@poa-box/core 0.1.0

package/dist/graph/documents/beacons.js

@@ -0,0 +1,345 @@
+"use strict";
+/**
+ * Beacon / implementation queries — "which implementation is behind this proxy,
+ * and which version is that".
+ *
+ * Everything here replaces an RPC read that was either expensive or silently
+ * unreliable:
+ *
+ *   - eth_getStorageAt(proxy, EIP-1967 beacon slot) + beacon.implementation()
+ *     → RegisteredContract.beacon → SwitchableBeaconContract.mode → the
+ *       implementation the beacon resolves to.
+ *   - PoaManager.getCurrentImplementationById(typeId)
+ *     → Beacon(typeId).currentImplementation.
+ *   - OrgRegistry.isAutoUpgrade(keccak256(orgId ‖ typeId))
+ *     → RegisteredContract.autoUpgrade (and no ContractUnknown revert path).
+ *   - eth_getLogs(ImplementationRegistered, block 0 → latest)
+ *     → BeaconUpgradeEvent.{newImplementation,version}.
+ *
+ * VERIFIED AGAINST LIVE DATA (Gnosis poa-gnosis-v-1 and Arbitrum poa-arb-v-1,
+ * 2026-07-30) — every field selected below is non-null on real rows, with two
+ * deliberate exceptions that are handled as gaps rather than trusted:
+ *
+ *   - SwitchableBeaconContract.mirrorBeacon is NULL on EVERY live row on BOTH
+ *     deployments. The Mirror branch therefore joins the global Beacon by
+ *     typeId (RegisteredContract.typeId), never by mirrorBeacon.
+ *   - SwitchableBeaconContract.pinnedImplementation is NULL on every live row
+ *     and there is not a single row with mode = "Pinned" on either chain, so
+ *     the field has never been observed populated. Pinned beacons therefore
+ *     fall back to RPC unless the row actually carries a value.
+ *
+ * The join that IS used was checked end to end on Gnosis org "Test6":
+ *   RegisteredContract(TaskManager).beacon = 0x4af43d51…d4da7c5
+ *   == eth_getStorageAt(proxy 0x3d93f0d0…, EIP-1967 beacon slot)
+ *   SwitchableBeaconContract(0x4af43d51…).mode = "Mirror"
+ *   Beacon("gnosis-<TaskManager typeId>").currentImplementation
+ *     = 0x7833c467… == beacon.implementation() over RPC. Match.
+ *
+ * A separate workstream is adding an implementation-address-keyed entity to
+ * the subgraph (Beacon.currentImplementation only answers for the CURRENT
+ * mirror implementation, not pinned or historical ones). Both query sets are
+ * expressed as tier ARRAYS fed to queryWithFieldFallback so that entity can be
+ * slotted in as a new tier 0 without touching any caller.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IMPLEMENTATION_VERSIONS_BEACONS_ONLY = exports.IMPLEMENTATION_VERSIONS_FULL = exports.ORG_MODULE_BEACONS_MINIMAL = exports.ORG_MODULE_BEACONS_NO_SWITCHABLE = exports.ORG_MODULE_BEACONS_FULL = void 0;
+exports.checksumAddress = checksumAddress;
+exports.buildOrgBeaconSnapshot = buildOrgBeaconSnapshot;
+exports.resolveImplementationFromSnapshot = resolveImplementationFromSnapshot;
+exports.latestImplementationFromSnapshot = latestImplementationFromSnapshot;
+exports.autoUpgradeFromSnapshot = autoUpgradeFromSnapshot;
+exports.beaconAddressFromSnapshot = beaconAddressFromSnapshot;
+exports.fetchOrgBeaconSnapshot = fetchOrgBeaconSnapshot;
+exports.fetchImplementationVersionIndex = fetchImplementationVersionIndex;
+const ethers_1 = require("ethers");
+// ────────────────────────── documents (tiered) ──────────────────────────
+/** Tier 0: RegisteredContract + SwitchableBeaconContract + global Beacon. */
+exports.ORG_MODULE_BEACONS_FULL = `
+  query OrgModuleBeacons($orgId: Bytes!, $orgIdStr: String!) {
+    registeredContracts(first: 100, where: { orgId: $orgId }) {
+      id
+      typeId
+      proxy
+      beacon
+      autoUpgrade
+    }
+    switchableBeaconContracts(first: 100, where: { organization: $orgIdStr }) {
+      id
+      typeId
+      mode
+      mirrorBeacon
+      pinnedImplementation
+    }
+    beacons(first: 100) {
+      typeId
+      typeName
+      currentImplementation
+      version
+      # Needed to prove a Mirror beacon still mirrors THIS global beacon.
