@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/client/organizations/organizationReadModels.js

@@ -0,0 +1,279 @@
+import { loadLocalOrganizationContainerGrants, loadLocalOrganizationDirectoryAndGroups, loadLocalOrganizationGroupContainers, loadLocalOrganizationGroupMembers, loadLocalOrganizationGroupPolicyHistory, loadLocalOrganizationPolicyHistory, loadLocalOrganizationPolicyReference, loadLocalOrganizationUserDetail, reconcileOrganizationDirectoryAndGroups, } from "../../workflows/organizations/index.js";
+import { loadPolicyHistoryDetails } from "../../workflows/organizations/loadPolicyHistoryDetails.js";
+import { organizationAccessScopeKey, wasOrganizationPresentationAccessDeniedByServer, } from "../../workflows/organizations/organizationPresentationAccessState.js";
+import { createRuntimePrincipalPolicyWarmer } from "../../workflows/principals/runtimePolicyWarmer.js";
+import { recoverOrganizationAccess } from "./organizationAccessRestoration.js";
+import { hydrateOrganizationGroupNamesForRuntime } from "./organizationGroupNameHydration.js";
+import { activeOrganizationDataRuntime, isOrganizationDataRuntimeCurrent, } from "./organizationWorkflowRuntime.js";
+const coordinatorsByRuntime = new WeakMap();
+class OrganizationReadModelCoordinatorImpl {
+    runtimeService;
+    reconciliationsByScope = new WeakMap();
+    policyWarmersByScope = new WeakMap();
+    constructor(runtimeService) {
+        this.runtimeService = runtimeService;
+    }
+    reconciliationMap(active) {
+        const scope = active.runtime.state.domainScope;
+        let byKey = this.reconciliationsByScope.get(scope);
+        if (!byKey) {
+            byKey = new Map();
+            this.reconciliationsByScope.set(scope, byKey);
+        }
+        return byKey;
+    }
+    policyWarmerMap(active) {
+        const scope = active.runtime.state.domainScope;
+        let byKey = this.policyWarmersByScope.get(scope);
+        if (!byKey) {
+            byKey = new Map();
+            this.policyWarmersByScope.set(scope, byKey);
+        }
+        return byKey;
+    }
+    async warmPolicyReference(active, reference) {
+        if (!active.runtime.state.online) {
+            return;
+        }
+        const byKey = this.policyWarmerMap(active);
+        const key = `${active.organizationId}\0${reference.principalType}\0${reference.principalId}\0${reference.stateHash}`;
+        const existing = byKey.get(key);
+        if (existing) {
+            return existing;
+        }
+        const warming = createRuntimePrincipalPolicyWarmer(active.runtime)({
+            organizationId: active.organizationId,
+            references: [reference],
+        }).finally(() => {
+            if (byKey.get(key) === warming) {
+                byKey.delete(key);
+            }
+        });
+        byKey.set(key, warming);
+        return warming;
+    }
+    async loadPolicyHistoryAfterWarm(input) {
+        try {
+            const local = await input.loadLocal();
+            if (local) {
+                return local;
+            }
+        }
+        catch (error) {
+            input.active.runtime.util.logError("Failed to load verified organization policy history", error);
+        }
+        if (!input.active.runtime.state.online) {
+            return null;
+        }
+        let reference;
+        try {
+            reference = await loadLocalOrganizationPolicyReference({
+                currentUserId: input.active.userId,
+                execSql: input.active.runtime.infra.execSql,
+                organizationId: input.active.organizationId,
+                principalId: input.principalId,
+                principalType: input.principalType,
+            });
+        }
+        catch (error) {
+            input.active.runtime.util.logError("Failed to load organization policy-head projection", error);
+            return null;
+        }
+        if (!reference) {
+            return null;
+        }
+        await this.warmPolicyReference(input.active, reference);
+        try {
+            return await input.loadLocal();
+        }
+        catch (error) {
+            input.active.runtime.util.logError("Failed to reload verified organization policy history", error);
+            return null;
+        }
+    }
+    async loadLocal(organizationId) {
+        const active = activeOrganizationDataRuntime(this.runtimeService, organizationId);
+        if (!active) {
+            return null;
+        }
+        return loadLocalOrganizationDirectoryAndGroups({
+            currentUserId: active.userId,
+            execSql: active.runtime.infra.execSql,
+            organizationId: active.organizationId,
+        });
+    }
+    async loadLocalGrants(organizationId) {
+        const active = activeOrganizationDataRuntime(this.runtimeService, organizationId);
+        if (!active) {
+            return null;
+        }
+        return loadLocalOrganizationContainerGrants({
+            currentUserId: active.userId,
+            execSql: active.runtime.infra.execSql,
+            organizationId: active.organizationId,
+        });
+    }
+    async loadLocalGroupContainers(groupId, organizationId) {
+        const active = activeOrganizationDataRuntime(this.runtimeService, organizationId);
+        if (!active || groupId.length === 0) {
+            return null;
+        }
