@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/internal/validators/response/organizationReadModel.js

@@ -0,0 +1,159 @@
+import { z } from "zod";
+import { registerJsonSchemaRuntimeRefinements, registerJsonSchemaView, } from "../jsonSchema.js";
+import { organizationReadModelResponseRuntimeRefinements } from "../organizationReadModelRefinements.js";
+import { arraySchema } from "../schema.js";
+import { OrganizationContainerGrantResponseShape, OrganizationDirectoryCurrentUserResponseShape, OrganizationDirectoryUserResponseShape, OrganizationGroupCurrentStateResponseShape, OrganizationGroupMemberResponseShape, OrganizationGroupSummaryResponseShape, } from "./organization.js";
+const OrganizationReadModelDirectoryUserResponseSchema = z.strictObject(OrganizationDirectoryUserResponseShape);
+const OrganizationReadModelDirectoryResponseSchema = z.strictObject({
+    organizationId: z.string(),
+    profileDocumentId: z.string().nullable(),
+    users: arraySchema(OrganizationReadModelDirectoryUserResponseSchema),
+});
+const OrganizationReadModelGrantResponseSchema = z.strictObject(OrganizationContainerGrantResponseShape);
+const OrganizationReadModelGrantsResponseSchema = z.strictObject({
+    grants: arraySchema(OrganizationReadModelGrantResponseSchema),
+    organizationId: z.string(),
+});
+const OrganizationReadModelGroupMemberResponseSchema = z.strictObject(OrganizationGroupMemberResponseShape);
+const OrganizationReadModelGroupMembershipResponseSchema = z.strictObject({
+    groupId: z.string(),
+    members: arraySchema(OrganizationReadModelGroupMemberResponseSchema),
+    stateHash: z.string().min(1),
+});
+const OrganizationReadModelGroupMembershipsResponseSchema = z.strictObject({
+    deletedGroupIds: arraySchema(z.string().min(1)),
+    groups: arraySchema(OrganizationReadModelGroupMembershipResponseSchema),
+    organizationId: z.string(),
+});
+const OrganizationReadModelGroupCurrentStateResponseSchema = z.strictObject(OrganizationGroupCurrentStateResponseShape);
+const OrganizationReadModelGroupSummaryResponseSchema = z.strictObject({
+    ...OrganizationGroupSummaryResponseShape,
+    currentState: OrganizationReadModelGroupCurrentStateResponseSchema.nullable(),
+});
+const OrganizationReadModelGroupsResponseSchema = z.strictObject({
+    groups: arraySchema(OrganizationReadModelGroupSummaryResponseSchema),
+    memberGroupId: z.string(),
+    organizationId: z.string(),
+});
+const OrganizationReadModelOrganizationPolicyResponseSchema = z.strictObject({
+    currentState: z.strictObject({
+        ...OrganizationGroupCurrentStateResponseShape,
+        stateHash: z.string().min(1),
+    }),
+    organizationId: z.string(),
+});
+const OrganizationReadModelCurrentUserResponseSchema = z.strictObject(OrganizationDirectoryCurrentUserResponseShape);
+const OrganizationReadModelResponseBaseShape = {
+    currentUser: OrganizationReadModelCurrentUserResponseSchema,
+    hasMore: z.boolean(),
+    nextCursor: z.string().min(1),
+    organizationId: z.string(),
+    version: z.literal(6),
+};
+const OrganizationReadModelSnapshotResponseSchema = z.strictObject({
+    ...OrganizationReadModelResponseBaseShape,
+    hasMore: z.literal(false),
+    lanes: z.strictObject({
+        directory: OrganizationReadModelDirectoryResponseSchema,
+        grants: OrganizationReadModelGrantsResponseSchema,
+        groupMemberships: OrganizationReadModelGroupMembershipsResponseSchema,
+        groups: OrganizationReadModelGroupsResponseSchema,
+        organizationPolicy: OrganizationReadModelOrganizationPolicyResponseSchema,
+    }),
+    mode: z.literal("snapshot"),
+});
+const OrganizationReadModelDeltaResponseSchema = z.strictObject({
+    ...OrganizationReadModelResponseBaseShape,
