@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/data/persistence/organizations/organizationReadModelPersistence.js

@@ -0,0 +1,301 @@
+import { eq } from "drizzle-orm";
+import { organizationDataUsageTables } from "../../sqlite/organizationDataUsageSchema.js";
+import { organizationReadModelDirectoryUsers, organizationReadModelGroups, organizationReadModelRequesters, organizationReadModelState, } from "../../sqlite/organizationReadModelSchema.js";
+import { organizationReadModelTables } from "../../sqlite/schema.js";
+import { getClientSQLitePersistenceRuntime, } from "../../sqlite/sqlitePersistenceRuntime.js";
+import { ensureSqlTables } from "../../sqlite/sqlSchema.js";
+import { clearOrganizationPresentationDenialInTransaction } from "./organizationPresentationDenialPersistence.js";
+import { applyOrganizationReadModelGrantsLane } from "./organizationReadModelGrantPersistence.js";
+import { applyGroupMembershipsLane, assertStoredGroupMembershipBindings, } from "./organizationReadModelMembershipPersistence.js";
+import { applyOrganizationPolicyLane, replaceGroupPolicyHeads, } from "./organizationReadModelPolicyHeadPersistence.js";
+import { loadOrganizationReadModelProjectionInTransaction, } from "./organizationReadModelProjection.js";
+import { loadWithOrganizationReadModelIntegrityPurge, pruneInactiveOrganizationRequestersInTransaction, purgeOrganizationReadModelProjectionInTransaction, } from "./organizationReadModelPurge.js";
+import { assertOrganizationReadModelResponse } from "./organizationReadModelResponseAssertions.js";
+const DIRECTORY_INSERT_BATCH_SIZE = 64;
+const GROUP_INSERT_BATCH_SIZE = 90;
+async function replaceDirectoryLane(input) {
+    await input.tx
+        .delete(organizationReadModelDirectoryUsers)
+        .where(eq(organizationReadModelDirectoryUsers.organizationId, input.organizationId))
+        .run();
+    const rows = input.directory.users.map((user, sortOrder) => ({
+        organizationId: input.organizationId,
+        userId: user.userId,
+        sortOrder,
+        signingKeyFingerprint: user.signingKeyFingerprint,
+        signingPublicKey: user.signingPublicKey,
+        encapsulationPublicKey: user.encapsulationPublicKey,
+        encapsulationKeyFingerprint: user.encapsulationKeyFingerprint,
+        isPersonalOrganizationOwner: user.isPersonalOrganizationOwner,
+        createdAt: user.createdAt,
+        status: user.status,
+        profileDocumentId: user.profileDocumentId,
+        joinedAt: user.joinedAt,
+        updatedAt: user.updatedAt,
+        disabledAt: user.disabledAt,
+        disabledByUserId: user.disabledByUserId,
+    }));
+    for (let index = 0; index < rows.length; index += DIRECTORY_INSERT_BATCH_SIZE) {
+        await input.tx
+            .insert(organizationReadModelDirectoryUsers)
+            .values(rows.slice(index, index + DIRECTORY_INSERT_BATCH_SIZE))
+            .run();
+    }
+}
+async function upsertRequester(input) {
+    const requesterRow = {
+        organizationId: input.organizationId,
+        userId: input.currentUserId,
+        isOrgAdmin: input.isOrgAdmin,
+        updatedAt: input.now,
+    };
+    await input.tx
+        .insert(organizationReadModelRequesters)
+        .values(requesterRow)
+        .onConflictDoUpdate({
+        target: [
+            organizationReadModelRequesters.organizationId,
+            organizationReadModelRequesters.userId,
+        ],
+        set: {
+            isOrgAdmin: requesterRow.isOrgAdmin,
+            updatedAt: requesterRow.updatedAt,
+        },
+    })
+        .run();
+    // Storing an authoritative response proves access: retire the durable
+    // denial marker for this scope in the same transaction.
+    await clearOrganizationPresentationDenialInTransaction({
+        organizationId: input.organizationId,
+        projection: "readModel",
+        requesterUserId: input.currentUserId,
+        tx: input.tx,
+    });
+}
+/** The directory lane is the authoritative roster: requester rows for users
+ * it no longer lists as active must fall with it. */
+async function pruneRequestersForDirectoryLane(input) {
+    await pruneInactiveOrganizationRequestersInTransaction({
+        activeUserIds: input.directory.users
+            .filter((user) => user.status === "active")
+            .map((user) => user.userId),
+        organizationId: input.organizationId,
+        retainUserId: input.currentUserId,
+        tx: input.tx,
+    });
+}
+async function replaceGroupsLane(input) {
+    const previousGroups = await input.tx
+        .select({
+        groupId: organizationReadModelGroups.groupId,
+        name: organizationReadModelGroups.name,
+    })
+        .from(organizationReadModelGroups)
+        .where(eq(organizationReadModelGroups.organizationId, input.organizationId));
+    const names = new Map(previousGroups.map((group) => [group.groupId, group.name]));
+    await input.tx
+        .delete(organizationReadModelGroups)
+        .where(eq(organizationReadModelGroups.organizationId, input.organizationId))
+        .run();
+    await replaceGroupPolicyHeads(input);
+    const rows = input.groups.groups.map((group, sortOrder) => ({
+        organizationId: input.organizationId,
+        groupId: group.groupId,
+        sortOrder,
+        name: names.get(group.groupId) ?? "",
+        createdAt: group.createdAt,
+        isBuiltin: group.isBuiltin,
+        stateHash: group.currentState?.stateHash ?? null,
+        stateVersion: group.currentState?.version ?? null,
+        keyEpoch: group.currentState?.keyEpoch ?? null,
+        memberCount: group.currentState?.memberCount ?? null,
+    }));
+    for (let index = 0; index < rows.length; index += GROUP_INSERT_BATCH_SIZE) {
+        await input.tx
+            .insert(organizationReadModelGroups)
+            .values(rows.slice(index, index + GROUP_INSERT_BATCH_SIZE))
+            .run();
+    }
+}
+async function loadCurrentState(tx, organizationId) {
+    const [current] = await tx
+        .select({
+        cursor: organizationReadModelState.cursor,
+        memberGroupId: organizationReadModelState.memberGroupId,
+        profileDocumentId: organizationReadModelState.profileDocumentId,
+    })
+        .from(organizationReadModelState)
+        .where(eq(organizationReadModelState.organizationId, organizationId))
+        .limit(1);
+    return current ?? null;
+}
+function resolveApplyDisposition(input) {
+    const currentCursor = input.current?.cursor ?? null;
+    if (currentCursor !== input.requestedCursor) {
+        return currentCursor === input.response.nextCursor
+            ? "already-applied"
+            : "stale";
+    }
+    if (!input.current && input.response.mode !== "snapshot") {
