npm - @tearleads/client-sdk - Versions diffs - 0.1.104 → 0.1.106 - Mend

@tearleads/client-sdk 0.1.104 → 0.1.106

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (48) hide show

package/internal/validators/operation/organizations.d.ts CHANGED Viewed

@@ -7458,6 +7458,13 @@ export declare const getOrganizationReadModelOperation: Omit<{
                             organizationId: string;
                             userId: string;
                             requestedAt: string;
+                            membersHead: {
+                                principalId: string;
+                                version: number;
+                                keyEpoch: number;
+                                stateHash: string;
+                                keyFingerprint: string;
+                            };
                             signature: string;
                         } | null;
                         profileDocumentId: string | null;
@@ -7479,6 +7486,13 @@ export declare const getOrganizationReadModelOperation: Omit<{
                             organizationId: string;
                             userId: string;
                             requestedAt: string;
+                            membersHead: {
+                                principalId: string;
+                                version: number;
+                                keyEpoch: number;
+                                stateHash: string;
+                                keyFingerprint: string;
+                            };
                             signature: string;
                         } | null;
                         profileDocumentId: string | null;
@@ -7611,6 +7625,13 @@ export declare const getOrganizationReadModelOperation: Omit<{
                             organizationId: string;
                             userId: string;
                             requestedAt: string;
+                            membersHead: {
+                                principalId: string;
+                                version: number;
+                                keyEpoch: number;
+                                stateHash: string;
+                                keyFingerprint: string;
+                            };
                             signature: string;
                         } | null;
                         profileDocumentId: string | null;
@@ -7632,6 +7653,13 @@ export declare const getOrganizationReadModelOperation: Omit<{
                             organizationId: string;
                             userId: string;
                             requestedAt: string;
+                            membersHead: {
+                                principalId: string;
+                                version: number;
+                                keyEpoch: number;
+                                stateHash: string;
+                                keyFingerprint: string;
+                            };
                             signature: string;
                         } | null;
                         profileDocumentId: string | null;
@@ -10777,6 +10805,13 @@ export declare const updateOrganizationRosterEntryOperation: Omit<{
                 organizationId: string;
                 userId: string;
                 requestedAt: string;
+                membersHead: {
+                    principalId: string;
+                    version: number;
+                    keyEpoch: number;
+                    stateHash: string;
+                    keyFingerprint: string;
+                };
                 signature: string;
             } | null;
             profileDocumentId: string | null;
@@ -10798,6 +10833,13 @@ export declare const updateOrganizationRosterEntryOperation: Omit<{
                 organizationId: string;
                 userId: string;
                 requestedAt: string;
+                membersHead: {
+                    principalId: string;
+                    version: number;
+                    keyEpoch: number;
+                    stateHash: string;
+                    keyFingerprint: string;
+                };
                 signature: string;
             } | null;
             profileDocumentId: string | null;
@@ -10819,6 +10861,13 @@ export declare const updateOrganizationRosterEntryOperation: Omit<{
                 organizationId: string;
                 userId: string;
                 requestedAt: string;
+                membersHead: {
+                    principalId: string;
+                    version: number;
+                    keyEpoch: number;
+                    stateHash: string;
+                    keyFingerprint: string;
+                };
                 signature: string;
             } | null;
             profileDocumentId: string | null;
@@ -10840,6 +10889,13 @@ export declare const updateOrganizationRosterEntryOperation: Omit<{
                 organizationId: string;
                 userId: string;
                 requestedAt: string;
+                membersHead: {
+                    principalId: string;
+                    version: number;
+                    keyEpoch: number;
+                    stateHash: string;
+                    keyFingerprint: string;
+                };
                 signature: string;
             } | null;
             profileDocumentId: string | null;

