@noodleseed/one 0.82.0 → 0.84.0

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-persistence-postgres.js

@@ -0,0 +1,120 @@
+import { canonicalJson, sha256Canonical } from './platform-account-reset-fingerprint.js';
+import { PlatformAccountResetPreviewError, } from './platform-account-reset-preview-result.js';
+export async function persistPlatformAccountResetPreview(connection, inspection, options) {
+    const result = inspection.result;
+    if (result.blockers.length !== 0)
+        throw new PlatformAccountResetPreviewError('operation_conflict');
+    await connection.query(`INSERT INTO platform_account_reset_operations
+       (operation_id, lifecycle, release_sha, rollout_generation, workos_realm,
+        source_epoch, preview_checksum, target_set_fingerprint, request_fingerprint,
+        approved_target_set_fingerprint, actor_fingerprint, safe_result,
+        preview_expires_at, created_at, updated_at)
+     VALUES ($1, 'previewed', $2, $3, $4, $5, $6, $7, $8, $9, $10, $11::jsonb,
+             $12, $13, $13)`, [
+        result.operationId,
+        result.releaseSha,
+        result.rolloutGeneration,
+        options.workosRealm,
+        result.sourceEpoch,
+        result.previewChecksum,
+        result.targetSetFingerprint,
+        result.requestFingerprint,
+        options.approvedTargetSetFingerprint,
+        options.actorFingerprint,
+        JSON.stringify(inspection.safeResult),
+        options.previewExpiresAt,
+        options.createdAt,
+    ]);
+    for (const [principalId, sourceSnapshotFingerprint] of inspection.targetSnapshots) {
+        await connection.query(`INSERT INTO platform_account_reset_targets
+         (operation_id, principal_id, target_fingerprint,
+          source_snapshot_fingerprint, lifecycle)
+       VALUES ($1, $2, $3, $4, 'previewed')`, [
+            result.operationId,
+            principalId,
+            sha256Canonical({ schemaVersion: 1, principalId }),
+            sourceSnapshotFingerprint,
+        ]);
+    }
+    for (const resource of inspection.cleanupResources) {
+        await connection.query(`INSERT INTO platform_account_reset_cleanup_ledger
+         (operation_id, provider, resource_kind, provider_locator,
+          locator_fingerprint, state, created_at, updated_at)
+       VALUES ($1, $2, $3, $4, $5, 'pending', $6, $6)`, [
+            result.operationId,
+            resource.provider,
+            resource.resourceKind,
+            canonicalJson(resource.locator),
+            resource.locatorFingerprint,
+            options.createdAt,
+        ]);
+    }
+    const eventFingerprint = sha256Canonical({
+        schemaVersion: 1,
+        label: 'platform_account_reset_event:previewed',
+        operationId: result.operationId,
+        previewChecksum: result.previewChecksum,
+        targetSetFingerprint: result.targetSetFingerprint,
+        targetCount: result.counts.targetCount,
+        resourceCount: inspection.cleanupResources.length,
+        blockerCount: 0,
+    });
+    await connection.query(`INSERT INTO platform_account_reset_events
+       (operation_id, event_type, target_set_fingerprint, event_fingerprint,
+        target_count, resource_count, blocker_count, created_at)
+     VALUES ($1, 'previewed', $2, $3, $4, $5, 0, $6)`, [
+        result.operationId,
+        result.targetSetFingerprint,
+        eventFingerprint,
+        result.counts.targetCount,
+        inspection.cleanupResources.length,
+        options.createdAt,
+    ]);
+}
+export async function assertPlatformAccountResetCleanupEvidence(connection, operationId, inspection) {
+    const ledger = await connection.query(`SELECT provider, resource_kind, provider_locator, locator_fingerprint
+       FROM platform_account_reset_cleanup_ledger
+      WHERE operation_id = $1
+      ORDER BY provider, resource_kind, locator_fingerprint
+      FOR SHARE`, [operationId]);
+    const storedResources = [];
+    for (const row of ledger.rows) {
+        let locator;
+        try {
+            locator = JSON.parse(row.provider_locator);
+        }
+        catch {
+            throw new PlatformAccountResetPreviewError('operation_conflict');
+        }
+        if (!isCleanupProvider(row.provider) || !isRecord(locator))
+            throw new PlatformAccountResetPreviewError('operation_conflict');
+        const fingerprint = sha256Canonical({
+            schemaVersion: 1,
+            label: `platform_account_reset_locator:${row.provider}:${row.resource_kind}`,
+            locator,
+        });
+        if (fingerprint !== row.locator_fingerprint)
+            throw new PlatformAccountResetPreviewError('operation_conflict');
+        storedResources.push({
+            provider: row.provider,
+            resourceKind: row.resource_kind,
+            locator,
+            locatorFingerprint: row.locator_fingerprint,
+        });
+    }
+    const storedFingerprint = sha256Canonical({
+        schemaVersion: 1,
+        label: 'platform_account_reset_cleanup_set',
+        resources: storedResources,
+    });
+    if (storedFingerprint !== inspection.cleanupSetFingerprint ||
+        canonicalJson(storedResources) !== canonicalJson(inspection.cleanupResources))
+        throw new PlatformAccountResetPreviewError('operation_conflict');
+}
+function isCleanupProvider(value) {
+    return ['postgres', 'object_storage', 'github', 'stripe', 'workos'].includes(value);
