@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/client/organizations/index.d.ts

@@ -0,0 +1,46 @@
+import type { NativeSubscriptionStore } from "../../internal/validators/billing.js";
+import { type addOrganizationGroupUser, cancelStripeSubscription, checkNativePurchaseEligibility, claimNativeOrganizationSubscription, type createOrganizationGroup, createStripeCheckout, createStripeCheckoutSession, importOrganizationUser, type LocalOrganizationSummary, loadOrganizationBilling, loadOrganizationBillingHistory, loadOrganizationBillingManagementUrl, loadStripeCheckoutOptions, type removeOrganizationGroupUser, type revokeOrganizationContainerGrant, type rotateOrganizationGroupForAccessSetShrink, startOrganizationTrial, updateOrganizationProfile, updateOrganizationRosterEntry } from "../../workflows/organizations/index.js";
+import type { ContainerContents } from "../containerContents.js";
+import type { InternalRuntime, InternalWorkflowRuntimeInput } from "../workflowRuntime.js";
+import { type OrganizationDataUsageCoordinator } from "./organizationDataUsage.js";
+import { loadOrganizationGroupPresentationDetails } from "./organizationGroupPresentation.js";
+import { type OrganizationReadModelCoordinator } from "./organizationReadModels.js";
+import { type AddOrganizationGroupUserInput, deleteGroupForOrganization, type OrganizationGrantRef, type RemoveOrganizationGroupUserInput } from "./principalMutations.js";
+export type { ImportedOrganizationUser, LocalOrganizationSummary, OrganizationBilling, OrganizationBillingHistory, OrganizationBillingHistoryEntry, OrganizationBillingManagementUrl, OrganizationBillingView, OrganizationContainerGrant, OrganizationContainerGrants, OrganizationDataUsage, OrganizationDirectory, OrganizationDirectoryAndGroups, OrganizationDirectoryUser, OrganizationGroupContainer, OrganizationGroupContainers, OrganizationGroupDetails, OrganizationGroupMember, OrganizationGroupMembers, OrganizationGroupPolicyHistory, OrganizationGroupSummary, OrganizationPolicyGrantChange, OrganizationPolicyGroupChange, OrganizationPolicyHistory, OrganizationPolicyHistoryEntry, OrganizationProfile, OrganizationUserDetail, } from "../../workflows/organizations/index.js";
+export type { AddOrganizationGroupUserInput, OrganizationGrantRef, RemoveOrganizationGroupUserInput, } from "./principalMutations.js";
+export interface Organizations {
+    addUserToGroup: (input: AddOrganizationGroupUserInput) => ReturnType<typeof addOrganizationGroupUser>;
+    createGroup: (name: string) => ReturnType<typeof createOrganizationGroup>;
+    deleteGroup: (groupId: string) => ReturnType<typeof deleteGroupForOrganization>;
+    importUserById: (userId: string) => ReturnType<typeof importOrganizationUser>;
+    loadBilling: () => ReturnType<typeof loadOrganizationBilling>;
+    /** Billing for an organization the session is not currently switched to. */
+    loadBillingForOrganization: (organizationId: string) => ReturnType<typeof loadOrganizationBilling>;
+    loadBillingHistory: () => ReturnType<typeof loadOrganizationBillingHistory>;
+    loadBillingManagementUrl: () => ReturnType<typeof loadOrganizationBillingManagementUrl>;
+    /** Direct Stripe checkout (issue #1654): options, start, and cancel. */
+    loadStripeCheckoutOptions: (organizationId?: string) => ReturnType<typeof loadStripeCheckoutOptions>;
+    createStripeCheckout: (organizationId?: string) => ReturnType<typeof createStripeCheckout>;
+    createStripeCheckoutSession: (returnUrl: string, organizationId?: string) => ReturnType<typeof createStripeCheckoutSession>;
+    cancelStripeSubscription: () => ReturnType<typeof cancelStripeSubscription>;
+    claimNativeSubscription: (organizationId: string, store: NativeSubscriptionStore) => ReturnType<typeof claimNativeOrganizationSubscription>;
+    checkNativePurchaseEligibility: (organizationId: string, store: NativeSubscriptionStore) => ReturnType<typeof checkNativePurchaseEligibility>;
+    loadDataUsage: () => ReturnType<OrganizationDataUsageCoordinator["reconcile"]>;
+    loadLocalDataUsage: () => ReturnType<OrganizationDataUsageCoordinator["loadLocal"]>;
+    loadDirectoryAndGroups: () => ReturnType<OrganizationReadModelCoordinator["reconcile"]>;
+    loadDirectoryAndGroupsAfterMutation: () => ReturnType<OrganizationReadModelCoordinator["reconcileAfterMutation"]>;
+    loadLocalDirectoryAndGroups: () => ReturnType<OrganizationReadModelCoordinator["loadLocal"]>;
+    loadGroupMembers: (groupId: string) => ReturnType<InternalWorkflowRuntimeInput["apiClient"]["listOrganizationGroupMembers"]>;
+    loadGroupPresentationDetails(groupId: string): ReturnType<typeof loadOrganizationGroupPresentationDetails>;
+    loadGroupContainers: (groupId: string) => ReturnType<OrganizationReadModelCoordinator["loadLocalGroupContainers"]>;
+    loadGrants: () => ReturnType<OrganizationReadModelCoordinator["loadLocalGrants"]>;
+    listLocalOrganizations: () => Promise<LocalOrganizationSummary[]>;
+    loadPolicyHistory: () => ReturnType<OrganizationReadModelCoordinator["loadOrganizationPolicyHistory"]>;
+    loadUserDetail: (userId: string) => ReturnType<OrganizationReadModelCoordinator["loadLocalUserDetail"]>;
+    updateRosterEntry: (userId: string, profileDocumentId: string | null) => ReturnType<typeof updateOrganizationRosterEntry>;
+    updateProfile: (profileDocumentId: string | null) => ReturnType<typeof updateOrganizationProfile>;
+    removeUserFromGroup: (input: RemoveOrganizationGroupUserInput) => ReturnType<typeof removeOrganizationGroupUser>;
+    revokeGrant: (grant: OrganizationGrantRef) => Promise<Awaited<ReturnType<typeof revokeOrganizationContainerGrant>> | Awaited<ReturnType<typeof rotateOrganizationGroupForAccessSetShrink>>>;
+    startTrial: (organizationId?: string) => ReturnType<typeof startOrganizationTrial>;
+}
+export declare function createOrganizations(runtime: InternalRuntime, containerContents: ContainerContents): Organizations;

