@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/oauthapp/steps.js

@@ -0,0 +1,169 @@
+/**
+ * OAuthApp domain-local pipeline steps — port
+ * pkg/domain/oauthapp/controller/steps: the client-secret encrypt/preserve
+ * step, the referential delete guard, and the response redaction helper.
+ * Proven by oauthapp.conformance.test.ts and __tests__/oauthapp.test.ts.
+ */
+import { fromBinary } from "@bufbuild/protobuf";
+import { McpServerSchema } from "@stigmer/protos/ai/stigmer/agentic/mcpserver/v1/api_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { isCiphertextShaped } from "../../encryption/encryption.js";
+import { EncryptionScope } from "../../encryption/encryption.js";
+import { failedPreconditionError, internalError, invalidArgumentError, } from "../../pipeline/errors.js";
+import { EXISTING_RESOURCE_KEY } from "../../pipeline/steps/load-existing.js";
+import { CIPHERTEXT_SHAPED_SECRET_MESSAGE, MARKER_ON_CREATE_MESSAGE, PRESERVE_NO_EXISTING_SECRET_MESSAGE, REDACTED_MARKER, deleteBlockedByMcpServerMessage, } from "./constants.js";
+import { resolveOAuthAppRef } from "./refresolution/refresolution.js";
+/**
+ * Replaces client_secret with the redaction marker (Go RedactOAuthApp).
+ *
+ * A function rather than a pipeline step because redaction applies at
+ * different points per operation: create/update after persist on newState;
+ * get/getByReference after load on the target; listByOrg per entry. Go's
+ * response list deliberately excludes DELETE — the delete RPC returns the
+ * STORED resource with its encrypted secret intact, ported byte-faithfully
+ * and disclosed in the PR (a cross-edition follow-up candidate: with
+ * encryption disabled the stored value is plaintext).
+ */
+export function redactOAuthApp(app) {
+    if (app.spec !== undefined && app.spec.clientSecret !== "") {
+        app.spec.clientSecret = REDACTED_MARKER;
+    }
+}
+/**
+ * EncryptClientSecret for the create pipeline (Go
+ * NewEncryptClientSecretForCreateStep): encrypts the plaintext secret;
+ * rejects the redaction marker — there is no existing secret to preserve.
+ */
+export function newEncryptClientSecretForCreateStep(secretService, logger) {
+    return newEncryptClientSecretStep(secretService, logger, true);
+}
+/**
+ * EncryptClientSecret for the update pipeline (Go
+ * NewEncryptClientSecretForUpdateStep): the redaction marker restores the
+ * stored encrypted value from ExistingResource; a new plaintext value is
+ * encrypted.
+ */
+export function newEncryptClientSecretForUpdateStep(secretService, logger) {
+    return newEncryptClientSecretStep(secretService, logger, false);
+}
+/**
+ * The shared encrypt/preserve mechanics. On both arms a ciphertext-shaped
+ * (enc:v<N>:) client value is rejected UNCONDITIONALLY — not gated on
+ * isEnabled: the prefix is server-reserved regardless of key state, and a
+ * keyless deployment that later gains a key must not wake up holding
+ * smuggled "ciphertext" (oss#395). The marker arm stays FIRST — it
+ * restores stored ciphertext, which is legitimate and returns before the
+ * shape check.
+ */
+function newEncryptClientSecretStep(secretService, logger, isCreate) {
+    return {
+        name: "EncryptClientSecret",
+        async execute(ctx) {
+            const app = ctx.newState;
+            if (app.spec === undefined) {
+                return;
+            }
+            const clientSecret = app.spec.clientSecret;
+            if (clientSecret === "") {
+                return;
+            }
+            if (clientSecret === REDACTED_MARKER) {
+                preserveExistingSecret(ctx, app, isCreate, logger);
+                return;
+            }
+            if (isCiphertextShaped(clientSecret)) {
+                throw invalidArgumentError(CIPHERTEXT_SHAPED_SECRET_MESSAGE);
+            }
+            if (!secretService.isEnabled()) {
+                logger.warn("encryption disabled: client_secret will be stored in plaintext");
+                return;
+            }
+            try {
+                // Tenancy-only scope, the pre-v3 write posture: oauthapp is an
+                // org-scoped kind, so metadata.org is validated non-empty before
+                // this step.
+                app.spec.clientSecret = await secretService.encrypt(clientSecret, EncryptionScope.forOrganization(app.metadata?.org ?? ""));
+            }
+            catch (error) {
+                throw internalError(error, "failed to encrypt client_secret");
+            }
+        },
+    };
+}
+/** Go preserveExistingSecret: copy the stored ciphertext on marker echo. */
+function preserveExistingSecret(ctx, app, isCreate, logger) {
+    if (isCreate) {
+        throw invalidArgumentError(MARKER_ON_CREATE_MESSAGE);
+    }
+    const existing = ctx.get(EXISTING_RESOURCE_KEY);
+    if (existing === undefined) {
+        throw internalError(new Error("existing resource not loaded"), "cannot preserve client_secret: existing resource not loaded");
+    }
+    const existingSecret = existing.spec?.clientSecret ?? "";
+    if (existingSecret === "") {
+        throw invalidArgumentError(PRESERVE_NO_EXISTING_SECRET_MESSAGE);
+    }
+    if (app.spec !== undefined) {
+        app.spec.clientSecret = existingSecret;
+    }
+    logger.debug("preserved existing encrypted client_secret", {
+        oauthAppId: app.metadata?.id ?? "",
+    });
+}
+/**
+ * CheckNoReferencingMcpServers (Go newCheckNoReferencingMcpServersStep):
+ * blocks deletion while any McpServer's spec.auth.oauth_app_ref RESOLVES
+ * to the app being deleted — resolution semantics through the shared
+ * refresolution, not literal field match (stigmer/stigmer#584). A ref
+ * pinned to another org can reach this app through the unique-slug
+ * fallback (deleting would sever a live vendor-OAuth connection), while a
+ * literal match whose resolution lands elsewhere must not block.