+        throw new Error("Organization read-model delta requires a local snapshot");
+    }
+    return null;
+}
+async function replaceResponseLanes(input) {
+    const directory = input.response.lanes.directory;
+    if (directory) {
+        await replaceDirectoryLane({
+            directory,
+            organizationId: input.response.organizationId,
+            tx: input.tx,
+        });
+    }
+    const groups = input.response.lanes.groups;
+    if (groups) {
+        await replaceGroupsLane({
+            groups,
+            organizationId: input.response.organizationId,
+            tx: input.tx,
+        });
+    }
+    const organizationPolicy = input.response.lanes.organizationPolicy;
+    if (organizationPolicy) {
+        await applyOrganizationPolicyLane({
+            organizationId: input.response.organizationId,
+            organizationPolicy,
+            tx: input.tx,
+        });
+    }
+    const groupMemberships = input.response.lanes.groupMemberships;
+    if (groupMemberships) {
+        await applyGroupMembershipsLane({
+            lane: groupMemberships,
+            organizationId: input.response.organizationId,
+            replaceAll: input.response.mode === "snapshot",
+            tx: input.tx,
+        });
+    }
+    const grants = input.response.lanes.grants;
+    if (grants) {
+        await applyOrganizationReadModelGrantsLane({
+            lane: grants,
+            organizationId: input.response.organizationId,
+            tx: input.tx,
+        });
+    }
+}
+async function applyResponseLanes(input) {
+    await replaceResponseLanes({ response: input.response, tx: input.tx });
+    const directoryLane = input.response.lanes.directory;
+    if (directoryLane) {
+        await pruneRequestersForDirectoryLane({
+            currentUserId: input.currentUserId,
+            directory: directoryLane,
+            organizationId: input.response.organizationId,
+            tx: input.tx,
+        });
+    }
+    if (input.response.lanes.groups || input.response.lanes.groupMemberships) {
+        await assertStoredGroupMembershipBindings({
+            memberGroupId: input.memberGroupId,
+            organizationId: input.response.organizationId,
+            tx: input.tx,
+        });
+    }
+}
+function requireMemberGroupId(input) {
+    const memberGroupId = input.response.lanes.groups?.memberGroupId ?? input.current?.memberGroupId;
+    if (!memberGroupId) {
+        throw new Error("Organization read-model member group is missing");
+    }
+    return memberGroupId;
+}
+export async function loadOrganizationReadModelProjection(execSql, organizationId, currentUserId) {
+    return loadWithOrganizationReadModelIntegrityPurge({
+        execSql,
+        organizationId,
+        load: (tx) => loadOrganizationReadModelProjectionInTransaction({
+            currentUserId,
+            organizationId,
+            tx,
+        }),
+    });
+}
+export async function applyOrganizationReadModelResponse(input) {
+    assertOrganizationReadModelResponse({
+        currentUserId: input.currentUserId,
+        response: input.response,
+    });
+    // The requester prune below also retires pruned users' usage projections.
+    await ensureSqlTables(input.execSql, [
+        ...organizationReadModelTables,
+        ...organizationDataUsageTables,
+    ]);
+    return getClientSQLitePersistenceRuntime(input.execSql).transaction(async (tx) => {
+        const current = await loadCurrentState(tx, input.response.organizationId);
+        const disposition = resolveApplyDisposition({
+            current,
+            requestedCursor: input.requestedCursor,
+            response: input.response,
+        });
+        if (disposition === "stale") {
+            return disposition;
+        }
+        const now = new Date().toISOString();
+        await upsertRequester({
+            currentUserId: input.currentUserId,
+            isOrgAdmin: input.response.currentUser.isOrgAdmin,
+            now,
+            organizationId: input.response.organizationId,
+            tx,
+        });
+        if (disposition === "already-applied") {
+            return disposition;
+        }
+        const memberGroupId = requireMemberGroupId({
+            current,
+            response: input.response,
+        });
+        await applyResponseLanes({
+            currentUserId: input.currentUserId,
+            memberGroupId,
+            response: input.response,
+            tx,
+        });
+        const directoryLane = input.response.lanes.directory;
+        const stateRow = {
+            organizationId: input.response.organizationId,
+            cursor: input.response.nextCursor,
+            profileDocumentId: directoryLane !== undefined
+                ? directoryLane.profileDocumentId
+                : (current?.profileDocumentId ?? null),
+            memberGroupId,
+            updatedAt: now,
+        };
+        await tx
+            .insert(organizationReadModelState)
+            .values(stateRow)
+            .onConflictDoUpdate({
+            target: organizationReadModelState.organizationId,
+            set: {
+                cursor: stateRow.cursor,
+                profileDocumentId: stateRow.profileDocumentId,
+                memberGroupId: stateRow.memberGroupId,
+                updatedAt: stateRow.updatedAt,
+            },
+        })
+            .run();
+        return "applied";
+    });
+}
+export async function purgeOrganizationReadModelProjection(execSql, organizationId, options = {}) {
+    await ensureSqlTables(execSql, organizationReadModelTables);
+    await getClientSQLitePersistenceRuntime(execSql).transaction(async (tx) => {
+        await purgeOrganizationReadModelProjectionInTransaction({
+            onlyRequesterUserId: options.onlyRequesterUserId,
+            organizationId,
+            tx,
+        });
+    });
+}
+//# sourceMappingURL=organizationReadModelPersistence.js.map