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=platform-account-reset-preview-persistence-postgres.js.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-persistence-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-preview-persistence-postgres.js","sourceRoot":"","sources":["../src/platform-account-reset-preview-persistence-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAEzF,OAAO,EAEL,gCAAgC,GACjC,MAAM,4CAA4C,CAAC;AAGpD,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,UAAqC,EACrC,UAAgD,EAChD,OAMC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACjC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC9B,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;IACnE,MAAM,UAAU,CAAC,KAAK,CACpB;;;;;;4BAMwB,EACxB;QACE,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,iBAAiB;QACxB,OAAO,CAAC,WAAW;QACnB,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,eAAe;QACtB,MAAM,CAAC,oBAAoB;QAC3B,MAAM,CAAC,kBAAkB;QACzB,OAAO,CAAC,4BAA4B;QACpC,OAAO,CAAC,gBAAgB;QACxB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC;QACrC,OAAO,CAAC,gBAAgB;QACxB,OAAO,CAAC,SAAS;KAClB,CACF,CAAC;IACF,KAAK,MAAM,CAAC,WAAW,EAAE,yBAAyB,CAAC,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;QAClF,MAAM,UAAU,CAAC,KAAK,CACpB;;;4CAGsC,EACtC;YACE,MAAM,CAAC,WAAW;YAClB,WAAW;YACX,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC;YAClD,yBAAyB;SAC1B,CACF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC;QACnD,MAAM,UAAU,CAAC,KAAK,CACpB;;;sDAGgD,EAChD;YACE,MAAM,CAAC,WAAW;YAClB,QAAQ,CAAC,QAAQ;YACjB,QAAQ,CAAC,YAAY;YACrB,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC/B,QAAQ,CAAC,kBAAkB;YAC3B,OAAO,CAAC,SAAS;SAClB,CACF,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,eAAe,CAAC;QACvC,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,wCAAwC;QAC/C,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW;QACtC,aAAa,EAAE,UAAU,CAAC,gBAAgB,CAAC,MAAM;QACjD,YAAY,EAAE,CAAC;KAChB,CAAC,CAAC;IACH,MAAM,UAAU,CAAC,KAAK,CACpB;;;qDAGiD,EACjD;QACE,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,oBAAoB;QAC3B,gBAAgB;QAChB,MAAM,CAAC,MAAM,CAAC,WAAW;QACzB,UAAU,CAAC,gBAAgB,CAAC,MAAM;QAClC,OAAO,CAAC,SAAS;KAClB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,UAAqC,EACrC,WAAmB,EACnB,UAAgD;IAEhD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,KAAK,CAMnC;;;;gBAIY,EACZ,CAAC,WAAW,CAAC,CACd,CAAC;IACF,MAAM,eAAe,GAA0C,EAAE,CAAC;IAClE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YACxD,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,eAAe,CAAC;YAClC,aAAa,EAAE,CAAC;YAChB,KAAK,EAAE,kCAAkC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,aAAa,EAAE;YAC5E,OAAO;SACR,CAAC,CAAC;QACH,IAAI,WAAW,KAAK,GAAG,CAAC,mBAAmB;YACzC,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;QACnE,eAAe,CAAC,IAAI,CAAC;YACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,OAAO;YACP,kBAAkB,EAAE,GAAG,CAAC,mBAAmB;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,iBAAiB,GAAG,eAAe,CAAC;QACxC,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,oCAAoC;QAC3C,SAAS,EAAE,eAAe;KAC3B,CAAC,CAAC;IACH,IACE,iBAAiB,KAAK,UAAU,CAAC,qBAAqB;QACtD,aAAa,CAAC,eAAe,CAAC,KAAK,aAAa,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAE7E,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAa;IAEb,OAAO,CAAC,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-postgres.d.ts

@@ -0,0 +1,79 @@
+import { type PlatformAccountResetPreviewRequest } from './platform-account-reset.js';
+import { type PlatformAccountResetWorkosEvidence } from './platform-account-reset-preview-evidence-postgres.js';
+import { type PlatformAccountResetLocalInspection } from './platform-account-reset-preview-local-postgres.js';
+import { type PlatformAccountResetPreviewResult } from './platform-account-reset-preview-result.js';
+import type { PlatformAuthInventorySourceManifest } from './platform-auth-inventory-sources.js';
+import type { PlatformIdentityQueryable } from './platform-identity-postgres.js';
+import type { PlatformAccountResetDirectory } from './workos-directory.js';
+export { PlatformAccountResetPreviewError, type PlatformAccountResetPreviewResult, } from './platform-account-reset-preview-result.js';
+type PreviewConnection = PlatformIdentityQueryable & {
+    release?: () => void;
+};
+type PreviewPool = PlatformIdentityQueryable & {
+    connect?: () => Promise<PreviewConnection>;
+};
+export interface PlatformAccountResetPreviewEvidence {
+    readonly operationId: string;
+    readonly releaseSha: string;
+    readonly expectedGeneration: number;
+    readonly previewChecksum: string | null;
+}
+interface PreviewOptions {
+    readonly directory: PlatformAccountResetDirectory;
+    readonly sourceAvailability: PlatformAuthInventorySourceManifest;
+    readonly googleRealm: string;
+    readonly workosRealm: string;
+    readonly releaseSha: string;
+    readonly actorFingerprint: string;
+    readonly approvedTargetSetFingerprint: string;
+    readonly excludedSubjects: readonly {
+        readonly subject: string;
+        readonly kind: 'workload' | 'synthetic';
+    }[];
+    readonly now?: () => Date;
+    readonly operationId?: () => string;
+    readonly providerTimeoutMs?: number;
+    readonly localCaptureTimeoutMs?: number;
+    readonly previewTtlMs?: number;
+}
+interface StoredOperationRow {
+    readonly lifecycle: string;
+    readonly release_sha: string;
+    readonly rollout_generation: string;
+    readonly workos_realm: string;
+    readonly source_epoch: string;
+    readonly preview_checksum: string;
+    readonly target_set_fingerprint: string;
+    readonly request_fingerprint: string;
+    readonly safe_result: unknown;
+    readonly preview_expires_at: Date | string;
+    readonly created_at: Date | string;
+}
+interface StoredTargetRow {
+    readonly principal_id: string;
+    readonly source_snapshot_fingerprint: string;
+}
+interface StoredSnapshot {
+    readonly stored: StoredOperationRow;
+    readonly targetRows: readonly StoredTargetRow[];
+    readonly request: PlatformAccountResetPreviewRequest;
+    readonly previewExpiresAt: Date;
+    readonly fingerprint: string;
+}
+export interface PlatformAccountResetPreparedPreviewValidation extends StoredSnapshot {
+    readonly local: PlatformAccountResetLocalInspection;
+    readonly remote: PlatformAccountResetWorkosEvidence;
+}
+/**
+ * Release-A preview store. Local evidence is captured twice in short fenced transactions. WorkOS reads are
+ * bounded and happen between those transactions, with no database transaction or table lock held.