+ *
+ * Requires LoadExistingForDelete to have run first (the OAuthApp being
+ * deleted is read from ExistingResource). Generic over the delete input
+ * Desc, like the shared delete steps.
+ */
+export function newCheckNoReferencingMcpServersStep(store, logger) {
+    return {
+        name: "CheckNoReferencingMcpServers",
+        async execute(ctx) {
+            const existing = ctx.get(EXISTING_RESOURCE_KEY);
+            if (existing === undefined) {
+                throw internalError(new Error("existing OAuthApp missing from pipeline context"), "existing OAuthApp not loaded in delete pipeline");
+            }
+            let resources;
+            try {
+                resources = await store.listResources(ApiResourceKind.mcp_server);
+            }
+            catch (error) {
+                throw internalError(error, "failed to list MCP servers for referential integrity check");
+            }
+            for (const data of resources) {
+                let mcp;
+                try {
+                    mcp = fromBinary(McpServerSchema, data);
+                }
+                catch (error) {
+                    logger.warn("failed to unmarshal MCP server during referential integrity check, skipping", { error: error instanceof Error ? error.message : String(error) });
+                    continue;
+                }
+                const ref = mcp.spec?.auth?.oauthAppRef;
+                if (ref === undefined) {
+                    continue;
+                }
+                let resolved;
+                try {
+                    resolved = await resolveOAuthAppRef(store, ref, logger);
+                }
+                catch (error) {
+                    throw internalError(error, "failed to resolve oauth_app_ref during referential integrity check");
+                }
+                if (resolved !== undefined &&
+                    (resolved.metadata?.id ?? "") === (existing.metadata?.id ?? "")) {
+                    throw failedPreconditionError(deleteBlockedByMcpServerMessage(existing.metadata?.org ?? "", existing.metadata?.slug ?? "", mcp.metadata?.name ?? ""));
+                }
+            }
+        },
+    };
+}
+//# sourceMappingURL=steps.js.map

package/dist/domain/oauthapp/steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../../../src/domain/oauthapp/steps.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGhD,OAAO,EAAE,eAAe,EAAE,MAAM,wDAAwD,CAAC;AAEzF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAKtH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEpE,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EACL,uBAAuB,EACvB,aAAa,EACb,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAE9E,OAAO,EACL,gCAAgC,EAChC,wBAAwB,EACxB,mCAAmC,EACnC,eAAe,EACf,+BAA+B,GAChC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,GAAa;IAC1C,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,eAAe,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mCAAmC,CACjD,aAA4B,EAC5B,MAAc;IAEd,OAAO,0BAA0B,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mCAAmC,CACjD,aAA4B,EAC5B,MAAc;IAEd,OAAO,0BAA0B,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,0BAA0B,CACjC,aAA4B,EAC5B,MAAc,EACd,QAAiB;IAEjB,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,KAAK,CAAC,OAAO,CAAC,GAA0C;YACtD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC;YACzB,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;YAC3C,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;gBACxB,OAAO;YACT,CAAC;YAED,IAAI,YAAY,KAAK,eAAe,EAAE,CAAC;gBACrC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,IAAI,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;gBACrC,MAAM,oBAAoB,CAAC,gCAAgC,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CACT,gEAAgE,CACjE,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,+DAA+D;gBAC/D,iEAAiE;gBACjE,aAAa;gBACb,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,MAAM,aAAa,CAAC,OAAO,CACjD,YAAY,EACZ,eAAe,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CACzD,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,sBAAsB,CAC7B,GAA0C,EAC1C,GAAa,EACb,QAAiB,EACjB,MAAc;IAEd,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,oBAAoB,CAAC,wBAAwB,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAyB,CAAC;IACxE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,8BAA8B,CAAC,EACzC,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC;IACzD,IAAI,cAAc,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,oBAAoB,CAAC,mCAAmC,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,cAAc,CAAC;IACzC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;QACzD,UAAU,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE;KACnC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mCAAmC,CACjD,KAAY,EACZ,MAAc;IAEd,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,KAAK,CAAC,OAAO,CAAC,GAAyB;YACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAyB,CAAC;YACxE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,iDAAiD,CAAC,EAC5D,iDAAiD,CAClD,CAAC;YACJ,CAAC;YAED,IAAI,SAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;YACpE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CACjB,KAAK,EACL,4DAA4D,CAC7D,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,IAAI,GAAc,CAAC;gBACnB,IAAI,CAAC;oBACH,GAAG,GAAG,UAAU,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;gBAC1C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CACT,6EAA6E,EAC7E,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClE,CAAC;oBACF,SAAS;gBACX,CAAC;gBAED,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC;gBACxC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;oBACtB,SAAS;gBACX,CAAC;gBAED,IAAI,QAA8B,CAAC;gBACnC,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC1D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,aAAa,CACjB,KAAK,EACL,oEAAoE,CACrE,CAAC;gBACJ,CAAC;gBACD,IACE,QAAQ,KAAK,SAAS;oBACtB,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAC/D,CAAC;oBACD,MAAM,uBAAuB,CAC3B,+BAA+B,CAC7B,QAAQ,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,EAC5B,QAAQ,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,EAC7B,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CACzB,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/domain/organization/controller.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Organization controller — ports pkg/domain/organization (command +
+ * query sides). Organization is the top-level tenancy container; all
+ * resources scope under it.
