@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/data/persistence/organizations/organizationReadModelGrantPersistence.js

@@ -0,0 +1,91 @@
+import { isOrganizationContainerGrantSubjectType, isOrganizationGroupContainerAccessLevel, } from "../../../internal/validators/response/index.js";
+import { asc, eq } from "drizzle-orm";
+import { organizationReadModelContainerGrants } from "../../sqlite/organizationReadModelSchema.js";
+import { OrganizationReadModelIntegrityError } from "./organizationReadModelProtocol.js";
+const GRANT_INSERT_BATCH_SIZE = 40;
+function grantIdentity(grant) {
+    return `${grant.containerId}\0${grant.subjectType}\0${grant.subjectId}`;
+}
+function hasValidGrantSubjectBinding(grant) {
+    const validUser = grant.subjectType === "user" &&
+        grant.userId === grant.subjectId &&
+        grant.groupId === null;
+    const validGroup = grant.subjectType === "group" &&
+        grant.userId === null &&
+        grant.signingKeyFingerprint === null &&
+        grant.groupId === grant.subjectId;
+    return validUser || validGroup;
+}
+function assertGrantsLane(input) {
+    if (input.lane.organizationId !== input.organizationId) {
+        throw new Error("Organization read-model grants scope does not match");
+    }
+    const identities = input.lane.grants.map(grantIdentity);
+    if (new Set(identities).size !== identities.length) {
+        throw new Error("Organization read-model grants contain duplicates");
+    }
+    for (const grant of input.lane.grants) {
+        if (!hasValidGrantSubjectBinding(grant)) {
+            throw new Error("Organization read-model grant subject binding is invalid");
+        }
+    }
+}
+export async function applyOrganizationReadModelGrantsLane(input) {
+    assertGrantsLane(input);
+    await input.tx
+        .delete(organizationReadModelContainerGrants)
+        .where(eq(organizationReadModelContainerGrants.organizationId, input.organizationId))
+        .run();
+    const rows = input.lane.grants.map((grant, sortOrder) => ({
+        ...grant,
+        organizationId: input.organizationId,
+        sortOrder,
+    }));
+    for (let index = 0; index < rows.length; index += GRANT_INSERT_BATCH_SIZE) {
+        await input.tx
+            .insert(organizationReadModelContainerGrants)
+            .values(rows.slice(index, index + GRANT_INSERT_BATCH_SIZE))
+            .run();
+    }
+}
+function toGrant(row) {
+    if (!isOrganizationGroupContainerAccessLevel(row.accessLevel)) {
+        throw new OrganizationReadModelIntegrityError("Stored organization grant access level is invalid");
+    }
+    if (!isOrganizationContainerGrantSubjectType(row.subjectType)) {
+        throw new OrganizationReadModelIntegrityError("Stored organization grant subject type is invalid");
+    }
+    const grant = {
+        accessLevel: row.accessLevel,
+        containerId: row.containerId,
+        createdAt: row.createdAt,
+        depth: row.depth,
+        isBuiltin: row.isBuiltin,
+        metadataAccessEpoch: row.metadataAccessEpoch,
+        metadataAccessStateHash: row.metadataAccessStateHash,
+        metadataDocumentId: row.metadataDocumentId,
+        parentId: row.parentId,
+        updatedAt: row.updatedAt,
+        subjectType: row.subjectType,
+        subjectId: row.subjectId,
+        userId: row.userId,
+        signingKeyFingerprint: row.signingKeyFingerprint,
+        groupId: row.groupId,
+    };
+    if (!hasValidGrantSubjectBinding(grant)) {
+        throw new OrganizationReadModelIntegrityError("Stored organization grant subject binding is invalid");
+    }
+    return grant;
+}
+export async function loadOrganizationReadModelGrantsInTransaction(input) {
+    const rows = await input.tx
+        .select()
+        .from(organizationReadModelContainerGrants)
+        .where(eq(organizationReadModelContainerGrants.organizationId, input.organizationId))
+        .orderBy(asc(organizationReadModelContainerGrants.sortOrder), asc(organizationReadModelContainerGrants.containerId), asc(organizationReadModelContainerGrants.subjectType), asc(organizationReadModelContainerGrants.subjectId));
+    return {
+        organizationId: input.organizationId,
+        grants: rows.map(toGrant),
+    };
+}
+//# sourceMappingURL=organizationReadModelGrantPersistence.js.map

package/data/persistence/organizations/organizationReadModelGrantPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationReadModelGrantPersistence.js","sourceRoot":"","sources":["organizationReadModelGrantPersistence.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,uCAAuC,EACvC,uCAAuC,GACxC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,oCAAoC,EAAE,MAAM,0CAA0C,CAAC;AAEhG,OAAO,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AAEtF,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAInC,SAAS,aAAa,CACpB,KAGC;IAED,OAAO,GAAG,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAyC;IAEzC,MAAM,SAAS,GACb,KAAK,CAAC,WAAW,KAAK,MAAM;QAC5B,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS;QAChC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;IACzB,MAAM,UAAU,GACd,KAAK,CAAC,WAAW,KAAK,OAAO;QAC7B,KAAK,CAAC,MAAM,KAAK,IAAI;QACrB,KAAK,CAAC,qBAAqB,KAAK,IAAI;QACpC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,CAAC;IACpC,OAAO,SAAS,IAAI,UAAU,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAGzB;IACC,IAAI,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,0DAA0D,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,KAI1D;IACC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,oCAAoC,CAAC;SAC5C,KAAK,CACJ,EAAE,CACA,oCAAoC,CAAC,cAAc,EACnD,KAAK,CAAC,cAAc,CACrB,CACF;SACA,GAAG,EAAE,CAAC;IAET,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACxD,GAAG,KAAK;QACR,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS;KACV,CAAC,CAAC,CAAC;IACJ,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,uBAAuB,EAAE,CAAC;QAC1E,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,oCAAoC,CAAC;aAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,uBAAuB,CAAC,CAAC;aAC1D,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAkB;IACjC,IAAI,CAAC,uCAAuC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,mCAAmC,CAC3C,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,uCAAuC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,mCAAmC,CAC3C,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAuC;QAChD,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,uBAAuB,EAAE,GAAG,CAAC,uBAAuB;QACpD,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;QAChD,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;IACF,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,mCAAmC,CAC3C,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAAC,KAGlE;IACC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,EAAE;SACxB,MAAM,EAAE;SACR,IAAI,CAAC,oCAAoC,CAAC;SAC1C,KAAK,CACJ,EAAE,CACA,oCAAoC,CAAC,cAAc,EACnD,KAAK,CAAC,cAAc,CACrB,CACF;SACA,OAAO,CACN,GAAG,CAAC,oCAAoC,CAAC,SAAS,CAAC,EACnD,GAAG,CAAC,oCAAoC,CAAC,WAAW,CAAC,EACrD,GAAG,CAAC,oCAAoC,CAAC,WAAW,CAAC,EACrD,GAAG,CAAC,oCAAoC,CAAC,SAAS,CAAC,CACpD,CAAC;IACJ,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;KAC1B,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  