+      # Only tier 0 selects it: tiers 1/2 carry no SwitchableBeaconContract rows,
+      # so their mode is unknown and they already degrade to RPC.
+      beaconAddress
+    }
+  }
+`;
+/** Tier 1: deployment without SwitchableBeaconContract (mode unknown → RPC). */
+exports.ORG_MODULE_BEACONS_NO_SWITCHABLE = `
+  query OrgModuleBeaconsNoSwitchable($orgId: Bytes!) {
+    registeredContracts(first: 100, where: { orgId: $orgId }) {
+      id
+      typeId
+      proxy
+      beacon
+      autoUpgrade
+    }
+    beacons(first: 100) {
+      typeId
+      typeName
+      currentImplementation
+      version
+    }
+  }
+`;
+/** Tier 2: global beacons only (still kills getCurrentImplementationById). */
+exports.ORG_MODULE_BEACONS_MINIMAL = `
+  query OrgModuleBeaconsMinimal {
+    beacons(first: 100) {
+      typeId
+      typeName
+      currentImplementation
+      version
+    }
+  }
+`;
+/** Tier 0: implementation → version index (global beacons + upgrade history). */
+exports.IMPLEMENTATION_VERSIONS_FULL = `
+  query ImplementationVersions($first: Int!, $skip: Int!) {
+    beacons(first: 100) {
+      typeId
+      typeName
+      currentImplementation
+      version
+    }
+    beaconUpgradeEvents(first: $first, skip: $skip, orderBy: upgradedAt, orderDirection: asc) {
+      typeId
+      newImplementation
+      version
+    }
+  }
+`;
+/** Tier 1: deployment without BeaconUpgradeEvent — current implementations only. */
+exports.IMPLEMENTATION_VERSIONS_BEACONS_ONLY = `
+  query ImplementationVersionsBeaconsOnly {
+    beacons(first: 100) {
+      typeId
+      typeName
+      currentImplementation
+      version
+    }
+  }
+`;
+function lower(value) {
+    return typeof value === 'string' && value.length > 0 ? value.toLowerCase() : null;
+}
+/**
+ * Checksum an address that came from the subgraph (which lowercases them) so
+ * subgraph-served values are byte-identical to the RPC-served ones the JSON
+ * output has always carried. Returns null for anything unparseable/zero.
+ */
+function checksumAddress(value) {
+    if (!value)
+        return null;
+    try {
+        const addr = ethers_1.ethers.utils.getAddress(value);
+        return addr === ethers_1.ethers.constants.AddressZero ? null : addr;
+    }
+    catch {
+        return null;
+    }
+}
+/** Build the per-typeId index from raw query rows (pure — unit testable). */
+function buildOrgBeaconSnapshot(data, tierIndex = 0) {
+    const byTypeId = new Map();
+    const entry = (typeId) => {
+        const key = typeId.toLowerCase();
+        let e = byTypeId.get(key);
+        if (!e) {
+            e = {};
+            byTypeId.set(key, e);
+        }
+        return e;
+    };
+    for (const beacon of data.beacons ?? []) {
+        if (beacon?.typeId)
+            entry(beacon.typeId).globalBeacon = beacon;
+    }
+    for (const rc of data.registeredContracts ?? []) {
+        if (rc?.typeId)
+            entry(rc.typeId).registered = rc;
+    }
+    // Switchable beacons are joined through RegisteredContract.beacon (the exact
+    // link) rather than through typeId, and NEVER through mirrorBeacon, which is
+    // null on every live row.
+    const switchableByAddress = new Map();
+    for (const sb of data.switchableBeaconContracts ?? []) {
+        const key = lower(sb?.id);
+        if (key)
+            switchableByAddress.set(key, sb);
+    }
+    for (const e of byTypeId.values()) {
+        const beaconAddr = lower(e.registered?.beacon);
+        if (!beaconAddr)
+            continue;
+        const sb = switchableByAddress.get(beaconAddr);
+        if (sb)
+            e.switchable = sb;
+    }
+    return { byTypeId, tierIndex };
+}
+/**
+ * Which implementation the org's module proxy currently delegates to, per the
+ * subgraph. Returns null whenever the subgraph cannot answer with confidence —
+ * the caller must then fall back to RPC. Never guesses.