+    lanes: z.strictObject({
+        directory: OrganizationReadModelDirectoryResponseSchema.optional(),
+        grants: OrganizationReadModelGrantsResponseSchema.optional(),
+        groupMemberships: OrganizationReadModelGroupMembershipsResponseSchema.optional(),
+        groups: OrganizationReadModelGroupsResponseSchema.optional(),
+        organizationPolicy: OrganizationReadModelOrganizationPolicyResponseSchema.optional(),
+    }),
+    mode: z.literal("delta"),
+});
+const OrganizationReadModelResponseSchemaView = z.discriminatedUnion("mode", [
+    OrganizationReadModelDeltaResponseSchema,
+    OrganizationReadModelSnapshotResponseSchema,
+]);
+function hasValidGrantSubjectFields(grant) {
+    if (grant.subjectType === "user") {
+        return grant.userId === grant.subjectId && grant.groupId === null;
+    }
+    if (grant.subjectType === "group") {
+        return (grant.userId === null &&
+            grant.signingKeyFingerprint === null &&
+            grant.groupId === grant.subjectId);
+    }
+    return false;
+}
+function hasValidGrants(grants) {
+    const keys = new Set();
+    return grants.every((grant) => {
+        const key = `${grant.subjectType}:${grant.subjectId}:${grant.containerId}`;
+        if (!hasValidGrantSubjectFields(grant) || keys.has(key)) {
+            return false;
+        }
+        keys.add(key);
+        return true;
+    });
+}
+function hasValidGroupMemberships(lane) {
+    const groupIds = new Set();
+    const validGroups = lane.groups.every((group) => {
+        if (groupIds.has(group.groupId)) {
+            return false;
+        }
+        groupIds.add(group.groupId);
+        const memberIds = new Set();
+        return group.members.every((member) => {
+            if (memberIds.has(member.userId)) {
+                return false;
+            }
+            memberIds.add(member.userId);
+            return true;
+        });
+    });
+    if (!validGroups) {
+        return false;
+    }
+    const deletedGroupIds = new Set();
+    return lane.deletedGroupIds.every((groupId) => {
+        if (groupIds.has(groupId) || deletedGroupIds.has(groupId)) {
+            return false;
+        }
+        deletedGroupIds.add(groupId);
+        return true;
+    });
+}
+function laneOrganizationsMatch(value) {
+    const { lanes, organizationId } = value;
+    return ((lanes.directory === undefined ||
+        lanes.directory.organizationId === organizationId) &&
+        (lanes.grants === undefined ||
+            lanes.grants.organizationId === organizationId) &&
+        (lanes.groupMemberships === undefined ||
+            lanes.groupMemberships.organizationId === organizationId) &&
+        (lanes.groups === undefined ||
+            (lanes.groups.organizationId === organizationId &&
+                lanes.groups.groups.every((group) => group.organizationId === organizationId))) &&
+        (lanes.organizationPolicy === undefined ||
+            lanes.organizationPolicy.organizationId === organizationId));
+}
+function hasValidReadModelSemantics(value) {
+    if (!laneOrganizationsMatch(value) ||
+        (value.lanes.grants !== undefined &&
+            !hasValidGrants(value.lanes.grants.grants)) ||
+        (value.lanes.groupMemberships !== undefined &&
+            !hasValidGroupMemberships(value.lanes.groupMemberships))) {
+        return false;
+    }
+    return (value.mode === "delta" ||
+        value.lanes.groupMemberships.deletedGroupIds.length === 0);
+}
+export const OrganizationReadModelResponseSchema = registerJsonSchemaRuntimeRefinements(registerJsonSchemaView(OrganizationReadModelResponseSchemaView.refine(hasValidReadModelSemantics), OrganizationReadModelResponseSchemaView), organizationReadModelResponseRuntimeRefinements);