package/data/persistence/organizations/organizationReadModelPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationReadModelPersistence.js","sourceRoot":"","sources":["organizationReadModelPersistence.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,EACL,mCAAmC,EACnC,2BAA2B,EAC3B,+BAA+B,EAC/B,0BAA0B,GAC3B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,gDAAgD,EAAE,MAAM,6CAA6C,CAAC;AAC/G,OAAO,EAAE,oCAAoC,EAAE,MAAM,yCAAyC,CAAC;AAC/F,OAAO,EACL,yBAAyB,EACzB,mCAAmC,GACpC,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,gDAAgD,GAEjD,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,2CAA2C,EAC3C,gDAAgD,EAChD,iDAAiD,GAClD,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mCAAmC,EAAE,MAAM,2CAA2C,CAAC;AAIhG,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAanC,KAAK,UAAU,oBAAoB,CAAC,KAInC;IACC,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,mCAAmC,CAAC;SAC3C,KAAK,CACJ,EAAE,CACA,mCAAmC,CAAC,cAAc,EAClD,KAAK,CAAC,cAAc,CACrB,CACF;SACA,GAAG,EAAE,CAAC;IAET,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3D,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS;QACT,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,2BAA2B,EAAE,IAAI,CAAC,2BAA2B;QAC7D,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CAAC,CAAC;IACJ,KACE,IAAI,KAAK,GAAG,CAAC,EACb,KAAK,GAAG,IAAI,CAAC,MAAM,EACnB,KAAK,IAAI,2BAA2B,EACpC,CAAC;QACD,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,mCAAmC,CAAC;aAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,2BAA2B,CAAC,CAAC;aAC9D,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAM9B;IACC,MAAM,YAAY,GAAG;QACnB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,KAAK,CAAC,aAAa;QAC3B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,GAAG;KACrB,CAAC;IACF,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,+BAA+B,CAAC;SACvC,MAAM,CAAC,YAAY,CAAC;SACpB,kBAAkB,CAAC;QAClB,MAAM,EAAE;YACN,+BAA+B,CAAC,cAAc;YAC9C,+BAA+B,CAAC,MAAM;SACvC;QACD,GAAG,EAAE;YACH,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,SAAS,EAAE,YAAY,CAAC,SAAS;SAClC;KACF,CAAC;SACD,GAAG,EAAE,CAAC;IACT,sEAAsE;IACtE,wDAAwD;IACxD,MAAM,gDAAgD,CAAC;QACrD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,WAAW;QACvB,eAAe,EAAE,KAAK,CAAC,aAAa;QACpC,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;AACL,CAAC;AAED;qDACqD;AACrD,KAAK,UAAU,+BAA+B,CAAC,KAK9C;IACC,MAAM,gDAAgD,CAAC;QACrD,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK;aACjC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC;aAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;QAC7B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,aAAa;QACjC,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,KAIhC;IACC,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,EAAE;SAClC,MAAM,CAAC;QACN,OAAO,EAAE,2BAA2B,CAAC,OAAO;QAC5C,IAAI,EAAE,2BAA2B,CAAC,IAAI;KACvC,CAAC;SACD,IAAI,CAAC,2BAA2B,CAAC;SACjC,KAAK,CACJ,EAAE,CAAC,2BAA2B,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CACrE,CAAC;IACJ,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAC3D,CAAC;IACF,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,2BAA2B,CAAC;SACnC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;SAC3E,GAAG,EAAE,CAAC;IACT,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAErC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC1D,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS;QACT,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,IAAI,IAAI;QAChD,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,IAAI,IAAI;QACjD,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,QAAQ,IAAI,IAAI;QAC9C,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,WAAW,IAAI,IAAI;KACrD,CAAC,CAAC,CAAC;IACJ,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,uBAAuB,EAAE,CAAC;QAC1E,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,2BAA2B,CAAC;aACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,uBAAuB,CAAC,CAAC;aAC1D,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,EAAgC,EAChC,cAAsB;IAEtB,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE;SACvB,MAAM,CAAC;QACN,MAAM,EAAE,0BAA0B,CAAC,MAAM;QACzC,aAAa,EAAE,0BAA0B,CAAC,aAAa;QACvD,iBAAiB,EAAE,0BAA0B,CAAC,iBAAiB;KAChE,CAAC;SACD,IAAI,CAAC,0BAA0B,CAAC;SAChC,KAAK,CAAC,EAAE,CAAC,0BAA0B,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;SACpE,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,OAAO,IAAI,IAAI,CAAC;AACzB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAIhC;IACC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC;IACpD,IAAI,aAAa,KAAK,KAAK,CAAC,eAAe,EAAE,CAAC;QAC5C,OAAO,aAAa,KAAK,KAAK,CAAC,QAAQ,CAAC,UAAU;YAChD,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,OAAO,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAGnC;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;IACjD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,oBAAoB,CAAC;YACzB,SAAS;YACT,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,iBAAiB,CAAC;YACtB,MAAM;YACN,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,kBAAkB,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACnE,IAAI,kBAAkB,EAAE,CAAC;QACvB,MAAM,2BAA2B,CAAC;YAChC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,kBAAkB;YAClB,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,gBAAgB,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC/D,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,yBAAyB,CAAC;YAC9B,IAAI,EAAE,gBAAgB;YACtB,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU;YAC9C,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3C,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,oCAAoC,CAAC;YACzC,IAAI,EAAE,MAAM;YACZ,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,KAKjC;IACC,MAAM,oBAAoB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;IACrD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,+BAA+B,CAAC;YACpC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,SAAS,EAAE,aAAa;YACxB,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACzE,MAAM,mCAAmC,CAAC;YACxC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,EAAE,EAAE,KAAK,CAAC,EAAE;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAG7B;IACC,MAAM,aAAa,GACjB,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,IAAI,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC;IAC7E,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,OAAgB,EAChB,cAAsB,EACtB,aAAqB;IAErB,OAAO,2CAA2C,CAAC;QACjD,OAAO;QACP,cAAc;QACd,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CACX,gDAAgD,CAAC;YAC/C,aAAa;YACb,cAAc;YACd,EAAE;SACH,CAAC;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,KAKxD;IACC,mCAAmC,CAAC;QAClC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;IACH,0EAA0E;IAC1E,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE;QACnC,GAAG,2BAA2B;QAC9B,GAAG,2BAA2B;KAC/B,CAAC,CAAC;IAEH,OAAO,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,CACjE,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC1E,MAAM,WAAW,GAAG,uBAAuB,CAAC;YAC1C,OAAO;YACP,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,eAAe,CAAC;YACpB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU;YACjD,GAAG;YACH,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,EAAE;SACH,CAAC,CAAC;QACH,IAAI,WAAW,KAAK,iBAAiB,EAAE,CAAC;YACtC,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,aAAa,GAAG,oBAAoB,CAAC;YACzC,OAAO;YACP,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,MAAM,kBAAkB,CAAC;YACvB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,aAAa;YACb,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,EAAE;SACH,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QACrD,MAAM,QAAQ,GAAG;YACf,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;YACjC,iBAAiB,EACf,aAAa,KAAK,SAAS;gBACzB,CAAC,CAAC,aAAa,CAAC,iBAAiB;gBACjC,CAAC,CAAC,CAAC,OAAO,EAAE,iBAAiB,IAAI,IAAI,CAAC;YAC1C,aAAa;YACb,SAAS,EAAE,GAAG;SACf,CAAC;QACF,MAAM,EAAE;aACL,MAAM,CAAC,0BAA0B,CAAC;aAClC,MAAM,CAAC,QAAQ,CAAC;aAChB,kBAAkB,CAAC;YAClB,MAAM,EAAE,0BAA0B,CAAC,cAAc;YACjD,GAAG,EAAE;gBACH,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;gBAC7C,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B;SACF,CAAC;aACD,GAAG,EAAE,CAAC;QAET,OAAO,SAAS,CAAC;IACnB,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,OAAgB,EAChB,cAAsB,EACtB,UAAqD,EAAE;IAEvD,MAAM,eAAe,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC5D,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,iDAAiD,CAAC;YACtD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,cAAc;YACd,EAAE;SACH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type {\n  ListOrganizationGroupsResponse,\n  OrganizationReadModelDirectoryResponse,\n  OrganizationReadModelResponse,\n} from \"@tearleads/validators/response\";\nimport { eq } from \"drizzle-orm\";\nimport { organizationDataUsageTables } from \"../../sqlite/organizationDataUsageSchema\";\nimport {\n  organizationReadModelDirectoryUsers,\n  organizationReadModelGroups,\n  organizationReadModelRequesters,\n  organizationReadModelState,\n} from \"../../sqlite/organizationReadModelSchema\";\nimport { organizationReadModelTables } from \"../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\nimport { clearOrganizationPresentationDenialInTransaction } from \"./organizationPresentationDenialPersistence\";\nimport { applyOrganizationReadModelGrantsLane } from \"./organizationReadModelGrantPersistence\";\nimport {\n  applyGroupMembershipsLane,\n  assertStoredGroupMembershipBindings,\n} from \"./organizationReadModelMembershipPersistence\";\nimport {\n  applyOrganizationPolicyLane,\n  replaceGroupPolicyHeads,\n} from \"./organizationReadModelPolicyHeadPersistence\";\nimport {\n  loadOrganizationReadModelProjectionInTransaction,\n  type OrganizationReadModelProjection,\n} from \"./organizationReadModelProjection\";\nimport {\n  loadWithOrganizationReadModelIntegrityPurge,\n  pruneInactiveOrganizationRequestersInTransaction,\n  purgeOrganizationReadModelProjectionInTransaction,\n} from \"./organizationReadModelPurge\";\nimport { assertOrganizationReadModelResponse } from \"./organizationReadModelResponseAssertions\";\n\nexport type { OrganizationReadModelProjection } from \"./organizationReadModelProjection\";\n\nconst DIRECTORY_INSERT_BATCH_SIZE = 64;\nconst GROUP_INSERT_BATCH_SIZE = 90;\n\ntype ApplyOrganizationReadModelResponseResult =\n  | \"already-applied\"\n  | \"applied\"\n  | \"stale\";\n\ninterface CurrentOrganizationReadModelState {\n  readonly cursor: string;\n  readonly memberGroupId: string;\n  readonly profileDocumentId: string | null;\n}\n\nasync function replaceDirectoryLane(input: {\n  readonly directory: OrganizationReadModelDirectoryResponse;\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  await input.tx\n    .delete(organizationReadModelDirectoryUsers)\n    .where(\n      eq(\n        organizationReadModelDirectoryUsers.organizationId,\n        input.organizationId,\n      ),\n    )\n    .run();\n\n  const rows = input.directory.users.map((user, sortOrder) => ({\n    organizationId: input.organizationId,\n    userId: user.userId,\n    sortOrder,\n    signingKeyFingerprint: user.signingKeyFingerprint,\n    signingPublicKey: user.signingPublicKey,\n    encapsulationPublicKey: user.encapsulationPublicKey,\n    encapsulationKeyFingerprint: user.encapsulationKeyFingerprint,\n    isPersonalOrganizationOwner: user.isPersonalOrganizationOwner,\n    createdAt: user.createdAt,\n    status: user.status,\n    profileDocumentId: user.profileDocumentId,\n    joinedAt: user.joinedAt,\n    updatedAt: user.updatedAt,\n    disabledAt: user.disabledAt,\n    disabledByUserId: user.disabledByUserId,\n  }));\n  for (\n    let index = 0;\n    index < rows.length;\n    index += DIRECTORY_INSERT_BATCH_SIZE\n  ) {\n    await input.tx\n      .insert(organizationReadModelDirectoryUsers)\n      .values(rows.slice(index, index + DIRECTORY_INSERT_BATCH_SIZE))\n      .run();\n  }\n}\n\nasync function upsertRequester(input: {\n  readonly currentUserId: string;\n  readonly isOrgAdmin: boolean;\n  readonly now: string;\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  const requesterRow = {\n    organizationId: input.organizationId,\n    userId: input.currentUserId,\n    isOrgAdmin: input.isOrgAdmin,\n    updatedAt: input.now,\n  };\n  await input.tx\n    .insert(organizationReadModelRequesters)\n    .values(requesterRow)\n    .onConflictDoUpdate({\n      target: [\n        organizationReadModelRequesters.organizationId,\n        organizationReadModelRequesters.userId,\n      ],\n      set: {\n        isOrgAdmin: requesterRow.isOrgAdmin,\n        updatedAt: requesterRow.updatedAt,\n      },\n    })\n    .run();\n  // Storing an authoritative response proves access: retire the durable\n  // denial marker for this scope in the same transaction.\n  await clearOrganizationPresentationDenialInTransaction({\n    organizationId: input.organizationId,\n    projection: \"readModel\",\n    requesterUserId: input.currentUserId,\n    tx: input.tx,\n  });\n}\n\n/** The directory lane is the authoritative roster: requester rows for users\n * it no longer lists as active must fall with it. */\nasync function pruneRequestersForDirectoryLane(input: {\n  readonly currentUserId: string;\n  readonly directory: OrganizationReadModelDirectoryResponse;\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  await pruneInactiveOrganizationRequestersInTransaction({\n    activeUserIds: input.directory.users\n      .filter((user) => user.status === \"active\")\n      .map((user) => user.userId),\n    organizationId: input.organizationId,\n    retainUserId: input.currentUserId,\n    tx: input.tx,\n  });\n}\n\nasync function replaceGroupsLane(input: {\n  readonly groups: ListOrganizationGroupsResponse;\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  const previousGroups = await input.tx\n    .select({\n      groupId: organizationReadModelGroups.groupId,\n      name: organizationReadModelGroups.name,\n    })\n    .from(organizationReadModelGroups)\n    .where(\n      eq(organizationReadModelGroups.organizationId, input.organizationId),\n    );\n  const names = new Map(\n    previousGroups.map((group) => [group.groupId, group.name]),\n  );\n  await input.tx\n    .delete(organizationReadModelGroups)\n    .where(eq(organizationReadModelGroups.organizationId, input.organizationId))\n    .run();\n  await replaceGroupPolicyHeads(input);\n\n  const rows = input.groups.groups.map((group, sortOrder) => ({\n    organizationId: input.organizationId,\n    groupId: group.groupId,\n    sortOrder,\n    name: names.get(group.groupId) ?? \"\",\n    