package/client/organizations/index.js

@@ -0,0 +1,201 @@
+import { runWithSecurityIncidentReporting } from "../../data/keyingProjectionVerification/error.js";
+import { cancelStripeSubscription, checkNativePurchaseEligibility, claimNativeOrganizationSubscription, createStripeCheckout, createStripeCheckoutSession, importOrganizationUser, listLocalOrganizations, loadOrganizationBilling, loadOrganizationBillingHistory, loadOrganizationBillingManagementUrl, loadStripeCheckoutOptions, startOrganizationTrial, updateOrganizationProfile, updateOrganizationRosterEntry, } from "../../workflows/organizations/index.js";
+import { createOrganizationDataUsageCoordinator, } from "./organizationDataUsage.js";
+import { loadOrganizationGroupPresentationDetails } from "./organizationGroupPresentation.js";
+import { createOrganizationReadModelCoordinator, } from "./organizationReadModels.js";
+import { authenticatedOrganizationId, runForOrganization, } from "./organizationWorkflowRuntime.js";
+import { currentOrganizationMutation } from "./principalMutationScope.js";
+import { addUserToOrganizationGroup, createGroupForOrganization, deleteGroupForOrganization, removeUserFromOrganizationGroup, revokeOrganizationGrant, } from "./principalMutations.js";
+export function createOrganizations(runtime, containerContents) {
+    return new OrganizationsService(runtime, containerContents);
+}
+class OrganizationsService {
+    runtimeService;
+    containerContents;
+    dataUsageCoordinator;
+    readModelCoordinator;
+    constructor(runtimeService, containerContents) {
+        this.runtimeService = runtimeService;
+        this.containerContents = containerContents;
+        this.dataUsageCoordinator = createOrganizationDataUsageCoordinator(this.runtimeService);
+        this.readModelCoordinator = createOrganizationReadModelCoordinator(this.runtimeService);
+    }
+    async addUserToGroup(input) {
+        return addUserToOrganizationGroup({
+            ...input,
+            containerContents: this.containerContents,
+            readModelCoordinator: this.readModelCoordinator,
+            ...currentOrganizationMutation(this.runtimeService),
+        });
+    }
+    createGroup(name) {
+        return createGroupForOrganization({
+            name,
+            runtime: this.runtimeService.workflowInput(),
+        });
+    }
+    deleteGroup(groupId) {
+        return deleteGroupForOrganization({
+            groupId,
+            runtime: this.runtimeService.workflowInput(),
+        });
+    }
+    importUserById(userId) {
+        const runtime = this.runtimeService.workflowInput();
+        return importOrganizationUser({
+            resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,
+            userId,
+        });
+    }
+    loadBilling() {
+        return runForOrganization(this.runtimeService, loadOrganizationBilling);
+    }
+    loadBillingForOrganization(organizationId) {
+        // Gated on an authenticated session rather than on the target being the
+        // active org. The server still enforces membership, so an org the caller
+        // cannot reach resolves to `null`.
+        return runForOrganization(this.runtimeService, loadOrganizationBilling, organizationId);
+    }
+    loadBillingHistory() {
+        return runForOrganization(this.runtimeService, loadOrganizationBillingHistory);
+    }
+    loadBillingManagementUrl() {
+        return runForOrganization(this.runtimeService, loadOrganizationBillingManagementUrl);
+    }
+    loadStripeCheckoutOptions(organizationId) {
+        return runForOrganization(this.runtimeService, loadStripeCheckoutOptions, organizationId);
+    }
+    createStripeCheckout(organizationId) {
+        return runForOrganization(this.runtimeService, createStripeCheckout, organizationId);
+    }
+    createStripeCheckoutSession(returnUrl, organizationId) {
+        return runForOrganization(this.runtimeService, (input) => createStripeCheckoutSession({ ...input, returnUrl }), organizationId);
+    }
+    cancelStripeSubscription() {
+        return runForOrganization(this.runtimeService, cancelStripeSubscription);
+    }
+    claimNativeSubscription(organizationId, store) {
+        return runForOrganization(this.runtimeService, (input) => claimNativeOrganizationSubscription({ ...input, store }), organizationId);
+    }
+    checkNativePurchaseEligibility(organizationId, store) {
+        return runForOrganization(this.runtimeService, (input) => checkNativePurchaseEligibility({ ...input, store }), organizationId);
+    }
+    loadDataUsage() {
+        return this.dataUsageCoordinator.reconcile();
+    }
+    loadLocalDataUsage() {
+        return this.dataUsageCoordinator.loadLocal();
+    }
+    loadDirectoryAndGroups() {
+        const runtime = this.runtimeService.workflowInput();
+        return runWithSecurityIncidentReporting(runtime.util.reportSecurityIncident, {
+            objectId: runtime.auth.organizationId,
+            objectKind: "principal",
+            operation: "organization.read_model.reconcile",
+            organizationId: runtime.auth.organizationId,
+        }, () => this.readModelCoordinator.reconcile());
+    }
+    loadDirectoryAndGroupsAfterMutation() {
+        const runtime = this.runtimeService.workflowInput();
+        return runWithSecurityIncidentReporting(runtime.util.reportSecurityIncident, {
+            objectId: runtime.auth.organizationId,
+            objectKind: "principal",
+            operation: "organization.read_model.reconcile_after_mutation",
+            organizationId: runtime.auth.organizationId,
+        }, () => this.readModelCoordinator.reconcileAfterMutation());
+    }
+    loadLocalDirectoryAndGroups() {
+        return this.readModelCoordinator.loadLocal();
+    }
+    loadGroupMembers(groupId) {
+        const runtime = this.runtimeService.workflowInput();
+        const organizationId = authenticatedOrganizationId(runtime);
+        if (!organizationId || groupId.length === 0) {
+            return Promise.resolve(null);
+        }
+        return runtime.apiClient.listOrganizationGroupMembers(organizationId, groupId);
+    }
+    loadGroupPresentationDetails(groupId) {
+        const runtime = this.runtimeService.workflowInput();
+        return runWithSecurityIncidentReporting(runtime.util.reportSecurityIncident, {
+            objectId: groupId,
+            objectKind: "principal",
+            operation: "group.presentation.load",
+            organizationId: runtime.auth.organizationId,
+        }, () => loadOrganizationGroupPresentationDetails({
+            groupId,
+            readModelCoordinator: this.readModelCoordinator,
+            runtime,
+        }));
+    }
+    loadGrants() {
+        return this.readModelCoordinator.loadLocalGrants();
+    }
+    loadGroupContainers(groupId) {
+        return this.readModelCoordinator.loadLocalGroupContainers(groupId);
+    }
+    listLocalOrganizations() {
+        const runtime = this.runtimeService.workflowInput();
+        if (runtime.infra.dbStatus !== "ready") {
+            return Promise.resolve([]);
+        }
+        return listLocalOrganizations({ execSql: runtime.infra.execSql });
+    }
+    loadPolicyHistory() {
+        const runtime = this.runtimeService.workflowInput();
+        return runWithSecurityIncidentReporting(runtime.util.reportSecurityIncident, {
+            objectId: runtime.auth.organizationId,
+            objectKind: "principal",
+            operation: "organization.policy_history.load",
+            organizationId: runtime.auth.organizationId,
+        }, () => this.readModelCoordinator.loadOrganizationPolicyHistory());
+    }
+    loadUserDetail(userId) {
+        return this.readModelCoordinator.loadLocalUserDetail(userId);
+    }
+    updateRosterEntry(userId, profileDocumentId) {
+        const runtime = this.runtimeService.workflowInput();
+        const organizationId = authenticatedOrganizationId(runtime);
+        if (!organizationId || userId.length === 0) {
+            return Promise.resolve(null);
+        }
+        return updateOrganizationRosterEntry({
+            apiClient: runtime.apiClient,
+            organizationId,
+            profileDocumentId,
+            userId,
+        });
+    }
+    updateProfile(profileDocumentId) {
+        const runtime = this.runtimeService.workflowInput();
+        const organizationId = authenticatedOrganizationId(runtime);
+        if (!organizationId) {
+            return Promise.resolve(null);
+        }
+        return updateOrganizationProfile({
+            apiClient: runtime.apiClient,
+            organizationId,
+            profileDocumentId,
+        });
+    }
+    async removeUserFromGroup(input) {
+        return removeUserFromOrganizationGroup({
+            ...input,
+            containerContents: this.containerContents,
+            readModelCoordinator: this.readModelCoordinator,
+            ...currentOrganizationMutation(this.runtimeService),
+        });
+    }
+    async revokeGrant(grant) {
+        return revokeOrganizationGrant({
+            ...grant,
+            containerContents: this.containerContents,
+            readModelCoordinator: this.readModelCoordinator,
+            ...currentOrganizationMutation(this.runtimeService),
+        });
+    }
+    startTrial(organizationId) {
+        return runForOrganization(this.runtimeService, startOrganizationTrial, organizationId);
+    }
+}
+//# sourceMappingURL=index.js.map