+ */
+export declare class PostgresPlatformAccountResetPreviewStore {
+    #private;
+    constructor(pool: PreviewPool, options: PreviewOptions);
+    preview(rawRequest: PlatformAccountResetPreviewRequest): Promise<PlatformAccountResetPreviewResult>;
+    assertUsable(evidence: PlatformAccountResetPreviewEvidence): Promise<PlatformAccountResetPreviewResult>;
+    prepareUsable(evidence: PlatformAccountResetPreviewEvidence, deadline?: number): Promise<PlatformAccountResetPreparedPreviewValidation>;
+    assertPrepared(connection: PlatformIdentityQueryable, evidence: PlatformAccountResetPreviewEvidence, prepared: PlatformAccountResetPreparedPreviewValidation): Promise<PlatformAccountResetPreviewResult>;
+}
+//# sourceMappingURL=platform-account-reset-preview-postgres.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-preview-postgres.d.ts","sourceRoot":"","sources":["../src/platform-account-reset-preview-postgres.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,kCAAkC,EAGxC,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAEL,KAAK,kCAAkC,EACxC,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EAEL,KAAK,mCAAmC,EACzC,MAAM,oDAAoD,CAAC;AAK5D,OAAO,EAGL,KAAK,iCAAiC,EACvC,MAAM,4CAA4C,CAAC;AASpD,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,sCAAsC,CAAC;AAChG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AAE3E,OAAO,EACL,gCAAgC,EAChC,KAAK,iCAAiC,GACvC,MAAM,4CAA4C,CAAC;AAEpD,KAAK,iBAAiB,GAAG,yBAAyB,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CAAE,CAAC;AAC9E,KAAK,WAAW,GAAG,yBAAyB,GAAG;IAC7C,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC5C,CAAC;AAEF,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED,UAAU,cAAc;IACtB,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC;IAClD,QAAQ,CAAC,kBAAkB,EAAE,mCAAmC,CAAC;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,gBAAgB,EAAE,SAAS;QAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,CAAC;KACzC,EAAE,CAAC;IACJ,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;IACpC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,IAAI,GAAG,MAAM,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,IAAI,GAAG,MAAM,CAAC;CACpC;AAQD,UAAU,eAAe;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;CAC9C;AAED,UAAU,cAAc;IACtB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,kCAAkC,CAAC;IACrD,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,6CAA8C,SAAQ,cAAc;IACnF,QAAQ,CAAC,KAAK,EAAE,mCAAmC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,kCAAkC,CAAC;CACrD;AAgBD;;;GAGG;AACH,qBAAa,wCAAwC;;gBAavC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc;IAYhD,OAAO,CACX,UAAU,EAAE,kCAAkC,GAC7C,OAAO,CAAC,iCAAiC,CAAC;IAqCvC,YAAY,CAChB,QAAQ,EAAE,mCAAmC,GAC5C,OAAO,CAAC,iCAAiC,CAAC;IAUvC,aAAa,CACjB,QAAQ,EAAE,mCAAmC,EAC7C,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,6CAA6C,CAAC;IAYnD,cAAc,CAClB,UAAU,EAAE,yBAAyB,EACrC,QAAQ,EAAE,mCAAmC,EAC7C,QAAQ,EAAE,6CAA6C,GACtD,OAAO,CAAC,iCAAiC,CAAC;CAkS9C"}

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-postgres.js

@@ -0,0 +1,286 @@
+import { randomUUID } from 'node:crypto';
+import { PlatformAccountResetPreviewRequestSchema, PlatformAccountResetResultSchema, } from './platform-account-reset.js';
+import { remainingPlatformAccountResetDispatchMilliseconds } from './platform-account-reset-dispatch-lock-postgres.js';
+import { canonicalJson, sha256Canonical } from './platform-account-reset-fingerprint.js';
+import { loadPlatformAccountResetWorkosEvidence, } from './platform-account-reset-preview-evidence-postgres.js';
+import { inspectPlatformAccountResetLocalEvidence, } from './platform-account-reset-preview-local-postgres.js';
+import { assertPlatformAccountResetCleanupEvidence, persistPlatformAccountResetPreview, } from './platform-account-reset-preview-persistence-postgres.js';
+import { combinePlatformAccountResetEvidence, PlatformAccountResetPreviewError, } from './platform-account-reset-preview-result.js';
+import { PostgresPlatformAuthLegacyInventorySources } from './platform-auth-inventory-legacy-sources-postgres.js';
+import { assertPlatformAuthInventorySourceFence, lockPlatformAuthInventorySourceFenceTargets, PLATFORM_ACCOUNT_RESET_PREVIEW_TABLES, readPlatformAuthInventorySourceEpoch, runPlatformAuthInventorySourceFenceTransaction, } from './platform-auth-inventory-source-fence-postgres.js';
+export { PlatformAccountResetPreviewError, } from './platform-account-reset-preview-result.js';
+const PREVIEW_TTL_MS = 15 * 60 * 1000;
+const DEFAULT_PROVIDER_TIMEOUT_MS = 5_000;
+const DEFAULT_LOCAL_CAPTURE_TIMEOUT_MS = 5_000;
+const MAX_LOCAL_CAPTURE_TIMEOUT_MS = 60_000;
+const ASSERTION_TABLES = [
+    ...PLATFORM_ACCOUNT_RESET_PREVIEW_TABLES,
+    'platform_account_reset_cleanup_ledger',
+];
+const EMPTY_REMOTE_EVIDENCE = {
+    resources: [],
+    providerUnavailableCount: 0,
+    conflictCount: 0,
+};
+/**
+ * Release-A preview store. Local evidence is captured twice in short fenced transactions. WorkOS reads are
+ * bounded and happen between those transactions, with no database transaction or table lock held.