+ *
+ * Pipeline per RPC mirrors the Go step chains character-for-character;
+ * see the domain row in blueprint/01-domain-inventory.md. Proven by
+ * organization.conformance.test.ts (CONFORMANCE_TARGET=local) and
+ * __tests__/organization.test.ts.
+ *
+ * getByExternalOrgId is implemented ONLY when the composed
+ * OrganizationDirectory provides the lookup (C2, ruling Q7) — with no
+ * directory the method stays absent from the partial service
+ * implementation and ConnectRPC answers Unimplemented (the SDK
+ * capability-probes this and must see UNIMPLEMENTED, not NotFound;
+ * conformance pins it via externalOrgLookup=false). The directory also
+ * carries the other two edition forks: find's enumeration posture and
+ * findMyOrganizations' filtering (see organization-directory.ts).
+ *
+ * Versus Stigmer Cloud's Java service, plain OSS excludes the
+ * CreateIamPolicies and Publish steps; with the C2 seam composed, the
+ * CreateAuthorizationTuples/CleanupIamPolicies steps deliver the same
+ * lifecycle through the resourceAuthorizationLifecycle driver.
+ */
+import type { ConnectRouter } from "@connectrpc/connect";
+import type { Logger } from "../../boot/logger.js";
+import type { Authorizer } from "../../extensions/authorizer.js";
+import type { ResolvedGateSteps } from "../../extensions/gate-slots.js";
+import type { OrganizationDirectory } from "../../extensions/organization-directory.js";
+import type { ResourceAuthorizationLifecycle } from "../../extensions/resource-authorization.js";
+import type { Store } from "../../store/interface.js";
+export interface OrganizationControllerDeps {
+    readonly store: Store;
+    readonly logger: Logger;
+    /** The composed authorization seam — the Authorize step at position 1 of every chain calls it (O2, DD-007 §3). */
+    readonly authorizer: Authorizer;
+    /** The composed slot registrations — this domain's post-persist slot (O4). */
+    readonly gateSteps: ResolvedGateSteps;
+    /** The composed tuple-lifecycle driver — undefined = the shared steps no-op (C2). */
+    readonly authorizationLifecycle: ResourceAuthorizationLifecycle | undefined;
+    /** The composed query directory — undefined = OSS single-tenant behavior (C2). */
+    readonly organizationDirectory: OrganizationDirectory | undefined;
+}
+/** Registers both organization services on the router (routes stage). */
+export declare function registerOrganizationServices(router: ConnectRouter, deps: OrganizationControllerDeps): void;
+//# sourceMappingURL=controller.d.ts.map

package/dist/domain/organization/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../src/domain/organization/controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAC;AAsBzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAGxE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AA8CjG,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAItD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kHAAkH;IAClH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,qFAAqF;IACrF,QAAQ,CAAC,sBAAsB,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC5E,kFAAkF;IAClF,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,GAAG,SAAS,CAAC;CACnE;AAED,yEAAyE;AACzE,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,0BAA0B,GAC/B,IAAI,CA4BN"}

package/dist/domain/organization/controller.js

@@ -0,0 +1,323 @@
+import { Code, ConnectError } from "@connectrpc/connect";
+import { fromBinary } from "@bufbuild/protobuf";
+import { create } from "@bufbuild/protobuf";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { OrganizationCommandController } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/command_pb";
+import { OrganizationQueryController } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/query_pb";
+import { OrganizationSchema } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/api_pb";
+import { OrganizationListSchema, OrganizationsSchema, } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/io_pb";
+import { stepsForSlot } from "../../extensions/gate-slots.js";
+import { ALL_ORGANIZATIONS } from "../../extensions/organization-directory.js";
+import { apiResourceKindKey } from "../../pipeline/interceptors/apiresource.js";
+import { internalError, invalidArgumentError, notFoundError, } from "../../pipeline/errors.js";
+import { newPipeline } from "../../pipeline/pipeline.js";
+import { callerIdentityOf } from "../../pipeline/interceptors/auth.js";
+import { RequestContext } from "../../pipeline/request-context.js";
+import { newAuthorizeStep } from "../../pipeline/steps/authorize.js";
+import { newGuardReservedLabelsStep } from "../../pipeline/steps/guard-reserved-labels.js";
+import { newBuildNewStateStep } from "../../pipeline/steps/defaults.js";
+import { newBuildUpdateStateStep } from "../../pipeline/steps/build-update-state.js";
+import { newDeleteResourceStep, newExtractResourceIdStep, newLoadExistingForDeleteStep, } from "../../pipeline/steps/delete.js";
+import { newDeleteSearchIndexStep, newIndexSearchStep, } from "../../pipeline/steps/index-search.js";
+import { EXISTING_RESOURCE_KEY, newLoadExistingStep, } from "../../pipeline/steps/load-existing.js";
+import { SHOULD_CREATE_KEY, newLoadForApplyStep, withResolvedApplyId, } from "../../pipeline/steps/load-for-apply.js";