package/client/organizations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,EAEL,wBAAwB,EACxB,8BAA8B,EAC9B,mCAAmC,EAEnC,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EAEtB,sBAAsB,EACtB,uBAAuB,EACvB,8BAA8B,EAC9B,oCAAoC,EACpC,yBAAyB,EAIzB,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AAMvC,OAAO,EACL,sCAAsC,GAEvC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EACL,sCAAsC,GAEvC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAEL,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAG1B,+BAA+B,EAC/B,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAoI9B,MAAM,UAAU,mBAAmB,CACjC,OAAwB,EACxB,iBAAoC;IAEpC,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,oBAAoB;IAKL;IACA;IALF,oBAAoB,CAAmC;IACvD,oBAAoB,CAAmC;IAExE,YACmB,cAA+B,EAC/B,iBAAoC;QADpC,mBAAc,GAAd,cAAc,CAAiB;QAC/B,sBAAiB,GAAjB,iBAAiB,CAAmB;QAErD,IAAI,CAAC,oBAAoB,GAAG,sCAAsC,CAChE,IAAI,CAAC,cAAc,CACpB,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,sCAAsC,CAChE,IAAI,CAAC,cAAc,CACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAoC;QACvD,OAAO,0BAA0B,CAAC;YAChC,GAAG,KAAK;YACR,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,IAAY;QACtB,OAAO,0BAA0B,CAAC;YAChC,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,OAAO,0BAA0B,CAAC;YAChC,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,sBAAsB,CAAC;YAC5B,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;YAC9D,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,WAAW;QACT,OAAO,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;IAC1E,CAAC;IAED,0BAA0B,CAAC,cAAsB;QAC/C,wEAAwE;QACxE,yEAAyE;QACzE,mCAAmC;QACnC,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,uBAAuB,EACvB,cAAc,CACf,CAAC;IACJ,CAAC;IAED,kBAAkB;QAChB,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,8BAA8B,CAC/B,CAAC;IACJ,CAAC;IAED,wBAAwB;QACtB,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,oCAAoC,CACrC,CAAC;IACJ,CAAC;IAED,yBAAyB,CAAC,cAAuB;QAC/C,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,yBAAyB,EACzB,cAAc,CACf,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,cAAuB;QAC1C,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,oBAAoB,EACpB,cAAc,CACf,CAAC;IACJ,CAAC;IAED,2BAA2B,CAAC,SAAiB,EAAE,cAAuB;QACpE,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,EAC/D,cAAc,CACf,CAAC;IACJ,CAAC;IAED,wBAAwB;QACtB,OAAO,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAC3E,CAAC;IAED,uBAAuB,CACrB,cAAsB,EACtB,KAA8B;QAE9B,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,CAAC,KAAK,EAAE,EAAE,CAAC,mCAAmC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,EACnE,cAAc,CACf,CAAC;IACJ,CAAC;IAED,8BAA8B,CAC5B,cAAsB,EACtB,KAA8B;QAE9B,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,CAAC,KAAK,EAAE,EAAE,CAAC,8BAA8B,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,EAC9D,cAAc,CACf,CAAC;IACJ,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,sBAAsB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;YACrC,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,mCAAmC;YAC9C,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,EACD,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAC5C,CAAC;IACJ,CAAC;IAED,mCAAmC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;YACrC,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,kDAAkD;YAC7D,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,EACD,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,CACzD,CAAC;IACJ,CAAC;IAED,2BAA2B;QACzB,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,gBAAgB,CAAC,OAAe;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,cAAc,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,OAAO,CAAC,SAAS,CAAC,4BAA4B,CACnD,cAAc,EACd,OAAO,CACR,CAAC;IACJ,CAAC;IAED,4BAA4B,CAAC,OAAe;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,yBAAyB;YACpC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,EACD,GAAG,EAAE,CACH,wCAAwC,CAAC;YACvC,OAAO;YACP,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,OAAO;SACR,CAAC,CACL,CAAC;IACJ,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,oBAAoB,CAAC,eAAe,EAAE,CAAC;IACrD,CAAC;IAED,mBAAmB,CAAC,OAAe;QACjC,OAAO,IAAI,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,sBAAsB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACvC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,sBAAsB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,iBAAiB;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;YACrC,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,kCAAkC;YAC7C,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,EACD,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,6BAA6B,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,OAAO,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED,iBAAiB,CAAC,MAAc,EAAE,iBAAgC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,cAAc,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,6BAA6B,CAAC;YACnC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc;YACd,iBAAiB;YACjB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,iBAAgC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,cAAc,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,yBAAyB,CAAC;YAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc;YACd,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAuC;QAC/D,OAAO,+BAA+B,CAAC;YACrC,GAAG,KAAK;YACR,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA2B;QAC3C,OAAO,uBAAuB,CAAC;YAC7B,GAAG,KAAK;YACR,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,cAAuB;QAChC,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,sBAAsB,EACtB,cAAc,CACf,CAAC;IACJ,CAAC;CACF","sourcesContent":["import type { NativeSubscriptionStore } from \"@tearleads/validators/billing\";\nimport { runWithSecurityIncidentReporting } from \"../../data/keyingProjectionVerification/error\";\nimport {\n  type addOrganizationGroupUser,\n  cancelStripeSubscription,\n  checkNativePurchaseEligibility,\n  claimNativeOrganizationSubscription,\n  type createOrganizationGroup,\n  createStripeCheckout,\n  createStripeCheckoutSession,\n  importOrganizationUser,\n  type LocalOrganizationSummary,\n  listLocalOrganizations,\n  loadOrganizationBilling,\n  loadOrganizationBillingHistory,\n  loadOrganizationBillingManagementUrl,\n  loadStripeCheckoutOptions,\n  type removeOrganizationGroupUser,\n  type revokeOrganizationContainerGrant,\n  type rotateOrganizationGroupForAccessSetShrink,\n  startOrganizationTrial,\n  updateOrganizationProfile,\n  updateOrganizationRosterEntry,\n} from \"../../workflows/organizations\";\nimport type { ContainerContents } from \"../containerContents\";\nimport type {\n  InternalRuntime,\n  InternalWorkflowRuntimeInput,\n} from \"../workflowRuntime\";\nimport {\n  createOrganizationDataUsageCoordinator,\n  type OrganizationDataUsageCoordinator,\n} from \"./organizationDataUsage\";\nimport { loadOrganizationGroupPresentationDetails } from \"./organizationGroupPresentation\";\nimport {\n  createOrganizationReadModelCoordinator,\n  type OrganizationReadModelCoordinator,\n} from \"./organizationReadModels\";\nimport {\n  authenticatedOrganizationId,\n  runForOrganization,\n} from \"./organizationWorkflowRuntime\";\nimport { currentOrganizationMutation } from \"./principalMutationScope\";\nimport {\n  type AddOrganizationGroupUserInput,\n  addUserToOrganizationGroup,\n  createGroupForOrganization,\n  deleteGroupForOrganization,\n  type OrganizationGrantRef,\n  type RemoveOrganizationGroupUserInput,\n  removeUserFromOrganizationGroup,\n  revokeOrganizationGrant,\n} from \"./principalMutations\";\n\nexport type {\n  ImportedOrganizationUser,\n  LocalOrganizationSummary,\n  OrganizationBilling,\n  OrganizationBillingHistory,\n  OrganizationBillingHistoryEntry,\n  OrganizationBillingManagementUrl,\n  OrganizationBillingView,\n  OrganizationContainerGrant,\n  OrganizationContainerGrants,\n  OrganizationDataUsage,\n  OrganizationDirectory,\n  OrganizationDirectoryAndGroups,\n  OrganizationDirectoryUser,\n  OrganizationGroupContainer,\n  OrganizationGroupContainers,\n  OrganizationGroupDetails,\n  OrganizationGroupMember,\n  OrganizationGroupMembers,\n  OrganizationGroupPolicyHistory,\n  OrganizationGroupSummary,\n  OrganizationPolicyGrantChange,\n  OrganizationPolicyGroupChange,\n  OrganizationPolicyHistory,\n  OrganizationPolicyHistoryEntry,\n  OrganizationProfile,\n  OrganizationUserDetail,\n} from \"../../workflows/organizations\";\n\nexport type {\n  AddOrganizationGroupUserInput,\n  OrganizationGrantRef,\n  RemoveOrganizationGroupUserInput,\n} from \"./principalMutations\";\n\nexport interface Organizations {\n  addUserToGroup: (\n    input: AddOrganizationGroupUserInput,\n  ) => ReturnType<typeof addOrganizationGroupUser>;\n  createGroup: (name: string) => ReturnType<typeof createOrganizationGroup>;\n  deleteGroup: (\n    groupId: string,\n  ) => ReturnType<typeof deleteGroupForOrganization>;\n  importUserById: (userId: string) => ReturnType<typeof importOrganizationUser>;\n  loadBilling: () => ReturnType<typeof loadOrganizationBilling>;\n  /** Billing for an organization the session is not currently switched to. */\n  loadBillingForOrganization: (\n    organizationId: string,\n  ) => ReturnType<typeof loadOrganizationBilling>;\n  loadBillingHistory: () => ReturnType<typeof loadOrganizationBillingHistory>;\n  loadBillingManagementUrl: () => ReturnType<\n    typeof loadOrganizationBillingManagementUrl\n  >;\n  /** Direct Stripe checkout (issue #1654): options, start, and cancel. */\n  loadStripeCheckoutOptions: (\n    organizationId?: string,\n  ) => ReturnType<typeof loadStripeCheckoutOptions>;\n  createStripeCheckout: (\n    organizationId?: string,\n  ) => ReturnType<typeof createStripeCheckout>;\n  createStripeCheckoutSession: (\n    returnUrl: string,\n    organizationId?: string,\n  ) => ReturnType<typeof createStripeCheckoutSession>;\n  cancelStripeSubscription: () => ReturnType<typeof cancelStripeSubscription>;\n  claimNativeSubscription: (\n    organizationId: string,\n    store: NativeSubscriptionStore,\n  ) => ReturnType<typeof claimNativeOrganizationSubscription>;\n  checkNativePurchaseEligibility: (\n    organizationId: string,\n    store: NativeSubscriptionStore,\n  ) => ReturnType<typeof checkNativePurchaseEligibility>;\n  loadDataUsage: () => ReturnType<\n    OrganizationDataUsageCoordinator[\"reconcile\"]\n  >;\n  loadLocalDataUsage: () => ReturnType<\n    OrganizationDataUsageCoordinator[\"loadLocal\"]\n  >;\n  