+ */
+export class PostgresPlatformAccountResetPreviewStore {
+    #pool;
+    #options;
+    constructor(pool, options) {
+        this.#pool = pool;
+        this.#options = {
+            ...options,
+            now: options.now ?? (() => new Date()),
+            operationId: options.operationId ?? (() => `reset-${randomUUID()}`),
+            providerTimeoutMs: validTimeout(options.providerTimeoutMs),
+            localCaptureTimeoutMs: validLocalCaptureTimeout(options.localCaptureTimeoutMs),
+            previewTtlMs: validPreviewTtl(options.previewTtlMs),
+        };
+    }
+    async preview(rawRequest) {
+        const request = PlatformAccountResetPreviewRequestSchema.parse(rawRequest);
+        const operationId = this.#options.operationId();
+        const first = await this.#captureLocal(request, operationId);
+        const previewExpiresAt = validTimestamp(first.previewExpiresAt);
+        if (first.local.blockers.length !== 0)
+            return combinePlatformAccountResetEvidence(first.local, EMPTY_REMOTE_EVIDENCE, previewExpiresAt).result;
+        const remote = await this.#readRemote(first.local);
+        return runPlatformAuthInventorySourceFenceTransaction(this.#pool, async (connection) => {
+            await this.#assertSourceFence(connection);
+            await lockPlatformAuthInventorySourceFenceTargets(connection, first.local.targets);
+            await this.#assertDatabaseDeadline(connection, first.previewExpiresAt);
+            const second = await this.#inspectLocal(connection, request, operationId);
+            this.#assertSameLocalEvidence(first.local, second);
+            const inspection = combinePlatformAccountResetEvidence(second, remote, previewExpiresAt);
+            if (inspection.result.blockers.length !== 0)
+                return inspection.result;
+            await persistPlatformAccountResetPreview(connection, inspection, {
+                actorFingerprint: this.#options.actorFingerprint,
+                approvedTargetSetFingerprint: this.#options.approvedTargetSetFingerprint,
+                workosRealm: this.#options.workosRealm,
+                createdAt: first.createdAt,
+                previewExpiresAt: first.previewExpiresAt,
+            });
+            await this.#assertDatabaseDeadline(connection, first.previewExpiresAt);
+            return inspection.result;
+        }, this.#transactionOptions(PLATFORM_ACCOUNT_RESET_PREVIEW_TABLES));
+    }
+    async assertUsable(evidence) {
+        const prepared = await this.prepareUsable(evidence);
+        return runPlatformAuthInventorySourceFenceTransaction(this.#pool, (connection) => this.assertPrepared(connection, evidence, prepared), this.#transactionOptions(ASSERTION_TABLES));
+    }
+    async prepareUsable(evidence, deadline) {
+        const first = await this.#captureUsability(evidence, PLATFORM_ACCOUNT_RESET_PREVIEW_TABLES, deadline);
+        const remote = await this.#readRemote(first.local, deadline);
+        if (deadline !== undefined)
+            remainingPlatformAccountResetDispatchMilliseconds(deadline, Number.MAX_SAFE_INTEGER);
+        return { ...first, remote };
+    }
+    async assertPrepared(connection, evidence, prepared) {
+        await this.#assertSourceFence(connection);
+        const stored = await this.#loadStoredSnapshot(connection, evidence);
+        if (stored.fingerprint !== prepared.fingerprint)
+            throw new PlatformAccountResetPreviewError('operation_conflict');
+        await lockPlatformAuthInventorySourceFenceTargets(connection, stored.targetRows.map((row) => row.principal_id));
+        const local = await this.#inspectLocal(connection, stored.request, evidence.operationId, true);
+        this.#assertSameLocalEvidence(prepared.local, local);
+        const inspection = combinePlatformAccountResetEvidence(local, prepared.remote, stored.previewExpiresAt);
+        if (inspection.result.blockers.length !== 0)
+            throw new PlatformAccountResetPreviewError(inspection.result.blockers[0]?.code ?? 'operation_conflict');
+        this.#assertStoredInspection(stored, inspection);
+        await assertPlatformAccountResetCleanupEvidence(connection, evidence.operationId, inspection);
+        const parsedSafeResult = PlatformAccountResetResultSchema.safeParse(stored.stored.safe_result);
+        if (!parsedSafeResult.success ||
+            canonicalJson(parsedSafeResult.data) !== canonicalJson(inspection.safeResult))
+            throw new PlatformAccountResetPreviewError('operation_conflict');
+        return {
+            ...parsedSafeResult.data,
+            workosRealmFingerprint: local.workosRealmFingerprint,
+            previewExpiresAt: stored.previewExpiresAt.toISOString(),
+        };
+    }
+    async #captureLocal(request, operationId) {
+        return runPlatformAuthInventorySourceFenceTransaction(this.#pool, async (connection) => {
+            await this.#assertSourceFence(connection);
+            await lockPlatformAuthInventorySourceFenceTargets(connection, request.targetSet.principalIds);
+            const authority = await connection.query(`WITH authority AS MATERIALIZED (
+             SELECT clock_timestamp() AS created_at
+           )
+           SELECT authority.created_at::text AS created_at,
+                  (authority.created_at + $1::bigint * interval '1 millisecond')::text
+                    AS preview_expires_at
+             FROM authority`, [this.#options.previewTtlMs]);
+            const timestamp = authority.rows[0];
+            if (timestamp === undefined)
+                throw new PlatformAccountResetPreviewError('operation_conflict');
+            const local = await this.#inspectLocal(connection, request, operationId);
+            return {
+                local,
+                createdAt: timestamp.created_at,
+                previewExpiresAt: timestamp.preview_expires_at,
+            };
+        }, this.#transactionOptions(PLATFORM_ACCOUNT_RESET_PREVIEW_TABLES));
+    }
+    async #captureUsability(evidence, lockTables, deadline) {
+        return runPlatformAuthInventorySourceFenceTransaction(this.#pool, async (connection) => {
+            await this.#assertSourceFence(connection);
+            const stored = await this.#loadStoredSnapshot(connection, evidence);
+            await lockPlatformAuthInventorySourceFenceTargets(connection, stored.targetRows.map((row) => row.principal_id));
+            const local = await this.#inspectLocal(connection, stored.request, evidence.operationId, true);
+            return { ...stored, local };
+        }, this.#transactionOptions(lockTables, deadline));
+    }
+    #inspectLocal(connection, request, operationId, ignoreCurrentOperation = false) {
+        return inspectPlatformAccountResetLocalEvidence(connection, request, operationId, {
+            sourceAvailability: this.#options.sourceAvailability,
+            googleRealm: this.#options.googleRealm,