package/internal/validators/response/organization.d.ts CHANGED Viewed

@@ -24,6 +24,13 @@ export declare const OrganizationDirectoryUserResponseShape: {
         organizationId: z.ZodCustom<string, string>;
         userId: z.ZodCustom<string, string>;
         requestedAt: z.ZodString;
+        membersHead: z.ZodObject<{
+            principalId: z.ZodCustom<string, string>;
+            version: z.ZodCustom<number, number>;
+            keyEpoch: z.ZodCustom<number, number>;
+            stateHash: z.ZodString;
+            keyFingerprint: z.ZodString;
+        }, z.core.$strict>;
         signature: z.ZodString;
     }, z.core.$strict>>;
     profileDocumentId: z.ZodNullable<z.ZodString>;
@@ -46,6 +53,13 @@ export declare const OrganizationDirectoryUserResponseSchema: z.ZodType<{
         organizationId: string;
         userId: string;
         requestedAt: string;
+        membersHead: {
+            principalId: string;
+            version: number;
+            keyEpoch: number;
+            stateHash: string;
+            keyFingerprint: string;
+        };
         signature: string;
     } | null;
     profileDocumentId: string | null;
@@ -67,6 +81,13 @@ export declare const OrganizationDirectoryUserResponseSchema: z.ZodType<{
         organizationId: string;
         userId: string;
         requestedAt: string;
+        membersHead: {
+            principalId: string;
+            version: number;
+            keyEpoch: number;
+            stateHash: string;
+            keyFingerprint: string;
+        };
         signature: string;
     } | null;
     profileDocumentId: string | null;
@@ -88,6 +109,13 @@ export declare const OrganizationDirectoryUserResponseSchema: z.ZodType<{
         organizationId: string;
         userId: string;
         requestedAt: string;
+        membersHead: {
+            principalId: string;
+            version: number;
+            keyEpoch: number;
+            stateHash: string;
+            keyFingerprint: string;
+        };
         signature: string;
     } | null;
     profileDocumentId: string | null;
@@ -109,6 +137,13 @@ export declare const OrganizationDirectoryUserResponseSchema: z.ZodType<{
         organizationId: string;
         userId: string;
         requestedAt: string;
+        membersHead: {
+            principalId: string;
+            version: number;
+            keyEpoch: number;
+            stateHash: string;
+            keyFingerprint: string;
+        };
         signature: string;
     } | null;
     profileDocumentId: string | null;
@@ -141,6 +176,13 @@ export declare const OrganizationDirectoryResponseSchema: z.ZodType<{
             organizationId: string;
             userId: string;
             requestedAt: string;
+            membersHead: {
+                principalId: string;
+                version: number;
+                keyEpoch: number;
+                stateHash: string;
+                keyFingerprint: string;
+            };
             signature: string;
         } | null;
         profileDocumentId: string | null;
@@ -169,6 +211,13 @@ export declare const OrganizationDirectoryResponseSchema: z.ZodType<{
             organizationId: string;
             userId: string;
             requestedAt: string;
+            membersHead: {
+                principalId: string;
+                version: number;
+                keyEpoch: number;
+                stateHash: string;
+                keyFingerprint: string;
+            };
             signature: string;
         } | null;
         profileDocumentId: string | null;
@@ -197,6 +246,13 @@ export declare const OrganizationDirectoryResponseSchema: z.ZodType<{
             organizationId: string;
             userId: string;
             requestedAt: string;
+            membersHead: {
+                principalId: string;
+                version: number;
+                keyEpoch: number;
+                stateHash: string;
+                keyFingerprint: string;
+            };
             signature: string;
         } | null;
         profileDocumentId: string | null;
@@ -225,6 +281,13 @@ export declare const OrganizationDirectoryResponseSchema: z.ZodType<{
             organizationId: string;
             userId: string;
             requestedAt: string;
+            membersHead: {
+                principalId: string;
+                version: number;
+                keyEpoch: number;
+                stateHash: string;
+                keyFingerprint: string;
+            };
             signature: string;
         } | null;
         profileDocumentId: string | null;
@@ -2041,6 +2104,13 @@ export declare const OrganizationUserDetailResponseSchema: z.ZodType<{
             organizationId: string;
             userId: string;
             requestedAt: string;
+            membersHead: {
+                principalId: string;
+                version: number;
+                keyEpoch: number;
+                stateHash: string;
+                keyFingerprint: string;
+            };
             signature: string;
         } | null;
         profileDocumentId: string | null;
@@ -2114,6 +2184,13 @@ export declare const OrganizationUserDetailResponseSchema: z.ZodType<{
             organizationId: string;
             userId: string;
             requestedAt: string;
+            membersHead: {
+                principalId: string;
+                version: number;
+                keyEpoch: number;
+                stateHash: string;
+                keyFingerprint: string;
+            };
             signature: string;
         } | null;
         profileDocumentId: string | null;
@@ -2187,6 +2264,13 @@ export declare const OrganizationUserDetailResponseSchema: z.ZodType<{
             organizationId: string;
             userId: string;
             requestedAt: string;
+            membersHead: {
+                principalId: string;
+                version: number;
+                keyEpoch: number;
+                stateHash: string;
+                keyFingerprint: string;
+            };
             signature: string;
         } | null;
         profileDocumentId: string | null;
@@ -2260,6 +2344,13 @@ export declare const OrganizationUserDetailResponseSchema: z.ZodType<{
             organizationId: string;
             userId: string;
             requestedAt: string;
+            membersHead: {
+                principalId: string;
+                version: number;
+                keyEpoch: number;
+                stateHash: string;
+                keyFingerprint: string;
+            };
             signature: string;
         } | null;
         profileDocumentId: string | null;

package/internal/validators/response/organizationReadModel.d.ts CHANGED Viewed

@@ -15,6 +15,13 @@ declare const OrganizationReadModelDirectoryResponseSchema: z.ZodObject<{
             organizationId: string;
             userId: string;
             requestedAt: string;
+            membersHead: {
+                principalId: string;
+                version: number;
+                keyEpoch: number;
+                stateHash: string;
+                keyFingerprint: string;
+            };
             signature: string;
         } | null;
         profileDocumentId: string | null;
@@ -36,6 +43,13 @@ declare const OrganizationReadModelDirectoryResponseSchema: z.ZodObject<{
             organizationId: string;
             userId: string;
             requestedAt: string;
+            membersHead: {
+                principalId: string;
+                version: number;
+                keyEpoch: number;
+                stateHash: string;
+                keyFingerprint: string;
+            };
             signature: string;
         } | null;
         profileDocumentId: string | null;
@@ -156,6 +170,13 @@ declare const OrganizationReadModelSnapshotResponseSchema: z.ZodObject<{
                     organizationId: string;
                     userId: string;
                     requestedAt: string;
+                    membersHead: {
+                        principalId: string;
+                        version: number;
+                        keyEpoch: number;
+                        stateHash: string;
+                        keyFingerprint: string;
+                    };
                     signature: string;
                 } | null;
                 profileDocumentId: string | null;
@@ -177,6 +198,13 @@ declare const OrganizationReadModelSnapshotResponseSchema: z.ZodObject<{
                     organizationId: string;
                     userId: string;
                     requestedAt: string;
+                    membersHead: {
+                        principalId: string;
+                        version: number;
+                        keyEpoch: number;
+                        stateHash: string;
+                        keyFingerprint: string;
+                    };
                     signature: string;
                 } | null;
                 profileDocumentId: string | null;
@@ -309,6 +337,13 @@ declare const OrganizationReadModelDeltaResponseSchema: z.ZodObject<{
                     organizationId: string;
                     userId: string;
                     requestedAt: string;
+                    membersHead: {
+                        principalId: string;
+                        version: number;
+                        keyEpoch: number;
+                        stateHash: string;
+                        keyFingerprint: string;
+                    };
                     signature: string;
                 } | null;
                 profileDocumentId: string | null;
@@ -330,6 +365,13 @@ declare const OrganizationReadModelDeltaResponseSchema: z.ZodObject<{
                     organizationId: string;
                     userId: string;
                     requestedAt: string;
+                    membersHead: {
+                        principalId: string;
+                        version: number;
+                        keyEpoch: number;
+                        stateHash: string;
+                        keyFingerprint: string;
+                    };
                     signature: string;
                 } | null;
                 profileDocumentId: string | null;
@@ -463,6 +505,13 @@ export declare const OrganizationReadModelResponseSchema: z.ZodDiscriminatedUnio
                     organizationId: string;
                     userId: string;
                     requestedAt: string;
+                    membersHead: {
+                        principalId: string;
+                        version: number;
+                        keyEpoch: number;
+                        stateHash: string;
+                        keyFingerprint: string;
+                    };
                     signature: string;
                 } | null;
                 profileDocumentId: string | null;
@@ -484,6 +533,13 @@ export declare const OrganizationReadModelResponseSchema: z.ZodDiscriminatedUnio
                     organizationId: string;
                     userId: string;
                     requestedAt: string;
+                    membersHead: {
+                        principalId: string;
+                        version: number;
+                        keyEpoch: number;
+                        stateHash: string;
+                        keyFingerprint: string;
+                    };
                     signature: string;
                 } | null;
                 profileDocumentId: string | null;
@@ -616,6 +672,13 @@ export declare const OrganizationReadModelResponseSchema: z.ZodDiscriminatedUnio
                     organizationId: string;
                     userId: string;
                     requestedAt: string;
+                    membersHead: {
+                        principalId: string;
+                        version: number;
+                        keyEpoch: number;
+                        stateHash: string;
+                        keyFingerprint: string;
+                    };
                     signature: string;
                 } | null;
                 profileDocumentId: string | null;
@@ -637,6 +700,13 @@ export declare const OrganizationReadModelResponseSchema: z.ZodDiscriminatedUnio
                     organizationId: string;
                     userId: string;
                     requestedAt: string;
+                    membersHead: {
+                        principalId: string;
+                        version: number;
+                        keyEpoch: number;
+                        stateHash: string;
+                        keyFingerprint: string;
+                    };
                     signature: string;
                 } | null;
                 profileDocumentId: string | null;