+ */
+function resolveImplementationFromSnapshot(snapshot, typeId) {
+    const entry = snapshot?.byTypeId.get(typeId.toLowerCase());
+    if (!entry)
+        return null;
+    const mode = entry.switchable?.mode ?? null;
+    // The deployed mappings write exactly two strings: "Mirror" (handleMirrorSet /
+    // autoUpgrade registration) and "Static" (handlePinned). "Pinned" is NOT one of
+    // them — it is accepted only as a forward-compatible alias in case the schema is
+    // ever renamed, so that a rename cannot silently reclassify a pinned beacon.
+    if (mode === 'Static' || mode === 'Pinned') {
+        // pinnedImplementation has never been observed populated on any live row
+        // (there is not one pinned beacon on Gnosis or Arbitrum). Trust it only
+        // when the row genuinely carries an address; otherwise fall back to RPC.
+        const pinned = checksumAddress(entry.switchable?.pinnedImplementation);
+        if (!pinned)
+            return null;
+        return { implementation: pinned, version: null, mode };
+    }
+    if (mode === 'Mirror') {
+        // A Mirror beacon points at whatever SwitchableBeacon.setMirror(addr) was last
+        // given, and that target only has to be a contract with a non-zero
+        // implementation — nothing ties it to the POA global beacon for this typeId.
+        // So joining the global beacon by typeId is only sound while the org still
+        // mirrors the global beacon. mirrorBeacon is null on all 101 live rows because
+        // the SwitchableBeacon CONSTRUCTOR sets it without emitting MirrorSet; the
+        // first real setMirror populates it. When it is populated and disagrees with
+        // the global beacon's address, fail closed to RPC rather than reporting the
+        // global implementation with upToDate: true.
+        const mirror = entry.switchable?.mirrorBeacon;
+        const globalBeaconAddress = entry.globalBeacon?.beaconAddress;
+        if (mirror && globalBeaconAddress && mirror.toLowerCase() !== globalBeaconAddress.toLowerCase()) {
+            return null;
+        }
+        const impl = checksumAddress(entry.globalBeacon?.currentImplementation);
+        if (!impl)
+            return null;
+        return { implementation: impl, version: entry.globalBeacon?.version ?? null, mode };
+    }
+    // Unknown/absent mode: a beacon we cannot classify may be pinned, and
+    // assuming Mirror would report the wrong implementation. Fall back to RPC.
+    return null;
+}
+/** Latest protocol implementation for a module type (PoaManager equivalent). */
+function latestImplementationFromSnapshot(snapshot, typeId) {
+    const beacon = snapshot?.byTypeId.get(typeId.toLowerCase())?.globalBeacon;
+    return checksumAddress(beacon?.currentImplementation);
+}
+/**
+ * Registration-time autoUpgrade HINT — NOT an OrgRegistry.isAutoUpgrade equivalent.
+ *
+ * The deployed subgraph writes RegisteredContract.autoUpgrade once, inside
+ * handleContractRegistered, and never again: schema.graphql annotates it
+ * "immutable, set at registration" and there is no AutoUpgradeSet handler at all.
+ * OrgRegistry.setAutoUpgrade(orgId, typeId, bool) is a live mutator, so after an
+ * executor turns auto-upgrade OFF this value keeps reporting the registration-time
+ * `true` forever — and 91/91 live Gnosis rows are `true`, so the divergent case has
+ * never once been exercised.
+ *
+ * Callers that render a pinning claim MUST prefer the on-chain isAutoUpgrade read
+ * and use this only when OrgRegistry is unreachable (see org/status.ts).
+ */
+function autoUpgradeFromSnapshot(snapshot, typeId) {
+    const rc = snapshot?.byTypeId.get(typeId.toLowerCase())?.registered;
+    return typeof rc?.autoUpgrade === 'boolean' ? rc.autoUpgrade : null;
+}
+/** The proxy's beacon address, when indexed — lets callers skip getStorageAt. */
+function beaconAddressFromSnapshot(snapshot, typeId) {
+    return checksumAddress(snapshot?.byTypeId.get(typeId.toLowerCase())?.registered?.beacon);
+}
+/**
+ * Fetch the org's module→beacon snapshot. Throws only on transport failure;
+ * callers treat a throw as "no snapshot" and use their RPC path.