createdAt: group.createdAt,\n    isBuiltin: group.isBuiltin,\n    stateHash: group.currentState?.stateHash ?? null,\n    stateVersion: group.currentState?.version ?? null,\n    keyEpoch: group.currentState?.keyEpoch ?? null,\n    memberCount: group.currentState?.memberCount ?? null,\n  }));\n  for (let index = 0; index < rows.length; index += GROUP_INSERT_BATCH_SIZE) {\n    await input.tx\n      .insert(organizationReadModelGroups)\n      .values(rows.slice(index, index + GROUP_INSERT_BATCH_SIZE))\n      .run();\n  }\n}\n\nasync function loadCurrentState(\n  tx: ClientSQLiteTransactionScope,\n  organizationId: string,\n): Promise<CurrentOrganizationReadModelState | null> {\n  const [current] = await tx\n    .select({\n      cursor: organizationReadModelState.cursor,\n      memberGroupId: organizationReadModelState.memberGroupId,\n      profileDocumentId: organizationReadModelState.profileDocumentId,\n    })\n    .from(organizationReadModelState)\n    .where(eq(organizationReadModelState.organizationId, organizationId))\n    .limit(1);\n  return current ?? null;\n}\n\nfunction resolveApplyDisposition(input: {\n  readonly current: CurrentOrganizationReadModelState | null;\n  readonly requestedCursor: string | null;\n  readonly response: OrganizationReadModelResponse;\n}): ApplyOrganizationReadModelResponseResult | null {\n  const currentCursor = input.current?.cursor ?? null;\n  if (currentCursor !== input.requestedCursor) {\n    return currentCursor === input.response.nextCursor\n      ? \"already-applied\"\n      : \"stale\";\n  }\n  if (!input.current && input.response.mode !== \"snapshot\") {\n    throw new Error(\"Organization read-model delta requires a local snapshot\");\n  }\n  return null;\n}\n\nasync function replaceResponseLanes(input: {\n  readonly response: OrganizationReadModelResponse;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  const directory = input.response.lanes.directory;\n  if (directory) {\n    await replaceDirectoryLane({\n      directory,\n      organizationId: input.response.organizationId,\n      tx: input.tx,\n    });\n  }\n  const groups = input.response.lanes.groups;\n  if (groups) {\n    await replaceGroupsLane({\n      groups,\n      organizationId: input.response.organizationId,\n      tx: input.tx,\n    });\n  }\n  const organizationPolicy = input.response.lanes.organizationPolicy;\n  if (organizationPolicy) {\n    await applyOrganizationPolicyLane({\n      organizationId: input.response.organizationId,\n      organizationPolicy,\n      tx: input.tx,\n    });\n  }\n  const groupMemberships = input.response.lanes.groupMemberships;\n  if (groupMemberships) {\n    await applyGroupMembershipsLane({\n      lane: groupMemberships,\n      organizationId: input.response.organizationId,\n      replaceAll: input.response.mode === \"snapshot\",\n      tx: input.tx,\n    });\n  }\n  const grants = input.response.lanes.grants;\n  if (grants) {\n    await applyOrganizationReadModelGrantsLane({\n      lane: grants,\n      organizationId: input.response.organizationId,\n      tx: input.tx,\n    });\n  }\n}\n\nasync function applyResponseLanes(input: {\n  readonly currentUserId: string;\n  readonly memberGroupId: string;\n  readonly response: OrganizationReadModelResponse;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  await replaceResponseLanes({ response: input.response, tx: input.tx });\n  const directoryLane = input.response.lanes.directory;\n  if (directoryLane) {\n    await pruneRequestersForDirectoryLane({\n      currentUserId: input.currentUserId,\n      directory: directoryLane,\n      organizationId: input.response.organizationId,\n      tx: input.tx,\n    });\n  }\n  if (input.response.lanes.groups || input.response.lanes.groupMemberships) {\n    await assertStoredGroupMembershipBindings({\n      memberGroupId: input.memberGroupId,\n      organizationId: input.response.organizationId,\n      tx: input.tx,\n    });\n  }\n}\n\nfunction requireMemberGroupId(input: {\n  readonly current: CurrentOrganizationReadModelState | null;\n  readonly response: OrganizationReadModelResponse;\n}): string {\n  const memberGroupId =\n    input.response.lanes.groups?.memberGroupId ?? input.current?.memberGroupId;\n  if (!memberGroupId) {\n    throw new Error(\"Organization read-model member group is missing\");\n  }\n  return memberGroupId;\n}\n\nexport async function loadOrganizationReadModelProjection(\n  execSql: ExecSql,\n  organizationId: string,\n  currentUserId: string,\n): Promise<OrganizationReadModelProjection | null> {\n  return loadWithOrganizationReadModelIntegrityPurge({\n    execSql,\n    organizationId,\n    load: (tx) =>\n      loadOrganizationReadModelProjectionInTransaction({\n        currentUserId,\n        organizationId,\n        tx,\n      }),\n  });\n}\n\nexport async function applyOrganizationReadModelResponse(input: {\n  readonly currentUserId: string;\n  readonly execSql: ExecSql;\n  readonly requestedCursor: string | null;\n  readonly response: OrganizationReadModelResponse;\n}): Promise<ApplyOrganizationReadModelResponseResult> {\n  assertOrganizationReadModelResponse({\n    currentUserId: input.currentUserId,\n    response: input.response,\n  });\n  // The requester prune below also retires pruned users' usage projections.\n  await ensureSqlTables(input.execSql, [\n    ...organizationReadModelTables,\n    ...organizationDataUsageTables,\n  ]);\n\n  return getClientSQLitePersistenceRuntime(input.execSql).transaction(\n    async (tx) => {\n      const current = await loadCurrentState(tx, input.response.organizationId);\n      const disposition = resolveApplyDisposition({\n        current,\n        requestedCursor: input.requestedCursor,\n        response: input.response,\n      });\n      if (disposition === \"stale\") {\n        return disposition;\n      }\n      const now = new Date().toISOString();\n      await upsertRequester({\n        currentUserId: input.currentUserId,\n        isOrgAdmin: input.response.currentUser.isOrgAdmin,\n        now,\n        organizationId: input.response.organizationId,\n        tx,\n      });\n      if (disposition === \"already-applied\") {\n        return disposition;\n      }\n      const memberGroupId = requireMemberGroupId({\n        current,\n        response: input.response,\n      });\n      await applyResponseLanes({\n        currentUserId: input.currentUserId,\n        memberGroupId,\n        response: input.response,\n        tx,\n      });\n      const directoryLane = input.response.lanes.directory;\n      const stateRow = {\n        organizationId: input.response.organizationId,\n        cursor: input.response.nextCursor,\n        profileDocumentId:\n          directoryLane !