loadDirectoryAndGroups: () => ReturnType<\n    OrganizationReadModelCoordinator[\"reconcile\"]\n  >;\n  loadDirectoryAndGroupsAfterMutation: () => ReturnType<\n    OrganizationReadModelCoordinator[\"reconcileAfterMutation\"]\n  >;\n  loadLocalDirectoryAndGroups: () => ReturnType<\n    OrganizationReadModelCoordinator[\"loadLocal\"]\n  >;\n  loadGroupMembers: (\n    groupId: string,\n  ) => ReturnType<\n    InternalWorkflowRuntimeInput[\"apiClient\"][\"listOrganizationGroupMembers\"]\n  >;\n  loadGroupPresentationDetails(\n    groupId: string,\n  ): ReturnType<typeof loadOrganizationGroupPresentationDetails>;\n  loadGroupContainers: (\n    groupId: string,\n  ) => ReturnType<OrganizationReadModelCoordinator[\"loadLocalGroupContainers\"]>;\n  loadGrants: () => ReturnType<\n    OrganizationReadModelCoordinator[\"loadLocalGrants\"]\n  >;\n  listLocalOrganizations: () => Promise<LocalOrganizationSummary[]>;\n  loadPolicyHistory: () => ReturnType<\n    OrganizationReadModelCoordinator[\"loadOrganizationPolicyHistory\"]\n  >;\n  loadUserDetail: (\n    userId: string,\n  ) => ReturnType<OrganizationReadModelCoordinator[\"loadLocalUserDetail\"]>;\n  updateRosterEntry: (\n    userId: string,\n    profileDocumentId: string | null,\n  ) => ReturnType<typeof updateOrganizationRosterEntry>;\n  updateProfile: (\n    profileDocumentId: string | null,\n  ) => ReturnType<typeof updateOrganizationProfile>;\n  removeUserFromGroup: (\n    input: RemoveOrganizationGroupUserInput,\n  ) => ReturnType<typeof removeOrganizationGroupUser>;\n  revokeGrant: (\n    grant: OrganizationGrantRef,\n  ) => Promise<\n    | Awaited<ReturnType<typeof revokeOrganizationContainerGrant>>\n    | Awaited<ReturnType<typeof rotateOrganizationGroupForAccessSetShrink>>\n  >;\n  startTrial: (\n    organizationId?: string,\n  ) => ReturnType<typeof startOrganizationTrial>;\n}\n\nexport function createOrganizations(\n  runtime: InternalRuntime,\n  containerContents: ContainerContents,\n): Organizations {\n  return new OrganizationsService(runtime, containerContents);\n}\n\nclass OrganizationsService implements Organizations {\n  private readonly dataUsageCoordinator: OrganizationDataUsageCoordinator;\n  private readonly readModelCoordinator: OrganizationReadModelCoordinator;\n\n  constructor(\n    private readonly runtimeService: InternalRuntime,\n    private readonly containerContents: ContainerContents,\n  ) {\n    this.dataUsageCoordinator = createOrganizationDataUsageCoordinator(\n      this.runtimeService,\n    );\n    this.readModelCoordinator = createOrganizationReadModelCoordinator(\n      this.runtimeService,\n    );\n  }\n\n  async addUserToGroup(input: AddOrganizationGroupUserInput) {\n    return addUserToOrganizationGroup({\n      ...input,\n      containerContents: this.containerContents,\n      readModelCoordinator: this.readModelCoordinator,\n      ...currentOrganizationMutation(this.runtimeService),\n    });\n  }\n\n  createGroup(name: string) {\n    return createGroupForOrganization({\n      name,\n      runtime: this.runtimeService.workflowInput(),\n    });\n  }\n\n  deleteGroup(groupId: string) {\n    return deleteGroupForOrganization({\n      groupId,\n      runtime: this.runtimeService.workflowInput(),\n    });\n  }\n\n  importUserById(userId: string) {\n    const runtime = this.runtimeService.workflowInput();\n    return importOrganizationUser({\n      resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,\n      userId,\n    });\n  }\n\n  loadBilling() {\n    return runForOrganization(this.runtimeService, loadOrganizationBilling);\n  }\n\n  loadBillingForOrganization(organizationId: string) {\n    // Gated on an authenticated session rather than on the target being the\n    // active org. The server still enforces membership, so an org the caller\n    // cannot reach resolves to `null`.\n    return runForOrganization(\n      this.runtimeService,\n      loadOrganizationBilling,\n      organizationId,\n    );\n  }\n\n  loadBillingHistory() {\n    return runForOrganization(\n      this.runtimeService,\n      loadOrganizationBillingHistory,\n    );\n  }\n\n  loadBillingManagementUrl() {\n    return runForOrganization(\n      this.runtimeService,\n      loadOrganizationBillingManagementUrl,\n    );\n  }\n\n  loadStripeCheckoutOptions(organizationId?: string) {\n    return runForOrganization(\n      this.runtimeService,\n      loadStripeCheckoutOptions,\n      organizationId,\n    );\n  }\n\n  createStripeCheckout(organizationId?: string) {\n    return runForOrganization(\n      this.runtimeService,\n      createStripeCheckout,\n      organizationId,\n    );\n  }\n\n  createStripeCheckoutSession(returnUrl: string, organizationId?: string) {\n    return runForOrganization(\n      this.runtimeService,\n      (input) => createStripeCheckoutSession({ ...input, returnUrl }),\n      organizationId,\n    );\n  }\n\n  cancelStripeSubscription() {\n    return runForOrganization(this.runtimeService, cancelStripeSubscription);\n  }\n\n  claimNativeSubscription(\n    organizationId: string,\n    store: NativeSubscriptionStore,\n  ) {\n    return runForOrganization(\n      this.runtimeService,\n      (input) => claimNativeOrganizationSubscription({ ...input, store }),\n      organizationId,\n    );\n  }\n\n  checkNativePurchaseEligibility(\n    organizationId: string,\n    store: NativeSubscriptionStore,\n  ) {\n    return runForOrganization(\n      this.runtimeService,\n      (input) => checkNativePurchaseEligibility({ ...input, store }),\n      organizationId,\n    );\n  }\n\n  loadDataUsage() {\n    return this.dataUsageCoordinator.reconcile();\n  }\n\n  loadLocalDataUsage() {\n    return this.dataUsageCoordinator.loadLocal();\n  }\n\n  loadDirectoryAndGroups() {\n    const runtime = this.runtimeService.workflowInput();\n    return runWithSecurityIncidentReporting(\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: runtime.auth.organizationId,\n        objectKind: \"principal\",\n        operation: \"organization.read_model.reconcile\",\n        organizationId: runtime.auth.organizationId,\n      },\n      () => this.readModelCoordinator.reconcile(),\n    );\n  }\n\n  loadDirectoryAndGroupsAfterMutation() {\n    const runtime = this.runtimeService.workflowInput();\n    return runWithSecurityIncidentReporting(\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: runtime.auth.organizationId,\n        objectKind: \"principal\",\n        operation: \"organization.read_model.reconcile_after_mutation\",\n        organizationId: runtime.auth.organizationId,\n      },\n      () => this.readModelCoordinator.reconcileAfterMutation(),\n    );\n  }\n\n  loadLocalDirectoryAndGroups() {\n    return this.readModelCoordinator.loadLocal();\n  }\n\n  loadGroupMembers(groupId: string) {\n    const runtime = this.runtimeService.workflowInput();\n    const organizationId = authenticatedOrganizationId(runtime);\n    if (!organizationId || groupId.length === 0) {\n      return Promise.resolve(null);\n    }\n\n    return runtime.apiClient.listOrganizationGroupMembers(\n      organizationId,\n      groupId,\n    );\n  }\n\n  loadGroupPresentationDetails(groupId: string) {\n    const runtime = this.runtimeService.workflowInput();\n    return runWithSecurityIncidentReporting(\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: groupId,\n        objectKind: \"principal\",\n        operation: \"group.presentation.load\",\n        organizationId: runtime.auth.organizationId,\n      },\n      () =>\n        loadOrganizationGroupPresentationDetails({\n          groupId,\n          readModelCoordinator: this.readModelCoordinator,\n          runtime,\n        }),\n    );\n  }\n\n  loadGrants() {\n    return this.readModelCoordinator.loadLocalGrants();\n  }\n\n  loadGroupContainers(groupId: string) {\n    return this.readModelCoordinator.loadLocalGroupContainers(groupId);\n  }\n\n  listLocalOrganizations() {\n    const runtime = this.runtimeService.workflowInput();\n    if (runtime.infra.dbStatus !== \"ready\") {\n      return Promise.resolve([]);\n    }\n\n    return listLocalOrganizations({ execSql: runtime.infra.execSql });\n  }\n\n  loadPolicyHistory() {\n    const runtime = this.runtimeService.workflowInput();\n    return runWithSecurityIncidentReporting(\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: runtime.auth.organizationId,\n        objectKind: \"principal\",\n        operation: \"organization.policy_history.load\",\n        organizationId: runtime.auth.organizationId,\n      },\n      () => this.readModelCoordinator.loadOrganizationPolicyHistory(),\n    );\n  }\n\n  loadUserDetail(userId: string) {\n    return this.readModelCoordinator.loadLocalUserDetail(userId);\n  }\n\n  updateRosterEntry(userId: string, profileDocumentId: string | null) {\n    const runtime = this.runtimeService.workflowInput();\n    const organizationId = authenticatedOrganizationId(runtime);\n    if (!organizationId || userId.length === 0) {\n      return Promise.resolve(null);\n    }\n\n    return updateOrganizationRosterEntry({\n      apiClient: runtime.apiClient,\n      organizationId,\n      profileDocumentId,\n      userId,\n    });\n  }\n\n  updateProfile(profileDocumentId: string | null) {\n    const runtime = this.runtimeService.workflowInput();\n    const organizationId = authenticatedOrganizationId(runtime);\n    if (!organizationId) {\n      return Promise.resolve(null);\n    }\n\n    return updateOrganizationProfile({\n      apiClient: runtime.apiClient,\n      organizationId,\n      profileDocumentId,\n    });\n  }\n\n  async removeUserFromGroup(input: RemoveOrganizationGroupUserInput) {\n    return removeUserFromOrganizationGroup({\n      ...input,\n      containerContents: this.containerContents,\n      readModelCoordinator: this.readModelCoordinator,\n      ...currentOrganizationMutation(this.runtimeService),\n    });\n  }\n\n  async revokeGrant(grant: OrganizationGrantRef) {\n    return revokeOrganizationGrant({\n      ...grant,\n      containerContents: this.containerContents,\n      readModelCoordinator: this.readModelCoordinator,\n      ...currentOrganizationMutation(this.runtimeService),\n    });\n  }\n\n  startTrial(organizationId?: string) {\n    return runForOrganization(\n      this.runtimeService,\n      startOrganizationTrial,\n      organizationId,\n    );\n  }\n}\n"]}