+        return loadLocalOrganizationGroupContainers({
+            currentUserId: active.userId,
+            execSql: active.runtime.infra.execSql,
+            groupId,
+            organizationId: active.organizationId,
+        });
+    }
+    async loadLocalGroupMembers(groupId, organizationId) {
+        const active = activeOrganizationDataRuntime(this.runtimeService, organizationId);
+        if (!active || groupId.length === 0) {
+            return null;
+        }
+        return loadLocalOrganizationGroupMembers({
+            currentUserId: active.userId,
+            execSql: active.runtime.infra.execSql,
+            groupId,
+            organizationId: active.organizationId,
+        });
+    }
+    async loadGroupPolicyHistory(groupId, organizationId) {
+        const active = activeOrganizationDataRuntime(this.runtimeService, organizationId);
+        if (!active || groupId.length === 0) {
+            return null;
+        }
+        return this.loadPolicyHistoryAfterWarm({
+            active,
+            loadLocal: () => loadLocalOrganizationGroupPolicyHistory({
+                currentUserId: active.userId,
+                execSql: active.runtime.infra.execSql,
+                groupId,
+                organizationId: active.organizationId,
+            }),
+            principalId: groupId,
+            principalType: "group",
+        });
+    }
+    async loadOrganizationPolicyHistory(organizationId) {
+        const active = activeOrganizationDataRuntime(this.runtimeService, organizationId);
+        if (!active) {
+            return null;
+        }
+        const history = await this.loadPolicyHistoryAfterWarm({
+            active,
+            loadLocal: () => loadLocalOrganizationPolicyHistory({
+                currentUserId: active.userId,
+                execSql: active.runtime.infra.execSql,
+                organizationId: active.organizationId,
+            }),
+            principalId: active.organizationId,
+            principalType: "organization",
+        });
+        if (!history || !active.runtime.state.online)
+            return history;
+        const domainScope = active.runtime.state.domainScope;
+        return loadPolicyHistoryDetails({
+            domainScope,
+            apiClient: active.runtime.apiClient,
+            currentUserId: active.userId,
+            execSql: active.runtime.infra.execSql,
+            organizationId: active.organizationId,
+            history,
+            resolveTrustedUserIdentity: active.runtime.resolveTrustedUserIdentity,
+            stillCurrent: () => isOrganizationDataRuntimeCurrent(this.runtimeService, active, domainScope),
+            logError: active.runtime.util.logError,
+            reportSecurityIncident: active.runtime.util.reportSecurityIncident,
+        });
+    }
+    async loadLocalUserDetail(userId, organizationId) {
+        const active = activeOrganizationDataRuntime(this.runtimeService, organizationId);
+        if (!active || userId.length === 0) {
+            return null;
+        }
+        return loadLocalOrganizationUserDetail({
+            currentUserId: active.userId,
+            execSql: active.runtime.infra.execSql,
+            organizationId: active.organizationId,
+            userId,
+        });
+    }
+    reconcile(organizationId) {
+        const active = activeOrganizationDataRuntime(this.runtimeService, organizationId);
+        if (!active?.runtime.state.online) {
+            return Promise.resolve(undefined);
+        }
+        const byKey = this.reconciliationMap(active);
+        const key = organizationAccessScopeKey(active.organizationId, active.userId);
+        const existing = byKey.get(key);
+        if (existing) {
+            return existing;
+        }
+        // Snapshot the server-denied flag before reconciling. A reconcile that
+        // flips it back to readable means org access was just restored (e.g. the
+        // user was re-added to a group), and any write lanes idled by
+        // permission-denied submissions have no self re-arm — regaining access is
+        // their retry signal, mirroring how billing recovery re-requests all
+        // lanes. Only a genuine server denial counts: a local session reset also
+        // marks scopes denied, and re-arming on its first reconcile would race the
+        // startup sync passes (e.g. pending-create adoption between panes).
+        const accessWasDenied = wasOrganizationPresentationAccessDeniedByServer({
+            execSql: active.runtime.infra.execSql,
+            organizationId: active.organizationId,
+            requesterUserId: active.userId,
+        }, "readModel");
+        const domainScope = active.runtime.state.domainScope;
+        const stillCurrent = () => isOrganizationDataRuntimeCurrent(this.runtimeService, active, domainScope);
+        const reconciliation = reconcileOrganizationDirectoryAndGroups({
+            apiClient: active.runtime.apiClient,
+            currentUserId: active.userId,
+            execSql: active.runtime.infra.execSql,
+            logError: active.runtime.util.logError,
+            organizationId: active.organizationId,
+        })
+            .then(async (directoryAndGroups) => {
+            if (!stillCurrent())
+                return null;
+            // Feed success restores retry eligibility even if name decryption fails.