package/internal/validators/util/index.d.ts CHANGED Viewed

@@ -6,7 +6,7 @@ export { MAX_CONTAINER_PATH_LENGTH } from "./containerLimits.js";
 export { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS, MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS, MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS, MAX_DOCUMENT_SYNC_OUTGOING_UPDATES, MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH, MAX_DOCUMENT_SYNC_REQUEST_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_ENVELOPE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_BYTES, MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES, MAX_DOCUMENT_SYNC_RESPONSE_UPDATE_PAGE_BYTES, } from "./documentSyncLimits.js";
 export { isSerializedKeyEnvelope, isSerializedKeyEnvelopeArray, type SerializedKeyEnvelope, } from "./keyEnvelope.js";
 export { KNOWN_MANIFEST_HINT_LIMIT, KnownManifestsHeadersSchema, parseKnownManifestHints, } from "./knownManifestWire.js";
-export { isOrganizationLeaveRequest, type OrganizationLeaveRequest, OrganizationLeaveRequestSchema, } from "./organizationLeaveRequest.js";
+export { isOrganizationLeaveRequest, type OrganizationLeaveRequest, type OrganizationLeaveRequestMembersHead, OrganizationLeaveRequestSchema, } from "./organizationLeaveRequest.js";
 export { isOrganizationReplacementAuthorization, type OrganizationReplacementAuthorization, OrganizationReplacementAuthorizationSchema, } from "./organizationReplacement.js";
 export { PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT, PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT, } from "./principalHistoryWire.js";
 export { hasArrayProperty, hasBooleanProperty, hasNonEmptyStringProperty, hasNullableNumberProperty, hasNullableStringProperty, hasNumberProperty, hasObjectProperty, hasOptionalStringProperty, hasPositiveIntegerProperty, hasPropertyValue, hasStringProperty, isNonEmptyStringArray, isOptionalRecordArray, isOptionalRecordArrayArray, isRecordArray, isRecordArrayArray, isStringArray, } from "./properties.js";