+            workosRealm: this.#options.workosRealm,
+            releaseSha: this.#options.releaseSha,
+            excludedSubjects: this.#options.excludedSubjects,
+            ignoreCurrentOperation,
+        });
+    }
+    async #readRemote(local, dispatchDeadline) {
+        const providerTimeoutMs = dispatchDeadline === undefined
+            ? this.#options.providerTimeoutMs
+            : remainingPlatformAccountResetDispatchMilliseconds(dispatchDeadline, this.#options.providerTimeoutMs);
+        const controller = new AbortController();
+        const deadline = new Date(Date.now() + providerTimeoutMs);
+        let timeout;
+        try {
+            timeout = setTimeout(() => controller.abort(new DOMException('account reset provider deadline exceeded', 'AbortError')), providerTimeoutMs);
+            return await loadPlatformAccountResetWorkosEvidence(local.normalizedContacts, this.#options.directory, this.#options.workosRealm, { signal: controller.signal, deadline });
+        }
+        finally {
+            if (timeout !== undefined)
+                clearTimeout(timeout);
+        }
+    }
+    async #loadStoredSnapshot(connection, evidence) {
+        const operation = await connection.query(`SELECT lifecycle, release_sha, rollout_generation::text, workos_realm,
+              source_epoch::text, preview_checksum, target_set_fingerprint,
+              request_fingerprint, safe_result, preview_expires_at, created_at
+         FROM platform_account_reset_operations
+        WHERE operation_id = $1
+          AND preview_expires_at > clock_timestamp()
+          AND preview_expires_at =
+              created_at + $2::bigint * interval '1 millisecond'
+        FOR SHARE`, [evidence.operationId, this.#options.previewTtlMs]);
+        const stored = operation.rows[0];
+        if (stored === undefined || stored.lifecycle !== 'previewed')
+            throw new PlatformAccountResetPreviewError('operation_conflict');
+        if (stored.release_sha !== evidence.releaseSha ||
+            evidence.releaseSha !== this.#options.releaseSha)
+            throw new PlatformAccountResetPreviewError('release_mismatch');
+        if (Number(stored.rollout_generation) !== evidence.expectedGeneration)
+            throw new PlatformAccountResetPreviewError('generation_mismatch');
+        if (evidence.previewChecksum === null || stored.preview_checksum !== evidence.previewChecksum)
+            throw new PlatformAccountResetPreviewError('operation_conflict');
+        if (stored.workos_realm !== this.#options.workosRealm)
+            throw new PlatformAccountResetPreviewError('operation_conflict');
+        const previewExpiresAt = new Date(stored.preview_expires_at);
+        const createdAt = new Date(stored.created_at);
+        if (!Number.isFinite(previewExpiresAt.getTime()) ||
+            !Number.isFinite(createdAt.getTime()) ||
+            previewExpiresAt.getTime() - createdAt.getTime() !== this.#options.previewTtlMs)
+            throw new PlatformAccountResetPreviewError('operation_conflict');
+        const targetRows = await connection.query(`SELECT principal_id, source_snapshot_fingerprint
+         FROM platform_account_reset_targets
+        WHERE operation_id = $1 AND lifecycle = 'previewed'
+        ORDER BY principal_id
+        FOR SHARE`, [evidence.operationId]);
+        if (targetRows.rows.length !== 3)
+            throw new PlatformAccountResetPreviewError('operation_conflict');
+        const currentEpoch = Number(await readPlatformAuthInventorySourceEpoch(connection));
+        if (currentEpoch !== Number(stored.source_epoch))
+            throw new PlatformAccountResetPreviewError('source_epoch_mismatch');
+        const request = {
+            schemaVersion: 1,
+            targetSet: {
+                schemaVersion: 1,
+                principalIds: targetRows.rows.map((row) => row.principal_id),
+            },
+            releaseSha: stored.release_sha,
+            expectedGeneration: Number(stored.rollout_generation),
+            sourceEpoch: Number(stored.source_epoch),
+            workosRealm: stored.workos_realm,
+        };
+        return {
+            stored,
+            targetRows: targetRows.rows,
+            request,
+            previewExpiresAt,
+            fingerprint: sha256Canonical({
+                schemaVersion: 1,
+                label: 'platform_account_reset_stored_preview',
+                stored: {
+                    ...stored,
+                    preview_expires_at: previewExpiresAt.toISOString(),
+                    created_at: createdAt.toISOString(),
+                },
+                targetRows: targetRows.rows,
+            }),
+        };
+    }
+    async #assertSourceFence(connection) {
+        const sources = new PostgresPlatformAuthLegacyInventorySources({
+            googleRealm: this.#options.googleRealm,
+            sourceAvailability: this.#options.sourceAvailability,
+            excludedSubjects: this.#options.excludedSubjects,
+        });
+        await sources.assertManifest(connection);
+        await assertPlatformAuthInventorySourceFence(connection, this.#options.sourceAvailability);
+    }
+    #assertSameLocalEvidence(first, second) {
+        if (first.evidenceFingerprint !== second.evidenceFingerprint)
+            throw new PlatformAccountResetPreviewError('operation_conflict');
+    }
+    #assertStoredInspection(stored, inspection) {
+        if (inspection.result.previewChecksum !== stored.stored.preview_checksum ||
+            inspection.result.targetSetFingerprint !== stored.stored.target_set_fingerprint ||
+            inspection.result.requestFingerprint !== stored.stored.request_fingerprint)
+            throw new PlatformAccountResetPreviewError('operation_conflict');
+        for (const row of stored.targetRows) {
+            if (inspection.targetSnapshots.get(row.principal_id) !== row.source_snapshot_fingerprint)
+                throw new PlatformAccountResetPreviewError('operation_conflict');
+        }
+    }
+    async #assertDatabaseDeadline(connection, previewExpiresAt) {
+        const live = await connection.query('SELECT $1::timestamptz > clock_timestamp() AS live', [previewExpiresAt]);
+        if (live.rows[0]?.live !== true)
+            throw new PlatformAccountResetPreviewError('operation_conflict');
+    }
+    #transactionOptions(lockTables, deadline) {
+        const timeout = deadline === undefined
+            ? this.#options.localCaptureTimeoutMs
+            : remainingPlatformAccountResetDispatchMilliseconds(deadline, this.#options.localCaptureTimeoutMs);
+        return {
+            lockTables,
+            lockTimeoutMs: timeout,
+            statementTimeoutMs: timeout,
+        };
+    }
+}
+function validTimeout(value) {
+    return value !== undefined && Number.isFinite(value) && value > 0
+        ? Math.floor(value)
+        : DEFAULT_PROVIDER_TIMEOUT_MS;
+}