+            const accessWasRestored = accessWasDenied &&
+                directoryAndGroups !== null &&
+                directoryAndGroups !== undefined;
+            if (accessWasRestored)
+                await recoverOrganizationAccess({
+                    active,
+                    domainScope,
+                    stillCurrent,
+                });
+            if (!stillCurrent())
+                return null;
+            return hydrateOrganizationGroupNamesForRuntime(this.runtimeService, active, domainScope, directoryAndGroups);
+        })
+            .finally(() => {
+            if (byKey.get(key) === reconciliation) {
+                byKey.delete(key);
+            }
+        });
+        byKey.set(key, reconciliation);
+        return reconciliation;
+    }
+    async reconcileAfterMutation(organizationId) {
+        const active = activeOrganizationDataRuntime(this.runtimeService, organizationId);
+        if (!active?.runtime.state.online) {
+            return undefined;
+        }
+        const existing = this.reconciliationMap(active).get(organizationAccessScopeKey(active.organizationId, active.userId));
+        if (existing) {
+            await existing.catch(() => null);
+        }
+        return this.reconcile(active.organizationId);
+    }
+}
+export function createOrganizationReadModelCoordinator(runtimeService) {
+    const existing = coordinatorsByRuntime.get(runtimeService);
+    if (existing) {
+        return existing;
+    }
+    const coordinator = new OrganizationReadModelCoordinatorImpl(runtimeService);
+    coordinatorsByRuntime.set(runtimeService, coordinator);
+    return coordinator;
+}
+//# sourceMappingURL=organizationReadModels.js.map

package/client/organizations/organizationReadModels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationReadModels.js","sourceRoot":"","sources":["organizationReadModels.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oCAAoC,EACpC,uCAAuC,EACvC,oCAAoC,EACpC,iCAAiC,EACjC,uCAAuC,EACvC,kCAAkC,EAClC,oCAAoC,EACpC,+BAA+B,EAQ/B,uCAAuC,GACxC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAClG,OAAO,EACL,0BAA0B,EAC1B,+CAA+C,GAChD,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAEpG,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,uCAAuC,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EAEL,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,+BAA+B,CAAC;AAEvC,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAGtC,CAAC;AA4CJ,MAAM,oCAAoC;IAYX;IATZ,sBAAsB,GAAG,IAAI,OAAO,EAGlD,CAAC;IACa,oBAAoB,GAAG,IAAI,OAAO,EAGhD,CAAC;IAEJ,YAA6B,cAA+B;QAA/B,mBAAc,GAAd,cAAc,CAAiB;IAAG,CAAC;IAExD,iBAAiB,CAAC,MAAqC;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAC/C,IAAI,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,eAAe,CAAC,MAAqC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAC/C,IAAI,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,MAAqC,EACrC,SAEC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,aAAa,KAAK,SAAS,CAAC,WAAW,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;QACrH,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,kCAAkC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjE,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,CAAC,SAAS,CAAC;SACxB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACd,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC/B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,0BAA0B,CAAU,KAKjD;QACC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAChC,qDAAqD,EACrD,KAAK,CACN,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,SAEH,CAAC;QACF,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,oCAAoC,CAAC;gBACrD,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAClC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC3C,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;gBAC3C,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAChC,oDAAoD,EACpD,KAAK,CACN,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAChC,uDAAuD,EACvD,KAAK,CACN,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,cAAuB;QACrC,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,uCAAuC,CAAC;YAC7C,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAuB;QAC3C,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,oCAAoC,CAAC;YAC1C,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,OAAe,EAAE,cAAuB;QACrE,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,oCAAoC,CAAC;YAC1C,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,OAAO;YACP,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAe,EAAE,cAAuB;QAClE,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,iCAAiC,CAAC;YACvC,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,OAAO;YACP,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,OAAe,EAAE,cAAuB;QACnE,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,0BAA0B,CAAC;YACrC,MAAM;YACN,SAAS,EAAE,GAAG,EAAE,CACd,uCAAuC,CAAC;gBACtC,aAAa,EAAE,MAAM,CAAC,MAAM;gBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;gBACrC,OAAO;gBACP,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CAAC;YACJ,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,6BAA6B,CAAC,cAAuB;QACzD,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC;YACpD,MAAM;YACN,SAAS,EAAE,GAAG,EAAE,CACd,kCAAkC,CAAC;gBACjC,aAAa,EAAE,MAAM,CAAC,MAAM;gBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;gBACrC,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CAAC;YACJ,WAAW,EAAE,MAAM,CAAC,cAAc;YAClC,aAAa,EAAE,cAAc;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC;QAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QACrD,OAAO,wBAAwB,CAAC;YAC9B,WAAW;YACX,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YACnC,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,OAAO;YACP,0BAA0B,EAAE,MAAM,CAAC,OAAO,CAAC,0BAA0B;YACrE,YAAY,EAAE,GAAG,EAAE,CACjB,gCAAgC,CAC9B,IAAI,CAAC,cAAc,EACnB,MAAM,EACN,WAAW,CACZ;YACH,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ;YACtC,sBAAsB,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB;SACnE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,cAAuB;QAC/D,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,+BAA+B,CAAC;YACrC,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CACP,cAAuB;QAEvB,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,0BAA0B,CACpC,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,MAAM,CACd,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,uEAAuE;QACvE,yEAAyE;QACzE,8DAA8D;QAC9D,0EAA0E;QAC1E,qEAAqE;QACrE,yEAAyE;QACzE,2EAA2E;QAC3E,oEAAoE;QACpE,MAAM,eAAe,GAAG,+CAA+C,CACrE;YACE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,eAAe,EAAE,MAAM,CAAC,MAAM;SAC/B,EACD,WAAW,CACZ,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QACrD,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,gCAAgC,CAC9B,IAAI,CAAC,cAAc,EACnB,MAAM,EACN,WAAW,CACZ,CAAC;QAEJ,MAAM,cAAc,GAAG,uCAAuC,CAAC;YAC7D,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YACnC,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ;YACtC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;aACC,IAAI,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE;YACjC,IAAI,CAAC,YAAY,EAAE;gBAAE,OAAO,IAAI,CAAC;YACjC,yEAAyE;YACzE,MAAM,iBAAiB,GACrB,eAAe;gBACf,kBAAkB,KAAK,IAAI;gBAC3B,kBAAkB,KAAK,SAAS,CAAC;YACnC,IAAI,iBAAiB;gBACnB,MAAM,yBAAyB,CAAC;oBAC9B,MAAM;oBACN,WAAW;oBACX,YAAY;iBACb,CAAC,CAAC;YACL,IAAI,CAAC,YAAY,EAAE;gBAAE,OAAO,IAAI,CAAC;YACjC,OAAO,uCAAuC,CAC5C,IAAI,CAAC,cAAc,EACnB,MAAM,EACN,WAAW,EACX,kBAAkB,CACnB,CAAC;QACJ,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,cAAc,EAAE,CAAC;gBACtC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;QACL,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC/B,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,cAAuB;QAEvB,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,GAAG,CACjD,0BAA0B,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CACjE,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC/C,CAAC;CACF;AAED,MAAM,UAAU,sCAAsC,CACpD,cAA+B;IAE/B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,oCAAoC,CAAC,cAAc,CAAC,CAAC;IAC7E,qBAAqB,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACvD,OAAO,WAAW,CAAC;AACrB,CAAC","sourcesContent":["import type { DomainScope } from \"../../data/domainScope\";\nimport {\n  loadLocalOrganizationContainerGrants,\n  loadLocalOrganizationDirectoryAndGroups,\n  loadLocalOrganizationGroupContainers,\n  loadLocalOrganizationGroupMembers,\n  loadLocalOrganizationGroupPolicyHistory,\n  loadLocalOrganizationPolicyHistory,\n  loadLocalOrganizationPolicyReference,\n  loadLocalOrganizationUserDetail,\n  type OrganizationContainerGrants,\n  type OrganizationDirectoryAndGroups,\n  type OrganizationGroupContainers,\n  type OrganizationGroupMembers,\n  type OrganizationGroupPolicyHistory,\n  type OrganizationPolicyHistory,\n  type OrganizationUserDetail,\n  reconcileOrganizationDirectoryAndGroups,\n} from \"../../workflows/organizations\";\nimport { loadPolicyHistoryDetails } from \"../../workflows/organizations/loadPolicyHistoryDetails\";\nimport {\n  organizationAccessScopeKey,\n  wasOrganizationPresentationAccessDeniedByServer,\n} from \"../../workflows/organizations/organizationPresentationAccessState\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../workflows/principals/runtimePolicyWarmer\";\nimport type { InternalRuntime } from \"../workflowRuntime\";\nimport { recoverOrganizationAccess } from \"./organizationAccessRestoration\";\nimport { hydrateOrganizationGroupNamesForRuntime } from \"./organizationGroupNameHydration\";\nimport {\n  type ActiveOrganizationDataRuntime,\n  activeOrganizationDataRuntime,\n  isOrganizationDataRuntimeCurrent,\n} from \"./organizationWorkflowRuntime\";\n\nconst coordinatorsByRuntime = new WeakMap<\n  InternalRuntime,\n  OrganizationReadModelCoordinator\n>();\n\nexport interface OrganizationReadModelCoordinator {\n  loadLocal(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationDirectoryAndGroups | null>;\n  loadLocalGroupMembers(\n    groupId: string,\n    organizationId?: string | undefined,\n  ): Promise<OrganizationGroupMembers | null>;\n  loadGroupPolicyHistory(\n    groupId: string,\n    organizationId?: string | undefined,\n  ): Promise<OrganizationGroupPolicyHistory | null>;\n  loadOrganizationPolicyHistory(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationPolicyHistory | null>;\n  loadLocalGrants(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationContainerGrants | null>;\n  loadLocalGroupContainers(\n    groupId: string,\n    organizationId?: string | undefined,\n  ): Promise<OrganizationGroupContainers | null>;\n  loadLocalUserDetail(\n    userId: string,\n    organizationId?: string | undefined,\n  ): Promise<OrganizationUserDetail | null>;\n  /**\n   * Resolves `undefined` when the runtime declines without I/O (offline,\n   * database not ready, organization mismatch) or when the feed failed with\n   * no locally retained projection — passes that must not count as caught\n   * up; `null` when the reconcile completed but produced nothing presentable\n   * — including an authoritative denial that purged the projection, which\n   * consumers must repaint.