers, 'generation_mismatch');
+    if (request.sourceEpoch !== sourceEpoch)
+        increment(blockers, 'source_epoch_mismatch');
+    if (request.workosRealm !== options.workosRealm)
+        increment(blockers, 'operation_conflict');
+    const principals = await queryRows(connection, `SELECT principal_id, status, billing_identity_issuer, billing_subject
+       FROM platform_principals WHERE principal_id = ANY($1::text[])`, [targets]);
+    const links = await queryRows(connection, `SELECT principal_id, provider, realm, external_id, disabled_at
+       FROM platform_identity_links WHERE principal_id = ANY($1::text[])`, [targets]);
+    const verified = await queryRows(connection, `SELECT principal_id FROM platform_verified_emails
+      WHERE principal_id = ANY($1::text[])`, [targets]);
+    const imports = await queryRows(connection, `SELECT principal_id FROM workos_import_ledger
+      WHERE principal_id = ANY($1::text[])`, [targets]);
+    const importAttempts = await queryRows(connection, `SELECT principal_id, principal_fingerprint FROM workos_import_attempt_evidence
+      WHERE principal_id = ANY($1::text[])
+         OR principal_fingerprint = ANY($2::text[])`, [targets, targetFingerprints]);
+    const activeResets = await queryRows(connection, `SELECT target.principal_id
+       FROM platform_account_reset_targets target
+       JOIN platform_account_reset_operations operation
+         ON operation.operation_id = target.operation_id
+      WHERE target.principal_id = ANY($1::text[])
+        AND (
+          (operation.lifecycle = 'previewed'
+            AND operation.preview_expires_at > clock_timestamp())
+          OR operation.lifecycle IN ('quarantined','finalizing','finalization_blocked')
+        )
+        AND ($2::text IS NULL OR target.operation_id <> $2)`, [targets, options.ignoreCurrentOperation === true ? operationId : null]);
+    const personal = await queryRows(connection, `SELECT binding.principal_subject, binding.org_slug,
+            binding.billing_identity_issuer, binding.billing_subject,
+            binding.billing_account_id,
+            defaults.billing_account_id AS default_billing_account_id,
+            home.billing_account_id AS home_billing_account_id,
+            home.home_owner_identity_issuer, home.home_owner_subject
+       FROM personal_workspace_bindings binding
+       LEFT JOIN billing_account_defaults defaults
+         ON defaults.identity_issuer = binding.billing_identity_issuer
+        AND defaults.subject = binding.billing_subject
+       LEFT JOIN org_billing_home_accounts home ON home.org_slug = binding.org_slug
+      WHERE binding.principal_subject = ANY($1::text[])`, [targets]);
+    const principalsById = new Map(principals.map((row) => [row.principal_id, row]));
+    const linksByPrincipal = groupBy(links, (row) => row.principal_id);
+    for (const target of targets) {
+        const principal = principalsById.get(target);
+        if (principal?.status !== 'active') {
+            increment(blockers, 'principal_not_active');
+            continue;
+        }
+        const googleLinks = (linksByPrincipal.get(target) ?? []).filter((row) => row.provider === 'google' && row.realm === options.googleRealm && row.disabled_at === null);
+        if (googleLinks.length !== 1 ||
+            googleLinks[0]?.external_id !== target ||
+            principal.billing_identity_issuer !== 'https://accounts.google.com' ||
+            principal.billing_subject !== target)
+            increment(blockers, 'principal_not_legacy_google');
+    }
+    if (verified.length !== 0)
+        blockers.set('verified_email_evidence_present', verified.length);
+    const workosLinks = links.filter((row) => row.provider === 'workos');
+    if (workosLinks.length !== 0)
+        blockers.set('workos_link_present', workosLinks.length);
+    if (imports.length + importAttempts.length !== 0)
+        blockers.set('workos_import_present', imports.length + importAttempts.length);
+    if (activeResets.length !== 0)
+        blockers.set('operation_conflict', activeResets.length);
+    const customerEvidence = await loadPlatformAccountResetCustomerEvidence(connection, targets);
+    const configuredExcluded = options.excludedSubjects.filter((entry) => targetSet.has(entry.subject));