+export function isOrganizationReadModelResponse(value) {
+    return OrganizationReadModelResponseSchema.safeParse(value).success;
+}
+//# sourceMappingURL=organizationReadModel.js.map

package/internal/validators/response/organizationReadModel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationReadModel.js","sourceRoot":"","sources":["organizationReadModel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oCAAoC,EACpC,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,+CAA+C,EAAE,MAAM,qCAAqC,CAAC;AACtG,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EACL,uCAAuC,EACvC,6CAA6C,EAC7C,sCAAsC,EACtC,0CAA0C,EAC1C,oCAAoC,EACpC,qCAAqC,GACtC,MAAM,gBAAgB,CAAC;AAExB,MAAM,gDAAgD,GAAG,CAAC,CAAC,YAAY,CACrE,sCAAsC,CACvC,CAAC;AAEF,MAAM,4CAA4C,GAAG,CAAC,CAAC,YAAY,CAAC;IAClE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,WAAW,CAAC,gDAAgD,CAAC;CACrE,CAAC,CAAC;AAMH,MAAM,wCAAwC,GAAG,CAAC,CAAC,YAAY,CAC7D,uCAAuC,CACxC,CAAC;AAEF,MAAM,yCAAyC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/D,MAAM,EAAE,WAAW,CAAC,wCAAwC,CAAC;IAC7D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;CAC3B,CAAC,CAAC;AAMH,MAAM,8CAA8C,GAAG,CAAC,CAAC,YAAY,CACnE,oCAAoC,CACrC,CAAC;AAEF,MAAM,kDAAkD,GAAG,CAAC,CAAC,YAAY,CAAC;IACxE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,WAAW,CAAC,8CAA8C,CAAC;IACpE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAMH,MAAM,mDAAmD,GAAG,CAAC,CAAC,YAAY,CAAC;IACzE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/C,MAAM,EAAE,WAAW,CAAC,kDAAkD,CAAC;IACvE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;CAC3B,CAAC,CAAC;AAMH,MAAM,oDAAoD,GAAG,CAAC,CAAC,YAAY,CACzE,0CAA0C,CAC3C,CAAC;AAEF,MAAM,+CAA+C,GAAG,CAAC,CAAC,YAAY,CAAC;IACrE,GAAG,qCAAqC;IACxC,YAAY,EAAE,oDAAoD,CAAC,QAAQ,EAAE;CAC9E,CAAC,CAAC;AAEH,MAAM,yCAAyC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/D,MAAM,EAAE,WAAW,CAAC,+CAA+C,CAAC;IACpE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;CAC3B,CAAC,CAAC;AAEH,MAAM,qDAAqD,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3E,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC;QAC3B,GAAG,0CAA0C;QAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC7B,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;CAC3B,CAAC,CAAC;AAMH,MAAM,8CAA8C,GAAG,CAAC,CAAC,YAAY,CACnE,6CAA6C,CAC9C,CAAC;AAEF,MAAM,sCAAsC,GAAG;IAC7C,WAAW,EAAE,8CAA8C;IAC3D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CACtB,CAAC;AAEF,MAAM,2CAA2C,GAAG,CAAC,CAAC,YAAY,CAAC;IACjE,GAAG,sCAAsC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC;QACpB,SAAS,EAAE,4CAA4C;QACvD,MAAM,EAAE,yCAAyC;QACjD,gBAAgB,EAAE,mDAAmD;QACrE,MAAM,EAAE,yCAAyC;QACjD,kBAAkB,EAAE,qDAAqD;KAC1E,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;CAC5B,CAAC,CAAC;AAMH,MAAM,wCAAwC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9D,GAAG,sCAAsC;IACzC,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC;QACpB,SAAS,EAAE,4CAA4C,CAAC,QAAQ,EAAE;QAClE,MAAM,EAAE,yCAAyC,CAAC,QAAQ,EAAE;QAC5D,gBAAgB,EACd,mDAAmD,CAAC,QAAQ,EAAE;QAChE,MAAM,EAAE,yCAAyC,CAAC,QAAQ,EAAE;QAC5D,kBAAkB,EAChB,qDAAqD,CAAC,QAAQ,EAAE;KACnE,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;CACzB,CAAC,CAAC;AAMH,MAAM,uCAAuC,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3E,wCAAwC;IACxC,2CAA2C;CAC5C,CAAC,CAAC;AAMH,SAAS,0BAA0B,CACjC,KAA+D;IAE/D,IAAI,KAAK,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;QAClC,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,IAAI;YACrB,KAAK,CAAC,qBAAqB,KAAK,IAAI;YACpC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,CAClC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,MAAqD;IAErD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3E,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAC/B,IAAmD;IAEnD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9C,