package/client/organizations/organizationAccessRestoration.js

@@ -0,0 +1,38 @@
+import { sqlDocumentMoveIntentPersistence } from "../../data/persistence/container-contents/documentMoveIntentPersistence.js";
+import { requestDormantMetadataRestorationSweeps } from "../../data/persistence/container-contents/dormantMetadataSweep.js";
+import { hasRecordedTerminalSyncFailures } from "../../data/sqlite/documentPersistence.js";
+import { requestAllDomainSyncLanes, requestDomainSyncLane, } from "../../data/sync/syncCoordinator.js";
+import { CONTAINER_CONTENTS_SYNC_LANE_KEY } from "../../workflows/container-contents/syncLane.js";
+/** Recover parked work before optional presentation hydration can fail. */
+export async function recoverOrganizationAccess(input) {
+    const { active, domainScope, stillCurrent } = input;
+    if (!stillCurrent())
+        return;
+    // The evidence gate: re-arm only when some queued write actually
+    // recorded a terminal failure. A transient denial during bootstrap
+    // (e.g. a read-model 403 before grants propagate) also flips the
+    // denied flag, and re-arming then would race the startup sync passes.
+    // A failed pass (`undefined`) proves nothing about restored access,
+    // so it must not re-arm either.
+    if (((await hasRecordedTerminalSyncFailures(active.runtime.infra.execSql)) ||
+        (await sqlDocumentMoveIntentPersistence.hasDeniedMoveIntents(active.runtime.infra.execSql, { organizationId: active.organizationId }))) &&
+        stillCurrent()) {
+        // Parked permission-denied moves (row 7) only replay once flipped
+        // back to pending; restore them before re-arming the lanes.
+        await sqlDocumentMoveIntentPersistence.resetDeniedMoveIntents(active.runtime.infra.execSql, { organizationId: active.organizationId });
+        if (stillCurrent())
+            requestAllDomainSyncLanes(domainScope);
+    }
+    // Keep dormant cleanup independent from the write-lane evidence gate,
+    // but run it afterward so a SQLite failure cannot suppress the
+    // pre-existing denied-write and move-intent recovery signal.
+    if (stillCurrent()) {
+        const requestedDormantSweepCount = await requestDormantMetadataRestorationSweeps(active.runtime.infra.execSql, {
+            requesterUserId: active.userId,
+        });
+        if (requestedDormantSweepCount > 0 && stillCurrent()) {
+            requestDomainSyncLane(domainScope, CONTAINER_CONTENTS_SYNC_LANE_KEY);
+        }
+    }
+}
+//# sourceMappingURL=organizationAccessRestoration.js.map

package/client/organizations/organizationAccessRestoration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationAccessRestoration.js","sourceRoot":"","sources":["organizationAccessRestoration.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,yEAAyE,CAAC;AAC3H,OAAO,EAAE,uCAAuC,EAAE,MAAM,gEAAgE,CAAC;AACzH,OAAO,EAAE,+BAA+B,EAAE,MAAM,uCAAuC,CAAC;AACxF,OAAO,EACL,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,gCAAgC,EAAE,MAAM,6CAA6C,CAAC;AAG/F,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAI/C;IACC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IACpD,IAAI,CAAC,YAAY,EAAE;QAAE,OAAO;IAC5B,iEAAiE;IACjE,mEAAmE;IACnE,iEAAiE;IACjE,sEAAsE;IACtE,oEAAoE;IACpE,gCAAgC;IAChC,IACE,CAAC,CAAC,MAAM,+BAA+B,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC,MAAM,gCAAgC,CAAC,oBAAoB,CAC1D,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC5B,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAC1C,CAAC,CAAC;QACL,YAAY,EAAE,EACd,CAAC;QACD,kEAAkE;QAClE,4DAA4D;QAC5D,MAAM,gCAAgC,CAAC,sBAAsB,CAC3D,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC5B,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAC1C,CAAC;QACF,IAAI,YAAY,EAAE;YAAE,yBAAyB,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC;IACD,sEAAsE;IACtE,+DAA+D;IAC/D,6DAA6D;IAC7D,IAAI,YAAY,EAAE,EAAE,CAAC;QACnB,MAAM,0BAA0B,GAC9B,MAAM,uCAAuC,CAC3C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAC5B;YACE,eAAe,EAAE,MAAM,CAAC,MAAM;SAC/B,CACF,CAAC;QACJ,IAAI,0BAA0B,GAAG,CAAC,IAAI,YAAY,EAAE,EAAE,CAAC;YACrD,qBAAqB,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import type { DomainScope } from \"../../data/domainScope\";\nimport { sqlDocumentMoveIntentPersistence } from \"../../data/persistence/container-contents/documentMoveIntentPersistence\";\nimport { requestDormantMetadataRestorationSweeps } from \"../../data/persistence/container-contents/dormantMetadataSweep\";\nimport { hasRecordedTerminalSyncFailures } from \"../../data/sqlite/documentPersistence\";\nimport {\n  requestAllDomainSyncLanes,\n  requestDomainSyncLane,\n} from \"../../data/sync/syncCoordinator\";\nimport { CONTAINER_CONTENTS_SYNC_LANE_KEY } from \"../../workflows/container-contents/syncLane\";\nimport type { ActiveOrganizationDataRuntime } from \"./organizationWorkflowRuntime\";\n\n/** Recover parked work before optional presentation hydration can fail. */\nexport async function recoverOrganizationAccess(input: {\n  readonly active: ActiveOrganizationDataRuntime;\n  readonly domainScope: DomainScope;\n  readonly stillCurrent: () => boolean;\n}): Promise<void> {\n  const { active, domainScope, stillCurrent } = input;\n  if (!stillCurrent()) return;\n  // The evidence gate: re-arm only when some queued write actually\n  // recorded a terminal failure. A transient denial during bootstrap\n  // (e.g. a read-model 403 before grants propagate) also flips the\n  // denied flag, and re-arming then would race the startup sync passes.\n  // A failed pass (`undefined`) proves nothing about restored access,\n  // so it must not re-arm either.\n  if (\n    ((await hasRecordedTerminalSyncFailures(active.runtime.infra.execSql)) ||\n      (await sqlDocumentMoveIntentPersistence.hasDeniedMoveIntents(\n        active.runtime.infra.execSql,\n        { organizationId: active.organizationId },\n      ))) &&\n    stillCurrent()\n  ) {\n    // Parked permission-denied moves (row 7) only replay once flipped\n    // back to pending; restore them before re-arming the lanes.\n    await sqlDocumentMoveIntentPersistence.resetDeniedMoveIntents(\n      active.runtime.infra.execSql,\n      { organizationId: active.organizationId },\n    );\n    if (stillCurrent()) requestAllDomainSyncLanes(domainScope);\n  }\n  // Keep dormant cleanup independent from the write-lane evidence gate,\n  // but run it afterward so a SQLite failure cannot suppress the\n  // pre-existing denied-write and move-intent recovery signal.\n  if (stillCurrent()) {\n    const requestedDormantSweepCount =\n      await requestDormantMetadataRestorationSweeps(\n        active.runtime.infra.execSql,\n        {\n          requesterUserId: active.userId,\n        },\n      );\n    if (requestedDormantSweepCount > 0 && stillCurrent()) {\n      requestDomainSyncLane(domainScope, CONTAINER_CONTENTS_SYNC_LANE_KEY);\n    }\n  }\n}\n"]}