+    if (customerEvidence.length + configuredExcluded.length !== 0)
+        blockers.set('synthetic_or_customer_identity', customerEvidence.length + configuredExcluded.length);
+    const personalByTarget = groupBy(personal, (row) => row.principal_subject);
+    for (const target of targets) {
+        const rows = personalByTarget.get(target) ?? [];
+        const row = rows[0];
+        if (rows.length !== 1 ||
+            row === undefined ||
+            row.billing_identity_issuer !== 'https://accounts.google.com' ||
+            row.billing_subject !== target ||
+            row.billing_account_id !== row.default_billing_account_id ||
+            row.billing_account_id !== row.home_billing_account_id ||
+            row.home_owner_identity_issuer !== 'https://accounts.google.com' ||
+            row.home_owner_subject !== target)
+            increment(blockers, 'personal_workspace_mismatch');
+    }
+    const contactEvidence = await loadPlatformAccountResetContactEvidence(connection, targets, options.sourceAvailability);
+    if (contactEvidence.missingCount !== 0)
+        blockers.set('contact_hint_missing', contactEvidence.missingCount);
+    if (contactEvidence.ambiguousCount !== 0)
+        blockers.set('contact_hint_ambiguous', contactEvidence.ambiguousCount);
+    const ownership = await loadPlatformAccountResetOwnershipSnapshot(connection, {
+        targetPrincipalIds: targets,
+    });
+    for (const blocker of ownership.blockers)
+        blockers.set(blocker.code, (blockers.get(blocker.code) ?? 0) + blocker.count);
+    const blockerList = [...blockers]
+        .map(([code, count]) => ({ code, count }))
+        .sort((left, right) => left.code.localeCompare(right.code));
+    const targetEvidence = new Map();
+    for (const target of targets) {
+        targetEvidence.set(target, {
+            schemaVersion: 1,
+            label: 'platform_account_reset_target_eligibility',
+            target,
+            principal: principalsById.get(target) ?? null,
+            links: linksByPrincipal.get(target) ?? [],
+            verifiedEmailEvidence: verified.filter((row) => row.principal_id === target),
+            importEvidence: imports.filter((row) => row.principal_id === target),
+            importAttemptEvidence: importAttempts.filter((row) => row.principal_id === target || row.principal_fingerprint === sha256Canonical(target)),
+            personal: personalByTarget.get(target) ?? [],
+            contact: contactEvidence.evidenceByTarget.get(target),
+            configuredExclusion: configuredExcluded.find((entry) => entry.subject === target) ?? null,
+            customerEvidence: customerEvidence.filter((row) => row.subject === target),
+        });
+    }
+    const requestFingerprint = sha256Canonical(request);
+    const workosRealmFingerprint = sha256Canonical({
+        schemaVersion: 1,
+        label: 'workos_realm',
+        realm: request.workosRealm,
+    });
+    const counts = {
+        targetCount: targets.length,
+        suspendedPrincipalCount: principals.filter((row) => row.status === 'suspended').length,
+        ...ownership.counts,
+        cleanupPendingCount: 0,
+    };
+    const evidenceFingerprint = sha256Canonical({
+        schemaVersion: 1,
+        label: 'platform_account_reset_local_evidence',
+        requestFingerprint,
+        workosRealmFingerprint,
+        targetEvidence: [...targetEvidence],
+        blockers: blockerList,
+        counts,
+        ownershipFingerprint: ownership.ownershipFingerprint,
+        cleanupSetFingerprint: ownership.cleanupSetFingerprint,
+    });
+    return {
+        operationId,
+        request,
+        targets,
+        normalizedContacts: contactEvidence.normalizedContacts,
+        targetEvidence,
+        cleanupResources: ownership.cleanupResources,
+        ownershipFingerprint: ownership.ownershipFingerprint,
+        localCleanupSetFingerprint: ownership.cleanupSetFingerprint,
+        requestFingerprint,
+        workosRealmFingerprint,
+        counts,
+        blockers: blockerList,
+        evidenceFingerprint,
+    };
+}
+function queryRows(pool, text, values) {
+    return pool.query(text, values).then((result) => result.rows);
+}
+function groupBy(values, key) {