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE;YACpC,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE;QAC5C,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAwC;IAExC,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;IACxC,OAAO,CACL,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;QAC5B,KAAK,CAAC,SAAS,CAAC,cAAc,KAAK,cAAc,CAAC;QACpD,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YACzB,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,cAAc,CAAC;QACjD,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS;YACnC,KAAK,CAAC,gBAAgB,CAAC,cAAc,KAAK,cAAc,CAAC;QAC3D,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YACzB,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,KAAK,cAAc;gBAC7C,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CACvB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,KAAK,cAAc,CACnD,CAAC,CAAC;QACP,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;YACrC,KAAK,CAAC,kBAAkB,CAAC,cAAc,KAAK,cAAc,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAwC;IAExC,IACE,CAAC,sBAAsB,CAAC,KAAK,CAAC;QAC9B,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YAC/B,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS;YACzC,CAAC,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,EAC1D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,OAAO;QACtB,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,mCAAmC,GAC9C,oCAAoC,CAClC,sBAAsB,CACpB,uCAAuC,CAAC,MAAM,CAC5C,0BAA0B,CAC3B,EACD,uCAAuC,CACxC,EACD,+CAA+C,CAChD,CAAC;AAMJ,MAAM,UAAU,+BAA+B,CAC7C,KAAc;IAEd,OAAO,mCAAmC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACtE,CAAC","sourcesContent":["import { z } from \"zod\";\nimport {\n  registerJsonSchemaRuntimeRefinements,\n  registerJsonSchemaView,\n} from \"../jsonSchema\";\nimport { organizationReadModelResponseRuntimeRefinements } from \"../organizationReadModelRefinements\";\nimport { arraySchema } from \"../schema\";\nimport {\n  OrganizationContainerGrantResponseShape,\n  OrganizationDirectoryCurrentUserResponseShape,\n  OrganizationDirectoryUserResponseShape,\n  OrganizationGroupCurrentStateResponseShape,\n  OrganizationGroupMemberResponseShape,\n  OrganizationGroupSummaryResponseShape,\n} from \"./organization\";\n\nconst OrganizationReadModelDirectoryUserResponseSchema = z.strictObject(\n  OrganizationDirectoryUserResponseShape,\n);\n\nconst OrganizationReadModelDirectoryResponseSchema = z.strictObject({\n  organizationId: z.string(),\n  profileDocumentId: z.string().nullable(),\n  users: arraySchema(OrganizationReadModelDirectoryUserResponseSchema),\n});\n\nexport type OrganizationReadModelDirectoryResponse = z.infer<\n  typeof OrganizationReadModelDirectoryResponseSchema\n>;\n\nconst OrganizationReadModelGrantResponseSchema = z.strictObject(\n  OrganizationContainerGrantResponseShape,\n);\n\nconst OrganizationReadModelGrantsResponseSchema = z.strictObject({\n  grants: arraySchema(OrganizationReadModelGrantResponseSchema),\n  organizationId: z.string(),\n});\n\nexport type OrganizationReadModelGrantsResponse = z.infer<\n  typeof OrganizationReadModelGrantsResponseSchema\n>;\n\nconst OrganizationReadModelGroupMemberResponseSchema = z.strictObject(\n  OrganizationGroupMemberResponseShape,\n);\n\nconst OrganizationReadModelGroupMembershipResponseSchema = z.strictObject({\n  groupId: z.string(),\n  members: arraySchema(OrganizationReadModelGroupMemberResponseSchema),\n  stateHash: z.string().min(1),\n});\n\nexport type OrganizationReadModelGroupMembershipResponse = z.infer<\n  typeof OrganizationReadModelGroupMembershipResponseSchema\n>;\n\nconst OrganizationReadModelGroupMembershipsResponseSchema = z.strictObject({\n  deletedGroupIds: arraySchema(z.string().min(1)),\n  groups: arraySchema(OrganizationReadModelGroupMembershipResponseSchema),\n  