package/internal/validators/util/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,mCAAmC,EAGnC,sCAAsC,EACtC,8BAA8B,EAC9B,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,kCAAkC,EAClC,uCAAuC,GACxC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAE9B,iCAAiC,EAEjC,6BAA6B,EAE7B,mCAAmC,EACnC,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,4BAA4B,EAC5B,uCAAuC,EACvC,mCAAmC,EACnC,mCAAmC,EACnC,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,8CAA8C,EAC9C,gDAAgD,EAChD,wCAAwC,EACxC,yCAAyC,EACzC,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EACL,yCAAyC,EACzC,qCAAqC,EACrC,qCAAqC,EACrC,kCAAkC,EAClC,oCAAoC,EACpC,+BAA+B,EAC/B,yCAAyC,EACzC,qCAAqC,EACrC,uCAAuC,EACvC,4CAA4C,GAC7C,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,EACvB,4BAA4B,GAE7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,0BAA0B,~~EAE1B~~,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sCAAsC,EAEtC,0CAA0C,GAC3C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,0BAA0B,EAC1B,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,aAAa,EACb,kBAAkB,EAClB,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC","sourcesContent":["export {\n type AccessEventBundleWireResponse,\n AccessEventBundleWireResponseSchema,\n type AccessManifestBundleWire,\n type AccessManifestBundleWireResponse,\n AccessManifestBundleWireResponseSchema,\n AccessManifestBundleWireSchema,\n isAccessEventBundleWireResponse,\n isAccessManifestBundleWire,\n isAccessManifestBundleWireArray,\n isAccessManifestBundleWireResponse,\n isOptionalAccessManifestBundleWireArray,\n} from \"./accessManifestBundle\";\nexport {\n MAX_INITIATE_PART_UPLOADS,\n MAX_MULTIPART_BLOB_PART_BYTES,\n} from \"./blob\";\nexport {\n blobPartContentMd5Schema,\n MAX_MULTIPART_BLOB_PART_NUMBER,\n type MultipartBlobPartDescriptor,\n MultipartBlobPartDescriptorSchema,\n type MultipartBlobPartUpload,\n MultipartBlobPartUploadSchema,\n type MultipartBlobPartUploadSource,\n MultipartBlobPartUploadSourceSchema,\n signedBlobUrlExpirySchema,\n signedBlobUrlSchema,\n} from \"./blobTransferSchemas\";\nexport {\n CONTAINER_KEK_LOG_PAGE_LIMIT,\n CONTAINER_KEK_LOG_PRINCIPAL_SCOPE_LIMIT,\n CONTAINER_KEK_WRAPS_PER_EPOCH_LIMIT,\n ContainerKekKeyringWireRecordSchema,\n isContainerKekKeyringWireRecord,\n MAX_CONTAINER_KEY_EPOCH,\n MAX_INLINE_CONTAINER_REKEYS,\n MAX_ROTATION_CONTAINER_REKEYS,\n MAX_SEALED_CONTAINER_KEK_KEYRING_BASE64_LENGTH,\n SEALED_CONTAINER_KEK_KEYRING_AEAD_OVERHEAD_BYTES,\n SEALED_CONTAINER_KEK_KEYRING_ENTRY_BYTES,\n SEALED_CONTAINER_KEK_KEYRING_HEADER_BYTES,\n sealedContainerKekKeyringBytes,\n} from \"./containerKekKeyringWire\";\nexport { MAX_CONTAINER_PATH_LENGTH } from \"./containerLimits\";\nexport {\n MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS,\n MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n MAX_DOCUMENT_SYNC_REQUEST_BYTES,\n MAX_DOCUMENT_SYNC_RESPONSE_ENVELOPE_BYTES,\n MAX_DOCUMENT_SYNC_RESPONSE_PAGE_BYTES,\n MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES,\n MAX_DOCUMENT_SYNC_RESPONSE_UPDATE_PAGE_BYTES,\n} from \"./documentSyncLimits\";\nexport {\n isSerializedKeyEnvelope,\n isSerializedKeyEnvelopeArray,\n type SerializedKeyEnvelope,\n} from \"./keyEnvelope\";\nexport {\n KNOWN_MANIFEST_HINT_LIMIT,\n KnownManifestsHeadersSchema,\n parseKnownManifestHints,\n} from \"./knownManifestWire\";\nexport {\n isOrganizationLeaveRequest,\n type OrganizationLeaveRequest,\n OrganizationLeaveRequestSchema,\n} from \"./organizationLeaveRequest\";\nexport {\n isOrganizationReplacementAuthorization,\n type OrganizationReplacementAuthorization,\n OrganizationReplacementAuthorizationSchema,\n} from \"./organizationReplacement\";\nexport {\n PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT,\n PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT,\n} from \"./principalHistoryWire\";\nexport {\n hasArrayProperty,\n hasBooleanProperty,\n hasNonEmptyStringProperty,\n hasNullableNumberProperty,\n hasNullableStringProperty,\n hasNumberProperty,\n hasObjectProperty,\n hasOptionalStringProperty,\n hasPositiveIntegerProperty,\n hasPropertyValue,\n hasStringProperty,\n isNonEmptyStringArray,\n isOptionalRecordArray,\n isOptionalRecordArrayArray,\n isRecordArray,\n isRecordArrayArray,\n isStringArray,\n} from \"./properties\";\nexport {\n AUTH_CHALLENGE_HEX_LENGTH,\n isAuthChallengeHexString,\n isByteArray,\n isByteArrayOfLength,\n isSha256HexString,\n ML_DSA87_PUBLIC_KEY_BYTES,\n ML_DSA87_SIGNATURE_BYTES,\n ML_KEM1024_PUBLIC_KEY_BYTES,\n SHA256_HEX_LENGTH,\n} from \"./protocol\";\nexport {\n CANONICAL_SIGNED_AT_PATTERN,\n isCanonicalSignedAt,\n MAX_SIGNED_AT_YEAR,\n MIN_SIGNED_AT_YEAR,\n SIGNED_AT_CONTRACT,\n} from \"./signedAt\";\nexport { isUuidV4String } from \"./uuid\";\nexport { isWalLsnString, parseWalLsn } from \"./walLsn\";\n"]}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,mCAAmC,EAGnC,sCAAsC,EACtC,8BAA8B,EAC9B,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,kCAAkC,EAClC,uCAAuC,GACxC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAE9B,iCAAiC,EAEjC,6BAA6B,EAE7B,mCAAmC,EACnC,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,4BAA4B,EAC5B,uCAAuC,EACvC,mCAAmC,EACnC,mCAAmC,EACnC,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,8CAA8C,EAC9C,gDAAgD,EAChD,wCAAwC,EACxC,yCAAyC,EACzC,8BAA8B,GAC/B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EACL,yCAAyC,EACzC,qCAAqC,EACrC,qCAAqC,EACrC,kCAAkC,EAClC,oCAAoC,EACpC,+BAA+B,EAC/B,yCAAyC,EACzC,qCAAqC,EACrC,uCAAuC,EACvC,4CAA4C,GAC7C,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,EACvB,4BAA4B,GAE7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,0BAA0B,EAG1B,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sCAAsC,EAEtC,0CAA0C,GAC3C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,yBAAyB,EACzB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,0BAA0B,EAC1B,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,aAAa,EACb,kBAAkB,EAClB,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,iBAAiB,GAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC","sourcesContent":["export {\n type AccessEventBundleWireResponse,\n AccessEventBundleWireResponseSchema,\n type AccessManifestBundleWire,\n type AccessManifestBundleWireResponse,\n AccessManifestBundleWireResponseSchema,\n AccessManifestBundleWireSchema,\n isAccessEventBundleWireResponse,\n isAccessManifestBundleWire,\n isAccessManifestBundleWireArray,\n isAccessManifestBundleWireResponse,\n isOptionalAccessManifestBundleWireArray,\n} from \"./accessManifestBundle\";\nexport {\n MAX_INITIATE_PART_UPLOADS,\n MAX_MULTIPART_BLOB_PART_BYTES,\n} from \"./blob\";\nexport {\n blobPartContentMd5Schema,\n MAX_MULTIPART_BLOB_PART_NUMBER,\n type MultipartBlobPartDescriptor,\n MultipartBlobPartDescriptorSchema,\n type MultipartBlobPartUpload,\n MultipartBlobPartUploadSchema,\n type MultipartBlobPartUploadSource,\n MultipartBlobPartUploadSourceSchema,\n signedBlobUrlExpirySchema,\n signedBlobUrlSchema,\n} from \"./blobTransferSchemas\";\nexport {\n CONTAINER_KEK_LOG_PAGE_LIMIT,\n CONTAINER_KEK_LOG_PRINCIPAL_SCOPE_LIMIT,\n CONTAINER_KEK_WRAPS_PER_EPOCH_LIMIT,\n ContainerKekKeyringWireRecordSchema,\n isContainerKekKeyringWireRecord,\n MAX_CONTAINER_KEY_EPOCH,\n MAX_INLINE_CONTAINER_REKEYS,\n MAX_ROTATION_CONTAINER_REKEYS,\n MAX_SEALED_CONTAINER_KEK_KEYRING_BASE64_LENGTH,\n SEALED_CONTAINER_KEK_KEYRING_AEAD_OVERHEAD_BYTES,\n SEALED_CONTAINER_KEK_KEYRING_ENTRY_BYTES,\n SEALED_CONTAINER_KEK_KEYRING_HEADER_BYTES,\n sealedContainerKekKeyringBytes,\n} from \"./containerKekKeyringWire\";\nexport { MAX_CONTAINER_PATH_LENGTH } from \"./containerLimits\";\nexport {\n MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS,\n MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n MAX_DOCUMENT_SYNC_REQUEST_BYTES,\n MAX_DOCUMENT_SYNC_RESPONSE_ENVELOPE_BYTES,\n MAX_DOCUMENT_SYNC_RESPONSE_PAGE_BYTES,\n MAX_DOCUMENT_SYNC_RESPONSE_PAGE_UPDATES,\n MAX_DOCUMENT_SYNC_RESPONSE_UPDATE_PAGE_BYTES,\n} from \"./documentSyncLimits\";\nexport {\n isSerializedKeyEnvelope,\n isSerializedKeyEnvelopeArray,\n type SerializedKeyEnvelope,\n} from \"./keyEnvelope\";\nexport {\n KNOWN_MANIFEST_HINT_LIMIT,\n KnownManifestsHeadersSchema,\n parseKnownManifestHints,\n} from \"./knownManifestWire\";\nexport {\n isOrganizationLeaveRequest,\n type OrganizationLeaveRequest,\n type OrganizationLeaveRequestMembersHead,\n OrganizationLeaveRequestSchema,\n} from \"./organizationLeaveRequest\";\nexport {\n isOrganizationReplacementAuthorization,\n type OrganizationReplacementAuthorization,\n OrganizationReplacementAuthorizationSchema,\n} from \"./organizationReplacement\";\nexport {\n PRINCIPAL_POLICY_HISTORY_PAGE_LIMIT,\n PRINCIPAL_POLICY_REPAIR_HEAD_LIMIT,\n} from \"./principalHistoryWire\";\nexport {\n hasArrayProperty,\n hasBooleanProperty,\n hasNonEmptyStringProperty,\n hasNullableNumberProperty,\n hasNullableStringProperty,\n hasNumberProperty,\n hasObjectProperty,\n hasOptionalStringProperty,\n hasPositiveIntegerProperty,\n hasPropertyValue,\n hasStringProperty,\n isNonEmptyStringArray,\n isOptionalRecordArray,\n isOptionalRecordArrayArray,\n isRecordArray,\n isRecordArrayArray,\n isStringArray,\n} from \"./properties\";\nexport {\n AUTH_CHALLENGE_HEX_LENGTH,\n isAuthChallengeHexString,\n isByteArray,\n isByteArrayOfLength,\n isSha256HexString,\n ML_DSA87_PUBLIC_KEY_BYTES,\n ML_DSA87_SIGNATURE_BYTES,\n ML_KEM1024_PUBLIC_KEY_BYTES,\n SHA256_HEX_LENGTH,\n} from \"./protocol\";\nexport {\n CANONICAL_SIGNED_AT_PATTERN,\n isCanonicalSignedAt,\n MAX_SIGNED_AT_YEAR,\n MIN_SIGNED_AT_YEAR,\n SIGNED_AT_CONTRACT,\n} from \"./signedAt\";\nexport { isUuidV4String } from \"./uuid\";\nexport { isWalLsnString, parseWalLsn } from \"./walLsn\";\n"]}