== undefined\n            ? directoryLane.profileDocumentId\n            : (current?.profileDocumentId ?? null),\n        memberGroupId,\n        updatedAt: now,\n      };\n      await tx\n        .insert(organizationReadModelState)\n        .values(stateRow)\n        .onConflictDoUpdate({\n          target: organizationReadModelState.organizationId,\n          set: {\n            cursor: stateRow.cursor,\n            profileDocumentId: stateRow.profileDocumentId,\n            memberGroupId: stateRow.memberGroupId,\n            updatedAt: stateRow.updatedAt,\n          },\n        })\n        .run();\n\n      return \"applied\";\n    },\n  );\n}\n\nexport async function purgeOrganizationReadModelProjection(\n  execSql: ExecSql,\n  organizationId: string,\n  options: { readonly onlyRequesterUserId?: string } = {},\n): Promise<void> {\n  await ensureSqlTables(execSql, organizationReadModelTables);\n  await getClientSQLitePersistenceRuntime(execSql).transaction(async (tx) => {\n    await purgeOrganizationReadModelProjectionInTransaction({\n      onlyRequesterUserId: options.onlyRequesterUserId,\n      organizationId,\n      tx,\n    });\n  });\n}\n"]}

package/data/persistence/organizations/organizationReadModelPolicyHeadPersistence.js

@@ -0,0 +1,64 @@
+import { and, eq } from "drizzle-orm";
+import { organizationReadModelPolicyHeads } from "../../sqlite/organizationReadModelSchema.js";
+const POLICY_HEAD_INSERT_BATCH_SIZE = 100;
+function toPolicyHeadRow(input) {
+    return {
+        organizationId: input.organizationId,
+        principalType: input.principalType,
+        principalId: input.principalId,
+        stateHash: input.currentState.stateHash,
+        stateVersion: input.currentState.version,
+        keyEpoch: input.currentState.keyEpoch,
+        keyFingerprint: input.currentState.keyFingerprint,
+        memberCount: input.currentState.memberCount,
+    };
+}
+export async function replaceGroupPolicyHeads(input) {
+    await input.tx
+        .delete(organizationReadModelPolicyHeads)
+        .where(and(eq(organizationReadModelPolicyHeads.organizationId, input.organizationId), eq(organizationReadModelPolicyHeads.principalType, "group")))
+        .run();
+    const rows = input.groups.groups.flatMap((group) => group.currentState
+        ? [
+            toPolicyHeadRow({
+                currentState: group.currentState,
+                organizationId: input.organizationId,
+                principalId: group.groupId,
+                principalType: "group",
+            }),
+        ]
+        : []);
+    for (let index = 0; index < rows.length; index += POLICY_HEAD_INSERT_BATCH_SIZE) {
+        await input.tx
+            .insert(organizationReadModelPolicyHeads)
+            .values(rows.slice(index, index + POLICY_HEAD_INSERT_BATCH_SIZE))
+            .run();
+    }
+}
+export async function applyOrganizationPolicyLane(input) {
+    const row = toPolicyHeadRow({
+        currentState: input.organizationPolicy.currentState,
+        organizationId: input.organizationId,
+        principalId: input.organizationId,
+        principalType: "organization",
+    });
+    await input.tx
+        .insert(organizationReadModelPolicyHeads)
+        .values(row)
+        .onConflictDoUpdate({
+        target: [
+            organizationReadModelPolicyHeads.organizationId,
+            organizationReadModelPolicyHeads.principalType,
+            organizationReadModelPolicyHeads.principalId,
+        ],
+        set: {
+            stateHash: row.stateHash,
+            stateVersion: row.stateVersion,
+            keyEpoch: row.keyEpoch,
+            keyFingerprint: row.keyFingerprint,
+            memberCount: row.memberCount,
+        },
+    })
+        .run();
+}
+//# sourceMappingURL=organizationReadModelPolicyHeadPersistence.js.map

package/data/persistence/organizations/organizationReadModelPolicyHeadPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationReadModelPolicyHeadPersistence.js","sourceRoot":"","sources":["organizationReadModelPolicyHeadPersistence.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,gCAAgC,EAAE,MAAM,0CAA0C,CAAC;AAI5F,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAE1C,SAAS,eAAe,CAAC,KAKxB;IACC,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,SAAS;QACvC,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,OAAO;QACxC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,QAAQ;QACrC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,cAAc;QACjD,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAI7C;IACC,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,gCAAgC,CAAC;SACxC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,gCAAgC,CAAC,cAAc,EAC/C,KAAK,CAAC,cAAc,CACrB,EACD,EAAE,CAAC,gCAAgC,CAAC,aAAa,EAAE,OAAO,CAAC,CAC5D,CACF;SACA,GAAG,EAAE,CAAC;IAET,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACjD,KAAK,CAAC,YAAY;QAChB,CAAC,CAAC;YACE,eAAe,CAAC;gBACd,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,WAAW,EAAE,KAAK,CAAC,OAAO;gBAC1B,aAAa,EAAE,OAAO;aACvB,CAAC;SACH;QACH,CAAC,CAAC,EAAE,CACP,CAAC;IACF,KACE,IAAI,KAAK,GAAG,CAAC,EACb,KAAK,GAAG,IAAI,CAAC,MAAM,EACnB,KAAK,IAAI,6BAA6B,EACtC,CAAC;QACD,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,gCAAgC,CAAC;aACxC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,6BAA6B,CAAC,CAAC;aAChE,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAIjD;IACC,MAAM,GAAG,GAAG,eAAe,CAAC;QAC1B,YAAY,EAAE,KAAK,CAAC,kBAAkB,CAAC,YAAY;QACnD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,cAAc;QACjC,aAAa,EAAE,cAAc;KAC9B,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,gCAAgC,CAAC;SACxC,MAAM,CAAC,GAAG,CAAC;SACX,kBAAkB,CAAC;QAClB,MAAM,EAAE;YACN,gCAAgC,CAAC,cAAc;YAC/C,gCAAgC,CAAC,aAAa;YAC9C,gCAAgC,CAAC,WAAW;SAC7C;QACD,GAAG,EAAE;YACH,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B;KACF,CAAC;SACD,GAAG,EAAE,CAAC;AACX,CAAC","sourcesContent":["import type {\n  ListOrganizationGroupsResponse,\n  OrganizationGroupCurrentStateResponse,\n  OrganizationReadModelOrganizationPolicyResponse,\n} from \"@tearleads/validators/response\";\nimport { and, eq } from \"drizzle-orm\";\nimport { organizationReadModelPolicyHeads } from \"../../sqlite/organizationReadModelSchema\";\nimport type { ClientSQLiteTransactionScope } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport type { OrganizationReadModelPolicyHead } from \"./organizationReadModelProjection\";\n\nconst POLICY_HEAD_INSERT_BATCH_SIZE = 100;\n\nfunction toPolicyHeadRow(input: {\n  readonly currentState: OrganizationGroupCurrentStateResponse;\n  readonly organizationId: string;\n  readonly principalId: string;\n  readonly principalType: OrganizationReadModelPolicyHead[\"principalType\"];\n}) {\n  return {\n    organizationId: input.organizationId,\n    principalType: input.principalType,\n    principalId: input.principalId,\n    stateHash: input.currentState.stateHash,\n    stateVersion: input.currentState.version,\n    keyEpoch: input.currentState.keyEpoch,\n    keyFingerprint: input.currentState.keyFingerprint,\n    memberCount: input.currentState.memberCount,\n  };\n}\n\nexport async function replaceGroupPolicyHeads(input: {\n  readonly groups: ListOrganizationGroupsResponse;\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  await input.tx\n    .delete(organizationReadModelPolicyHeads)\n    .where(\n      and(\n        eq(\n          organizationReadModelPolicyHeads.organizationId,\n          input.organizationId,\n        ),\n        eq(organizationReadModelPolicyHeads.principalType, \"group\"),\n      ),\n    )\n    .run();\n\n  const rows = input.groups.groups.flatMap((group) =>\n    group.currentState\n      ? [\n          toPolicyHeadRow({\n            currentState: group.currentState,\n            organizationId: input.organizationId,\n            principalId: group.groupId,\n            principalType: \"group\",\n          }),\n        ]\n      : [],\n  );\n  for (\n    let index = 0;\n    index < rows.length;\n    index += POLICY_HEAD_INSERT_BATCH_SIZE\n  ) {\n    await input.tx\n      .insert(organizationReadModelPolicyHeads)\n      .values(rows.slice(index, index + POLICY_HEAD_INSERT_BATCH_SIZE))\n      .run();\n  }\n}\n\nexport async function applyOrganizationPolicyLane(input: {\n  readonly organizationId: string;\n  readonly organizationPolicy: OrganizationReadModelOrganizationPolicyResponse;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  const row = toPolicyHeadRow({\n    currentState: input.organizationPolicy.currentState,\n    organizationId: input.organizationId,\n    principalId: input.organizationId,\n    principalType: \"organization\",\n  });\n  await input.tx\n    .insert(organizationReadModelPolicyHeads)\n    .values(row)\n    .onConflictDoUpdate({\n      target: [\n        organizationReadModelPolicyHeads.organizationId,\n        organizationReadModelPolicyHeads.principalType,\n        organizationReadModelPolicyHeads.principalId,\n      ],\n      set: {\n        stateHash: row.stateHash,\n        stateVersion: row.stateVersion,\n        keyEpoch: row.keyEpoch,\n        keyFingerprint: row.keyFingerprint,\n        memberCount: row.memberCount,\n      },\n    })\n    .run();\n}\n"]}

package/data/persistence/organizations/organizationReadModelProjection.js

@@ -0,0 +1,228 @@
+import { and, asc, eq } from "drizzle-orm";
+import { organizationReadModelDirectoryUsers, organizationReadModelGroupMembers, organizationReadModelGroups, organizationReadModelPolicyHeads, organizationReadModelRequesters, organizationReadModelState, } from "../../sqlite/organizationReadModelSchema.js";
+import { loadOrganizationReadModelGrantsInTransaction } from "./organizationReadModelGrantPersistence.js";
+import { ORGANIZATION_READ_MODEL_PROTOCOL_VERSION, OrganizationReadModelIntegrityError, } from "./organizationReadModelProtocol.js";
+function isOrganizationRosterStatus(value) {
+    return value === "active" || value === "disabled";
+}
+function toDirectoryUser(row, currentUserId) {
+    if (!isOrganizationRosterStatus(row.status)) {
+        throw new OrganizationReadModelIntegrityError("Stored organization directory status is invalid");
+    }
+    return {
+        userId: row.userId,
+        signingKeyFingerprint: row.signingKeyFingerprint,
+        signingPublicKey: row.signingPublicKey,
+        encapsulationPublicKey: row.encapsulationPublicKey,
+        encapsulationKeyFingerprint: row.encapsulationKeyFingerprint,
+        createdAt: row.createdAt,
+        isPersonalOrganizationOwner: row.isPersonalOrganizationOwner,
+        isSelf: row.userId === currentUserId,
+        status: row.status,
+        profileDocumentId: row.profileDocumentId,
+        joinedAt: row.joinedAt,
+        updatedAt: row.updatedAt,
+        disabledAt: row.disabledAt,
+        disabledByUserId: row.disabledByUserId,
+    };
+}
+function toGroupCurrentState(row, policyHead) {
+    const values = [
+        row.stateHash,
+        row.stateVersion,
+        row.keyEpoch,
+        row.memberCount,
+    ];
+    if (values.every((value) => value === null)) {
+        if (policyHead) {
+            throw new OrganizationReadModelIntegrityError("Stored organization group policy head is orphaned");
+        }
+        return null;
+    }
+    if (row.stateHash === null ||
+        row.stateVersion === null ||
+        row.keyEpoch === null ||
+        row.memberCount === null ||
+        row.stateHash.length === 0 ||
+        !Number.isInteger(row.stateVersion) ||
+        row.stateVersion <= 0 ||
+        !Number.isInteger(row.keyEpoch) ||
+        row.keyEpoch <= 0 ||
+        !Number.isInteger(row.memberCount) ||
+        row.memberCount < 0 ||
+        !policyHead ||
+        policyHead.stateHash !== row.stateHash ||
+        policyHead.version !== row.stateVersion ||
+        policyHead.keyEpoch !== row.keyEpoch ||
+        policyHead.memberCount !== row.memberCount) {
+        throw new OrganizationReadModelIntegrityError("Stored organization group state is invalid");
+    }
+    return {
+        stateHash: row.stateHash,
+        version: row.stateVersion,
+        keyEpoch: row.keyEpoch,
+        keyFingerprint: policyHead.keyFingerprint,
+        memberCount: row.memberCount,
+    };
+}
+function toPolicyHead(row) {
+    if ((row.principalType !== "group" && row.principalType !== "organization") ||
+        row.principalId.length === 0 ||
+        row.stateHash.length === 0 ||
+        !Number.isInteger(row.stateVersion) ||
+        row.stateVersion <= 0 ||
+        !Number.isInteger(row.keyEpoch) ||
+        row.keyEpoch <= 0 ||
+        row.keyFingerprint.length === 0 ||
+        !Number.isInteger(row.memberCount) ||
+        row.memberCount < 0) {
+        throw new OrganizationReadModelIntegrityError("Stored organization policy head is invalid");
+    }
+    return {
+        organizationId: row.organizationId,
+        principalType: row.principalType,
+        principalId: row.principalId,
+        stateHash: row.stateHash,
+        version: row.stateVersion,
+        keyEpoch: row.keyEpoch,
+        keyFingerprint: row.keyFingerprint,
+        memberCount: row.memberCount,
+    };
+}
+async function loadDirectoryRows(tx, organizationId) {
+    return tx
+        .select({
+        createdAt: organizationReadModelDirectoryUsers.createdAt,
+        disabledAt: organizationReadModelDirectoryUsers.disabledAt,
+        disabledByUserId: organizationReadModelDirectoryUsers.disabledByUserId,
+        encapsulationKeyFingerprint: organizationReadModelDirectoryUsers.encapsulationKeyFingerprint,
+        encapsulationPublicKey: organizationReadModelDirectoryUsers.encapsulationPublicKey,