OrganizationContainerGrantResponse,\n  OrganizationContainerGrantsResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  isOrganizationContainerGrantSubjectType,\n  isOrganizationGroupContainerAccessLevel,\n} from \"@tearleads/validators/response\";\nimport { asc, eq } from \"drizzle-orm\";\nimport { organizationReadModelContainerGrants } from \"../../sqlite/organizationReadModelSchema\";\nimport type { ClientSQLiteTransactionScope } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { OrganizationReadModelIntegrityError } from \"./organizationReadModelProtocol\";\n\nconst GRANT_INSERT_BATCH_SIZE = 40;\n\ntype SelectedGrant = typeof organizationReadModelContainerGrants.$inferSelect;\n\nfunction grantIdentity(\n  grant: Pick<\n    OrganizationContainerGrantResponse,\n    \"containerId\" | \"subjectId\" | \"subjectType\"\n  >,\n): string {\n  return `${grant.containerId}\\0${grant.subjectType}\\0${grant.subjectId}`;\n}\n\nfunction hasValidGrantSubjectBinding(\n  grant: OrganizationContainerGrantResponse,\n): boolean {\n  const validUser =\n    grant.subjectType === \"user\" &&\n    grant.userId === grant.subjectId &&\n    grant.groupId === null;\n  const validGroup =\n    grant.subjectType === \"group\" &&\n    grant.userId === null &&\n    grant.signingKeyFingerprint === null &&\n    grant.groupId === grant.subjectId;\n  return validUser || validGroup;\n}\n\nfunction assertGrantsLane(input: {\n  readonly lane: OrganizationContainerGrantsResponse;\n  readonly organizationId: string;\n}): void {\n  if (input.lane.organizationId !== input.organizationId) {\n    throw new Error(\"Organization read-model grants scope does not match\");\n  }\n  const identities = input.lane.grants.map(grantIdentity);\n  if (new Set(identities).size !== identities.length) {\n    throw new Error(\"Organization read-model grants contain duplicates\");\n  }\n  for (const grant of input.lane.grants) {\n    if (!hasValidGrantSubjectBinding(grant)) {\n      throw new Error(\n        \"Organization read-model grant subject binding is invalid\",\n      );\n    }\n  }\n}\n\nexport async function applyOrganizationReadModelGrantsLane(input: {\n  readonly lane: OrganizationContainerGrantsResponse;\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  assertGrantsLane(input);\n  await input.tx\n    .delete(organizationReadModelContainerGrants)\n    .where(\n      eq(\n        organizationReadModelContainerGrants.organizationId,\n        input.organizationId,\n      ),\n    )\n    .run();\n\n  const rows = input.lane.grants.map((grant, sortOrder) => ({\n    ...grant,\n    organizationId: input.organizationId,\n    sortOrder,\n  }));\n  for (let index = 0; index < rows.length; index += GRANT_INSERT_BATCH_SIZE) {\n    await input.tx\n      .insert(organizationReadModelContainerGrants)\n      .values(rows.slice(index, index + GRANT_INSERT_BATCH_SIZE))\n      .run();\n  }\n}\n\nfunction toGrant(row: SelectedGrant): OrganizationContainerGrantResponse {\n  if (!isOrganizationGroupContainerAccessLevel(row.accessLevel)) {\n    throw new OrganizationReadModelIntegrityError(\n      \"Stored organization grant access level is invalid\",\n    );\n  }\n  if (!isOrganizationContainerGrantSubjectType(row.subjectType)) {\n    throw new OrganizationReadModelIntegrityError(\n      \"Stored organization grant subject type is invalid\",\n    );\n  }\n  const grant: OrganizationContainerGrantResponse = {\n    accessLevel: row.accessLevel,\n    containerId: row.containerId,\n    createdAt: row.createdAt,\n    depth: row.depth,\n    isBuiltin: row.isBuiltin,\n    metadataAccessEpoch: row.metadataAccessEpoch,\n    metadataAccessStateHash: row.metadataAccessStateHash,\n    metadataDocumentId: row.metadataDocumentId,\n    parentId: row.parentId,\n    updatedAt: row.updatedAt,\n    subjectType: row.subjectType,\n    subjectId: row.subjectId,\n    userId: row.userId,\n    signingKeyFingerprint: row.signingKeyFingerprint,\n    groupId: row.groupId,\n  };\n  if (!hasValidGrantSubjectBinding(grant)) {\n    throw new OrganizationReadModelIntegrityError(\n      \"Stored organization grant subject binding is invalid\",\n    );\n  }\n  return grant;\n}\n\nexport async function loadOrganizationReadModelGrantsInTransaction(input: {\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<OrganizationContainerGrantsResponse> {\n  const rows = await input.tx\n    .select()\n    .from(organizationReadModelContainerGrants)\n    .where(\n      eq(\n        organizationReadModelContainerGrants.organizationId,\n        input.organizationId,\n      ),\n    )\n    .orderBy(\n      asc(organizationReadModelContainerGrants.sortOrder),\n      asc(organizationReadModelContainerGrants.containerId),\n      asc(organizationReadModelContainerGrants.subjectType),\n      asc(organizationReadModelContainerGrants.subjectId),\n    );\n  return {\n    organizationId: input.organizationId,\n    grants: rows.map(toGrant),\n  };\n}\n"]}

package/data/persistence/organizations/organizationReadModelInvalidation.d.ts

@@ -0,0 +1,11 @@
+import type { ExecSql } from "../../sqlite/sqlSchema.js";
+export type OrganizationReadModelInvalidationListener = (organizationId: string) => void;
+/**
+ * Observe load-path purges of the durable organization read-model projection
+ * (protocol mismatch or stored-row integrity failure). A purge outside a
+ * reconcile pass leaves realtime consumers believing they are caught up while
+ * the rows they painted are gone; subscribers drop that state and schedule a
+ * fresh authoritative catch-up.
+ */
+export declare function subscribeOrganizationReadModelInvalidation(execSql: ExecSql, listener: OrganizationReadModelInvalidationListener): () => void;
+export declare function notifyOrganizationReadModelInvalidated(execSql: ExecSql, organizationId: string): void;

package/data/persistence/organizations/organizationReadModelInvalidation.js

@@ -0,0 +1,35 @@
+const listenersByExecutor = new WeakMap();
+/**
+ * Observe load-path purges of the durable organization read-model projection
+ * (protocol mismatch or stored-row integrity failure). A purge outside a
+ * reconcile pass leaves realtime consumers believing they are caught up while
+ * the rows they painted are gone; subscribers drop that state and schedule a
+ * fresh authoritative catch-up.