\n   */\n  reconcile(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationDirectoryAndGroups | null | undefined>;\n  reconcileAfterMutation(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationDirectoryAndGroups | null | undefined>;\n}\n\nclass OrganizationReadModelCoordinatorImpl\n  implements OrganizationReadModelCoordinator\n{\n  private readonly reconciliationsByScope = new WeakMap<\n    DomainScope,\n    Map<string, Promise<OrganizationDirectoryAndGroups | null | undefined>>\n  >();\n  private readonly policyWarmersByScope = new WeakMap<\n    DomainScope,\n    Map<string, Promise<void>>\n  >();\n\n  constructor(private readonly runtimeService: InternalRuntime) {}\n\n  private reconciliationMap(active: ActiveOrganizationDataRuntime) {\n    const scope = active.runtime.state.domainScope;\n    let byKey = this.reconciliationsByScope.get(scope);\n    if (!byKey) {\n      byKey = new Map();\n      this.reconciliationsByScope.set(scope, byKey);\n    }\n    return byKey;\n  }\n\n  private policyWarmerMap(active: ActiveOrganizationDataRuntime) {\n    const scope = active.runtime.state.domainScope;\n    let byKey = this.policyWarmersByScope.get(scope);\n    if (!byKey) {\n      byKey = new Map();\n      this.policyWarmersByScope.set(scope, byKey);\n    }\n    return byKey;\n  }\n\n  private async warmPolicyReference(\n    active: ActiveOrganizationDataRuntime,\n    reference: NonNullable<\n      Awaited<ReturnType<typeof loadLocalOrganizationPolicyReference>>\n    >,\n  ): Promise<void> {\n    if (!active.runtime.state.online) {\n      return;\n    }\n    const byKey = this.policyWarmerMap(active);\n    const key = `${active.organizationId}\\0${reference.principalType}\\0${reference.principalId}\\0${reference.stateHash}`;\n    const existing = byKey.get(key);\n    if (existing) {\n      return existing;\n    }\n    const warming = createRuntimePrincipalPolicyWarmer(active.runtime)({\n      organizationId: active.organizationId,\n      references: [reference],\n    }).finally(() => {\n      if (byKey.get(key) === warming) {\n        byKey.delete(key);\n      }\n    });\n    byKey.set(key, warming);\n    return warming;\n  }\n\n  private async loadPolicyHistoryAfterWarm<History>(input: {\n    readonly active: ActiveOrganizationDataRuntime;\n    readonly loadLocal: () => Promise<History | null>;\n    readonly principalId: string;\n    readonly principalType: \"group\" | \"organization\";\n  }): Promise<History | null> {\n    try {\n      const local = await input.loadLocal();\n      if (local) {\n        return local;\n      }\n    } catch (error) {\n      input.active.runtime.util.logError(\n        \"Failed to load verified organization policy history\",\n        error,\n      );\n    }\n    if (!input.active.runtime.state.online) {\n      return null;\n    }\n\n    let reference: Awaited<\n      ReturnType<typeof loadLocalOrganizationPolicyReference>\n    >;\n    try {\n      reference = await loadLocalOrganizationPolicyReference({\n        currentUserId: input.active.userId,\n        execSql: input.active.runtime.infra.execSql,\n        organizationId: input.active.organizationId,\n        principalId: input.principalId,\n        principalType: input.principalType,\n      });\n    } catch (error) {\n      input.active.runtime.util.logError(\n        \"Failed to load organization policy-head projection\",\n        error,\n      );\n      return null;\n    }\n    if (!reference) {\n      return null;\n    }\n\n    await this.warmPolicyReference(input.active, reference);\n    try {\n      return await input.loadLocal();\n    } catch (error) {\n      input.active.runtime.util.logError(\n        \"Failed to reload verified organization policy history\",\n        error,\n      );\n      return null;\n    }\n  }\n\n  async loadLocal(organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active) {\n      return null;\n    }\n    return loadLocalOrganizationDirectoryAndGroups({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      organizationId: active.organizationId,\n    });\n  }\n\n  async loadLocalGrants(organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active) {\n      return null;\n    }\n    return loadLocalOrganizationContainerGrants({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      organizationId: active.organizationId,\n    });\n  }\n\n  async loadLocalGroupContainers(groupId: string, organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active || groupId.length === 0) {\n      return null;\n    }\n    return loadLocalOrganizationGroupContainers({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      groupId,\n      organizationId: active.organizationId,\n    });\n  }\n\n  async loadLocalGroupMembers(groupId: string, organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active || groupId.length === 0) {\n      return null;\n    }\n    return loadLocalOrganizationGroupMembers({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      groupId,\n      organizationId: active.organizationId,\n    });\n  }\n\n  async loadGroupPolicyHistory(groupId: string, organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active || groupId.length === 0) {\n      return null;\n    }\n    return this.loadPolicyHistoryAfterWarm({\n      active,\n      loadLocal: () =>\n        loadLocalOrganizationGroupPolicyHistory({\n          currentUserId: active.userId,\n          execSql: active.runtime.infra.execSql,\n          groupId,\n          organizationId: active.organizationId,\n        }),\n      principalId: groupId,\n      principalType: \"group\",\n    });\n  }\n\n  async loadOrganizationPolicyHistory(organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active) {\n      return null;\n    }\n    const history = await this.loadPolicyHistoryAfterWarm({\n      active,\n      loadLocal: () =>\n        loadLocalOrganizationPolicyHistory({\n          currentUserId: active.userId,\n          execSql: active.runtime.infra.execSql,\n          organizationId: active.organizationId,\n        }),\n      principalId: active.organizationId,\n      principalType: \"organization\",\n    });\n    if (!history || !active.runtime.state.online) return history;\n    const domainScope = active.runtime.state.domainScope;\n    return loadPolicyHistoryDetails({\n      domainScope,\n      apiClient: active.runtime.apiClient,\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      organizationId: active.organizationId,\n      history,\n      resolveTrustedUserIdentity: active.runtime.resolveTrustedUserIdentity,\n      stillCurrent: () =>\n        isOrganizationDataRuntimeCurrent(\n          this.runtimeService,\n          active,\n          domainScope,\n        ),\n      logError: active.runtime.util.logError,\n      reportSecurityIncident: active.runtime.util.reportSecurityIncident,\n    });\n  }\n\n  async loadLocalUserDetail(userId: string, organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active || userId.length === 0) {\n      return null;\n    }\n    return loadLocalOrganizationUserDetail({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      organizationId: active.organizationId,\n      userId,\n    });\n  }\n\n  reconcile(\n    organizationId?: string,\n  ): Promise<OrganizationDirectoryAndGroups | null | undefined> {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active?.runtime.state.online) {\n      return Promise.resolve(undefined);\n    }\n\n    const byKey = this.reconciliationMap(active);\n    const key = organizationAccessScopeKey(\n      active.organizationId,\n      active.userId,\n    );\n    const existing = byKey.get(key);\n    if (existing) {\n      return existing;\n    }\n\n    // Snapshot the server-denied flag before reconciling. A reconcile that\n    // flips it back to readable means org access was just restored (e.g. the\n    // user was re-added to a group), and any write lanes idled by\n    // permission-denied submissions have no self re-arm — regaining access is\n    // their retry signal, mirroring how billing recovery re-requests all\n    // lanes. Only a genuine server denial counts: a local session reset also\n    // marks scopes denied, and re-arming on its first reconcile would race the\n    // startup sync passes (e.g. pending-create adoption between panes).\n    const accessWasDenied = wasOrganizationPresentationAccessDeniedByServer(\n      {\n        execSql: active.runtime.infra.execSql,\n        organizationId: active.organizationId,\n        requesterUserId: active.userId,\n      },\n      \"readModel\",\n    );\n    const domainScope = active.runtime.state.domainScope;\n    const stillCurrent = () =>\n      isOrganizationDataRuntimeCurrent(\n        this.runtimeService,\n        active,\n        domainScope,\n      );\n\n    const reconciliation = reconcileOrganizationDirectoryAndGroups({\n      apiClient: active.runtime.apiClient,\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      logError: active.runtime.util.logError,\n      organizationId: active.organizationId,\n    })\n      .then(async (directoryAndGroups) => {\n        if (!stillCurrent()) return null;\n        // Feed success restores retry eligibility even if name decryption fails.\n        const accessWasRestored =\n          accessWasDenied &&\n          directoryAndGroups !== null &&\n          directoryAndGroups !== undefined;\n        if (accessWasRestored)\n          await recoverOrganizationAccess({\n            active,\n            domainScope,\n            stillCurrent,\n          });\n        if (!stillCurrent()) return null;\n        return hydrateOrganizationGroupNamesForRuntime(\n          this.runtimeService,\n          active,\n          domainScope,\n          directoryAndGroups,\n        );\n      })\n      .finally(() => {\n        if (byKey.get(key) === reconciliation) {\n          byKey.delete(key);\n        }\n      });\n    byKey.set(key, reconciliation);\n    return reconciliation;\n  }\n\n  async reconcileAfterMutation(\n    organizationId?: string,\n  ): Promise<OrganizationDirectoryAndGroups | null | undefined> {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active?.runtime.state.online) {\n      return undefined;\n    }\n    const existing = this.reconciliationMap(active).get(\n      organizationAccessScopeKey(active.organizationId, active.userId),\n    );\n    if (existing) {\n      await existing.catch(() => null);\n    }\n    return this.reconcile(active.organizationId);\n  }\n}\n\nexport function createOrganizationReadModelCoordinator(\n  runtimeService: InternalRuntime,\n): OrganizationReadModelCoordinator {\n  const existing = coordinatorsByRuntime.get(runtimeService);\n  if (existing) {\n    return existing;\n  }\n\n  const coordinator = new OrganizationReadModelCoordinatorImpl(runtimeService);\n  coordinatorsByRuntime.set(runtimeService, coordinator);\n  return coordinator;\n}\n"]}

package/client/organizations/organizationWorkflowRuntime.js

@@ -0,0 +1,37 @@
+export function authenticatedOrganizationId(runtime) {
+    return runtime.auth.organizationId && runtime.auth.isAuthenticated
+        ? runtime.auth.organizationId
+        : null;
+}
+export function runForOrganization(runtimeService, workflow, targetOrganizationId) {
+    const runtime = runtimeService.workflowInput();
+    const activeOrganizationId = authenticatedOrganizationId(runtime);
+    const organizationId = targetOrganizationId === undefined
+        ? activeOrganizationId
+        : targetOrganizationId;
+    if (!activeOrganizationId || !organizationId) {
+        return Promise.resolve(null);
+    }
+    return workflow({ apiClient: runtime.apiClient, organizationId });
+}
+export function activeOrganizationDataRuntime(runtimeService, expectedOrganizationId) {
+    const runtime = runtimeService.workflowInput();
+    const organizationId = runtime.auth.organizationId;
+    const userId = runtime.auth.userId;
+    if (!runtime.auth.isAuthenticated ||
+        !organizationId ||
+        !userId ||
+        runtime.infra.dbStatus !== "ready" ||
+        (expectedOrganizationId !== undefined &&
+            organizationId !== expectedOrganizationId)) {
+        return null;
+    }
+    return { runtime, organizationId, userId };
+}
+export function isOrganizationDataRuntimeCurrent(runtimeService, active, domainScope) {
+    const current = activeOrganizationDataRuntime(runtimeService, active.organizationId);
+    return (current?.userId === active.userId &&
+        current.runtime.infra.execSql === active.runtime.infra.execSql &&
+        current.runtime.state.domainScope === domainScope);
+}
+//# sourceMappingURL=organizationWorkflowRuntime.js.map