+function validLocalCaptureTimeout(value) {
+    return value !== undefined && Number.isSafeInteger(value) && value > 0
+        ? Math.min(value, MAX_LOCAL_CAPTURE_TIMEOUT_MS)
+        : DEFAULT_LOCAL_CAPTURE_TIMEOUT_MS;
+}
+function validPreviewTtl(value) {
+    return value !== undefined && Number.isSafeInteger(value) && value > 0 ? value : PREVIEW_TTL_MS;
+}
+function validTimestamp(value) {
+    const timestamp = new Date(value);
+    if (!Number.isFinite(timestamp.getTime()))
+        throw new PlatformAccountResetPreviewError('operation_conflict');
+    return timestamp;
+}
+//# sourceMappingURL=platform-account-reset-preview-postgres.js.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-preview-postgres.js","sourceRoot":"","sources":["../src/platform-account-reset-preview-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAEL,wCAAwC,EACxC,gCAAgC,GACjC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,iDAAiD,EAAE,MAAM,oDAAoD,CAAC;AACvH,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EACL,sCAAsC,GAEvC,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EACL,wCAAwC,GAEzC,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EACL,yCAAyC,EACzC,kCAAkC,GACnC,MAAM,0DAA0D,CAAC;AAClE,OAAO,EACL,mCAAmC,EACnC,gCAAgC,GAEjC,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,0CAA0C,EAAE,MAAM,sDAAsD,CAAC;AAClH,OAAO,EACL,sCAAsC,EACtC,2CAA2C,EAC3C,qCAAqC,EACrC,oCAAoC,EACpC,8CAA8C,GAC/C,MAAM,oDAAoD,CAAC;AAK5D,OAAO,EACL,gCAAgC,GAEjC,MAAM,4CAA4C,CAAC;AAuEpD,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACtC,MAAM,2BAA2B,GAAG,KAAK,CAAC;AAC1C,MAAM,gCAAgC,GAAG,KAAK,CAAC;AAC/C,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAC5C,MAAM,gBAAgB,GAAG;IACvB,GAAG,qCAAqC;IACxC,uCAAuC;CAC/B,CAAC;AACX,MAAM,qBAAqB,GAAuC;IAChE,SAAS,EAAE,EAAE;IACb,wBAAwB,EAAE,CAAC;IAC3B,aAAa,EAAE,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,MAAM,OAAO,wCAAwC;IAC1C,KAAK,CAAc;IACnB,QAAQ,CASb;IAEJ,YAAY,IAAiB,EAAE,OAAuB;QACpD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG;YACd,GAAG,OAAO;YACV,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;YACtC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,UAAU,EAAE,EAAE,CAAC;YACnE,iBAAiB,EAAE,YAAY,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAC1D,qBAAqB,EAAE,wBAAwB,CAAC,OAAO,CAAC,qBAAqB,CAAC;YAC9E,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC;SACpD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACX,UAA8C;QAE9C,MAAM,OAAO,GAAG,wCAAwC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7D,MAAM,gBAAgB,GAAG,cAAc,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACnC,OAAO,mCAAmC,CACxC,KAAK,CAAC,KAAK,EACX,qBAAqB,EACrB,gBAAgB,CACjB,CAAC,MAAM,CAAC;QAEX,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnD,OAAO,8CAA8C,CACnD,IAAI,CAAC,KAAK,EACV,KAAK,EAAE,UAAU,EAAE,EAAE;YACnB,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAC1C,MAAM,2CAA2C,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnF,MAAM,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YAC1E,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACnD,MAAM,UAAU,GAAG,mCAAmC,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;YACzF,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,UAAU,CAAC,MAAM,CAAC;YACtE,MAAM,kCAAkC,CAAC,UAAU,EAAE,UAAU,EAAE;gBAC/D,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;gBAChD,4BAA4B,EAAE,IAAI,CAAC,QAAQ,CAAC,4BAA4B;gBACxE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;gBACtC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aACzC,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACvE,OAAO,UAAU,CAAC,MAAM,CAAC;QAC3B,CAAC,EACD,IAAI,CAAC,mBAAmB,CAAC,qCAAqC,CAAC,CAChE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,QAA6C;QAE7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAEpD,OAAO,8CAA8C,CACnD,IAAI,CAAC,KAAK,EACV,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,EACnE,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAC3C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,QAA6C,EAC7C,QAAiB;QAEjB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CACxC,QAAQ,EACR,qCAAqC,EACrC,QAAQ,CACT,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,QAAQ,KAAK,SAAS;YACxB,iDAAiD,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACvF,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,UAAqC,EACrC,QAA6C,EAC7C,QAAuD;QAEvD,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;YAC7C,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,2CAA2C,CAC/C,UAAU,EACV,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CACjD,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,mCAAmC,CACpD,KAAK,EACL,QAAQ,CAAC,MAAM,EACf,MAAM,CAAC,gBAAgB,CACxB,CAAC;QACF,IAAI,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACzC,MAAM,IAAI,gCAAgC,CACxC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,oBAAoB,CAC5D,CAAC;QACJ,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACjD,MAAM,yCAAyC,CAAC,UAAU,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC9F,MAAM,gBAAgB,GAAG,gCAAgC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC/F,IACE,CAAC,gBAAgB,CAAC,OAAO;YACzB,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC;YAE7E,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;QACnE,OAAO;YACL,GAAG,gBAAgB,CAAC,IAAI;YACxB,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,WAAW,EAAE;SACxD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAA2C,EAC3C,WAAmB;QAEnB,OAAO,8CAA8C,CACnD,IAAI,CAAC,KAAK,EACV,KAAK,EAAE,UAAU,EAAE,EAAE;YACnB,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAC1C,MAAM,2CAA2C,CAC/C,UAAU,EACV,OAAO,CAAC,SAAS,CAAC,YAAY,CAC/B,CAAC;YACF,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,KAAK,CAItC;;;;;;4BAMkB,EAClB,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAC7B,CAAC;YACF,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,SAAS,KAAK,SAAS;gBACzB,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;YACzE,OAAO;gBACL,KAAK;gBACL,SAAS,EAAE,SAAS,CAAC,UAAU;gBAC/B,gBAAgB,EAAE,SAAS,CAAC,kBAAkB;aAC/C,CAAC;QACJ,CAAC,EACD,IAAI,CAAC,mBAAmB,CAAC,qCAAqC,CAAC,CAChE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,QAA6C,EAC7C,UAA6B,EAC7B,QAAiB;QAEjB,OAAO,8CAA8C,CACnD,IAAI,CAAC,KAAK,EACV,KAAK,EAAE,UAAU,EAAE,EAAE;YACnB,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACpE,MAAM,2CAA2C,CAC/C,UAAU,EACV,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CACjD,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CACpC,UAAU,EACV,MAAM,CAAC,OAAO,EACd,QAAQ,CAAC,WAAW,EACpB,IAAI,CACL,CAAC;YACF,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC,EACD,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAC/C,CAAC;IACJ,CAAC;IAED,aAAa,CACX,UAAqC,EACrC,OAA2C,EAC3C,WAAmB,EACnB,sBAAsB,GAAG,KAAK;QAE9B,OAAO,wCAAwC,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE;YAChF,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB;YACpD,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;YACtC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;YACtC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;YACpC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;YAChD,sBAAsB;SACvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAA0C,EAC1C,gBAAyB;QAEzB,MAAM,iBAAiB,GACrB,gBAAgB,KAAK,SAAS;YAC5B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB;YACjC,CAAC,CAAC,iDAAiD,CAC/C,gBAAgB,EAChB,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAChC,CAAC;QACR,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,CAAC,CAAC;QAC1D,IAAI,OAAkD,CAAC;QACvD,IAAI,CAAC;YACH,OAAO,GAAG,UAAU,CAClB,GAAG,EAAE,CACH,UAAU,CAAC,KAAK,CACd,IAAI,YAAY,CAAC,0CAA0C,EAAE,YAAY,CAAC,CAC3E,EACH,iBAAiB,CAClB,CAAC;YACF,OAAO,MAAM,sCAAsC,CACjD,KAAK,CAAC,kBAAkB,EACxB,IAAI,CAAC,QAAQ,CAAC,SAAS,EACvB,IAAI,CAAC,QAAQ,CAAC,WAAW,EACzB,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,CACxC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO,KAAK,SAAS;gBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,UAAqC,EACrC,QAA6C;QAE7C,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,KAAK,CACtC;;;;;;;;kBAQY,EACZ,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CACnD,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,WAAW;YAC1D,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;QACnE,IACE,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,UAAU;YAC1C,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,QAAQ,CAAC,UAAU;YAEhD,MAAM,IAAI,gCAAgC,CAAC,kBAAkB,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,QAAQ,CAAC,kBAAkB;YACnE,MAAM,IAAI,gCAAgC,CAAC,qBAAqB,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,IAAI,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,eAAe;YAC3F,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,QAAQ,CAAC,WAAW;YACnD,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;QAEnE,MAAM,gBAAgB,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9C,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAC5C,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACrC,gBAAgB,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,YAAY;YAE/E,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,KAAK,CACvC;;;;kBAIY,EACZ,CAAC,QAAQ,CAAC,WAAW,CAAC,CACvB,CAAC;QACF,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAC9B,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,oCAAoC,CAAC,UAAU,CAAC,CAAC,CAAC;QACpF,IAAI,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;YAC9C,MAAM,IAAI,gCAAgC,CAAC,uBAAuB,CAAC,CAAC;QACtE,MAAM,OAAO,GAAuC;YAClD,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE;gBACT,aAAa,EAAE,CAAC;gBAChB,YAAY,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAA6B;aACzF;YACD,UAAU,EAAE,MAAM,CAAC,WAAW;YAC9B,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;YACrD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;YACxC,WAAW,EAAE,MAAM,CAAC,YAAY;SACjC,CAAC;QACF,OAAO;YACL,MAAM;YACN,UAAU,EAAE,UAAU,CAAC,IAAI;YAC3B,OAAO;YACP,gBAAgB;YAChB,WAAW,EAAE,eAAe,CAAC;gBAC3B,aAAa,EAAE,CAAC;gBAChB,KAAK,EAAE,uCAAuC;gBAC9C,MAAM,EAAE;oBACN,GAAG,MAAM;oBACT,kBAAkB,EAAE,gBAAgB,CAAC,WAAW,EAAE;oBAClD,UAAU,EAAE,SAAS,CAAC,WAAW,EAAE;iBACpC;gBACD,UAAU,EAAE,UAAU,CAAC,IAAI;aAC5B,CAAC;SACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,UAAqC;QAC5D,MAAM,OAAO,GAAG,IAAI,0CAA0C,CAAC;YAC7D,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;YACtC,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB;YACpD,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB;SACjD,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,sCAAsC,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC7F,CAAC;IAED,wBAAwB,CACtB,KAA0C,EAC1C,MAA2C;QAE3C,IAAI,KAAK,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB;YAC1D,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;IACrE,CAAC;IAED,uBAAuB,CACrB,MAAsB,EACtB,UAAkE;QAElE,IACE,UAAU,CAAC,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,MAAM,CAAC,gBAAgB;YACpE,UAAU,CAAC,MAAM,CAAC,oBAAoB,KAAK,MAAM,CAAC,MAAM,CAAC,sBAAsB;YAC/E,UAAU,CAAC,MAAM,CAAC,kBAAkB,KAAK,MAAM,CAAC,MAAM,CAAC,mBAAmB;YAE1E,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;QACnE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACpC,IAAI,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,2BAA2B;gBACtF,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,UAAqC,EACrC,gBAAwB;QAExB,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,KAAK,CACjC,oDAAoD,EACpD,CAAC,gBAAgB,CAAC,CACnB,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,IAAI;YAC7B,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;IACrE,CAAC;IAED,mBAAmB,CAAC,UAA6B,EAAE,QAAiB;QAClE,MAAM,OAAO,GACX,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,qBAAqB;YACrC,CAAC,CAAC,iDAAiD,CAC/C,QAAQ,EACR,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CACpC,CAAC;QACR,OAAO;YACL,UAAU;YACV,aAAa,EAAE,OAAO;YACtB,kBAAkB,EAAE,OAAO;SAC5B,CAAC;IACJ,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,OAAO,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAC/D,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACnB,CAAC,CAAC,2BAA2B,CAAC;AAClC,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAyB;IACzD,OAAO,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACpE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,4BAA4B,CAAC;QAC/C,CAAC,CAAC,gCAAgC,CAAC;AACvC,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,OAAO,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC;AAClG,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;IACnE,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-result.d.ts

@@ -0,0 +1,21 @@
+import type { PlatformAccountResetBlockerCode, PlatformAccountResetResult } from './platform-account-reset.js';
+import type { PlatformAccountResetCleanupResource } from './platform-account-reset-ownership-postgres.js';
+import type { PlatformAccountResetWorkosEvidence } from './platform-account-reset-preview-evidence-postgres.js';
+import type { PlatformAccountResetLocalInspection } from './platform-account-reset-preview-local-postgres.js';
+export interface PlatformAccountResetPreviewResult extends PlatformAccountResetResult {
+    readonly workosRealmFingerprint: string;
+    readonly previewExpiresAt: string;
+}
+export declare class PlatformAccountResetPreviewError extends Error {
+    readonly code: PlatformAccountResetBlockerCode;
+    constructor(code: PlatformAccountResetBlockerCode);
+}
+export interface PlatformAccountResetFrozenInspection {
+    readonly result: PlatformAccountResetPreviewResult;
+    readonly safeResult: PlatformAccountResetResult;
+    readonly targetSnapshots: ReadonlyMap<string, string>;
+    readonly cleanupResources: readonly PlatformAccountResetCleanupResource[];
+    readonly cleanupSetFingerprint: string;
+}
+export declare function combinePlatformAccountResetEvidence(local: PlatformAccountResetLocalInspection, remote: PlatformAccountResetWorkosEvidence, previewExpiresAt: Date): PlatformAccountResetFrozenInspection;