+ */
+export function subscribeOrganizationReadModelInvalidation(execSql, listener) {
+    let listeners = listenersByExecutor.get(execSql);
+    if (!listeners) {
+        listeners = new Set();
+        listenersByExecutor.set(execSql, listeners);
+    }
+    listeners.add(listener);
+    const registered = listeners;
+    return () => {
+        registered.delete(listener);
+    };
+}
+export function notifyOrganizationReadModelInvalidated(execSql, organizationId) {
+    const listeners = listenersByExecutor.get(execSql);
+    if (!listeners) {
+        return;
+    }
+    for (const listener of [...listeners]) {
+        try {
+            listener(organizationId);
+        }
+        catch {
+            // A listener failure must not fail the load that purged the rows.
+        }
+    }
+}
+//# sourceMappingURL=organizationReadModelInvalidation.js.map

package/data/persistence/organizations/organizationReadModelInvalidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationReadModelInvalidation.js","sourceRoot":"","sources":["organizationReadModelInvalidation.ts"],"names":[],"mappings":"AAMA,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAGpC,CAAC;AAEJ;;;;;;GAMG;AACH,MAAM,UAAU,0CAA0C,CACxD,OAAgB,EAChB,QAAmD;IAEnD,IAAI,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,MAAM,UAAU,GAAG,SAAS,CAAC;IAC7B,OAAO,GAAG,EAAE;QACV,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sCAAsC,CACpD,OAAgB,EAChB,cAAsB;IAEtB,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import type { ExecSql } from \"../../sqlite/sqlSchema\";\n\nexport type OrganizationReadModelInvalidationListener = (\n  organizationId: string,\n) => void;\n\nconst listenersByExecutor = new WeakMap<\n  ExecSql,\n  Set<OrganizationReadModelInvalidationListener>\n>();\n\n/**\n * Observe load-path purges of the durable organization read-model projection\n * (protocol mismatch or stored-row integrity failure). A purge outside a\n * reconcile pass leaves realtime consumers believing they are caught up while\n * the rows they painted are gone; subscribers drop that state and schedule a\n * fresh authoritative catch-up.\n */\nexport function subscribeOrganizationReadModelInvalidation(\n  execSql: ExecSql,\n  listener: OrganizationReadModelInvalidationListener,\n): () => void {\n  let listeners = listenersByExecutor.get(execSql);\n  if (!listeners) {\n    listeners = new Set();\n    listenersByExecutor.set(execSql, listeners);\n  }\n  listeners.add(listener);\n  const registered = listeners;\n  return () => {\n    registered.delete(listener);\n  };\n}\n\nexport function notifyOrganizationReadModelInvalidated(\n  execSql: ExecSql,\n  organizationId: string,\n): void {\n  const listeners = listenersByExecutor.get(execSql);\n  if (!listeners) {\n    return;\n  }\n  for (const listener of [...listeners]) {\n    try {\n      listener(organizationId);\n    } catch {\n      // A listener failure must not fail the load that purged the rows.\n    }\n  }\n}\n"]}

package/data/persistence/organizations/organizationReadModelMemberLoad.js

@@ -0,0 +1,96 @@
+import { and, asc, eq } from "drizzle-orm";
+import { organizationReadModelGroupMembers, organizationReadModelGroupMemberships, organizationReadModelGroups, organizationReadModelRequesters, organizationReadModelState, } from "../../sqlite/organizationReadModelSchema.js";
+import { OrganizationReadModelIntegrityError } from "./organizationReadModelProtocol.js";
+import { loadWithOrganizationReadModelIntegrityPurge } from "./organizationReadModelPurge.js";
+function requireOrganizationRole(value) {
+    if (value !== "member" && value !== "admin") {
+        throw new OrganizationReadModelIntegrityError("Stored organization group member role is invalid");
+    }
+    return value;
+}
+function toGroupMember(row, expectedStateHash) {
+    if (row.stateHash !== expectedStateHash) {
+        throw new OrganizationReadModelIntegrityError("Stored organization group membership state is inconsistent");
+    }
+    return {
+        userId: row.userId,
+        role: requireOrganizationRole(row.role),
+        signingKeyFingerprint: row.signingKeyFingerprint,
+        signingPublicKey: row.signingPublicKey,
+        encapsulationPublicKey: row.encapsulationPublicKey,
+        encapsulationKeyFingerprint: row.encapsulationKeyFingerprint,
+    };
+}
+async function loadMembershipRows(input) {
+    return input.tx
+        .select({
+        encapsulationKeyFingerprint: organizationReadModelGroupMembers.encapsulationKeyFingerprint,
+        encapsulationPublicKey: organizationReadModelGroupMembers.encapsulationPublicKey,
+        userId: organizationReadModelGroupMembers.userId,
+        role: organizationReadModelGroupMembers.role,
+        signingKeyFingerprint: organizationReadModelGroupMembers.signingKeyFingerprint,
+        signingPublicKey: organizationReadModelGroupMembers.signingPublicKey,
+        stateHash: organizationReadModelGroupMembers.stateHash,
+    })
+        .from(organizationReadModelGroupMembers)
+        .where(and(eq(organizationReadModelGroupMembers.organizationId, input.organizationId), eq(organizationReadModelGroupMembers.groupId, input.groupId)))
+        .orderBy(asc(organizationReadModelGroupMembers.sortOrder), asc(organizationReadModelGroupMembers.userId));
+}
+async function loadOrganizationReadModelGroupMembersInTransaction(input) {
+    const [head] = await input.tx
+        .select({ stateHash: organizationReadModelGroupMemberships.stateHash })
+        .from(organizationReadModelGroupMemberships)
+        .where(and(eq(organizationReadModelGroupMemberships.organizationId, input.organizationId), eq(organizationReadModelGroupMemberships.groupId, input.groupId)))
+        .limit(1);
+    if (!head) {
+        return null;
+    }
+    const rows = await loadMembershipRows(input);
+    const [group] = await input.tx
+        .select({
+        memberCount: organizationReadModelGroups.memberCount,
+        stateHash: organizationReadModelGroups.stateHash,
+    })
+        .from(organizationReadModelGroups)
+        .where(and(eq(organizationReadModelGroups.organizationId, input.organizationId), eq(organizationReadModelGroups.groupId, input.groupId)))
+        .limit(1);
+    if (group &&
+        (group.stateHash !== head.stateHash || group.memberCount !== rows.length)) {
+        throw new OrganizationReadModelIntegrityError("Stored organization group membership binding is invalid");
+    }
+    return {