package/client/organizations/organizationDataUsage.d.ts

@@ -0,0 +1,8 @@
+import { type OrganizationDataUsage } from "../../workflows/organizations/index.js";
+import type { InternalRuntime } from "../workflowRuntime.js";
+export interface OrganizationDataUsageCoordinator {
+    loadLocal(organizationId?: string | undefined): Promise<OrganizationDataUsage | null>;
+    /** Undefined means no authoritative result was available for this runtime. */
+    reconcile(organizationId?: string | undefined): Promise<OrganizationDataUsage | null | undefined>;
+}
+export declare function createOrganizationDataUsageCoordinator(runtimeService: InternalRuntime): OrganizationDataUsageCoordinator;

package/client/organizations/organizationDataUsage.js

@@ -0,0 +1,75 @@
+import { loadLocalOrganizationDataUsage, reconcileOrganizationDataUsage, } from "../../workflows/organizations/index.js";
+import { organizationAccessScopeKey } from "../../workflows/organizations/organizationPresentationAccessState.js";
+import { activeOrganizationDataRuntime, } from "./organizationWorkflowRuntime.js";
+const coordinatorsByRuntime = new WeakMap();
+class OrganizationDataUsageCoordinatorImpl {
+    runtimeService;
+    reconciliationsByScope = new WeakMap();
+    constructor(runtimeService) {
+        this.runtimeService = runtimeService;
+    }
+    reconciliationMap(active) {
+        const scope = active.runtime.state.domainScope;
+        let byKey = this.reconciliationsByScope.get(scope);
+        if (!byKey) {
+            byKey = new Map();
+            this.reconciliationsByScope.set(scope, byKey);
+        }
+        return byKey;
+    }
+    async loadLocal(organizationId) {
+        const active = activeOrganizationDataRuntime(this.runtimeService, organizationId);
+        if (!active) {
+            return null;
+        }
+        try {
+            return await loadLocalOrganizationDataUsage({
+                execSql: active.runtime.infra.execSql,
+                organizationId: active.organizationId,
+                requesterUserId: active.userId,
+            });
+        }
+        catch (error) {
+            active.runtime.util.logError("Failed to load local organization data usage", error);
+            return null;
+        }
+    }
+    reconcile(organizationId) {
+        const active = activeOrganizationDataRuntime(this.runtimeService, organizationId);
+        if (!active) {
+            return Promise.resolve(undefined);
+        }
+        if (!active.runtime.state.online) {
+            return this.loadLocal(active.organizationId).then((local) => local ?? undefined);
+        }
+        const byKey = this.reconciliationMap(active);
+        const key = organizationAccessScopeKey(active.organizationId, active.userId);
+        const existing = byKey.get(key);
+        if (existing) {
+            return existing;
+        }
+        const reconciliation = reconcileOrganizationDataUsage({
+            apiClient: active.runtime.apiClient,
+            execSql: active.runtime.infra.execSql,
+            logError: active.runtime.util.logError,
+            organizationId: active.organizationId,
+            requesterUserId: active.userId,
+        }).finally(() => {
+            if (byKey.get(key) === reconciliation) {
+                byKey.delete(key);
+            }
+        });
+        byKey.set(key, reconciliation);
+        return reconciliation;
+    }
+}
+export function createOrganizationDataUsageCoordinator(runtimeService) {
+    const existing = coordinatorsByRuntime.get(runtimeService);
+    if (existing) {
+        return existing;
+    }
+    const coordinator = new OrganizationDataUsageCoordinatorImpl(runtimeService);
+    coordinatorsByRuntime.set(runtimeService, coordinator);
+    return coordinator;
+}
+//# sourceMappingURL=organizationDataUsage.js.map

package/client/organizations/organizationDataUsage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationDataUsage.js","sourceRoot":"","sources":["organizationDataUsage.ts"],"names":[],"mappings":"AACA,OAAO,EACL,8BAA8B,EAE9B,8BAA8B,GAC/B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,mEAAmE,CAAC;AAE/G,OAAO,EAEL,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AAEvC,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAGtC,CAAC;AAYJ,MAAM,oCAAoC;IAQX;IALZ,sBAAsB,GAAG,IAAI,OAAO,EAGlD,CAAC;IAEJ,YAA6B,cAA+B;QAA/B,mBAAc,GAAd,cAAc,CAAiB;IAAG,CAAC;IAExD,iBAAiB,CAAC,MAAqC;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAC/C,IAAI,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,cAAuB;QACrC,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,8BAA8B,CAAC;gBAC1C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;gBACrC,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,eAAe,EAAE,MAAM,CAAC,MAAM;aAC/B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAC1B,8CAA8C,EAC9C,KAAK,CACN,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,CAAC,cAAuB;QAC/B,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,SAAS,CAC9B,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,0BAA0B,CACpC,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,MAAM,CACd,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,cAAc,GAAG,8BAA8B,CAAC;YACpD,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YACnC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ;YACtC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,eAAe,EAAE,MAAM,CAAC,MAAM;SAC/B,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACd,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,cAAc,EAAE,CAAC;gBACtC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC/B,OAAO,cAAc,CAAC;IACxB,CAAC;CACF;AAED,MAAM,UAAU,sCAAsC,CACpD,cAA+B;IAE/B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,oCAAoC,CAAC,cAAc,CAAC,CAAC;IAC7E,qBAAqB,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACvD,OAAO,WAAW,CAAC;AACrB,CAAC","sourcesContent":["import type { DomainScope } from \"../../data/domainScope\";\nimport {\n  loadLocalOrganizationDataUsage,\n  type OrganizationDataUsage,\n  reconcileOrganizationDataUsage,\n} from \"../../workflows/organizations\";\nimport { organizationAccessScopeKey } from \"../../workflows/organizations/organizationPresentationAccessState\";\nimport type { InternalRuntime } from \"../workflowRuntime\";\nimport {\n  type ActiveOrganizationDataRuntime,\n  activeOrganizationDataRuntime,\n} from \"./organizationWorkflowRuntime\";\n\nconst coordinatorsByRuntime = new WeakMap<\n  InternalRuntime,\n  OrganizationDataUsageCoordinator\n>();\n\nexport interface OrganizationDataUsageCoordinator {\n  loadLocal(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationDataUsage | null>;\n  /** Undefined means no authoritative result was available for this runtime. */\n  reconcile(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationDataUsage | null | undefined>;\n}\n\nclass OrganizationDataUsageCoordinatorImpl\n  implements OrganizationDataUsageCoordinator\n{\n  private readonly reconciliationsByScope = new WeakMap<\n    DomainScope,\n    Map<string, Promise<OrganizationDataUsage | null | undefined>>\n  >();\n\n  constructor(private readonly runtimeService: InternalRuntime) {}\n\n  private reconciliationMap(active: ActiveOrganizationDataRuntime) {\n    const scope = active.runtime.state.domainScope;\n    let byKey = this.reconciliationsByScope.get(scope);\n    if (!byKey) {\n      byKey = new Map();\n      this.reconciliationsByScope.set(scope, byKey);\n    }\n    return byKey;\n  }\n\n  async loadLocal(organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active) {\n      return null;\n    }\n\n    try {\n      return await loadLocalOrganizationDataUsage({\n        execSql: active.runtime.infra.execSql,\n        organizationId: active.organizationId,\n        requesterUserId: active.userId,\n      });\n    } catch (error) {\n      active.runtime.util.logError(\n        \"Failed to load local organization data usage\",\n        error,\n      );\n      return null;\n    }\n  }\n\n  reconcile(organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active) {\n      return Promise.resolve(undefined);\n    }\n    if (!active.runtime.state.online) {\n      return this.loadLocal(active.organizationId).then(\n        (local) => local ?? undefined,\n      );\n    }\n\n    const byKey = this.reconciliationMap(active);\n    const key = organizationAccessScopeKey(\n      active.organizationId,\n      active.userId,\n    );\n    const existing = byKey.get(key);\n    if (existing) {\n      return existing;\n    }\n\n    const reconciliation = reconcileOrganizationDataUsage({\n      apiClient: active.runtime.apiClient,\n      execSql: active.runtime.infra.execSql,\n      logError: active.runtime.util.logError,\n      organizationId: active.organizationId,\n      requesterUserId: active.userId,\n    }).finally(() => {\n      if (byKey.get(key) === reconciliation) {\n        byKey.delete(key);\n      }\n    });\n    byKey.set(key, reconciliation);\n    return reconciliation;\n  }\n}\n\nexport function createOrganizationDataUsageCoordinator(\n  runtimeService: InternalRuntime,\n): OrganizationDataUsageCoordinator {\n  const existing = coordinatorsByRuntime.get(runtimeService);\n  if (existing) {\n    return existing;\n  }\n\n  const coordinator = new OrganizationDataUsageCoordinatorImpl(runtimeService);\n  coordinatorsByRuntime.set(runtimeService, coordinator);\n  return coordinator;\n}\n"]}