+ */
+async function fetchOrgBeaconSnapshot(client, orgId, chainId) {
+    const tiers = [
+        { query: exports.ORG_MODULE_BEACONS_FULL, variables: { orgId, orgIdStr: orgId } },
+        { query: exports.ORG_MODULE_BEACONS_NO_SWITCHABLE, variables: { orgId } },
+        { query: exports.ORG_MODULE_BEACONS_MINIMAL, variables: {} },
+    ];
+    const { data, tierIndex } = await client.queryWithFieldFallback(tiers, { chainId });
+    return buildOrgBeaconSnapshot(data ?? {}, tierIndex);
+}
+const PAGE_SIZE = 1000;
+const MAX_PAGES = 5;
+/**
+ * Every implementation address the subgraph can name a version for, keyed by
+ * lowercased address.
+ *
+ * Sources: Beacon.currentImplementation (the live one per type) and
+ * BeaconUpgradeEvent.newImplementation (every implementation a global beacon
+ * has ever pointed at). Verified live: 71 upgrade events on Gnosis with zero
+ * null newImplementation/version values, and identical implementation
+ * addresses on Arbitrum (deterministic deploys), so the index is chain-safe.
+ *
+ * NOT covered: an implementation that was registered but never promoted onto a
+ * global beacon (only reachable by pinning to it). Callers keep the registry
+ * eth_getLogs scan as the explicit fallback for exactly that case.
+ */
+async function fetchImplementationVersionIndex(client, chainId) {
+    const index = new Map();
+    const typeNameById = new Map();
+    let tierIndex = 0;
+    for (let page = 0; page < MAX_PAGES; page++) {
+        const tiers = [
+            { query: exports.IMPLEMENTATION_VERSIONS_FULL, variables: { first: PAGE_SIZE, skip: page * PAGE_SIZE } },
+            { query: exports.IMPLEMENTATION_VERSIONS_BEACONS_ONLY, variables: {} },
+        ];
+        const { data, tierIndex: tier } = await client.queryWithFieldFallback(tiers, { chainId });
+        tierIndex = tier;
+        for (const beacon of (data?.beacons ?? [])) {
+            if (!beacon?.currentImplementation)
+                continue;
+            if (beacon.typeId)
+                typeNameById.set(beacon.typeId.toLowerCase(), beacon.typeName);
+            index.set(beacon.currentImplementation.toLowerCase(), {
+                typeName: beacon.typeName,
+                version: beacon.version ?? '',
+                implementation: ethers_1.ethers.utils.getAddress(beacon.currentImplementation),
+                latest: true,
+            });
+        }
+        const events = data?.beaconUpgradeEvents ?? [];
+        for (const ev of events) {
+            if (!ev?.newImplementation || !ev?.version)
+                continue;
+            const key = ev.newImplementation.toLowerCase();
+            // A current implementation already recorded as `latest` must not be
+            // demoted by its own historical upgrade event.
+            if (index.has(key))
+                continue;
+            index.set(key, {
+                typeName: typeNameById.get(ev.typeId?.toLowerCase() ?? '') ?? '',
+                version: ev.version,
+                implementation: ethers_1.ethers.utils.getAddress(ev.newImplementation),
+                latest: false,
+            });
+        }
+        if (tier !== 0 || events.length < PAGE_SIZE)
+            break;
+    }
+    return { index, tierIndex };
+}

package/dist/graph/documents/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * GraphQL documents by domain, re-exported as namespaces.
+ * Moved verbatim from the CLI's src/queries/ — raw documents stay exported so
+ * consumers (e.g. Apollo users) can keep their cache layer and still use the
+ * canonical queries.
+ */
+export * as activityDocuments from './activity';
+export * as beaconsDocuments from './beacons';
+export * as infrastructureDocuments from './infrastructure';
+export * as orgDocuments from './org';
+export * as paymasterDocuments from './paymaster';
+export * as roleDocuments from './role';
+export * as rolesDocuments from './roles';
+export * as taskDocuments from './task';
+export * as tokenDocuments from './token';
+export * as treasuryDocuments from './treasury';
+export * as userDocuments from './user';
+export * as votingClassesDocuments from './voting-classes';
+export * as votingDocuments from './voting';
+export * as vouchDocuments from './vouch';
+export * as zkemailDocuments from './zkemail';

package/dist/graph/documents/index.js

@@ -0,0 +1,57 @@
+"use strict";
+/**
+ * GraphQL documents by domain, re-exported as namespaces.