+        organizationId: input.organizationId,
+        groupId: input.groupId,
+        members: rows.map((row) => toGroupMember(row, head.stateHash)),
+    };
+}
+export async function loadOrganizationReadModelGroupMembers(execSql, organizationId, groupId, currentUserId) {
+    return loadWithOrganizationReadModelIntegrityPurge({
+        execSql,
+        organizationId,
+        load: async (tx) => {
+            const [state] = await tx
+                .select({ organizationId: organizationReadModelState.organizationId })
+                .from(organizationReadModelState)
+                .where(eq(organizationReadModelState.organizationId, organizationId))
+                .limit(1);
+            if (!state) {
+                return null;
+            }
+            const [requester] = await tx
+                .select({ userId: organizationReadModelRequesters.userId })
+                .from(organizationReadModelRequesters)
+                .where(and(eq(organizationReadModelRequesters.organizationId, organizationId), eq(organizationReadModelRequesters.userId, currentUserId)))
+                .limit(1);
+            if (!requester) {
+                return null;
+            }
+            return loadOrganizationReadModelGroupMembersInTransaction({
+                groupId,
+                organizationId,
+                tx,
+            });
+        },
+    });
+}
+//# sourceMappingURL=organizationReadModelMemberLoad.js.map

package/data/persistence/organizations/organizationReadModelMemberLoad.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationReadModelMemberLoad.js","sourceRoot":"","sources":["organizationReadModelMemberLoad.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,iCAAiC,EACjC,qCAAqC,EACrC,2BAA2B,EAC3B,+BAA+B,EAC/B,0BAA0B,GAC3B,MAAM,0CAA0C,CAAC;AAGlD,OAAO,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AACtF,OAAO,EAAE,2CAA2C,EAAE,MAAM,8BAA8B,CAAC;AAY3F,SAAS,uBAAuB,CAAC,KAAa;IAC5C,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,mCAAmC,CAC3C,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CACpB,GAAwB,EACxB,iBAAyB;IAEzB,IAAI,GAAG,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACxC,MAAM,IAAI,mCAAmC,CAC3C,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;QACvC,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;QAChD,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,sBAAsB,EAAE,GAAG,CAAC,sBAAsB;QAClD,2BAA2B,EAAE,GAAG,CAAC,2BAA2B;KAC7D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,KAIjC;IACC,OAAO,KAAK,CAAC,EAAE;SACZ,MAAM,CAAC;QACN,2BAA2B,EACzB,iCAAiC,CAAC,2BAA2B;QAC/D,sBAAsB,EACpB,iCAAiC,CAAC,sBAAsB;QAC1D,MAAM,EAAE,iCAAiC,CAAC,MAAM;QAChD,IAAI,EAAE,iCAAiC,CAAC,IAAI;QAC5C,qBAAqB,EACnB,iCAAiC,CAAC,qBAAqB;QACzD,gBAAgB,EAAE,iCAAiC,CAAC,gBAAgB;QACpE,SAAS,EAAE,iCAAiC,CAAC,SAAS;KACvD,CAAC;SACD,IAAI,CAAC,iCAAiC,CAAC;SACvC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,iCAAiC,CAAC,cAAc,EAChD,KAAK,CAAC,cAAc,CACrB,EACD,EAAE,CAAC,iCAAiC,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAC7D,CACF;SACA,OAAO,CACN,GAAG,CAAC,iCAAiC,CAAC,SAAS,CAAC,EAChD,GAAG,CAAC,iCAAiC,CAAC,MAAM,CAAC,CAC9C,CAAC;AACN,CAAC;AAED,KAAK,UAAU,kDAAkD,CAAC,KAIjE;IACC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,CAAC,EAAE;SAC1B,MAAM,CAAC,EAAE,SAAS,EAAE,qCAAqC,CAAC,SAAS,EAAE,CAAC;SACtE,IAAI,CAAC,qCAAqC,CAAC;SAC3C,KAAK,CACJ,GAAG,CACD,EAAE,CACA,qCAAqC,CAAC,cAAc,EACpD,KAAK,CAAC,cAAc,CACrB,EACD,EAAE,CAAC,qCAAqC,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CACjE,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,EAAE;SAC3B,MAAM,CAAC;QACN,WAAW,EAAE,2BAA2B,CAAC,WAAW;QACpD,SAAS,EAAE,2BAA2B,CAAC,SAAS;KACjD,CAAC;SACD,IAAI,CAAC,2BAA2B,CAAC;SACjC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,2BAA2B,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,EACpE,EAAE,CAAC,2BAA2B,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CACvD,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,IACE,KAAK;QACL,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,MAAM,CAAC,EACzE,CAAC;QACD,MAAM,IAAI,mCAAmC,CAC3C,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,OAAgB,EAChB,cAAsB,EACtB,OAAe,EACf,aAAqB;IAErB,OAAO,2CAA2C,CAAC;QACjD,OAAO;QACP,cAAc;QACd,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YACjB,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE;iBACrB,MAAM,CAAC,EAAE,cAAc,EAAE,0BAA0B,CAAC,cAAc,EAAE,CAAC;iBACrE,IAAI,CAAC,0BAA0B,CAAC;iBAChC,KAAK,CAAC,EAAE,CAAC,0BAA0B,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;iBACpE,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE;iBACzB,MAAM,CAAC,EAAE,MAAM,EAAE,+BAA+B,CAAC,MAAM,EAAE,CAAC;iBAC1D,IAAI,CAAC,+BAA+B,CAAC;iBACrC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,+BAA+B,CAAC,cAAc,EAAE,cAAc,CAAC,EAClE,EAAE,CAAC,+BAA+B,CAAC,MAAM,EAAE,aAAa,CAAC,CAC1D,CACF;iBACA,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,kDAAkD,CAAC;gBACxD,OAAO;gBACP,cAAc;gBACd,EAAE;aACH,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type {\n  OrganizationGroupMemberResponse,\n  OrganizationGroupMembersResponse,\n  OrganizationRole,\n} from \"@tearleads/validators/response\";\nimport { and, asc, eq } from \"drizzle-orm\";\nimport {\n  organizationReadModelGroupMembers,\n  organizationReadModelGroupMemberships,\n  organizationReadModelGroups,\n  organizationReadModelRequesters,\n  organizationReadModelState,\n} from \"../../sqlite/organizationReadModelSchema\";\nimport type { ClientSQLiteTransactionScope } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport { OrganizationReadModelIntegrityError } from \"./organizationReadModelProtocol\";\nimport { loadWithOrganizationReadModelIntegrityPurge } from \"./organizationReadModelPurge\";\n\ninterface SelectedGroupMember {\n  readonly encapsulationKeyFingerprint: string | null;\n  readonly encapsulationPublicKey: string | null;\n  readonly userId: string;\n  readonly role: string;\n  readonly signingKeyFingerprint: string | null;\n  readonly signingPublicKey: string | null;\n  readonly stateHash: string;\n}\n\nfunction requireOrganizationRole(value: string): OrganizationRole {\n  if (value !== \"member\" && value !== \"admin\") {\n    throw new OrganizationReadModelIntegrityError(\n      \"Stored organization group member role is invalid\",\n    );\n  }\n  return value;\n}\n\nfunction toGroupMember(\n  row: SelectedGroupMember,\n  expectedStateHash: string,\n): OrganizationGroupMemberResponse {\n  if (row.stateHash !