+    const grouped = new Map();
+    for (const value of values) {
+        const itemKey = key(value);
+        grouped.set(itemKey, [...(grouped.get(itemKey) ?? []), value]);
+    }
+    return grouped;
+}
+function increment(blockers, code) {
+    blockers.set(code, (blockers.get(code) ?? 0) + 1);
+}
+function compareText(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+//# sourceMappingURL=platform-account-reset-preview-local-postgres.js.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-local-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-preview-local-postgres.js","sourceRoot":"","sources":["../src/platform-account-reset-preview-local-postgres.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC1E,OAAO,EACL,yCAAyC,GAE1C,MAAM,gDAAgD,CAAC;AACxD,OAAO,EACL,uCAAuC,EACvC,wCAAwC,GACzC,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EAAE,oCAAoC,EAAE,MAAM,oDAAoD,CAAC;AA8D1G,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC5D,UAAqC,EACrC,OAA2C,EAC3C,WAAmB,EACnB,OAAmD;IAEnD,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2C,CAAC;IACpE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CACpC;uCACmC,CACpC,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,oCAAoC,CAAC,UAAU,CAAC,CAAC,CAAC;IACnF,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;QAAE,SAAS,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACvF,IAAI,OAAO,CAAC,kBAAkB,KAAK,UAAU;QAAE,SAAS,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAC1F,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW;QAAE,SAAS,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW;QAAE,SAAS,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAE3F,MAAM,UAAU,GAAG,MAAM,SAAS,CAChC,UAAU,EACV;qEACiE,EACjE,CAAC,OAAO,CAAC,CACV,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,SAAS,CAC3B,UAAU,EACV;yEACqE,EACrE,CAAC,OAAO,CAAC,CACV,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,UAAU,EACV;2CACuC,EACvC,CAAC,OAAO,CAAC,CACV,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,SAAS,CAC7B,UAAU,EACV;2CACuC,EACvC,CAAC,OAAO,CAAC,CACV,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,SAAS,CAIpC,UAAU,EACV;;oDAEgD,EAChD,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAC9B,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,SAAS,CAClC,UAAU,EACV;;;;;;;;;;4DAUwD,EACxD,CAAC,OAAO,EAAE,OAAO,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CACxE,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,UAAU,EACV;;;;;;;;;;;wDAWoD,EACpD,CAAC,OAAO,CAAC,CACV,CAAC;IAEF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACnE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,SAAS,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnC,SAAS,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;YAC5C,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAC7D,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,CAC7F,CAAC;QACF,IACE,WAAW,CAAC,MAAM,KAAK,CAAC;YACxB,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,KAAK,MAAM;YACtC,SAAS,CAAC,uBAAuB,KAAK,6BAA6B;YACnE,SAAS,CAAC,eAAe,KAAK,MAAM;YAEpC,SAAS,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,GAAG,CAAC,iCAAiC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IACrE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,KAAK,CAAC;QAC9C,QAAQ,CAAC,GAAG,CAAC,uBAAuB,EAAE,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAChF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,QAAQ,CAAC,GAAG,CAAC,oBAAoB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAEvF,MAAM,gBAAgB,GAAG,MAAM,wCAAwC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7F,MAAM,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACnE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAC7B,CAAC;IACF,IAAI,gBAAgB,CAAC,MAAM,GAAG,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAC3D,QAAQ,CAAC,GAAG,CACV,gCAAgC,EAChC,gBAAgB,CAAC,MAAM,GAAG,kBAAkB,CAAC,MAAM,CACpD,CAAC;IAEJ,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IACE,IAAI,CAAC,MAAM,KAAK,CAAC;YACjB,GAAG,KAAK,SAAS;YACjB,GAAG,CAAC,uBAAuB,KAAK,6BAA6B;YAC7D,GAAG,CAAC,eAAe,KAAK,MAAM;YAC9B,GAAG,CAAC,kBAAkB,KAAK,GAAG,CAAC,0BAA0B;YACzD,GAAG,CAAC,kBAAkB,KAAK,GAAG,CAAC,uBAAuB;YACtD,GAAG,CAAC,0BAA0B,KAAK,6BAA6B;YAChE,GAAG,CAAC,kBAAkB,KAAK,MAAM;YAEjC,SAAS,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,uCAAuC,CACnE,UAAU,EACV,OAAO,EACP,OAAO,CAAC,kBAAkB,CAC3B,CAAC;IACF,IAAI,eAAe,CAAC,YAAY,KAAK,CAAC;QACpC,QAAQ,CAAC,GAAG,CAAC,sBAAsB,EAAE,eAAe,CAAC,YAAY,CAAC,CAAC;IACrE,IAAI,eAAe,CAAC,cAAc,KAAK,CAAC;QACtC,QAAQ,CAAC,GAAG,CAAC,wBAAwB,EAAE,eAAe,CAAC,cAAc,CAAC,CAAC;IAEzE,MAAM,SAAS,GAAG,MAAM,yCAAyC,CAAC,UAAU,EAAE;QAC5E,kBAAkB,EAAE,OAAO;KAC5B,CAAC,CAAC;IACH,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ;QACtC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;SACzC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,IAAI,GAAG,EAA6C,CAAC;IAC5E,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE;YACzB,aAAa,EAAE,CAAC;YAChB,KAAK,EAAE,2CAA2C;YAClD,MAAM;YACN,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI;YAC7C,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;YACzC,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC;YAC5E,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC;YACpE,qBAAqB,EAAE,cAAc,CAAC,MAAM,CAC1C,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,YAAY,KAAK,MAAM,IAAI,GAAG,CAAC,qBAAqB,KAAK,eAAe,CAAC,MAAM,CAAC,CACvF;YACD,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;YAC5C,OAAO,EAAE,eAAe,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;YACrD,mBAAmB,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,IAAI,IAAI;YACzF,gBAAgB,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC;SAC3E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,kBAAkB,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,sBAAsB,GAAG,eAAe,CAAC;QAC7C,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,OAAO,CAAC,WAAW;KAC3B,CAAC,CAAC;IACH,MAAM,MAAM,GAAyC;QACnD,WAAW,EAAE,OAAO,CAAC,MAAM;QAC3B,uBAAuB,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,MAAM;QACtF,GAAG,SAAS,CAAC,MAAM;QACnB,mBAAmB,EAAE,CAAC;KACvB,CAAC;IACF,MAAM,mBAAmB,GAAG,eAAe,CAAC;QAC1C,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,uCAAuC;QAC9C,kBAAkB;QAClB,sBAAsB;QACtB,cAAc,EAAE,CAAC,GAAG,cAAc,CAAC;QACnC,QAAQ,EAAE,WAAW;QACrB,MAAM;QACN,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;QACpD,qBAAqB,EAAE,SAAS,CAAC,qBAAqB;KACvD,CAAC,CAAC;IACH,OAAO;QACL,WAAW;QACX,OAAO;QACP,OAAO;QACP,kBAAkB,EAAE,eAAe,CAAC,kBAAkB;QACtD,cAAc;QACd,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;QAC5C,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;QACpD,0BAA0B,EAAE,SAAS,CAAC,qBAAqB;QAC3D,kBAAkB;QAClB,sBAAsB;QACtB,MAAM;QACN,QAAQ,EAAE,WAAW;QACrB,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,IAA+B,EAC/B,IAAY,EACZ,MAA2B;IAE3B,OAAO,IAAI,CAAC,KAAK,CAAI,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,OAAO,CACd,MAAoB,EACpB,GAAyB;IAEzB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAe,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAChB,QAAsD,EACtD,IAAqC;IAErC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-persistence-postgres.d.ts

@@ -0,0 +1,11 @@
+import { type PlatformAccountResetFrozenInspection } from './platform-account-reset-preview-result.js';
+import type { PlatformIdentityQueryable } from './platform-identity-postgres.js';
+export declare function persistPlatformAccountResetPreview(connection: PlatformIdentityQueryable, inspection: PlatformAccountResetFrozenInspection, options: {
+    readonly actorFingerprint: string;
+    readonly approvedTargetSetFingerprint: string;
+    readonly workosRealm: string;
+    readonly createdAt: Date | string;
+    readonly previewExpiresAt: Date | string;
+}): Promise<void>;
+export declare function assertPlatformAccountResetCleanupEvidence(connection: PlatformIdentityQueryable, operationId: string, inspection: PlatformAccountResetFrozenInspection): Promise<void>;
+//# sourceMappingURL=platform-account-reset-preview-persistence-postgres.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-persistence-postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-preview-persistence-postgres.d.ts","sourceRoot":"","sources":["../src/platform-account-reset-preview-persistence-postgres.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,oCAAoC,EAE1C,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAEjF,wBAAsB,kCAAkC,CACtD,UAAU,EAAE,yBAAyB,EACrC,UAAU,EAAE,oCAAoC,EAChD,OAAO,EAAE;IACP,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,IAAI,GAAG,MAAM,CAAC;CAC1C,GACA,OAAO,CAAC,IAAI,CAAC,CAkFf;AAED,wBAAsB,yCAAyC,CAC7D,UAAU,EAAE,yBAAyB,EACrC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,oCAAoC,GAC/C,OAAO,CAAC,IAAI,CAAC,CAgDf"}