package/internal/validators/util/organizationLeaveRequest.d.ts CHANGED Viewed

@@ -1,14 +1,37 @@
 import { z } from "zod";
+/**
+ * The exact signed head of the organization's reserved Members group that the
+ * member saw when asking. Removing anyone from Members rotates its key epoch,
+ * so a request stays current only while the member has stayed in Members
+ * since this head: a request from an earlier membership never is.
+ */
+export declare const OrganizationLeaveRequestMembersHeadSchema: z.ZodObject<{
+    principalId: z.ZodCustom<string, string>;
+    version: z.ZodCustom<number, number>;
+    keyEpoch: z.ZodCustom<number, number>;
+    stateHash: z.ZodString;
+    keyFingerprint: z.ZodString;
+}, z.core.$strict>;
+export type OrganizationLeaveRequestMembersHead = z.infer<typeof OrganizationLeaveRequestMembersHeadSchema>;
 /**
  * A member's signed request to leave an organization. Signed with the member's
  * identity key so an administrator can tell the request came from the member,
- * not from the server. It authorizes nothing by itself: leaving still needs an
- * administrator to sign the member's removal from the organization's groups.
+ * not from the server, and bound to the Members head the member saw so it
+ * cannot outlive their membership. It authorizes nothing by itself: leaving
+ * still needs an administrator to sign the member's removal from the
+ * organization's groups.
  */
 export declare const OrganizationLeaveRequestSchema: z.ZodObject<{
     organizationId: z.ZodCustom<string, string>;
     userId: z.ZodCustom<string, string>;
     requestedAt: z.ZodString;
+    membersHead: z.ZodObject<{
+        principalId: z.ZodCustom<string, string>;
+        version: z.ZodCustom<number, number>;
+        keyEpoch: z.ZodCustom<number, number>;
+        stateHash: z.ZodString;
+        keyFingerprint: z.ZodString;
+    }, z.core.$strict>;
     signature: z.ZodString;
 }, z.core.$strict>;
 export type OrganizationLeaveRequest = z.infer<typeof OrganizationLeaveRequestSchema>;