+import { newLoadTargetStep, TARGET_RESOURCE_KEY, } from "../../pipeline/steps/load-target.js";
+import { newCleanupIamPoliciesStep, newCreateAuthorizationTuplesStep, } from "../../pipeline/steps/authorization-tuples.js";
+import { newPersistStep } from "../../pipeline/steps/persist.js";
+import { newResolveSlugStep } from "../../pipeline/steps/slug.js";
+import { newValidateProtoStep } from "../../pipeline/steps/validation.js";
+import { newValidateVisibilityStep } from "../../pipeline/steps/validate-visibility.js";
+import { ResourceNotFoundError } from "../../store/interface.js";
+import { organizationSearchExtractor } from "./search-extractor.js";
+import { newCheckOrgDuplicateStep, newCopySlugToIdStep } from "./steps.js";
+/** Registers both organization services on the router (routes stage). */
+export function registerOrganizationServices(router, deps) {
+    router.service(OrganizationCommandController, {
+        apply: (org, ctx) => apply(deps, org, ctx),
+        create: (org, ctx) => createOrganization(deps, org, ctx),
+        update: (org, ctx) => update(deps, org, ctx),
+        delete: (orgId, ctx) => deleteOrganization(deps, orgId, ctx),
+    });
+    // getByExternalOrgId registers ONLY when the composed directory carries
+    // the lookup (ruling Q7); otherwise the method stays absent from the
+    // partial implementation and ConnectRPC answers Unimplemented (the
+    // capability-probed pin; see the module header).
+    const externalLookup = deps.organizationDirectory?.getOrganizationIdByExternalOrgId?.bind(deps.organizationDirectory);
+    router.service(OrganizationQueryController, {
+        get: (orgId, ctx) => get(deps, orgId, ctx),
+        find: (req, ctx) => find(deps, req, ctx),
+        findMyOrganizations: (_, ctx) => findMyOrganizations(deps, ctx),
+        ...(externalLookup === undefined
+            ? {}
+            : {
+                getByExternalOrgId: (lookup, ctx) => getByExternalOrgId(deps, externalLookup, lookup, ctx),
+            }),
+    });
+}
+function kindOf(ctx) {
+    return ctx.values.get(apiResourceKindKey);
+}
+/**
+ * Create — chain per Go buildCreatePipeline: ResolveSlug runs before
+ * ValidateProto so clients can omit the slug and have it derived before
+ * field constraints (slug pattern, 2–15 chars) are checked.
+ *
+ * The post-persist gate slot splices after Persist, before IndexSearch —
+ * the verified Java OrganizationCreateHandler ordering (FGA tuple
+ * seeding, billing account getOrCreate: synchronous, a failure fails the
+ * request). Java runs these with NO transactional envelope: a slot-step
+ * failure leaves the org row persisted while the request fails, healed by
+ * idempotent retry — inherited semantics (O4 verification V1).
+ */
+async function createOrganization(deps, org, ctx) {
+    const reqCtx = new RequestContext(OrganizationSchema, org, callerIdentityOf(ctx), kindOf(ctx));
+    const builder = newPipeline("organization-create", deps.logger)
+        .addStep(newAuthorizeStep(OrganizationCommandController.method.create, deps.authorizer))
+        .addStep(newResolveSlugStep())
+        .addStep(newValidateProtoStep())
+        .addStep(newValidateVisibilityStep())
+        .addStep(newCheckOrgDuplicateStep(deps.store))
+        .addStep(newBuildNewStateStep())
+        .addStep(newGuardReservedLabelsStep(deps.authorizer))
+        .addStep(newCopySlugToIdStep())
+        .addStep(newPersistStep(deps.store))
+        // The C2 tuple step runs BEFORE the slot — the verified Java order
+        // (createAuthorizationTuples → linkManagedOrgToIdentityProvider →
+        // provisionBillingAccount). No-op with no driver composed.
+        .addStep(newCreateAuthorizationTuplesStep(deps.authorizationLifecycle, deps.logger));
+    // The ratified post-persist gate slot (blueprint 03 §3a; O4 — see the
+    // doc comment above for the inherited failure semantics). Empty in OSS.
+    for (const step of stepsForSlot(deps.gateSteps, "org-create:post-persist")) {
+        builder.addStep(step);
+    }
+    await builder
+        .addStep(newIndexSearchStep(deps.store, organizationSearchExtractor, deps.logger))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.newState;
+}
+/** Update — chain per Go buildUpdatePipeline. */
+async function update(deps, org, ctx) {
+    const reqCtx = new RequestContext(OrganizationSchema, org, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("organization-update", deps.logger)
+        .addStep(newAuthorizeStep(OrganizationCommandController.method.update, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newResolveSlugStep())
+        .addStep(newLoadExistingStep(deps.store))
+        .addStep(newBuildUpdateStateStep())
+        .addStep(newGuardReservedLabelsStep(deps.authorizer))
+        .addStep(newPersistStep(deps.store))
+        .addStep(newIndexSearchStep(deps.store, organizationSearchExtractor, deps.logger))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.newState;
+}
+/**
+ * Apply — kubectl-style idempotent create-or-update: a minimal pipeline
+ * decides existence, then delegates to Create or Update with the ORIGINAL
+ * request message (Go delegates `org`, not the pipeline's mutated clone);
+ * the update arm carries the resolved id via withResolvedApplyId.