== expectedStateHash) {\n    throw new OrganizationReadModelIntegrityError(\n      \"Stored organization group membership state is inconsistent\",\n    );\n  }\n  return {\n    userId: row.userId,\n    role: requireOrganizationRole(row.role),\n    signingKeyFingerprint: row.signingKeyFingerprint,\n    signingPublicKey: row.signingPublicKey,\n    encapsulationPublicKey: row.encapsulationPublicKey,\n    encapsulationKeyFingerprint: row.encapsulationKeyFingerprint,\n  };\n}\n\nasync function loadMembershipRows(input: {\n  readonly groupId: string;\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<SelectedGroupMember[]> {\n  return input.tx\n    .select({\n      encapsulationKeyFingerprint:\n        organizationReadModelGroupMembers.encapsulationKeyFingerprint,\n      encapsulationPublicKey:\n        organizationReadModelGroupMembers.encapsulationPublicKey,\n      userId: organizationReadModelGroupMembers.userId,\n      role: organizationReadModelGroupMembers.role,\n      signingKeyFingerprint:\n        organizationReadModelGroupMembers.signingKeyFingerprint,\n      signingPublicKey: organizationReadModelGroupMembers.signingPublicKey,\n      stateHash: organizationReadModelGroupMembers.stateHash,\n    })\n    .from(organizationReadModelGroupMembers)\n    .where(\n      and(\n        eq(\n          organizationReadModelGroupMembers.organizationId,\n          input.organizationId,\n        ),\n        eq(organizationReadModelGroupMembers.groupId, input.groupId),\n      ),\n    )\n    .orderBy(\n      asc(organizationReadModelGroupMembers.sortOrder),\n      asc(organizationReadModelGroupMembers.userId),\n    );\n}\n\nasync function loadOrganizationReadModelGroupMembersInTransaction(input: {\n  readonly groupId: string;\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<OrganizationGroupMembersResponse | null> {\n  const [head] = await input.tx\n    .select({ stateHash: organizationReadModelGroupMemberships.stateHash })\n    .from(organizationReadModelGroupMemberships)\n    .where(\n      and(\n        eq(\n          organizationReadModelGroupMemberships.organizationId,\n          input.organizationId,\n        ),\n        eq(organizationReadModelGroupMemberships.groupId, input.groupId),\n      ),\n    )\n    .limit(1);\n  if (!head) {\n    return null;\n  }\n\n  const rows = await loadMembershipRows(input);\n  const [group] = await input.tx\n    .select({\n      memberCount: organizationReadModelGroups.memberCount,\n      stateHash: organizationReadModelGroups.stateHash,\n    })\n    .from(organizationReadModelGroups)\n    .where(\n      and(\n        eq(organizationReadModelGroups.organizationId, input.organizationId),\n        eq(organizationReadModelGroups.groupId, input.groupId),\n      ),\n    )\n    .limit(1);\n  if (\n    group &&\n    (group.stateHash !== head.stateHash || group.memberCount !== rows.length)\n  ) {\n    throw new OrganizationReadModelIntegrityError(\n      \"Stored organization group membership binding is invalid\",\n    );\n  }\n  return {\n    organizationId: input.organizationId,\n    groupId: input.groupId,\n    members: rows.map((row) => toGroupMember(row, head.stateHash)),\n  };\n}\n\nexport async function loadOrganizationReadModelGroupMembers(\n  execSql: ExecSql,\n  organizationId: string,\n  groupId: string,\n  currentUserId: string,\n): Promise<OrganizationGroupMembersResponse | null> {\n  return loadWithOrganizationReadModelIntegrityPurge({\n    execSql,\n    organizationId,\n    load: async (tx) => {\n      const [state] = await tx\n        .select({ organizationId: organizationReadModelState.organizationId })\n        .from(organizationReadModelState)\n        .where(eq(organizationReadModelState.organizationId, organizationId))\n        .limit(1);\n      if (!state) {\n        return null;\n      }\n      const [requester] = await tx\n        .select({ userId: organizationReadModelRequesters.userId })\n        .from(organizationReadModelRequesters)\n        .where(\n          and(\n            eq(organizationReadModelRequesters.organizationId, organizationId),\n            eq(organizationReadModelRequesters.userId, currentUserId),\n          ),\n        )\n        .limit(1);\n      if (!requester) {\n        return null;\n      }\n      return loadOrganizationReadModelGroupMembersInTransaction({\n        groupId,\n        organizationId,\n        tx,\n      });\n    },\n  });\n}\n"]}

package/data/persistence/organizations/organizationReadModelMembershipPersistence.js

@@ -0,0 +1,161 @@
+import { and, eq, inArray } from "drizzle-orm";
+import { organizationReadModelGroupMembers, organizationReadModelGroupMemberships, organizationReadModelGroups, } from "../../sqlite/organizationReadModelSchema.js";
+const GROUP_MEMBERSHIP_BATCH_SIZE = 90;
+const GROUP_MEMBER_INSERT_BATCH_SIZE = 30;
+export class OrganizationReadModelBindingError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "OrganizationReadModelBindingError";
+    }
+}
+function membershipMemberKey(member) {
+    return member.userId;
+}
+function assertUniqueMembershipRows(lane) {
+    const groupIds = lane.groups.map((group) => group.groupId);
+    if (new Set(groupIds).size !== groupIds.length) {
+        throw new Error("Organization read-model group memberships contain duplicate groups");
+    }
+    if (new Set(lane.deletedGroupIds).size !== lane.deletedGroupIds.length) {
+        throw new Error("Organization read-model group memberships contain duplicate deletions");
+    }
+    const deletedGroupIds = new Set(lane.deletedGroupIds);
+    if (groupIds.some((groupId) => deletedGroupIds.has(groupId))) {
+        throw new Error("Organization read-model group membership is both replaced and deleted");
+    }
+    for (const group of lane.groups) {
+        const memberKeys = group.members.map(membershipMemberKey);
+        if (new Set(memberKeys).size !== memberKeys.length) {
+            throw new Error("Organization read-model group membership contains duplicate members");
+        }
+    }
+}
+async function clearMembershipRows(input) {
+    await input.tx
+        .delete(organizationReadModelGroupMembers)
+        .where(eq(organizationReadModelGroupMembers.organizationId, input.organizationId))
+        .run();
+    await input.tx
+        .delete(organizationReadModelGroupMemberships)
+        .where(eq(organizationReadModelGroupMemberships.organizationId, input.organizationId))
+        .run();
+}
+async function deleteMembershipRows(input, groupIds) {