organizationId: z.string(),\n});\n\nexport type OrganizationReadModelGroupMembershipsResponse = z.infer<\n  typeof OrganizationReadModelGroupMembershipsResponseSchema\n>;\n\nconst OrganizationReadModelGroupCurrentStateResponseSchema = z.strictObject(\n  OrganizationGroupCurrentStateResponseShape,\n);\n\nconst OrganizationReadModelGroupSummaryResponseSchema = z.strictObject({\n  ...OrganizationGroupSummaryResponseShape,\n  currentState: OrganizationReadModelGroupCurrentStateResponseSchema.nullable(),\n});\n\nconst OrganizationReadModelGroupsResponseSchema = z.strictObject({\n  groups: arraySchema(OrganizationReadModelGroupSummaryResponseSchema),\n  memberGroupId: z.string(),\n  organizationId: z.string(),\n});\n\nconst OrganizationReadModelOrganizationPolicyResponseSchema = z.strictObject({\n  currentState: z.strictObject({\n    ...OrganizationGroupCurrentStateResponseShape,\n    stateHash: z.string().min(1),\n  }),\n  organizationId: z.string(),\n});\n\nexport type OrganizationReadModelOrganizationPolicyResponse = z.infer<\n  typeof OrganizationReadModelOrganizationPolicyResponseSchema\n>;\n\nconst OrganizationReadModelCurrentUserResponseSchema = z.strictObject(\n  OrganizationDirectoryCurrentUserResponseShape,\n);\n\nconst OrganizationReadModelResponseBaseShape = {\n  currentUser: OrganizationReadModelCurrentUserResponseSchema,\n  hasMore: z.boolean(),\n  nextCursor: z.string().min(1),\n  organizationId: z.string(),\n  version: z.literal(6),\n};\n\nconst OrganizationReadModelSnapshotResponseSchema = z.strictObject({\n  ...OrganizationReadModelResponseBaseShape,\n  hasMore: z.literal(false),\n  lanes: z.strictObject({\n    directory: OrganizationReadModelDirectoryResponseSchema,\n    grants: OrganizationReadModelGrantsResponseSchema,\n    groupMemberships: OrganizationReadModelGroupMembershipsResponseSchema,\n    groups: OrganizationReadModelGroupsResponseSchema,\n    organizationPolicy: OrganizationReadModelOrganizationPolicyResponseSchema,\n  }),\n  mode: z.literal(\"snapshot\"),\n});\n\nexport type OrganizationReadModelSnapshotResponse = z.infer<\n  typeof OrganizationReadModelSnapshotResponseSchema\n>;\n\nconst OrganizationReadModelDeltaResponseSchema = z.strictObject({\n  ...OrganizationReadModelResponseBaseShape,\n  lanes: z.strictObject({\n    directory: OrganizationReadModelDirectoryResponseSchema.optional(),\n    grants: OrganizationReadModelGrantsResponseSchema.optional(),\n    groupMemberships:\n      OrganizationReadModelGroupMembershipsResponseSchema.optional(),\n    groups: OrganizationReadModelGroupsResponseSchema.optional(),\n    organizationPolicy:\n      OrganizationReadModelOrganizationPolicyResponseSchema.optional(),\n  }),\n  mode: z.literal(\"delta\"),\n});\n\nexport type OrganizationReadModelDeltaResponse = z.infer<\n  typeof OrganizationReadModelDeltaResponseSchema\n>;\n\nconst OrganizationReadModelResponseSchemaView = z.discriminatedUnion(\"mode\", [\n  OrganizationReadModelDeltaResponseSchema,\n  OrganizationReadModelSnapshotResponseSchema,\n]);\n\ntype OrganizationReadModelResponseView = z.infer<\n  typeof OrganizationReadModelResponseSchemaView\n>;\n\nfunction hasValidGrantSubjectFields(\n  grant: z.infer<typeof OrganizationReadModelGrantResponseSchema>,\n): boolean {\n  if (grant.subjectType === \"user\") {\n    return grant.userId === grant.subjectId && grant.groupId === null;\n  }\n  if (grant.subjectType === \"group\") {\n    return (\n      grant.userId === null &&\n      grant.signingKeyFingerprint === null &&\n      grant.groupId === grant.subjectId\n    );\n  }\n  return false;\n}\n\nfunction hasValidGrants(\n  grants: OrganizationReadModelGrantsResponse[\"grants\"],\n): boolean {\n  const keys = new Set<string>();\n  