+ */
+async function apply(deps, org, ctx) {
+    const reqCtx = new RequestContext(OrganizationSchema, org, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("organization-apply", deps.logger)
+        .addStep(newAuthorizeStep(OrganizationCommandController.method.apply, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newResolveSlugStep())
+        .addStep(newLoadForApplyStep(deps.store))
+        .build()
+        .execute(reqCtx);
+    const shouldCreate = reqCtx.get(SHOULD_CREATE_KEY);
+    if (typeof shouldCreate !== "boolean") {
+        throw internalError(new Error("apply pipeline did not set shouldCreate flag"), "apply operation failed to determine create vs update");
+    }
+    return shouldCreate
+        ? createOrganization(deps, org, ctx)
+        : update(deps, withResolvedApplyId(OrganizationSchema, org, reqCtx), ctx);
+}
+/** Delete — returns the deleted organization (gRPC audit-trail convention). */
+async function deleteOrganization(deps, orgId, ctx) {
+    const reqCtx = new RequestContext(OrganizationCommandController.method.delete.input, orgId, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("organization-delete", deps.logger)
+        .addStep(newAuthorizeStep(OrganizationCommandController.method.delete, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newExtractResourceIdStep())
+        .addStep(newLoadExistingForDeleteStep(deps.store, OrganizationSchema))
+        .addStep(newDeleteResourceStep(deps.store))
+        .addStep(newCleanupIamPoliciesStep(deps.authorizationLifecycle, deps.logger))
+        .addStep(newDeleteSearchIndexStep(deps.store, deps.logger))
+        .build()
+        .execute(reqCtx);
+    const deleted = reqCtx.get(EXISTING_RESOURCE_KEY);
+    if (deleted === undefined) {
+        throw internalError(new Error("deleted organization not found in context"), "delete operation lost its loaded resource");
+    }
+    return deleted;
+}
+/** Get — LoadTarget by id; NotFound when absent. */
+async function get(deps, orgId, ctx) {
+    const reqCtx = new RequestContext(OrganizationQueryController.method.get.input, orgId, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("organization-get", deps.logger)
+        .addStep(newAuthorizeStep(OrganizationQueryController.method.get, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newLoadTargetStep(deps.store, OrganizationSchema))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(TARGET_RESOURCE_KEY);
+}
+const FIND_RESULT_KEY = "findResult";
+/**
+ * Find — enumerates ALL organizations with manual pagination (page size
+ * default 20, cap 100). The request's org field is accepted but IGNORED
+ * for filtering: organizations are the top-level scope and belong to no
+ * org. Single-tenant OSS enumerates freely; a composed directory with
+ * refusesEnumeration answers UNIMPLEMENTED before any work — the
+ * organizationEnumeration capability fork, byte-matching the
+ * absent-method semantics the cloud edition pins.
+ */
+async function find(deps, req, ctx) {
+    if (deps.organizationDirectory?.refusesEnumeration === true) {
+        throw new ConnectError("ai.stigmer.tenancy.organization.v1.OrganizationQueryController.find is not implemented", Code.Unimplemented);
+    }
+    const reqCtx = new RequestContext(OrganizationQueryController.method.find.input, req, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("organization-find", deps.logger)
+        .addStep(newAuthorizeStep(OrganizationQueryController.method.find, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .addStep(newListAllOrganizationsStep(deps.store))
+        .build()
+        .execute(reqCtx);
+    return reqCtx.get(FIND_RESULT_KEY);
+}
+/**
+ * ListAllOrganizations — the domain-local find step (Go
+ * listAllOrganizationsStep): full list, malformed rows skipped, then
+ * legacy pageSize/pageNumber fields overridden by the newer page message
+ * when present, defaults 20/1, cap 100.
+ */
+function newListAllOrganizationsStep(store) {
+    return {
+        name: "ListAllOrganizations",
+        async execute(ctx) {
+            let data;
+            try {
+                data = await store.listResources(ctx.apiResourceKind);
+            }
+            catch (error) {
+                throw internalError(error, "failed to list organizations");
+            }
+            const orgs = [];
+            for (const bytes of data) {
+                try {
+                    orgs.push(fromBinary(OrganizationSchema, bytes));
+                }
+                catch {
+                    continue; // skip malformed rows, as Go does
+                }
+            }
+            const req = ctx.input;
+            let pageSize = req.pageSize;
+            let pageNumber = req.pageNumber;
+            if (req.page !== undefined) {
+                if (req.page.size > 0) {
+                    pageSize = req.page.size;
+                }
+                if (req.page.num > 0) {
+                    pageNumber = req.page.num;
+                }
+            }
+            if (pageSize <= 0) {
+                pageSize = 20;
+            }
+            if (pageSize > 100) {
+                pageSize = 100;
+            }
+            if (pageNumber <= 0) {
+                pageNumber = 1;
+            }
+            const totalPages = Math.ceil(orgs.length / pageSize);
+            const start = (pageNumber - 1) * pageSize;
+            const entries = start >= orgs.length ? [] : orgs.slice(start, start + pageSize);
+            ctx.set(FIND_RESULT_KEY, create(OrganizationListSchema, { totalPages, entries }));
+        },
+    };
+}
+/**
+ * FindMyOrganizations — deliberately pipeline-less (Go): the input is
+ * Empty, there is nothing to validate, and single-user OSS applies no IAM
+ * filtering — ALL organizations are "mine". A composed directory filters
+ * to the caller's authorized set instead (the multiTenant capability
+ * fork, ruling Q7): the directory answers ids, the controller loads
+ * them, and ids whose rows are gone are skipped (grants can outlive
+ * rows).