+    for (let index = 0; index < groupIds.length; index += GROUP_MEMBERSHIP_BATCH_SIZE) {
+        const groupIdBatch = groupIds.slice(index, index + GROUP_MEMBERSHIP_BATCH_SIZE);
+        await input.tx
+            .delete(organizationReadModelGroupMembers)
+            .where(and(eq(organizationReadModelGroupMembers.organizationId, input.organizationId), inArray(organizationReadModelGroupMembers.groupId, groupIdBatch)))
+            .run();
+        await input.tx
+            .delete(organizationReadModelGroupMemberships)
+            .where(and(eq(organizationReadModelGroupMemberships.organizationId, input.organizationId), inArray(organizationReadModelGroupMemberships.groupId, groupIdBatch)))
+            .run();
+    }
+}
+async function removeExistingMembershipRows(input) {
+    if (input.replaceAll) {
+        if (input.lane.deletedGroupIds.length > 0) {
+            throw new Error("Organization membership snapshot contains deletions");
+        }
+        return clearMembershipRows(input);
+    }
+    const replacedGroupIds = input.lane.groups.map((group) => group.groupId);
+    const removedGroupIds = [...replacedGroupIds, ...input.lane.deletedGroupIds];
+    if (removedGroupIds.length > 0) {
+        await deleteMembershipRows(input, removedGroupIds);
+    }
+}
+async function insertMembershipRows(input) {
+    if (input.lane.groups.length === 0) {
+        return;
+    }
+    const membershipRows = input.lane.groups.map((group) => ({
+        organizationId: input.organizationId,
+        groupId: group.groupId,
+        stateHash: group.stateHash,
+    }));
+    for (let index = 0; index < membershipRows.length; index += GROUP_MEMBERSHIP_BATCH_SIZE) {
+        await input.tx
+            .insert(organizationReadModelGroupMemberships)
+            .values(membershipRows.slice(index, index + GROUP_MEMBERSHIP_BATCH_SIZE))
+            .run();
+    }
+    const memberRows = input.lane.groups.flatMap((group) => group.members.map((member, sortOrder) => ({
+        organizationId: input.organizationId,
+        groupId: group.groupId,
+        userId: member.userId,
+        sortOrder,
+        stateHash: group.stateHash,
+        role: member.role,
+        signingKeyFingerprint: member.signingKeyFingerprint,
+        signingPublicKey: member.signingPublicKey,
+        encapsulationPublicKey: member.encapsulationPublicKey,
+        encapsulationKeyFingerprint: member.encapsulationKeyFingerprint,
+    })));
+    for (let index = 0; index < memberRows.length; index += GROUP_MEMBER_INSERT_BATCH_SIZE) {
+        await input.tx
+            .insert(organizationReadModelGroupMembers)
+            .values(memberRows.slice(index, index + GROUP_MEMBER_INSERT_BATCH_SIZE))
+            .run();
+    }
+}
+export async function applyGroupMembershipsLane(input) {
+    assertUniqueMembershipRows(input.lane);
+    await removeExistingMembershipRows(input);
+    await insertMembershipRows(input);
+}
+export async function assertStoredGroupMembershipBindings(input) {
+    const groups = await input.tx
+        .select({
+        groupId: organizationReadModelGroups.groupId,
+        memberCount: organizationReadModelGroups.memberCount,
+        stateHash: organizationReadModelGroups.stateHash,
+    })
+        .from(organizationReadModelGroups)
+        .where(eq(organizationReadModelGroups.organizationId, input.organizationId));
+    const heads = await input.tx
+        .select({
+        groupId: organizationReadModelGroupMemberships.groupId,
+        stateHash: organizationReadModelGroupMemberships.stateHash,
+    })
+        .from(organizationReadModelGroupMemberships)
+        .where(eq(organizationReadModelGroupMemberships.organizationId, input.organizationId));
+    const members = await input.tx
+        .select({
+        groupId: organizationReadModelGroupMembers.groupId,
+        stateHash: organizationReadModelGroupMembers.stateHash,
+    })
+        .from(organizationReadModelGroupMembers)
+        .where(eq(organizationReadModelGroupMembers.organizationId, input.organizationId));
+    const headsByGroupId = new Map(heads.map((head) => [head.groupId, head]));
+    const expectedHeadIds = new Set([
+        input.memberGroupId,
+        ...groups.flatMap((group) => (group.stateHash ? [group.groupId] : [])),
+    ]);
+    if (heads.length !== expectedHeadIds.size ||
+        heads.some((head) => !expectedHeadIds.has(head.groupId))) {
+        throw new OrganizationReadModelBindingError("Organization group membership coverage is inconsistent");
+    }
+    const memberCountsByGroupId = new Map();
+    for (const member of members) {
+        const head = headsByGroupId.get(member.groupId);
+        if (!head || head.stateHash !== member.stateHash) {
+            throw new OrganizationReadModelBindingError("Organization group membership member state is inconsistent");
+        }
+        memberCountsByGroupId.set(member.groupId, (memberCountsByGroupId.get(member.groupId) ?? 0) + 1);
+    }
+    for (const group of groups) {
+        const head = headsByGroupId.get(group.groupId);
+        if (group.stateHash === null) {
+            continue;
+        }
+        if (!head ||
+            head.stateHash !== group.stateHash ||
+            group.memberCount === null ||
+            group.memberCount !== (memberCountsByGroupId.get(group.groupId) ?? 0)) {
+            throw new OrganizationReadModelBindingError("Organization group membership state hash is inconsistent");
+        }
+    }
+}
+//# sourceMappingURL=organizationReadModelMembershipPersistence.js.map