return grants.every((grant) => {\n    const key = `${grant.subjectType}:${grant.subjectId}:${grant.containerId}`;\n    if (!hasValidGrantSubjectFields(grant) || keys.has(key)) {\n      return false;\n    }\n    keys.add(key);\n    return true;\n  });\n}\n\nfunction hasValidGroupMemberships(\n  lane: OrganizationReadModelGroupMembershipsResponse,\n): boolean {\n  const groupIds = new Set<string>();\n  const validGroups = lane.groups.every((group) => {\n    if (groupIds.has(group.groupId)) {\n      return false;\n    }\n    groupIds.add(group.groupId);\n    const memberIds = new Set<string>();\n    return group.members.every((member) => {\n      if (memberIds.has(member.userId)) {\n        return false;\n      }\n      memberIds.add(member.userId);\n      return true;\n    });\n  });\n  if (!validGroups) {\n    return false;\n  }\n\n  const deletedGroupIds = new Set<string>();\n  return lane.deletedGroupIds.every((groupId) => {\n    if (groupIds.has(groupId) || deletedGroupIds.has(groupId)) {\n      return false;\n    }\n    deletedGroupIds.add(groupId);\n    return true;\n  });\n}\n\nfunction laneOrganizationsMatch(\n  value: OrganizationReadModelResponseView,\n): boolean {\n  const { lanes, organizationId } = value;\n  return (\n    (lanes.directory === undefined ||\n      lanes.directory.organizationId === organizationId) &&\n    (lanes.grants === undefined ||\n      lanes.grants.organizationId === organizationId) &&\n    (lanes.groupMemberships === undefined ||\n      lanes.groupMemberships.organizationId === organizationId) &&\n    (lanes.groups === undefined ||\n      (lanes.groups.organizationId === organizationId &&\n        lanes.groups.groups.every(\n          (group) => group.organizationId === organizationId,\n        ))) &&\n    (lanes.organizationPolicy === undefined ||\n      lanes.organizationPolicy.organizationId === organizationId)\n  );\n}\n\nfunction hasValidReadModelSemantics(\n  value: OrganizationReadModelResponseView,\n): boolean {\n  if (\n    !laneOrganizationsMatch(value) ||\n    (value.lanes.grants !== undefined &&\n      !hasValidGrants(value.lanes.grants.grants)) ||\n    (value.lanes.groupMemberships !== undefined &&\n      !hasValidGroupMemberships(value.lanes.groupMemberships))\n  ) {\n    return false;\n  }\n\n  return (\n    value.mode === \"delta\" ||\n    value.lanes.groupMemberships.deletedGroupIds.length === 0\n  );\n}\n\nexport const OrganizationReadModelResponseSchema =\n  registerJsonSchemaRuntimeRefinements(\n    registerJsonSchemaView(\n      OrganizationReadModelResponseSchemaView.refine(\n        hasValidReadModelSemantics,\n      ),\n      OrganizationReadModelResponseSchemaView,\n    ),\n    organizationReadModelResponseRuntimeRefinements,\n  );\n\nexport type OrganizationReadModelResponse = z.infer<\n  typeof OrganizationReadModelResponseSchema\n>;\n\nexport function isOrganizationReadModelResponse(\n  value: unknown,\n): value is OrganizationReadModelResponse {\n  return OrganizationReadModelResponseSchema.safeParse(value).success;\n}\n"]}

package/internal/validators/response/organizationReadModelError.d.ts

@@ -0,0 +1,16 @@
+import { z } from "zod";
+export declare const ORGANIZATION_READ_MODEL_ERROR_CODES: {
+    readonly cursorInvalid: "organization_read_model_cursor_invalid";
+};
+export declare const OrganizationReadModelErrorCodeSchema: z.ZodLiteral<"organization_read_model_cursor_invalid">;
+export type OrganizationReadModelErrorCode = z.infer<typeof OrganizationReadModelErrorCodeSchema>;
+/**
+ * A warm client may discard its opaque read-model cursor only when the API
+ * positively identifies that cursor as invalid. Other 400s remain uncoded and
+ * terminal, while unknown tags fail response-schema validation.