+        joinedAt: organizationReadModelDirectoryUsers.joinedAt,
+        isPersonalOrganizationOwner: organizationReadModelDirectoryUsers.isPersonalOrganizationOwner,
+        profileDocumentId: organizationReadModelDirectoryUsers.profileDocumentId,
+        signingKeyFingerprint: organizationReadModelDirectoryUsers.signingKeyFingerprint,
+        signingPublicKey: organizationReadModelDirectoryUsers.signingPublicKey,
+        status: organizationReadModelDirectoryUsers.status,
+        updatedAt: organizationReadModelDirectoryUsers.updatedAt,
+        userId: organizationReadModelDirectoryUsers.userId,
+    })
+        .from(organizationReadModelDirectoryUsers)
+        .where(eq(organizationReadModelDirectoryUsers.organizationId, organizationId))
+        .orderBy(asc(organizationReadModelDirectoryUsers.sortOrder), asc(organizationReadModelDirectoryUsers.userId));
+}
+async function loadGroupRows(tx, organizationId) {
+    return tx
+        .select({
+        createdAt: organizationReadModelGroups.createdAt,
+        groupId: organizationReadModelGroups.groupId,
+        isBuiltin: organizationReadModelGroups.isBuiltin,
+        keyEpoch: organizationReadModelGroups.keyEpoch,
+        memberCount: organizationReadModelGroups.memberCount,
+        name: organizationReadModelGroups.name,
+        stateHash: organizationReadModelGroups.stateHash,
+        stateVersion: organizationReadModelGroups.stateVersion,
+    })
+        .from(organizationReadModelGroups)
+        .where(eq(organizationReadModelGroups.organizationId, organizationId))
+        .orderBy(asc(organizationReadModelGroups.sortOrder), asc(organizationReadModelGroups.groupId));
+}
+async function loadPolicyHeadRows(tx, organizationId) {
+    return tx
+        .select({
+        keyEpoch: organizationReadModelPolicyHeads.keyEpoch,
+        keyFingerprint: organizationReadModelPolicyHeads.keyFingerprint,
+        memberCount: organizationReadModelPolicyHeads.memberCount,
+        organizationId: organizationReadModelPolicyHeads.organizationId,
+        principalId: organizationReadModelPolicyHeads.principalId,
+        principalType: organizationReadModelPolicyHeads.principalType,
+        stateHash: organizationReadModelPolicyHeads.stateHash,
+        stateVersion: organizationReadModelPolicyHeads.stateVersion,
+    })
+        .from(organizationReadModelPolicyHeads)
+        .where(eq(organizationReadModelPolicyHeads.organizationId, organizationId))
+        .orderBy(asc(organizationReadModelPolicyHeads.principalType), asc(organizationReadModelPolicyHeads.principalId));
+}
+async function loadMembershipEdges(tx, organizationId) {
+    return tx
+        .select({
+        groupId: organizationReadModelGroupMembers.groupId,
+        userId: organizationReadModelGroupMembers.userId,
+    })
+        .from(organizationReadModelGroupMembers)
+        .where(eq(organizationReadModelGroupMembers.organizationId, organizationId))
+        .orderBy(asc(organizationReadModelGroupMembers.groupId), asc(organizationReadModelGroupMembers.sortOrder), asc(organizationReadModelGroupMembers.userId));
+}
+function validatePolicyHeads(input) {
+    const policyHeads = input.policyHeadRows.map(toPolicyHead);
+    const organizationPolicyHeads = policyHeads.filter((head) => head.principalType === "organization");
+    if (organizationPolicyHeads.length !== 1 ||
+        organizationPolicyHeads[0]?.principalId !== input.organizationId) {
+        throw new OrganizationReadModelIntegrityError("Stored organization policy head is missing or ambiguous");
+    }
+    const groupPolicyHeads = new Map(policyHeads
+        .filter((head) => head.principalType === "group")
+        .map((head) => [head.principalId, head]));
+    const visibleGroupIds = new Set(input.groupRows.map((row) => row.groupId));
+    if ([...groupPolicyHeads.keys()].some((principalId) => !visibleGroupIds.has(principalId))) {
+        throw new OrganizationReadModelIntegrityError("Stored organization group policy head is not visible");
+    }
+    return { groupPolicyHeads, policyHeads };
+}
+export async function loadOrganizationReadModelProjectionInTransaction(input) {
+    const [state] = await input.tx
+        .select({
+        cursor: organizationReadModelState.cursor,
+        memberGroupId: organizationReadModelState.memberGroupId,
+        profileDocumentId: organizationReadModelState.profileDocumentId,
+        updatedAt: organizationReadModelState.updatedAt,
+    })
+        .from(organizationReadModelState)
+        .where(eq(organizationReadModelState.organizationId, input.organizationId))
+        .limit(1);
+    if (!state) {
+        return null;
+    }
+    const [requester] = await input.tx
+        .select({ isOrgAdmin: organizationReadModelRequesters.isOrgAdmin })
+        .from(organizationReadModelRequesters)
+        .where(and(eq(organizationReadModelRequesters.organizationId, input.organizationId), eq(organizationReadModelRequesters.userId, input.currentUserId)))
+        .limit(1);
+    const directoryRows = await loadDirectoryRows(input.tx, input.organizationId);
+    const groupRows = await loadGroupRows(input.tx, input.organizationId);
+    const grants = await loadOrganizationReadModelGrantsInTransaction(input);
+    const membershipEdges = await loadMembershipEdges(input.tx, input.organizationId);
+    const policyHeadRows = await loadPolicyHeadRows(input.tx, input.organizationId);
+    const { groupPolicyHeads, policyHeads } = validatePolicyHeads({
+        groupRows,
+        organizationId: input.organizationId,
+        policyHeadRows,
+    });
+    return {
+        cursor: state.cursor,
+        directory: {
+            organizationId: input.organizationId,
+            profileDocumentId: state.profileDocumentId,
+            users: directoryRows.map((row) => toDirectoryUser(row, input.currentUserId)),
+        },
+        grants,
+        groups: {
+            organizationId: input.organizationId,
+            memberGroupId: state.memberGroupId,
+            groups: groupRows.map((row) => ({
+                groupId: row.groupId,
+                organizationId: input.organizationId,
+                name: row.name,
+                createdAt: row.createdAt,
+                isBuiltin: row.isBuiltin,
+                currentState: toGroupCurrentState(row, groupPolicyHeads.get(row.groupId)),
+            })),
+        },
+        membershipEdges,
+        organizationId: input.organizationId,
+        policyHeads,
+        protocolVersion: ORGANIZATION_READ_MODEL_PROTOCOL_VERSION,
+        requester: requester ? { isOrgAdmin: requester.isOrgAdmin } : null,
+        updatedAt: state.updatedAt,
+    };
+}
+//# sourceMappingURL=organizationReadModelProjection.js.map