package/data/persistence/organizations/organizationReadModelMembershipPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationReadModelMembershipPersistence.js","sourceRoot":"","sources":["organizationReadModelMembershipPersistence.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,iCAAiC,EACjC,qCAAqC,EACrC,2BAA2B,GAC5B,MAAM,0CAA0C,CAAC;AAGlD,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAE1C,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAC1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IAClD,CAAC;CACF;AAED,SAAS,mBAAmB,CAC1B,MAAuD;IAEvD,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,SAAS,0BAA0B,CACjC,IAAmD;IAEnD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC1D,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AASD,KAAK,UAAU,mBAAmB,CAChC,KAAqC;IAErC,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,iCAAiC,CAAC;SACzC,KAAK,CACJ,EAAE,CACA,iCAAiC,CAAC,cAAc,EAChD,KAAK,CAAC,cAAc,CACrB,CACF;SACA,GAAG,EAAE,CAAC;IACT,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,qCAAqC,CAAC;SAC7C,KAAK,CACJ,EAAE,CACA,qCAAqC,CAAC,cAAc,EACpD,KAAK,CAAC,cAAc,CACrB,CACF;SACA,GAAG,EAAE,CAAC;AACX,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAAqC,EACrC,QAAkB;IAElB,KACE,IAAI,KAAK,GAAG,CAAC,EACb,KAAK,GAAG,QAAQ,CAAC,MAAM,EACvB,KAAK,IAAI,2BAA2B,EACpC,CAAC;QACD,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CACjC,KAAK,EACL,KAAK,GAAG,2BAA2B,CACpC,CAAC;QACF,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,iCAAiC,CAAC;aACzC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,iCAAiC,CAAC,cAAc,EAChD,KAAK,CAAC,cAAc,CACrB,EACD,OAAO,CAAC,iCAAiC,CAAC,OAAO,EAAE,YAAY,CAAC,CACjE,CACF;aACA,GAAG,EAAE,CAAC;QACT,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,qCAAqC,CAAC;aAC7C,KAAK,CACJ,GAAG,CACD,EAAE,CACA,qCAAqC,CAAC,cAAc,EACpD,KAAK,CAAC,cAAc,CACrB,EACD,OAAO,CAAC,qCAAqC,CAAC,OAAO,EAAE,YAAY,CAAC,CACrE,CACF;aACA,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,KAAqC;IAErC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,IAAI,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzE,MAAM,eAAe,GAAG,CAAC,GAAG,gBAAgB,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7E,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,oBAAoB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAAqC;IAErC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO;IACT,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC,CAAC;IACJ,KACE,IAAI,KAAK,GAAG,CAAC,EACb,KAAK,GAAG,cAAc,CAAC,MAAM,EAC7B,KAAK,IAAI,2BAA2B,EACpC,CAAC;QACD,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,qCAAqC,CAAC;aAC7C,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,2BAA2B,CAAC,CAAC;aACxE,GAAG,EAAE,CAAC;IACX,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACrD,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACxC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS;QACT,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;QACrD,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;KAChE,CAAC,CAAC,CACJ,CAAC;IACF,KACE,IAAI,KAAK,GAAG,CAAC,EACb,KAAK,GAAG,UAAU,CAAC,MAAM,EACzB,KAAK,IAAI,8BAA8B,EACvC,CAAC;QACD,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,iCAAiC,CAAC;aACzC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,8BAA8B,CAAC,CAAC;aACvE,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAqC;IAErC,0BAA0B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,4BAA4B,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,KAIzD;IACC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,EAAE;SAC1B,MAAM,CAAC;QACN,OAAO,EAAE,2BAA2B,CAAC,OAAO;QAC5C,WAAW,EAAE,2BAA2B,CAAC,WAAW;QACpD,SAAS,EAAE,2BAA2B,CAAC,SAAS;KACjD,CAAC;SACD,IAAI,CAAC,2BAA2B,CAAC;SACjC,KAAK,CACJ,EAAE,CAAC,2BAA2B,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CACrE,CAAC;IACJ,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,EAAE;SACzB,MAAM,CAAC;QACN,OAAO,EAAE,qCAAqC,CAAC,OAAO;QACtD,SAAS,EAAE,qCAAqC,CAAC,SAAS;KAC3D,CAAC;SACD,IAAI,CAAC,qCAAqC,CAAC;SAC3C,KAAK,CACJ,EAAE,CACA,qCAAqC,CAAC,cAAc,EACpD,KAAK,CAAC,cAAc,CACrB,CACF,CAAC;IACJ,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,EAAE;SAC3B,MAAM,CAAC;QACN,OAAO,EAAE,iCAAiC,CAAC,OAAO;QAClD,SAAS,EAAE,iCAAiC,CAAC,SAAS;KACvD,CAAC;SACD,IAAI,CAAC,iCAAiC,CAAC;SACvC,KAAK,CACJ,EAAE,CACA,iCAAiC,CAAC,cAAc,EAChD,KAAK,CAAC,cAAc,CACrB,CACF,CAAC;IACJ,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;QAC9B,KAAK,CAAC,aAAa;QACnB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KACvE,CAAC,CAAC;IACH,IACE,KAAK,CAAC,MAAM,KAAK,eAAe,CAAC,IAAI;QACrC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EACxD,CAAC;QACD,MAAM,IAAI,iCAAiC,CACzC,wDAAwD,CACzD,CAAC;IACJ,CAAC;IAED,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YACjD,MAAM,IAAI,iCAAiC,CACzC,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,qBAAqB,CAAC,GAAG,CACvB,MAAM,CAAC,OAAO,EACd,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CACrD,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IACE,CAAC,IAAI;YACL,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAClC,KAAK,CAAC,WAAW,KAAK,IAAI;YAC1B,KAAK,CAAC,WAAW,KAAK,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EACrE,CAAC;YACD,MAAM,IAAI,iCAAiC,CACzC,0DAA0D,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import type {\n  OrganizationGroupMemberResponse,\n  OrganizationReadModelGroupMembershipsResponse,\n} from \"@tearleads/validators/response\";\nimport { and, eq, inArray } from \"drizzle-orm\";\nimport {\n  organizationReadModelGroupMembers,\n  organizationReadModelGroupMemberships,\n  organizationReadModelGroups,\n} from \"../../sqlite/organizationReadModelSchema\";\nimport type { ClientSQLiteTransactionScope } from \"../../sqlite/sqlitePersistenceRuntime\";\n\nconst GROUP_MEMBERSHIP_BATCH_SIZE = 90;\nconst GROUP_MEMBER_INSERT_BATCH_SIZE = 30;\n\nexport class OrganizationReadModelBindingError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"OrganizationReadModelBindingError\";\n  }\n}\n\nfunction membershipMemberKey(\n  member: Pick<OrganizationGroupMemberResponse, \"userId\">,\n): string {\n  return member.userId;\n}\n\nfunction assertUniqueMembershipRows(\n  lane: OrganizationReadModelGroupMembershipsResponse,\n): void {\n  const groupIds = lane.groups.map((group) => group.groupId);\n  if (new Set(groupIds).size !== groupIds.length) {\n    throw new Error(\n      \"Organization read-model group memberships contain duplicate groups\",\n    );\n  }\n  if (new Set(lane.deletedGroupIds).size !== lane.deletedGroupIds.length) {\n    throw new Error(\n      \"Organization read-model group memberships contain duplicate deletions\",\n    );\n  }\n  const deletedGroupIds = new Set(lane.deletedGroupIds);\n  if (groupIds.some((groupId) => deletedGroupIds.has(groupId))) {\n    throw new Error(\n      \"Organization read-model group membership is both replaced and deleted\",\n    );\n  }\n  for (const group of lane.groups) {\n    const memberKeys = group.members.map(membershipMemberKey);\n    if (new Set(memberKeys).size !