package/client/organizations/organizationWorkflowRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationWorkflowRuntime.js","sourceRoot":"","sources":["organizationWorkflowRuntime.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,2BAA2B,CACzC,OAAqC;IAErC,OAAO,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,eAAe;QAChE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc;QAC7B,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,cAA+B,EAC/B,QAAiC,EACjC,oBAA6B;IAE7B,MAAM,OAAO,GAAG,cAAc,CAAC,aAAa,EAAE,CAAC;IAC/C,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,cAAc,GAClB,oBAAoB,KAAK,SAAS;QAChC,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,oBAAoB,CAAC;IAC3B,IAAI,CAAC,oBAAoB,IAAI,CAAC,cAAc,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,QAAQ,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC;AACpE,CAAC;AAQD,MAAM,UAAU,6BAA6B,CAC3C,cAA+B,EAC/B,sBAA+B;IAE/B,MAAM,OAAO,GAAG,cAAc,CAAC,aAAa,EAAE,CAAC;IAC/C,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IACnC,IACE,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QAC7B,CAAC,cAAc;QACf,CAAC,MAAM;QACP,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;QAClC,CAAC,sBAAsB,KAAK,SAAS;YACnC,cAAc,KAAK,sBAAsB,CAAC,EAC5C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,cAA+B,EAC/B,MAAqC,EACrC,WAAwB;IAExB,MAAM,OAAO,GAAG,6BAA6B,CAC3C,cAAc,EACd,MAAM,CAAC,cAAc,CACtB,CAAC;IACF,OAAO,CACL,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM;QACjC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9D,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,CAClD,CAAC;AACJ,CAAC","sourcesContent":["import type { DomainScope } from \"../../data/domainScope\";\nimport type {\n  InternalRuntime,\n  InternalWorkflowRuntimeInput,\n} from \"../workflowRuntime\";\n\ntype OrganizationWorkflow<T> = (input: {\n  readonly apiClient: InternalWorkflowRuntimeInput[\"apiClient\"];\n  readonly organizationId: string;\n}) => Promise<T>;\n\nexport function authenticatedOrganizationId(\n  runtime: InternalWorkflowRuntimeInput,\n): string | null {\n  return runtime.auth.organizationId && runtime.auth.isAuthenticated\n    ? runtime.auth.organizationId\n    : null;\n}\n\nexport function runForOrganization<T>(\n  runtimeService: InternalRuntime,\n  workflow: OrganizationWorkflow<T>,\n  targetOrganizationId?: string,\n): Promise<T | null> {\n  const runtime = runtimeService.workflowInput();\n  const activeOrganizationId = authenticatedOrganizationId(runtime);\n  const organizationId =\n    targetOrganizationId === undefined\n      ? activeOrganizationId\n      : targetOrganizationId;\n  if (!activeOrganizationId || !organizationId) {\n    return Promise.resolve(null);\n  }\n\n  return workflow({ apiClient: runtime.apiClient, organizationId });\n}\n\nexport interface ActiveOrganizationDataRuntime {\n  readonly runtime: InternalWorkflowRuntimeInput;\n  readonly organizationId: string;\n  readonly userId: string;\n}\n\nexport function activeOrganizationDataRuntime(\n  runtimeService: InternalRuntime,\n  expectedOrganizationId?: string,\n): ActiveOrganizationDataRuntime | null {\n  const runtime = runtimeService.workflowInput();\n  const organizationId = runtime.auth.organizationId;\n  const userId = runtime.auth.userId;\n  if (\n    !runtime.auth.isAuthenticated ||\n    !organizationId ||\n    !userId ||\n    runtime.infra.dbStatus !== \"ready\" ||\n    (expectedOrganizationId !== undefined &&\n      organizationId !== expectedOrganizationId)\n  ) {\n    return null;\n  }\n\n  return { runtime, organizationId, userId };\n}\n\nexport function isOrganizationDataRuntimeCurrent(\n  runtimeService: InternalRuntime,\n  active: ActiveOrganizationDataRuntime,\n  domainScope: DomainScope,\n): boolean {\n  const current = activeOrganizationDataRuntime(\n    runtimeService,\n    active.organizationId,\n  );\n  return (\n    current?.userId === active.userId &&\n    current.runtime.infra.execSql === active.runtime.infra.execSql &&\n    current.runtime.state.domainScope === domainScope\n  );\n}\n"]}

package/client/organizations/principalContainerMutations.js

@@ -0,0 +1,27 @@
+import { resolveDocumentCreateAuthor } from "../../workflows/documents/index.js";
+import { preparePrincipalContainerRematerializationBatch, } from "../../workflows/organizations/principalContainerRematerialization.js";
+import { createRuntimePrincipalPolicyWarmer } from "../../workflows/principals/runtimePolicyWarmer.js";
+export async function preparePrincipalContainerMutations(input) {
+    const author = resolveDocumentCreateAuthor(input.runtime);
+    const targetSecretKey = input.runtime.crypto.encapsulationKeyPair?.secretKey;
+    if (!author || !targetSecretKey) {
+        throw new Error("Organization container rematerialization context is unavailable");
+    }
+    return preparePrincipalContainerRematerializationBatch({
+        stillCurrent: input.stillCurrent,
+        reportSecurityIncident: input.runtime.util.reportSecurityIncident,
+        apiClient: input.runtime.apiClient,
+        author,
+        execSql: input.runtime.infra.execSql,
+        grants: [
+            ...new Map([...input.currentPolicy.currentGrants, ...input.nextPolicy.grants].map((grant) => [grant.containerId, grant])).values(),
+        ],
+        groupId: input.groupId,
+        nextPolicy: input.nextPolicy,
+        revokedContainerId: input.revokedContainerId,
+        resolveTrustedUserIdentity: input.runtime.resolveTrustedUserIdentity,
+        targetSecretKey,
+        warmReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(input.runtime),
+    });
+}
+//# sourceMappingURL=principalContainerMutations.js.map