+ */
+async function findMyOrganizations(deps, ctx) {
+    const directory = deps.organizationDirectory;
+    if (directory !== undefined) {
+        const authorized = await directory.listMyOrganizationIds(callerIdentityOf(ctx));
+        if (authorized !== ALL_ORGANIZATIONS) {
+            const entries = [];
+            for (const id of authorized) {
+                try {
+                    entries.push(await deps.store.getResource(ApiResourceKind.organization, id, OrganizationSchema));
+                }
+                catch (error) {
+                    if (error instanceof ResourceNotFoundError) {
+                        continue;
+                    }
+                    throw internalError(error, "failed to list organizations");
+                }
+            }
+            return create(OrganizationsSchema, { entries });
+        }
+    }
+    let data;
+    try {
+        data = await deps.store.listResources(ApiResourceKind.organization);
+    }
+    catch (error) {
+        throw internalError(error, "failed to list organizations");
+    }
+    const entries = [];
+    for (const bytes of data) {
+        try {
+            entries.push(fromBinary(OrganizationSchema, bytes));
+        }
+        catch {
+            continue;
+        }
+    }
+    return create(OrganizationsSchema, { entries });
+}
+/**
+ * GetByExternalOrgId — registered only with a directory lookup composed
+ * (ruling Q7). The chain stays controller-owned: Authorize → validate →
+ * directory resolves the external id → LoadTarget-shaped store read.
+ * Both miss arms (no mapping, mapped row gone) answer the same NotFound
+ * — an external caller cannot distinguish a stale mapping from a
+ * missing org.
+ */
+async function getByExternalOrgId(deps, lookup, input, ctx) {
+    const reqCtx = new RequestContext(OrganizationQueryController.method.getByExternalOrgId.input, input, callerIdentityOf(ctx), kindOf(ctx));
+    await newPipeline("organization-get-by-external-org-id", deps.logger)
+        .addStep(newAuthorizeStep(OrganizationQueryController.method.getByExternalOrgId, deps.authorizer))
+        .addStep(newValidateProtoStep())
+        .build()
+        .execute(reqCtx);
+    if (input.externalOrgId === "") {
+        throw invalidArgumentError("external_org_id is required");
+    }
+    const orgId = await lookup(input.externalOrgId);
+    if (orgId === undefined) {
+        throw notFoundError("Organization", input.externalOrgId);
+    }
+    try {
+        return await deps.store.getResource(ApiResourceKind.organization, orgId, OrganizationSchema);
+    }
+    catch (error) {
+        if (error instanceof ResourceNotFoundError) {
+            throw notFoundError("Organization", input.externalOrgId);
+        }
+        throw internalError(error, "failed to load organization");
+    }
+}
+//# sourceMappingURL=controller.js.map

package/dist/domain/organization/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../../src/domain/organization/controller.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH,OAAO,EAAE,6BAA6B,EAAE,MAAM,+DAA+D,CAAC;AAC9G,OAAO,EAAE,2BAA2B,EAAE,MAAM,6DAA6D,CAAC;AAC1G,OAAO,EAAE,kBAAkB,EAAE,MAAM,2DAA2D,CAAC;AAE/F,OAAO,EACL,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,0DAA0D,CAAC;AAWlE,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAG/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,aAAa,GACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAE,MAAM,+CAA+C,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,uBAAuB,EAAE,MAAM,4CAA4C,CAAC;AACrF,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,6CAA6C,CAAC;AACxF,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAe3E,yEAAyE;AACzE,MAAM,UAAU,4BAA4B,CAC1C,MAAqB,EACrB,IAAgC;IAEhC,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE;QAC5C,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QAC1C,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QACxD,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QAC5C,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;KAC7D,CAAC,CAAC;IACH,wEAAwE;IACxE,qEAAqE;IACrE,mEAAmE;IACnE,iDAAiD;IACjD,MAAM,cAAc,GAClB,IAAI,CAAC,qBAAqB,EAAE,gCAAgC,EAAE,IAAI,CAChE,IAAI,CAAC,qBAAqB,CAC3B,CAAC;IACJ,MAAM,CAAC,OAAO,CAAC,2BAA2B,EAAE;QAC1C,GAAG,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;QAC1C,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QACxC,mBAAmB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC;QAC/D,GAAG,CAAC,cAAc,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,kBAAkB,EAAE,CAClB,MAAkC,EAClC,GAAmB,EACnB,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC;aAC3D,CAAC;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,GAAmB;IACjC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,kBAAkB,CAC/B,IAAgC,EAChC,GAAiB,EACjB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,kBAAkB,EAClB,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,OAAO,GAAG,WAAW,CACzB,qBAAqB,EACrB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,6BAA6B,CAAC,MAAM,CAAC,MAAM,EAC3C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,kBAAkB,EAAE,CAAC;SAC7B,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,yBAAyB,EAAE,CAAC;SACpC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC7C,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACpD,OAAO,CAAC,mBAAmB,EAAE,CAAC;SAC9B,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,mEAAmE;QACnE,kEAAkE;QAClE,2DAA2D;SAC1D,OAAO,CACN,gCAAgC,CAC9B,IAAI,CAAC,sBAAsB,EAC3B,IAAI,CAAC,MAAM,CACZ,CACF,CAAC;IACJ,sEAAsE;IACtE,wEAAwE;IACxE,KAAK,MAAM,IAAI,IAAI,YAAY,CAC7B,IAAI,CAAC,SAAS,EACd,yBAAyB,CAC1B,EAAE,CAAC;QACF,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,OAAO;SACV,OAAO,CACN,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,2BAA2B,EAAE,IAAI,CAAC,MAAM,CAAC,CACzE;SACA,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC;AAED,iDAAiD;AACjD,KAAK,UAAU,MAAM,CACnB,IAAgC,EAChC,GAAiB,EACjB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,kBAAkB,EAClB,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,qBAAqB,EACrB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,6BAA6B,CAAC,MAAM,CAAC,MAAM,EAC3C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,kBAAkB,EAAE,CAAC;SAC7B,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACxC,OAAO,CAAC,uBAAuB,EAAE,CAAC;SAClC,OAAO,CAAC,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;SACpD,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACnC,OAAO,CACN,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,2BAA2B,EAAE,IAAI,CAAC,MAAM,CAAC,CACzE;SACA,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,KAAK,CAClB,IAAgC,EAChC,GAAiB,EACjB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,kBAAkB,EAClB,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,oBAAoB,EACpB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,6BAA6B,CAAC,MAAM,CAAC,KAAK,EAC1C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,kBAAkB,EAAE,CAAC;SAC7B,OAAO,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SACxC,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACnD,IAAI,OAAO,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,8CAA8C,CAAC,EACzD,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,YAAY;QACjB,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC;QACpC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,CAAC,kBAAkB,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,kBAAkB,CAC/B,IAAgC,EAChC,KAAqB,EACrB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,6BAA6B,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EACjD,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,qBAAqB,EACrB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,6BAA6B,CAAC,MAAM,CAAC,MAAM,EAC3C,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,wBAAwB,EAAE,CAAC;SACnC,OAAO,CAAC,4BAA4B,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;SACrE,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC1C,OAAO,CACN,yBAAyB,CAAC,IAAI,CAAC,sBAAsB,EAAE,IAAI,CAAC,MAAM,CAAC,CACpE;SACA,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;SAC1D,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,aAAa,CACjB,IAAI,KAAK,CAAC,2CAA2C,CAAC,EACtD,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IACD,OAAO,OAAuB,CAAC;AACjC,CAAC;AAED,oDAAoD;AACpD,KAAK,UAAU,GAAG,CAChB,IAAgC,EAChC,KAAqB,EACrB,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,2BAA2B,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAC5C,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,kBAAkB,EAClB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CAAC,2BAA2B,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAC1E;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;SAC1D,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAiB,CAAC;AACzD,CAAC;AAED,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC;;;;;;;;GAQG;AACH,KAAK,UAAU,IAAI,CACjB,IAAgC,EAChC,GAA4B,EAC5B,GAAmB;IAEnB,IAAI,IAAI,CAAC,qBAAqB,EAAE,kBAAkB,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,YAAY,CACpB,wFAAwF,EACxF,IAAI,CAAC,aAAa,CACnB,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,2BAA2B,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAC7C,GAAG,EACH,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CACf,mBAAmB,EACnB,IAAI,CAAC,MAAM,CACZ;SACE,OAAO,CACN,gBAAgB,CACd,2BAA2B,CAAC,MAAM,CAAC,IAAI,EACvC,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,OAAO,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAChD,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAqB,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,SAAS,2BAA2B,CAClC,KAAY;IAEZ,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,KAAK,CAAC,OAAO,CACX,GAAyE;YAEzE,IAAI,IAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,aAAa,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,IAAI,GAAmB,EAAE,CAAC;YAChC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,CAAC,kCAAkC;gBAC9C,CAAC;YACH,CAAC;YAED,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;YACtB,IAAI,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAC5B,IAAI,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;YAChC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;oBACtB,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC3B,CAAC;gBACD,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;oBACrB,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC5B,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;gBAClB,QAAQ,GAAG,EAAE,CAAC;YAChB,CAAC;YACD,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC;gBACnB,QAAQ,GAAG,GAAG,CAAC;YACjB,CAAC;YACD,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;gBACpB,UAAU,GAAG,CAAC,CAAC;YACjB,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;YAC1C,MAAM,OAAO,GACX,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,QAAQ,CAAC,CAAC;YAElE,GAAG,CAAC,GAAG,CACL,eAAe,EACf,MAAM,CAAC,sBAAsB,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CACxD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAgC,EAChC,GAAmB;IAEnB,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC;IAC7C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,qBAAqB,CACtD,gBAAgB,CAAC,GAAG,CAAC,CACtB,CAAC;QACF,IAAI,UAAU,KAAK,iBAAiB,EAAE,CAAC;YACrC,MAAM,OAAO,GAAmB,EAAE,CAAC;YACnC,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CACV,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAC1B,eAAe,CAAC,YAAY,EAC5B,EAAE,EACF,kBAAkB,CACnB,CACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;wBAC3C,SAAS;oBACX,CAAC;oBACD,MAAM,aAAa,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;YACD,OAAO,MAAM,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,IAAI,IAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAC/B,IAAgC,EAChC,MAA8D,EAC9D,KAAiC,EACjC,GAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,cAAc,CAC/B,2BAA2B,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,EAC3D,KAAK,EACL,gBAAgB,CAAC,GAAG,CAAC,EACrB,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;IACF,MAAM,WAAW,CAEf,qCAAqC,EAAE,IAAI,CAAC,MAAM,CAAC;SAClD,OAAO,CACN,gBAAgB,CACd,2BAA2B,CAAC,MAAM,CAAC,kBAAkB,EACrD,IAAI,CAAC,UAAU,CAChB,CACF;SACA,OAAO,CAAC,oBAAoB,EAAE,CAAC;SAC/B,KAAK,EAAE;SACP,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,IAAI,KAAK,CAAC,aAAa,KAAK,EAAE,EAAE,CAAC;QAC/B,MAAM,oBAAoB,CAAC,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CACjC,eAAe,CAAC,YAAY,EAC5B,KAAK,EACL,kBAAkB,CACnB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;YAC3C,MAAM,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,aAAa,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/dist/domain/organization/search-extractor.d.ts

@@ -0,0 +1,3 @@
+import type { SearchableExtractor } from "../../query/search/extractor.js";
+export declare const organizationSearchExtractor: SearchableExtractor;
+//# sourceMappingURL=search-extractor.d.ts.map

package/dist/domain/organization/search-extractor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-extractor.d.ts","sourceRoot":"","sources":["../../../src/domain/organization/search-extractor.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,eAAO,MAAM,2BAA2B,EAAE,mBA0CzC,CAAC"}

package/dist/domain/organization/search-extractor.js

@@ -0,0 +1,43 @@
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { ApiResourceVisibility } from "@stigmer/protos/ai/stigmer/commons/apiresource/enum_pb";
+import { OrganizationSchema } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/api_pb";
+import { buildSearchResult } from "../../query/search/extractor.js";
+export const organizationSearchExtractor = {
+    kind: ApiResourceKind.organization,
+    schema: OrganizationSchema,
+    getSearchSummary(resource) {
+        // Go OrganizationExtractor.GetSearchSummary: spec.description.
+        const org = resource;
+        return org.spec?.description ?? "";
+    },
+    toSearchResult(resource, score) {
+        const org = resource;
+        return buildSearchResult({
+            kind: ApiResourceKind.organization,
+            metadata: org.metadata,
+            summary: org.spec?.description ?? "",
+            score,
+            createdAt: org.status?.audit?.specAudit?.createdAt,
+            updatedAt: org.status?.audit?.specAudit?.updatedAt,
+        });
+    },
+    getSearchIndexEntry(resource) {
+        const org = resource;
+        const metadata = org.metadata;
+        if (metadata === undefined) {
+            return undefined;
+        }
+        return {
+            name: metadata.name,
+            description: org.spec?.description ?? "",
+            // Tags join space-separated — the index entry carries one tags
+            // string (Go extractor.JoinTags).
+            tags: metadata.tags.join(" "),
+            org: metadata.org,
+            // The enum NAME string, exactly Go's visibility.String().
+            visibility: ApiResourceVisibility[metadata.visibility] ?? "",
+            createdAt: Number(org.status?.audit?.specAudit?.createdAt?.seconds ?? 0n),
+        };
+    },
+};
+//# sourceMappingURL=search-extractor.js.map

package/dist/domain/organization/search-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-extractor.js","sourceRoot":"","sources":["../../../src/domain/organization/search-extractor.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,qBAAqB,EAAE,MAAM,wDAAwD,CAAC;AAE/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,2DAA2D,CAAC;AAI/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAGpE,MAAM,CAAC,MAAM,2BAA2B,GAAwB;IAC9D,IAAI,EAAE,eAAe,CAAC,YAAY;IAClC,MAAM,EAAE,kBAAkB;IAE1B,gBAAgB,CAAC,QAAiB;QAChC,+DAA+D;QAC/D,MAAM,GAAG,GAAG,QAAmC,CAAC;QAChD,OAAO,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,cAAc,CAAC,QAAiB,EAAE,KAAa;QAC7C,MAAM,GAAG,GAAG,QAAmC,CAAC;QAChD,OAAO,iBAAiB,CAAC;YACvB,IAAI,EAAE,eAAe,CAAC,YAAY;YAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;YACpC,KAAK;YACL,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;YAClD,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS;SACnD,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,QAAiB;QACnC,MAAM,GAAG,GAAG,QAAmC,CAAC;QAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;YACxC,+DAA+D;YAC/D,kCAAkC;YAClC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,0DAA0D;YAC1D,UAAU,EAAE,qBAAqB,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE;YAC5D,SAAS,EAAE,MAAM,CACf,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,IAAI,EAAE,CACvD;SACF,CAAC;IACJ,CAAC;CACF,CAAC"}