+ * Moved verbatim from the CLI's src/queries/ — raw documents stay exported so
+ * consumers (e.g. Apollo users) can keep their cache layer and still use the
+ * canonical queries.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.zkemailDocuments = exports.vouchDocuments = exports.votingDocuments = exports.votingClassesDocuments = exports.userDocuments = exports.treasuryDocuments = exports.tokenDocuments = exports.taskDocuments = exports.rolesDocuments = exports.roleDocuments = exports.paymasterDocuments = exports.orgDocuments = exports.infrastructureDocuments = exports.beaconsDocuments = exports.activityDocuments = void 0;
+exports.activityDocuments = __importStar(require("./activity"));
+exports.beaconsDocuments = __importStar(require("./beacons"));
+exports.infrastructureDocuments = __importStar(require("./infrastructure"));
+exports.orgDocuments = __importStar(require("./org"));
+exports.paymasterDocuments = __importStar(require("./paymaster"));
+exports.roleDocuments = __importStar(require("./role"));
+exports.rolesDocuments = __importStar(require("./roles"));
+exports.taskDocuments = __importStar(require("./task"));
+exports.tokenDocuments = __importStar(require("./token"));
+exports.treasuryDocuments = __importStar(require("./treasury"));
+exports.userDocuments = __importStar(require("./user"));
+exports.votingClassesDocuments = __importStar(require("./voting-classes"));
+exports.votingDocuments = __importStar(require("./voting"));
+exports.vouchDocuments = __importStar(require("./vouch"));
+exports.zkemailDocuments = __importStar(require("./zkemail"));

package/dist/graph/documents/infrastructure.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Infrastructure Queries
+ * Fetch global contract addresses from subgraph.
+ */
+export declare const FETCH_INFRASTRUCTURE_ADDRESSES = "\n  query FetchInfrastructureAddresses {\n    universalAccountRegistries(first: 1) {\n      id\n      totalAccounts\n    }\n    poaManagerContracts(first: 1) {\n      id\n      registry\n      orgDeployerProxy\n      orgRegistryProxy\n      paymasterHubProxy\n      globalAccountRegistryProxy\n    }\n    orgRegistryContracts(first: 1) {\n      id\n      totalOrgs\n    }\n    beacons {\n      id\n      typeName\n      beaconAddress\n      currentImplementation\n      version\n    }\n  }\n";
+export interface InfrastructureAddresses {
+    universalAccountRegistries: Array<{
+        id: string;
+        totalAccounts: string;
+    }>;
+    poaManagerContracts: Array<{
+        id: string;
+        registry: string;
+        orgDeployerProxy: string;
+        orgRegistryProxy: string;
+        paymasterHubProxy: string;
+        globalAccountRegistryProxy: string;
+    }>;
+    orgRegistryContracts: Array<{
+        id: string;
+        totalOrgs: string;
+    }>;
+    beacons: Array<{
+        id: string;
+        typeName: string;
+        beaconAddress: string;
+        currentImplementation: string;
+        version: string;
+    }>;
+}

package/dist/graph/documents/infrastructure.js

@@ -0,0 +1,34 @@
+"use strict";
+/**
+ * Infrastructure Queries
+ * Fetch global contract addresses from subgraph.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FETCH_INFRASTRUCTURE_ADDRESSES = void 0;
+exports.FETCH_INFRASTRUCTURE_ADDRESSES = `
+  query FetchInfrastructureAddresses {
+    universalAccountRegistries(first: 1) {
+      id
+      totalAccounts
+    }
+    poaManagerContracts(first: 1) {
+      id
+      registry
+      orgDeployerProxy
+      orgRegistryProxy
+      paymasterHubProxy
+      globalAccountRegistryProxy
+    }
+    orgRegistryContracts(first: 1) {
+      id
+      totalOrgs
+    }
+    beacons {
+      id
+      typeName
+      beaconAddress
+      currentImplementation
+      version
+    }
+  }
+`;

package/dist/graph/documents/org.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Organization Queries
+ * Ported from frontend queries.js
+ */