package/internal/validators/util/organizationLeaveRequest.js CHANGED Viewed

@@ -1,12 +1,27 @@
 import { z } from "zod";
 import { registerJsonSchemaFragment } from "../jsonSchema.js";
-import { nonEmptyStringSchema, uuidV4StringSchema } from "../schema.js";
+import { boundedPositiveIntegerSchema, nonEmptyStringSchema, uuidV4StringSchema, } from "../schema.js";
 import { CANONICAL_SIGNED_AT_PATTERN, isCanonicalSignedAt, SIGNED_AT_CONTRACT, } from "./signedAt.js";
+/**
+ * The exact signed head of the organization's reserved Members group that the
+ * member saw when asking. Removing anyone from Members rotates its key epoch,
+ * so a request stays current only while the member has stayed in Members
+ * since this head: a request from an earlier membership never is.
+ */
+export const OrganizationLeaveRequestMembersHeadSchema = z.strictObject({
+    principalId: uuidV4StringSchema,
+    version: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),
+    keyEpoch: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),
+    stateHash: nonEmptyStringSchema,
+    keyFingerprint: nonEmptyStringSchema,
+});
 /**
  * A member's signed request to leave an organization. Signed with the member's
  * identity key so an administrator can tell the request came from the member,
- * not from the server. It authorizes nothing by itself: leaving still needs an
- * administrator to sign the member's removal from the organization's groups.
+ * not from the server, and bound to the Members head the member saw so it
+ * cannot outlive their membership. It authorizes nothing by itself: leaving
+ * still needs an administrator to sign the member's removal from the
+ * organization's groups.
  */
 export const OrganizationLeaveRequestSchema = z.strictObject({
     organizationId: uuidV4StringSchema,
@@ -14,6 +29,7 @@ export const OrganizationLeaveRequestSchema = z.strictObject({
     requestedAt: registerJsonSchemaFragment(z.string().refine(isCanonicalSignedAt, {
         message: `requestedAt must be ${SIGNED_AT_CONTRACT}`,
     }), { pattern: CANONICAL_SIGNED_AT_PATTERN.source, type: "string" }),
+    membersHead: OrganizationLeaveRequestMembersHeadSchema,
     signature: nonEmptyStringSchema,
 });
 export function isOrganizationLeaveRequest(value) {

package/internal/validators/util/organizationLeaveRequest.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"organizationLeaveRequest.js","sourceRoot":"","sources":["organizationLeaveRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,~~EAAE~~,oBAAoB,~~EAAE~~,kBAAkB,~~EAAE~~,MAAM,WAAW,CAAC;~~AACrE~~,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3D,cAAc,EAAE,kBAAkB;IAClC,MAAM,EAAE,kBAAkB;IAC1B,WAAW,EAAE,0BAA0B,CACrC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,mBAAmB,EAAE;QACrC,OAAO,EAAE,uBAAuB,kBAAkB,EAAE;KACrD,CAAC,EACF,EAAE,OAAO,EAAE,2BAA2B,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAChE;IACD,SAAS,EAAE,oBAAoB;CAChC,CAAC,CAAC;AAMH,MAAM,UAAU,0BAA0B,CACxC,KAAc;IAEd,OAAO,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACjE,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaFragment } from \"../jsonSchema\";\nimport { nonEmptyStringSchema, uuidV4StringSchema } from \"../schema\";\nimport {\n CANONICAL_SIGNED_AT_PATTERN,\n isCanonicalSignedAt,\n SIGNED_AT_CONTRACT,\n} from \"./signedAt\";\n\n/*\n A member's signed request to leave an organization. Signed with the member's\n * identity key so an administrator can tell the request came from the member,\n * not from the server. It authorizes nothing by itself: leaving still needs an\n * administrator to sign the member's removal from the organization's groups.\n */\nexport const OrganizationLeaveRequestSchema = z.strictObject({\n organizationId: uuidV4StringSchema,\n userId: uuidV4StringSchema,\n requestedAt: registerJsonSchemaFragment(\n z.string().refine(isCanonicalSignedAt, {\n message: `requestedAt must be ${SIGNED_AT_CONTRACT}`,\n }),\n { pattern: CANONICAL_SIGNED_AT_PATTERN.source, type: \"string\" },\n ),\n signature: nonEmptyStringSchema,\n});\n\nexport type OrganizationLeaveRequest = z.infer<\n typeof OrganizationLeaveRequestSchema\n>;\n\nexport function isOrganizationLeaveRequest(\n value: unknown,\n): value is OrganizationLeaveRequest {\n return OrganizationLeaveRequestSchema.safeParse(value).success;\n}\n"]}
1	+ {"version":3,"file":"organizationLeaveRequest.js","sourceRoot":"","sources":["organizationLeaveRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,YAAY,CAAC;IACtE,WAAW,EAAE,kBAAkB;IAC/B,OAAO,EAAE,4BAA4B,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC9D,QAAQ,EAAE,4BAA4B,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC/D,SAAS,EAAE,oBAAoB;IAC/B,cAAc,EAAE,oBAAoB;CACrC,CAAC,CAAC;AAMH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3D,cAAc,EAAE,kBAAkB;IAClC,MAAM,EAAE,kBAAkB;IAC1B,WAAW,EAAE,0BAA0B,CACrC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,mBAAmB,EAAE;QACrC,OAAO,EAAE,uBAAuB,kBAAkB,EAAE;KACrD,CAAC,EACF,EAAE,OAAO,EAAE,2BAA2B,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAChE;IACD,WAAW,EAAE,yCAAyC;IACtD,SAAS,EAAE,oBAAoB;CAChC,CAAC,CAAC;AAMH,MAAM,UAAU,0BAA0B,CACxC,KAAc;IAEd,OAAO,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACjE,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaFragment } from \"../jsonSchema\";\nimport {\n boundedPositiveIntegerSchema,\n nonEmptyStringSchema,\n uuidV4StringSchema,\n} from \"../schema\";\nimport {\n CANONICAL_SIGNED_AT_PATTERN,\n isCanonicalSignedAt,\n SIGNED_AT_CONTRACT,\n} from \"./signedAt\";\n\n/*\n The exact signed head of the organization's reserved Members group that the\n * member saw when asking. Removing anyone from Members rotates its key epoch,\n * so a request stays current only while the member has stayed in Members\n * since this head: a request from an earlier membership never is.\n /\nexport const OrganizationLeaveRequestMembersHeadSchema = z.strictObject({\n principalId: uuidV4StringSchema,\n version: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),\n keyEpoch: boundedPositiveIntegerSchema(Number.MAX_SAFE_INTEGER),\n stateHash: nonEmptyStringSchema,\n keyFingerprint: nonEmptyStringSchema,\n});\n\nexport type OrganizationLeaveRequestMembersHead = z.infer<\n typeof OrganizationLeaveRequestMembersHeadSchema\n>;\n\n/\n A member's signed request to leave an organization. Signed with the member's\n * identity key so an administrator can tell the request came from the member,\n * not from the server, and bound to the Members head the member saw so it\n * cannot outlive their membership. It authorizes nothing by itself: leaving\n * still needs an administrator to sign the member's removal from the\n * organization's groups.\n */\nexport const OrganizationLeaveRequestSchema = z.strictObject({\n organizationId: uuidV4StringSchema,\n userId: uuidV4StringSchema,\n requestedAt: registerJsonSchemaFragment(\n z.string().refine(isCanonicalSignedAt, {\n message: `requestedAt must be ${SIGNED_AT_CONTRACT}`,\n }),\n { pattern: CANONICAL_SIGNED_AT_PATTERN.source, type: \"string\" },\n ),\n membersHead: OrganizationLeaveRequestMembersHeadSchema,\n signature: nonEmptyStringSchema,\n});\n\nexport type OrganizationLeaveRequest = z.infer<\n typeof OrganizationLeaveRequestSchema\n>;\n\nexport function isOrganizationLeaveRequest(\n value: unknown,\n): value is OrganizationLeaveRequest {\n return OrganizationLeaveRequestSchema.safeParse(value).success;\n}\n"]}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@tearleads/client-sdk",
-  "version": "0.1.104",
+  "version": "0.1.106",
   "description": "React-free Tearleads client runtime: local SQLite persistence, keys, sync, encrypted blobs, and domain workflows.",
   "license": "UNLICENSED",
   "repository": {