+//# sourceMappingURL=platform-account-reset-preview-result.d.ts.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-preview-result.d.ts","sourceRoot":"","sources":["../src/platform-account-reset-preview-result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,+BAA+B,EAC/B,0BAA0B,EAC3B,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,gDAAgD,CAAC;AAC1G,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,uDAAuD,CAAC;AAChH,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,oDAAoD,CAAC;AAE9G,MAAM,WAAW,iCAAkC,SAAQ,0BAA0B;IACnF,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC;gBAEnC,IAAI,EAAE,+BAA+B;CAKlD;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC;IACnD,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAC;IAChD,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,QAAQ,CAAC,gBAAgB,EAAE,SAAS,mCAAmC,EAAE,CAAC;IAC1E,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;CACxC;AAED,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,mCAAmC,EAC1C,MAAM,EAAE,kCAAkC,EAC1C,gBAAgB,EAAE,IAAI,GACrB,oCAAoC,CA4EtC"}

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-result.js

@@ -0,0 +1,81 @@
+import { canonicalJson, sha256Canonical } from './platform-account-reset-fingerprint.js';
+export class PlatformAccountResetPreviewError extends Error {
+    code;
+    constructor(code) {
+        super(`Platform account-reset preview rejected: ${code}`);
+        this.name = 'PlatformAccountResetPreviewError';
+        this.code = code;
+    }
+}
+export function combinePlatformAccountResetEvidence(local, remote, previewExpiresAt) {
+    const blockers = new Map(local.blockers.map((entry) => [entry.code, entry.count]));
+    if (remote.providerUnavailableCount !== 0)
+        blockers.set('provider_cleanup_pending', remote.providerUnavailableCount);
+    if (remote.conflictCount !== 0)
+        blockers.set('workos_user_conflict', remote.conflictCount);
+    const cleanupResources = [...local.cleanupResources, ...remote.resources].sort((left, right) => canonicalJson(left).localeCompare(canonicalJson(right)));
+    const cleanupSetFingerprint = sha256Canonical({
+        schemaVersion: 1,
+        label: 'platform_account_reset_cleanup_set',
+        resources: cleanupResources,
+    });
+    const targetSnapshots = new Map();
+    for (const target of local.targets) {
+        targetSnapshots.set(target, sha256Canonical({
+            ...(local.targetEvidence.get(target) ?? {}),
+            workos: remote.resources.filter((resource) => resource.locator.principalId === target),
+        }));
+    }
+    const eligibilityFingerprint = sha256Canonical({
+        schemaVersion: 1,
+        label: 'platform_account_reset_eligibility',
+        targetSnapshots: [...targetSnapshots],
+    });
+    const targetSetFingerprint = sha256Canonical({
+        schemaVersion: 1,
+        label: 'platform_account_reset_target_set',
+        principalIds: local.targets,
+        eligibilityFingerprint,
+    });
+    const previewChecksum = sha256Canonical({
+        schemaVersion: 1,
+        releaseSha: local.request.releaseSha,
+        rolloutGeneration: local.request.expectedGeneration,
+        workosRealmFingerprint: local.workosRealmFingerprint,
+        sourceEpoch: local.request.sourceEpoch,
+        targetSetFingerprint,
+        ownershipFingerprint: local.ownershipFingerprint,
+        cleanupSetFingerprint,
+    });
+    const blockerList = [...blockers]
+        .map(([code, count]) => ({ code, count }))
+        .sort((left, right) => left.code.localeCompare(right.code));
+    const safeResult = {
+        schemaVersion: 1,
+        operationId: local.operationId,
+        lifecycle: 'previewed',
+        releaseSha: local.request.releaseSha,
+        rolloutGeneration: local.request.expectedGeneration,
+        sourceEpoch: local.request.sourceEpoch,
+        previewChecksum,
+        targetSetFingerprint,
+        requestFingerprint: local.requestFingerprint,
+        counts: {
+            ...local.counts,
+            providerObjectCount: local.counts.providerObjectCount + remote.resources.length,
+        },
+        blockers: blockerList,
+    };
+    return {
+        safeResult,
+        result: {
+            ...safeResult,
+            workosRealmFingerprint: local.workosRealmFingerprint,
+            previewExpiresAt: previewExpiresAt.toISOString(),
+        },
+        targetSnapshots,
+        cleanupResources,
+        cleanupSetFingerprint,
+    };
+}
+//# sourceMappingURL=platform-account-reset-preview-result.js.map

package/node_modules/@noodle-borg/service/dist/platform-account-reset-preview-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-account-reset-preview-result.js","sourceRoot":"","sources":["../src/platform-account-reset-preview-result.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAUzF,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IAChD,IAAI,CAAkC;IAE/C,YAAY,IAAqC;QAC/C,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAUD,MAAM,UAAU,mCAAmC,CACjD,KAA0C,EAC1C,MAA0C,EAC1C,gBAAsB;IAEtB,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CACzD,CAAC;IACF,IAAI,MAAM,CAAC,wBAAwB,KAAK,CAAC;QACvC,QAAQ,CAAC,GAAG,CAAC,0BAA0B,EAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC;QAAE,QAAQ,CAAC,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3F,MAAM,gBAAgB,GAAG,CAAC,GAAG,KAAK,CAAC,gBAAgB,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC7F,aAAa,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CACxD,CAAC;IACF,MAAM,qBAAqB,GAAG,eAAe,CAAC;QAC5C,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,oCAAoC;QAC3C,SAAS,EAAE,gBAAgB;KAC5B,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,eAAe,CAAC,GAAG,CACjB,MAAM,EACN,eAAe,CAAC;YACd,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC;SACvF,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,sBAAsB,GAAG,eAAe,CAAC;QAC7C,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,oCAAoC;QAC3C,eAAe,EAAE,CAAC,GAAG,eAAe,CAAC;KACtC,CAAC,CAAC;IACH,MAAM,oBAAoB,GAAG,eAAe,CAAC;QAC3C,aAAa,EAAE,CAAC;QAChB,KAAK,EAAE,mCAAmC;QAC1C,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,sBAAsB;KACvB,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,eAAe,CAAC;QACtC,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;QACpC,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,kBAAkB;QACnD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;QACtC,oBAAoB;QACpB,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,qBAAqB;KACtB,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;SACzC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,UAAU,GAA+B;QAC7C,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,WAAW;QACtB,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;QACpC,iBAAiB,EAAE,KAAK,CAAC,OAAO,CAAC,kBAAkB;QACnD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;QACtC,eAAe;QACf,oBAAoB;QACpB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,MAAM,EAAE;YACN,GAAG,KAAK,CAAC,MAAM;YACf,mBAAmB,EAAE,KAAK,CAAC,MAAM,CAAC,mBAAmB,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM;SAChF;QACD,QAAQ,EAAE,WAAW;KACtB,CAAC;IACF,OAAO;QACL,UAAU;QACV,MAAM,EAAE;YACN,GAAG,UAAU;YACb,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,gBAAgB,EAAE,gBAAgB,CAAC,WAAW,EAAE;SACjD;QACD,eAAe;QACf,gBAAgB;QAChB,qBAAqB;KACtB,CAAC;AACJ,CAAC"}