+export declare const FETCH_ORG_BY_ID = "\n  query FetchOrgById($id: Bytes!) {\n    organization(id: $id) {\n      id\n      name\n      metadataHash\n      deployedAt\n      topHatId\n      roleHatIds\n      participationToken {\n        id\n        name\n        symbol\n        totalSupply\n      }\n      quickJoin {\n        id\n      }\n      hybridVoting {\n        id\n        thresholdPct\n        quorum\n      }\n      directDemocracyVoting {\n        id\n        thresholdPct\n        quorum\n      }\n      taskManager {\n        id\n        projects {\n          id\n          title\n          deleted\n        }\n      }\n      educationHub {\n        id\n        nextModuleId\n      }\n      executorContract {\n        id\n      }\n      eligibilityModule {\n        id\n      }\n      paymentManager {\n        id\n      }\n      zkEmailInvites {\n        id\n      }\n      users {\n        id\n        address\n        account {\n          username\n          metadata {\n            avatar\n          }\n        }\n        participationTokenBalance\n        membershipStatus\n        currentHatIds\n      }\n      roles(where: { isUserRole: true }) {\n        id\n        hatId\n        name\n        image\n        canVote\n        isUserRole\n      }\n    }\n  }\n";
+export declare const FETCH_ORG_FULL_DATA = "\n  query FetchOrgFullData($orgId: Bytes!) {\n    organization(id: $orgId) {\n      id\n      name\n      metadataHash\n      metadataAdminHatId\n      metadata {\n        id\n        description\n        template\n        backgroundColor\n        logo\n        hideTreasury\n        useTokenSymbol\n        taskPayoutHoursOnly\n        taskPayoutHourlyRate\n        links {\n          name\n          url\n          index\n        }\n      }\n      deployedAt\n      topHatId\n      roleHatIds\n      participationToken {\n        id\n        name\n        symbol\n        totalSupply\n      }\n      quickJoin {\n        id\n      }\n      hybridVoting {\n        id\n        thresholdPct\n        quorum\n      }\n      directDemocracyVoting {\n        id\n        thresholdPct\n        quorum\n      }\n      zkEmailInvites {\n        id\n      }\n      taskManager {\n        id\n        creatorHatIds\n        projects(where: { deleted: false }, first: 100) {\n          id\n          tasks(first: 1000) {\n            id\n            status\n          }\n        }\n      }\n      educationHub {\n        id\n        modules {\n          id\n          moduleId\n          title\n          contentHash\n          metadata {\n            description\n            link\n            quiz\n            answersJson\n          }\n          payout\n          status\n          completions {\n            learner\n          }\n        }\n      }\n      executorContract {\n        id\n      }\n      eligibilityModule {\n        id\n      }\n      paymentManager {\n        id\n      }\n      users(orderBy: participationTokenBalance, orderDirection: desc, first: 100) {\n        id\n        address\n        account {\n          username\n          metadata {\n            avatar\n          }\n        }\n        participationTokenBalance\n        membershipStatus\n        currentHatIds\n        totalTasksCompleted\n        totalVotes\n        firstSeenAt\n      }\n      roles(where: { isUserRole: true }) {\n        id\n        hatId\n        name\n        image\n        canVote\n        isUserRole\n        hat {\n          name\n        }\n      }\n    }\n  }\n";
+export declare const GET_ORG_BY_NAME = "\n  query GetOrgByName($name: String!) {\n    organizations(where: { name: $name }, first: 1) {\n      id\n      name\n    }\n  }\n";
+export declare const FETCH_USER_ORGANIZATIONS = "\n  query FetchUserOrganizations($userAddress: Bytes!) {\n    users(where: { address: $userAddress, membershipStatus: Active }) {\n      id\n      membershipStatus\n      participationTokenBalance\n      totalTasksCompleted\n      totalVotes\n      organization {\n        id\n        name\n        metadataHash\n        participationToken {\n          symbol\n        }\n      }\n    }\n  }\n";
+/**
+ * Just the org's payout convention + token symbol.
+ *
+ * Deliberately narrow: `pop task create` needs it on every invocation to price a task the way
+ * the web app would, and FETCH_ORG_FULL_DATA pulls every user, role, task and proposal.
+ */
+export declare const FETCH_ORG_PAYOUT_CONFIG = "\n  query FetchOrgPayoutConfig($orgId: Bytes!) {\n    organization(id: $orgId) {\n      id\n      metadata {\n        useTokenSymbol\n        taskPayoutHoursOnly\n        taskPayoutHourlyRate\n      }\n      participationToken {\n        symbol\n      }\n    }\n  }\n";