package/workflows/organizations/memberships/leaveRequest.d.ts CHANGED Viewed

@@ -1,7 +1,7 @@
 import type { RequestResult } from "../../../internal/api-client/index.js";
 import { type SigningKeyPair } from "../../../internal/crypto/index.js";
 import type { OrganizationMembershipResponse } from "../../../internal/validators/response/index.js";
-import type { OrganizationLeaveRequest } from "../../../internal/validators/util/index.js";
+import type { OrganizationLeaveRequest, OrganizationLeaveRequestMembersHead } from "../../../internal/validators/util/index.js";
 import type { OrganizationMembership } from "./organizationMemberships.js";
 export interface OrganizationLeaveRequestApi {
     setOrganizationLeaveRequest(organizationId: string, request: OrganizationLeaveRequest | null): Promise<RequestResult<OrganizationMembershipResponse>>;
@@ -17,10 +17,14 @@ export type OrganizationLeaveRequestResult = {
 /**
  * Files or withdraws the user's request to leave one organization. Filing
  * signs the request with the user's identity key, so administrators can tell
- * the member made it; it removes nothing until an administrator approves it.
+ * the member made it, and binds it to the organization's Members head as this
+ * device verified it, so it cannot outlive this membership. It removes nothing
+ * until an administrator approves it.
  */
 export declare function setOrganizationLeaveRequested(input: {
     readonly apiClient: OrganizationLeaveRequestApi;
+    /** The organization's current Members head, freshly verified. */
+    readonly loadMembersHead: () => Promise<OrganizationLeaveRequestMembersHead>;
     readonly organizationId: string;
     readonly requested: boolean;
     readonly signer: {

package/workflows/organizations/memberships/leaveRequest.js CHANGED Viewed

@@ -2,16 +2,31 @@ import { signOrganizationLeaveRequest, } from "../../../internal/crypto/index.js
 /**
  * Files or withdraws the user's request to leave one organization. Filing
  * signs the request with the user's identity key, so administrators can tell
- * the member made it; it removes nothing until an administrator approves it.
+ * the member made it, and binds it to the organization's Members head as this
+ * device verified it, so it cannot outlive this membership. It removes nothing
+ * until an administrator approves it.
  */
 export async function setOrganizationLeaveRequested(input) {
-    const request = input.requested
-        ? signOrganizationLeaveRequest({
+    let request = null;
+    if (input.requested) {
+        let membersHead;
+        try {
+            membersHead = await input.loadMembersHead();
+        }
+        catch {
+            return {
+                httpStatus: null,
+                message: "Could not confirm your current membership. Try again.",
+                status: "failed",
+            };
+        }
+        request = signOrganizationLeaveRequest({
+            membersHead,
             organizationId: input.organizationId,
             requestedAt: (input.now?.() ?? new Date()).toISOString(),
             userId: input.signer.userId,
-        }, input.signer.signingKeyPair)
-        : null;
+        }, input.signer.signingKeyPair);
+    }
     const result = await input.apiClient.setOrganizationLeaveRequest(input.organizationId, request);
     return result.ok
         ? { membership: result.data, status: "updated" }