package/client/organizations/organizationGroupNameHydration.js

@@ -0,0 +1,28 @@
+import { loadLocalOrganizationPolicyReference } from "../../workflows/organizations/index.js";
+import { createRuntimeGroupMetadataAccess } from "../../workflows/organizations/groupMetadataRuntime.js";
+import { hydrateOrganizationGroupNames } from "../../workflows/organizations/organizationGroupNames.js";
+import { isOrganizationDataRuntimeCurrent, } from "./organizationWorkflowRuntime.js";
+export async function hydrateOrganizationGroupNamesForRuntime(runtimeService, active, domainScope, directoryAndGroups) {
+    if (directoryAndGroups && active.runtime.crypto.encapsulationKeyPair) {
+        const stillCurrent = () => isOrganizationDataRuntimeCurrent(runtimeService, active, domainScope);
+        return hydrateOrganizationGroupNames({
+            apiClient: active.runtime.apiClient,
+            directory: directoryAndGroups,
+            execSql: active.runtime.infra.execSql,
+            organizationId: active.organizationId,
+            organizationPolicyReference: await loadLocalOrganizationPolicyReference({
+                currentUserId: active.userId,
+                execSql: active.runtime.infra.execSql,
+                organizationId: active.organizationId,
+                principalId: active.organizationId,
+                principalType: "organization",
+            }),
+            reportSecurityIncident: active.runtime.util.reportSecurityIncident,
+            readEncryptedName: createRuntimeGroupMetadataAccess(active.runtime, active.organizationId, stillCurrent).readName,
+            resolveTrustedUserIdentity: active.runtime.resolveTrustedUserIdentity,
+            stillCurrent,
+        });
+    }
+    return directoryAndGroups;
+}
+//# sourceMappingURL=organizationGroupNameHydration.js.map

package/client/organizations/organizationGroupNameHydration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationGroupNameHydration.js","sourceRoot":"","sources":["organizationGroupNameHydration.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,EAAE,gCAAgC,EAAE,MAAM,oDAAoD,CAAC;AACtG,OAAO,EAAE,6BAA6B,EAAE,MAAM,sDAAsD,CAAC;AAGrG,OAAO,EAEL,gCAAgC,GACjC,MAAM,+BAA+B,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,cAA+B,EAC/B,MAAqC,EACrC,WAAwB,EACxB,kBAAqE;IAErE,IAAI,kBAAkB,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACrE,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,gCAAgC,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QACxE,OAAO,6BAA6B,CAAC;YACnC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YACnC,SAAS,EAAE,kBAAkB;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;gBACtE,aAAa,EAAE,MAAM,CAAC,MAAM;gBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;gBACrC,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,WAAW,EAAE,MAAM,CAAC,cAAc;gBAClC,aAAa,EAAE,cAAc;aAC9B,CAAC;YACF,sBAAsB,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB;YAClE,iBAAiB,EAAE,gCAAgC,CACjD,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,cAAc,EACrB,YAAY,CACb,CAAC,QAAQ;YACV,0BAA0B,EAAE,MAAM,CAAC,OAAO,CAAC,0BAA0B;YACrE,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC","sourcesContent":["import type { DomainScope } from \"../../data/domainScope\";\nimport { loadLocalOrganizationPolicyReference } from \"../../workflows/organizations\";\nimport { createRuntimeGroupMetadataAccess } from \"../../workflows/organizations/groupMetadataRuntime\";\nimport { hydrateOrganizationGroupNames } from \"../../workflows/organizations/organizationGroupNames\";\nimport type { OrganizationDirectoryAndGroups } from \"../../workflows/organizations/readModel\";\nimport type { InternalRuntime } from \"../workflowRuntime\";\nimport {\n  type ActiveOrganizationDataRuntime,\n  isOrganizationDataRuntimeCurrent,\n} from \"./organizationWorkflowRuntime\";\n\nexport async function hydrateOrganizationGroupNamesForRuntime(\n  runtimeService: InternalRuntime,\n  active: ActiveOrganizationDataRuntime,\n  domainScope: DomainScope,\n  directoryAndGroups: OrganizationDirectoryAndGroups | null | undefined,\n) {\n  if (directoryAndGroups && active.runtime.crypto.encapsulationKeyPair) {\n    const stillCurrent = () =>\n      isOrganizationDataRuntimeCurrent(runtimeService, active, domainScope);\n    return hydrateOrganizationGroupNames({\n      apiClient: active.runtime.apiClient,\n      directory: directoryAndGroups,\n      execSql: active.runtime.infra.execSql,\n      organizationId: active.organizationId,\n      organizationPolicyReference: await loadLocalOrganizationPolicyReference({\n        currentUserId: active.userId,\n        execSql: active.runtime.infra.execSql,\n        organizationId: active.organizationId,\n        principalId: active.organizationId,\n        principalType: \"organization\",\n      }),\n      reportSecurityIncident: active.runtime.util.reportSecurityIncident,\n      readEncryptedName: createRuntimeGroupMetadataAccess(\n        active.runtime,\n        active.organizationId,\n        stillCurrent,\n      ).readName,\n      resolveTrustedUserIdentity: active.runtime.resolveTrustedUserIdentity,\n      stillCurrent,\n    });\n  }\n  return directoryAndGroups;\n}\n"]}

package/client/organizations/organizationGroupPresentation.d.ts

@@ -0,0 +1,21 @@
+import type { InternalWorkflowRuntimeInput } from "../workflowRuntime.js";
+import type { OrganizationReadModelCoordinator } from "./organizationReadModels.js";
+export declare function loadOrganizationGroupPresentationDetails(input: {
+    readonly groupId: string;
+    readonly readModelCoordinator: OrganizationReadModelCoordinator;
+    readonly runtime: InternalWorkflowRuntimeInput;
+}): Promise<{
+    members: {
+        groupId: string;
+        members: {
+            encapsulationKeyFingerprint: string | null;
+            encapsulationPublicKey: string | null;
+            role: "member" | "admin";
+            signingKeyFingerprint: string | null;
+            signingPublicKey: string | null;
+            userId: string;
+        }[];
+        organizationId: string;
+    } | null;
+    policyHistory: import("./index.js").OrganizationGroupPolicyHistory | null;
+}>;

package/client/organizations/organizationGroupPresentation.js

@@ -0,0 +1,17 @@
+export async function loadOrganizationGroupPresentationDetails(input) {
+    const organizationId = input.runtime.auth.organizationId;
+    if (!input.runtime.auth.isAuthenticated ||
+        !organizationId ||
+        input.groupId.length === 0) {
+        return {
+            members: null,
+            policyHistory: null,
+        };
+    }
+    const [members, policyHistory] = await Promise.all([
+        input.readModelCoordinator.loadLocalGroupMembers(input.groupId, organizationId),
+        input.readModelCoordinator.loadGroupPolicyHistory(input.groupId, organizationId),
+    ]);
+    return { members, policyHistory };
+}
+//# sourceMappingURL=organizationGroupPresentation.js.map