package/client/organizations/principalContainerMutations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalContainerMutations.js","sourceRoot":"","sources":["principalContainerMutations.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAEL,+CAA+C,GAChD,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAGpG,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,KAQxD;IACC,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,SAAS,CAAC;IAC7E,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,+CAA+C,CAAC;QACrD,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,sBAAsB,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB;QACjE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,MAAM;QACN,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QACpC,MAAM,EAAE;YACN,GAAG,IAAI,GAAG,CACR,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,aAAa,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CACpE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAU,CAC/C,CACF,CAAC,MAAM,EAAE;SACX;QACD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,0BAA0B,EAAE,KAAK,CAAC,OAAO,CAAC,0BAA0B;QACpE,eAAe;QACf,+BAA+B,EAAE,kCAAkC,CACjE,KAAK,CAAC,OAAO,CACd;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { VerifiedPrincipalPolicy } from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport { resolveDocumentCreateAuthor } from \"../../workflows/documents\";\nimport {\n  type PreparedPrincipalContainerRematerializationBatch,\n  preparePrincipalContainerRematerializationBatch,\n} from \"../../workflows/organizations/principalContainerRematerialization\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../workflows/principals/runtimePolicyWarmer\";\nimport type { InternalWorkflowRuntimeInput } from \"../workflowRuntime\";\n\nexport async function preparePrincipalContainerMutations(input: {\n  readonly currentPolicy: PrincipalPolicyBundleResponse;\n  readonly groupId: string;\n  readonly nextPolicy: VerifiedPrincipalPolicy;\n  readonly organizationId: string;\n  readonly revokedContainerId?: string | undefined;\n  readonly runtime: InternalWorkflowRuntimeInput;\n  readonly stillCurrent: () => boolean;\n}): Promise<PreparedPrincipalContainerRematerializationBatch> {\n  const author = resolveDocumentCreateAuthor(input.runtime);\n  const targetSecretKey = input.runtime.crypto.encapsulationKeyPair?.secretKey;\n  if (!author || !targetSecretKey) {\n    throw new Error(\n      \"Organization container rematerialization context is unavailable\",\n    );\n  }\n  return preparePrincipalContainerRematerializationBatch({\n    stillCurrent: input.stillCurrent,\n    reportSecurityIncident: input.runtime.util.reportSecurityIncident,\n    apiClient: input.runtime.apiClient,\n    author,\n    execSql: input.runtime.infra.execSql,\n    grants: [\n      ...new Map(\n        [...input.currentPolicy.currentGrants, ...input.nextPolicy.grants].map(\n          (grant) => [grant.containerId, grant] as const,\n        ),\n      ).values(),\n    ],\n    groupId: input.groupId,\n    nextPolicy: input.nextPolicy,\n    revokedContainerId: input.revokedContainerId,\n    resolveTrustedUserIdentity: input.runtime.resolveTrustedUserIdentity,\n    targetSecretKey,\n    warmReferencedPrincipalPolicies: createRuntimePrincipalPolicyWarmer(\n      input.runtime,\n    ),\n  });\n}\n"]}

package/client/organizations/principalMutationScope.js

@@ -0,0 +1,20 @@
+/** Capture a mutation's identity/database lifetime without freezing live status. */
+export function currentOrganizationMutation(service) {
+    const runtime = service.workflowInput();
+    const sessionGeneration = service.sessionGeneration;
+    return {
+        runtime,
+        stillCurrent: () => {
+            const current = service.workflowInput();
+            return (service.sessionGeneration === sessionGeneration &&
+                current.infra.dbStatus === "ready" &&
+                current.infra.execSql === runtime.infra.execSql &&
+                current.state.domainScope === runtime.state.domainScope &&
+                current.auth.isAuthenticated &&
+                current.auth.organizationId === runtime.auth.organizationId &&
+                current.auth.userId === runtime.auth.userId &&
+                current.crypto.signingFingerprint === runtime.crypto.signingFingerprint);
+        },
+    };
+}
+//# sourceMappingURL=principalMutationScope.js.map

package/client/organizations/principalMutationScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalMutationScope.js","sourceRoot":"","sources":["principalMutationScope.ts"],"names":[],"mappings":"AAEA,oFAAoF;AACpF,MAAM,UAAU,2BAA2B,CACzC,OAAqE;IAErE,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IACxC,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACpD,OAAO;QACL,OAAO;QACP,YAAY,EAAE,GAAG,EAAE;YACjB,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;YACxC,OAAO,CACL,OAAO,CAAC,iBAAiB,KAAK,iBAAiB;gBAC/C,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO;gBAClC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC/C,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,KAAK,CAAC,WAAW;gBACvD,OAAO,CAAC,IAAI,CAAC,eAAe;gBAC5B,OAAO,CAAC,IAAI,CAAC,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,cAAc;gBAC3D,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM;gBAC3C,OAAO,CAAC,MAAM,CAAC,kBAAkB,KAAK,OAAO,CAAC,MAAM,CAAC,kBAAkB,CACxE,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { InternalRuntime } from \"../workflowRuntime\";\n\n/** Capture a mutation's identity/database lifetime without freezing live status. */\nexport function currentOrganizationMutation(\n  service: Pick<InternalRuntime, \"workflowInput\" | \"sessionGeneration\">,\n) {\n  const runtime = service.workflowInput();\n  const sessionGeneration = service.sessionGeneration;\n  return {\n    runtime,\n    stillCurrent: () => {\n      const current = service.workflowInput();\n      return (\n        service.sessionGeneration === sessionGeneration &&\n        current.infra.dbStatus === \"ready\" &&\n        current.infra.execSql === runtime.infra.execSql &&\n        current.state.domainScope === runtime.state.domainScope &&\n        current.auth.isAuthenticated &&\n        current.auth.organizationId === runtime.auth.organizationId &&\n        current.auth.userId === runtime.auth.userId &&\n        current.crypto.signingFingerprint === runtime.crypto.signingFingerprint\n      );\n    },\n  };\n}\n"]}