package/workflows/organizations/memberships/leaveRequest.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"leaveRequest.js","sourceRoot":"","sources":["leaveRequest.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;~~AAoB3B;;;;GAIG~~;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,~~KASnD~~;IACC,~~MAAM~~,OAAO,~~GAAG~~,KAAK,CAAC,SAAS;~~QAC7B~~,CAAC,CAAC,4BAA4B,~~CAC1B~~;YACE,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;YACxD,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAC5B,EACD,KAAK,CAAC,MAAM,CAAC,cAAc,CAC5B~~;QACH~~,CAAC,CAAC~~,IAAI,CAAC~~;~~IACT~~,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,2BAA2B,CAC9D,KAAK,CAAC,cAAc,EACpB,OAAO,CACR,CAAC;IACF,OAAO,MAAM,CAAC,EAAE;QACd,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE;QAChD,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC/E,CAAC","sourcesContent":["import type { RequestResult } from \"@tearleads/api-client\";\nimport {\n type SigningKeyPair,\n signOrganizationLeaveRequest,\n} from \"@tearleads/crypto\";\nimport type { OrganizationMembershipResponse } from \"@tearleads/validators/response\";\nimport type { OrganizationLeaveRequest } from \"@tearleads/validators/util\";\nimport type { OrganizationMembership } from \"./organizationMemberships\";\n\nexport interface OrganizationLeaveRequestApi {\n setOrganizationLeaveRequest(\n organizationId: string,\n request: OrganizationLeaveRequest \| null,\n ): Promise<RequestResult<OrganizationMembershipResponse>>;\n}\n\nexport type OrganizationLeaveRequestResult =\n \| { readonly status: \"updated\"; readonly membership: OrganizationMembership }\n \| {\n readonly status: \"failed\";\n readonly httpStatus: number \| null;\n readonly message: string;\n };\n\n/*\n Files or withdraws the user's request to leave one organization. Filing\n * signs the request with the user's identity key, so administrators can tell\n * the member made it; it removes nothing until an administrator approves it.\n */\nexport async function setOrganizationLeaveRequested(input: {\n readonly apiClient: OrganizationLeaveRequestApi;\n readonly organizationId: string;\n readonly requested: boolean;\n readonly signer: {\n readonly signingKeyPair: Pick<SigningKeyPair, \"signingPrivateKey\">;\n readonly userId: string;\n };\n readonly now?: () => Date;\n}): Promise<OrganizationLeaveRequestResult> {\n ~~const~~ request = input.requested\n ? signOrganizationLeaveRequest(\n {\n organizationId: input.organizationId,\n requestedAt: (input.now?.() ?? new Date()).toISOString(),\n userId: input.signer.userId,\n },\n input.signer.signingKeyPair,\n )~~\n : null~~;\n const result = await input.apiClient.setOrganizationLeaveRequest(\n input.organizationId,\n request,\n );\n return result.ok\n ? { membership: result.data, status: \"updated\" }\n : { httpStatus: result.status, message: result.message, status: \"failed\" };\n}\n"]}
1	+ {"version":3,"file":"leaveRequest.js","sourceRoot":"","sources":["leaveRequest.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAuB3B;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,KAWnD;IACC,IAAI,OAAO,GAAoC,IAAI,CAAC;IACpD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,IAAI,WAAgD,CAAC;QACrD,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,uDAAuD;gBAChE,MAAM,EAAE,QAAQ;aACjB,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,4BAA4B,CACpC;YACE,WAAW;YACX,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;YACxD,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAC5B,EACD,KAAK,CAAC,MAAM,CAAC,cAAc,CAC5B,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,2BAA2B,CAC9D,KAAK,CAAC,cAAc,EACpB,OAAO,CACR,CAAC;IACF,OAAO,MAAM,CAAC,EAAE;QACd,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE;QAChD,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC/E,CAAC","sourcesContent":["import type { RequestResult } from \"@tearleads/api-client\";\nimport {\n type SigningKeyPair,\n signOrganizationLeaveRequest,\n} from \"@tearleads/crypto\";\nimport type { OrganizationMembershipResponse } from \"@tearleads/validators/response\";\nimport type {\n OrganizationLeaveRequest,\n OrganizationLeaveRequestMembersHead,\n} from \"@tearleads/validators/util\";\nimport type { OrganizationMembership } from \"./organizationMemberships\";\n\nexport interface OrganizationLeaveRequestApi {\n setOrganizationLeaveRequest(\n organizationId: string,\n request: OrganizationLeaveRequest \| null,\n ): Promise<RequestResult<OrganizationMembershipResponse>>;\n}\n\nexport type OrganizationLeaveRequestResult =\n \| { readonly status: \"updated\"; readonly membership: OrganizationMembership }\n \| {\n readonly status: \"failed\";\n readonly httpStatus: number \| null;\n readonly message: string;\n };\n\n/*\n Files or withdraws the user's request to leave one organization. Filing\n * signs the request with the user's identity key, so administrators can tell\n * the member made it, and binds it to the organization's Members head as this\n * device verified it, so it cannot outlive this membership. It removes nothing\n * until an administrator approves it.\n /\nexport async function setOrganizationLeaveRequested(input: {\n readonly apiClient: OrganizationLeaveRequestApi;\n /* The organization's current Members head, freshly verified. */\n readonly loadMembersHead: () => Promise<OrganizationLeaveRequestMembersHead>;\n readonly organizationId: string;\n readonly requested: boolean;\n readonly signer: {\n readonly signingKeyPair: Pick<SigningKeyPair, \"signingPrivateKey\">;\n readonly userId: string;\n };\n readonly now?: () => Date;\n}): Promise<OrganizationLeaveRequestResult> {\n let request: OrganizationLeaveRequest \| null = null;\n if (input.requested) {\n let membersHead: OrganizationLeaveRequestMembersHead;\n try {\n membersHead = await input.loadMembersHead();\n } catch {\n return {\n httpStatus: null,\n message: \"Could not confirm your current membership. Try again.\",\n status: \"failed\",\n };\n }\n request = signOrganizationLeaveRequest(\n {\n membersHead,\n organizationId: input.organizationId,\n requestedAt: (input.now?.() ?? new Date()).toISOString(),\n userId: input.signer.userId,\n },\n input.signer.signingKeyPair,\n );\n }\n const result = await input.apiClient.setOrganizationLeaveRequest(\n input.organizationId,\n request,\n );\n return result.ok\n ? { membership: result.data, status: \"updated\" }\n : { httpStatus: result.status, message: result.message, status: \"failed\" };\n}\n"]}