package/client/organizations/organizationGroupPresentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationGroupPresentation.js","sourceRoot":"","sources":["organizationGroupPresentation.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAAC,KAI9D;IACC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;IACzD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe;QACnC,CAAC,cAAc;QACf,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAC1B,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,IAAI;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,KAAK,CAAC,oBAAoB,CAAC,qBAAqB,CAC9C,KAAK,CAAC,OAAO,EACb,cAAc,CACf;QACD,KAAK,CAAC,oBAAoB,CAAC,sBAAsB,CAC/C,KAAK,CAAC,OAAO,EACb,cAAc,CACf;KACF,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AACpC,CAAC","sourcesContent":["import type { InternalWorkflowRuntimeInput } from \"../workflowRuntime\";\nimport type { OrganizationReadModelCoordinator } from \"./organizationReadModels\";\n\nexport async function loadOrganizationGroupPresentationDetails(input: {\n  readonly groupId: string;\n  readonly readModelCoordinator: OrganizationReadModelCoordinator;\n  readonly runtime: InternalWorkflowRuntimeInput;\n}) {\n  const organizationId = input.runtime.auth.organizationId;\n  if (\n    !input.runtime.auth.isAuthenticated ||\n    !organizationId ||\n    input.groupId.length === 0\n  ) {\n    return {\n      members: null,\n      policyHistory: null,\n    };\n  }\n\n  const [members, policyHistory] = await Promise.all([\n    input.readModelCoordinator.loadLocalGroupMembers(\n      input.groupId,\n      organizationId,\n    ),\n    input.readModelCoordinator.loadGroupPolicyHistory(\n      input.groupId,\n      organizationId,\n    ),\n  ]);\n  return { members, policyHistory };\n}\n"]}

package/client/organizations/organizationMetadataProfileSync.js

@@ -0,0 +1,38 @@
+import { errorMessage } from "../../data/errorMessage.js";
+import { getOrganizationProfileDocumentLocalId } from "../../workflows/organizations/organizationProfile.js";
+import { deriveOrganizationMetadataContainerSystemSlot } from "../../workflows/organizations/rosterProfileContainer.js";
+/**
+ * Push the locally-authored organization profile after Members changes. Key
+ * rematerialization is already part of the policy transaction; this is only an
+ * idempotent content sync and never creates or changes a grant.
+ */
+export async function syncOrganizationMetadataProfile(input) {
+    try {
+        const systemSlot = await deriveOrganizationMetadataContainerSystemSlot({
+            organizationId: input.organizationId,
+        });
+        const tree = input.containerContents.openTree();
+        const findNode = () => tree
+            .getSnapshot()
+            .nodes.find((candidate) => candidate.systemSlot === systemSlot);
+        let node = findNode();
+        if (!node) {
+            await tree.refresh();
+            node = findNode();
+        }
+        if (!node) {
+            input.log(`Organizations: org metadata container not reachable for org ${input.organizationId}; skipped profile sync`);
+            return;
+        }
+        input.containerContents.pullDocumentContent({
+            containerId: node.id,
+            localId: getOrganizationProfileDocumentLocalId({
+                organizationId: input.organizationId,
+            }),
+        });
+    }
+    catch (error) {
+        input.log(`Organizations: best-effort org metadata profile sync failed for org ${input.organizationId}: ${errorMessage(error)}`);
+    }
+}
+//# sourceMappingURL=organizationMetadataProfileSync.js.map

package/client/organizations/organizationMetadataProfileSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationMetadataProfileSync.js","sourceRoot":"","sources":["organizationMetadataProfileSync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,qCAAqC,EAAE,MAAM,mDAAmD,CAAC;AAC1G,OAAO,EAAE,6CAA6C,EAAE,MAAM,sDAAsD,CAAC;AAGrH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAIrD;IACC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,6CAA6C,CAAC;YACrE,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,GAAG,EAAE,CACpB,IAAI;aACD,WAAW,EAAE;aACb,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;QACpE,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,GAAG,QAAQ,EAAE,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,GAAG,CACP,+DAA+D,KAAK,CAAC,cAAc,wBAAwB,CAC5G,CAAC;YACF,OAAO;QACT,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,mBAAmB,CAAC;YAC1C,WAAW,EAAE,IAAI,CAAC,EAAE;YACpB,OAAO,EAAE,qCAAqC,CAAC;gBAC7C,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,GAAG,CACP,uEAAuE,KAAK,CAAC,cAAc,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE,CACtH,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { errorMessage } from \"../../data/errorMessage\";\nimport { getOrganizationProfileDocumentLocalId } from \"../../workflows/organizations/organizationProfile\";\nimport { deriveOrganizationMetadataContainerSystemSlot } from \"../../workflows/organizations/rosterProfileContainer\";\nimport type { ContainerContents } from \"../containerContents\";\n\n/**\n * Push the locally-authored organization profile after Members changes. Key\n * rematerialization is already part of the policy transaction; this is only an\n * idempotent content sync and never creates or changes a grant.\n */\nexport async function syncOrganizationMetadataProfile(input: {\n  readonly containerContents: ContainerContents;\n  readonly log: (message: string) => void;\n  readonly organizationId: string;\n}): Promise<void> {\n  try {\n    const systemSlot = await deriveOrganizationMetadataContainerSystemSlot({\n      organizationId: input.organizationId,\n    });\n    const tree = input.containerContents.openTree();\n    const findNode = () =>\n      tree\n        .getSnapshot()\n        .nodes.find((candidate) => candidate.systemSlot === systemSlot);\n    let node = findNode();\n    if (!node) {\n      await tree.refresh();\n      node = findNode();\n    }\n    if (!node) {\n      input.log(\n        `Organizations: org metadata container not reachable for org ${input.organizationId}; skipped profile sync`,\n      );\n      return;\n    }\n\n    input.containerContents.pullDocumentContent({\n      containerId: node.id,\n      localId: getOrganizationProfileDocumentLocalId({\n        organizationId: input.organizationId,\n      }),\n    });\n  } catch (error) {\n    input.log(\n      `Organizations: best-effort org metadata profile sync failed for org ${input.organizationId}: ${errorMessage(error)}`,\n    );\n  }\n}\n"]}

package/client/organizations/organizationReadModels.d.ts

@@ -0,0 +1,22 @@
+import { type OrganizationContainerGrants, type OrganizationDirectoryAndGroups, type OrganizationGroupContainers, type OrganizationGroupMembers, type OrganizationGroupPolicyHistory, type OrganizationPolicyHistory, type OrganizationUserDetail } from "../../workflows/organizations/index.js";
+import type { InternalRuntime } from "../workflowRuntime.js";
+export interface OrganizationReadModelCoordinator {
+    loadLocal(organizationId?: string | undefined): Promise<OrganizationDirectoryAndGroups | null>;
+    loadLocalGroupMembers(groupId: string, organizationId?: string | undefined): Promise<OrganizationGroupMembers | null>;
+    loadGroupPolicyHistory(groupId: string, organizationId?: string | undefined): Promise<OrganizationGroupPolicyHistory | null>;
+    loadOrganizationPolicyHistory(organizationId?: string | undefined): Promise<OrganizationPolicyHistory | null>;
+    loadLocalGrants(organizationId?: string | undefined): Promise<OrganizationContainerGrants | null>;
+    loadLocalGroupContainers(groupId: string, organizationId?: string | undefined): Promise<OrganizationGroupContainers | null>;
+    loadLocalUserDetail(userId: string, organizationId?: string | undefined): Promise<OrganizationUserDetail | null>;
+    /**
+     * Resolves `undefined` when the runtime declines without I/O (offline,
+     * database not ready, organization mismatch) or when the feed failed with
+     * no locally retained projection — passes that must not count as caught
+     * up; `null` when the reconcile completed but produced nothing presentable
+     * — including an authoritative denial that purged the projection, which
+     * consumers must repaint.
+     */
+    reconcile(organizationId?: string | undefined): Promise<OrganizationDirectoryAndGroups | null | undefined>;
+    reconcileAfterMutation(organizationId?: string | undefined): Promise<OrganizationDirectoryAndGroups | null | undefined>;
+}
+export declare function createOrganizationReadModelCoordinator(runtimeService: InternalRuntime): OrganizationReadModelCoordinator;