== memberKeys.length) {\n      throw new Error(\n        \"Organization read-model group membership contains duplicate members\",\n      );\n    }\n  }\n}\n\ninterface ApplyGroupMembershipsLaneInput {\n  readonly lane: OrganizationReadModelGroupMembershipsResponse;\n  readonly organizationId: string;\n  readonly replaceAll: boolean;\n  readonly tx: ClientSQLiteTransactionScope;\n}\n\nasync function clearMembershipRows(\n  input: ApplyGroupMembershipsLaneInput,\n): Promise<void> {\n  await input.tx\n    .delete(organizationReadModelGroupMembers)\n    .where(\n      eq(\n        organizationReadModelGroupMembers.organizationId,\n        input.organizationId,\n      ),\n    )\n    .run();\n  await input.tx\n    .delete(organizationReadModelGroupMemberships)\n    .where(\n      eq(\n        organizationReadModelGroupMemberships.organizationId,\n        input.organizationId,\n      ),\n    )\n    .run();\n}\n\nasync function deleteMembershipRows(\n  input: ApplyGroupMembershipsLaneInput,\n  groupIds: string[],\n): Promise<void> {\n  for (\n    let index = 0;\n    index < groupIds.length;\n    index += GROUP_MEMBERSHIP_BATCH_SIZE\n  ) {\n    const groupIdBatch = groupIds.slice(\n      index,\n      index + GROUP_MEMBERSHIP_BATCH_SIZE,\n    );\n    await input.tx\n      .delete(organizationReadModelGroupMembers)\n      .where(\n        and(\n          eq(\n            organizationReadModelGroupMembers.organizationId,\n            input.organizationId,\n          ),\n          inArray(organizationReadModelGroupMembers.groupId, groupIdBatch),\n        ),\n      )\n      .run();\n    await input.tx\n      .delete(organizationReadModelGroupMemberships)\n      .where(\n        and(\n          eq(\n            organizationReadModelGroupMemberships.organizationId,\n            input.organizationId,\n          ),\n          inArray(organizationReadModelGroupMemberships.groupId, groupIdBatch),\n        ),\n      )\n      .run();\n  }\n}\n\nasync function removeExistingMembershipRows(\n  input: ApplyGroupMembershipsLaneInput,\n): Promise<void> {\n  if (input.replaceAll) {\n    if (input.lane.deletedGroupIds.length > 0) {\n      throw new Error(\"Organization membership snapshot contains deletions\");\n    }\n    return clearMembershipRows(input);\n  }\n  const replacedGroupIds = input.lane.groups.map((group) => group.groupId);\n  const removedGroupIds = [...replacedGroupIds, ...input.lane.deletedGroupIds];\n  if (removedGroupIds.length > 0) {\n    await deleteMembershipRows(input, removedGroupIds);\n  }\n}\n\nasync function insertMembershipRows(\n  input: ApplyGroupMembershipsLaneInput,\n): Promise<void> {\n  if (input.lane.groups.length === 0) {\n    return;\n  }\n  const membershipRows = input.lane.groups.map((group) => ({\n    organizationId: input.organizationId,\n    groupId: group.groupId,\n    stateHash: group.stateHash,\n  }));\n  for (\n    let index = 0;\n    index < membershipRows.length;\n    index += GROUP_MEMBERSHIP_BATCH_SIZE\n  ) {\n    await input.tx\n      .insert(organizationReadModelGroupMemberships)\n      .values(membershipRows.slice(index, index + GROUP_MEMBERSHIP_BATCH_SIZE))\n      .run();\n  }\n\n  const memberRows = input.lane.groups.flatMap((group) =>\n    group.members.map((member, sortOrder) => ({\n      organizationId: input.organizationId,\n      groupId: group.groupId,\n      userId: member.userId,\n      sortOrder,\n      stateHash: group.stateHash,\n      role: member.role,\n      signingKeyFingerprint: member.signingKeyFingerprint,\n      signingPublicKey: member.signingPublicKey,\n      encapsulationPublicKey: member.encapsulationPublicKey,\n      encapsulationKeyFingerprint: member.encapsulationKeyFingerprint,\n    })),\n  );\n  for (\n    let index = 0;\n    index < memberRows.length;\n    index += GROUP_MEMBER_INSERT_BATCH_SIZE\n  ) {\n    await input.tx\n      .insert(organizationReadModelGroupMembers)\n      .values(memberRows.slice(index, index + GROUP_MEMBER_INSERT_BATCH_SIZE))\n      .run();\n  }\n}\n\nexport async function applyGroupMembershipsLane(\n  input: ApplyGroupMembershipsLaneInput,\n): Promise<void> {\n  assertUniqueMembershipRows(input.lane);\n  await removeExistingMembershipRows(input);\n  await insertMembershipRows(input);\n}\n\nexport async function assertStoredGroupMembershipBindings(input: {\n  readonly memberGroupId: string;\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  const groups = await input.tx\n    .select({\n      groupId: organizationReadModelGroups.groupId,\n      memberCount: organizationReadModelGroups.memberCount,\n      stateHash: organizationReadModelGroups.stateHash,\n    })\n    .from(organizationReadModelGroups)\n    .where(\n      eq(organizationReadModelGroups.organizationId, input.organizationId),\n    );\n  const heads = await input.tx\n    .select({\n      groupId: organizationReadModelGroupMemberships.groupId,\n      stateHash: organizationReadModelGroupMemberships.stateHash,\n    })\n    .from(organizationReadModelGroupMemberships)\n    .where(\n      eq(\n        organizationReadModelGroupMemberships.organizationId,\n        input.organizationId,\n      ),\n    );\n  const members = await input.tx\n    .select({\n      groupId: organizationReadModelGroupMembers.groupId,\n      stateHash: organizationReadModelGroupMembers.stateHash,\n    })\n    .from(organizationReadModelGroupMembers)\n    .where(\n      eq(\n        organizationReadModelGroupMembers.organizationId,\n        input.organizationId,\n      ),\n    );\n  const headsByGroupId = new Map(heads.map((head) => [head.groupId, head]));\n  const expectedHeadIds = new Set([\n    input.memberGroupId,\n    ...groups.flatMap((group) => (group.stateHash ? [group.groupId] : [])),\n  ]);\n  if (\n    heads.length !== expectedHeadIds.size ||\n    heads.some((head) => !expectedHeadIds.has(head.groupId))\n  ) {\n    throw new OrganizationReadModelBindingError(\n      \"Organization group membership coverage is inconsistent\",\n    );\n  }\n\n  const memberCountsByGroupId = new Map<string, number>();\n  for (const member of members) {\n    const head = headsByGroupId.get(member.groupId);\n    if (!head || head.stateHash !== member.stateHash) {\n      throw new OrganizationReadModelBindingError(\n        \"Organization group membership member state is inconsistent\",\n      );\n    }\n    memberCountsByGroupId.set(\n      member.groupId,\n      (memberCountsByGroupId.get(member.groupId) ?? 0) + 1,\n    );\n  }\n\n  for (const group of groups) {\n    const head = headsByGroupId.get(group.groupId);\n    if (group.stateHash === null) {\n      continue;\n    }\n    if (\n      !head ||\n      head.stateHash !== group.stateHash ||\n      group.memberCount === null ||\n      group.memberCount !== (memberCountsByGroupId.get(group.groupId) ?? 0)\n    ) {\n      throw new OrganizationReadModelBindingError(\n        \"Organization group membership state hash is inconsistent\",\n      );\n    }\n  }\n}\n"]}