+ */
+export declare const OrganizationReadModelFailureResponseSchema: z.ZodObject<{
+    code: z.ZodOptional<z.ZodLiteral<"organization_read_model_cursor_invalid">>;
+    error: z.ZodString;
+}, z.core.$loose>;
+export type OrganizationReadModelFailureResponse = z.infer<typeof OrganizationReadModelFailureResponseSchema>;

package/internal/validators/response/organizationReadModelError.js

@@ -0,0 +1,15 @@
+import { z } from "zod";
+export const ORGANIZATION_READ_MODEL_ERROR_CODES = {
+    cursorInvalid: "organization_read_model_cursor_invalid",
+};
+export const OrganizationReadModelErrorCodeSchema = z.literal(ORGANIZATION_READ_MODEL_ERROR_CODES.cursorInvalid);
+/**
+ * A warm client may discard its opaque read-model cursor only when the API
+ * positively identifies that cursor as invalid. Other 400s remain uncoded and
+ * terminal, while unknown tags fail response-schema validation.
+ */
+export const OrganizationReadModelFailureResponseSchema = z.looseObject({
+    code: OrganizationReadModelErrorCodeSchema.optional(),
+    error: z.string().min(1),
+});
+//# sourceMappingURL=organizationReadModelError.js.map

package/internal/validators/response/organizationReadModelError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationReadModelError.js","sourceRoot":"","sources":["organizationReadModelError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,aAAa,EAAE,wCAAwC;CAC/C,CAAC;AAEX,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,OAAO,CAC3D,mCAAmC,CAAC,aAAa,CAClD,CAAC;AAMF;;;;GAIG;AACH,MAAM,CAAC,MAAM,0CAA0C,GAAG,CAAC,CAAC,WAAW,CAAC;IACtE,IAAI,EAAE,oCAAoC,CAAC,QAAQ,EAAE;IACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\nexport const ORGANIZATION_READ_MODEL_ERROR_CODES = {\n  cursorInvalid: \"organization_read_model_cursor_invalid\",\n} as const;\n\nexport const OrganizationReadModelErrorCodeSchema = z.literal(\n  ORGANIZATION_READ_MODEL_ERROR_CODES.cursorInvalid,\n);\n\nexport type OrganizationReadModelErrorCode = z.infer<\n  typeof OrganizationReadModelErrorCodeSchema\n>;\n\n/**\n * A warm client may discard its opaque read-model cursor only when the API\n * positively identifies that cursor as invalid. Other 400s remain uncoded and\n * terminal, while unknown tags fail response-schema validation.\n */\nexport const OrganizationReadModelFailureResponseSchema = z.looseObject({\n  code: OrganizationReadModelErrorCodeSchema.optional(),\n  error: z.string().min(1),\n});\n\nexport type OrganizationReadModelFailureResponse = z.infer<\n  typeof OrganizationReadModelFailureResponseSchema\n>;\n"]}