@tearleads/client-sdk 0.1.17 → 0.1.18

package/internal/api-client/principalPolicyRequests.d.ts

@@ -1,4 +1,4 @@
-import type { CommitOrganizationGroupPolicyRequest, OrganizationPrincipalPolicyRequest } from "../validators/request/index.js";
+import type { CommitOrganizationGroupPolicyRequest, CreateOrganizationGroupWithPolicyRequest, DeleteOrganizationGroupRequest, OrganizationPrincipalPolicyRequest } from "../validators/request/index.js";
 import type { PrincipalPolicyBundleResponse } from "../validators/response/index.js";
 import type { BoundedCache } from "./ApiCache.js";
 import type { ApiRequestRuntime } from "./apiRequestRuntime.js";
@@ -550,6 +550,271 @@ export declare class PrincipalPolicyRequests {
             version: number;
         };
     }>>;
+    createResult(organizationId: string, input: CreateOrganizationGroupWithPolicyRequest, options?: RequestResultOptions): Promise<import("./types.js").RequestResult<{
+        group: {
+            createdAt: string;
+            currentState: {
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                stateHash: string;
+                version: number;
+            } | null;
+            groupId: string;
+            isBuiltin: boolean;
+            organizationId: string;
+        };
+        organizationPolicy: {
+            containerMutations: {
+                createdAt: string;
+                manifestHead: {
+                    epoch: number;
+                    manifestHash: string;
+                };
+                organizationId: string;
+                parentId: string | null;
+                referencedPrincipalHeads: {
+                    principalType: "group";
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    stateHash: string;
+                    version: number;
+                }[];
+                updatedAt: string;
+                accessManifest: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                };
+                containerId: string;
+                containerKek: {
+                    accessManifestHash: string;
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHistory: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    }[];
+                    keyEpoch: Record<string, unknown>;
+                    keyEpochHash: string;
+                    keyring: {
+                        containerId: string;
+                        containerKeyEpochId: string;
+                        iv: string;
+                        sealed: string;
+                        sealingSuite: string;
+                        version: number;
+                    } | null;
+                    keyTargetHash: string;
+                    parentContainerKeyEpochId: string | null;
+                    recipientTargets: Record<string, unknown>[];
+                    wraps: Record<string, unknown>[];
+                };
+                systemSlot?: string | null | undefined;
+            }[];
+            currentGrants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            currentMemberEnvelopes: {
+                envelopes: {
+                    kemCipherText: string;
+                    memberKeyFingerprint: string;
+                    userId: string;
+                    wrappedKey: string;
+                }[];
+                epoch: number;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentProjection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            currentState: {
+                createdAt: string;
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                stateHash: string;
+                version: number;
+            };
+        };
+    }>>;
+    deleteResult(organizationId: string, groupId: string, input: DeleteOrganizationGroupRequest, options?: RequestResultOptions): Promise<import("./types.js").RequestResult<{
+        deleted: true;
+        groupId: string;
+        organizationPolicy: {
+            containerMutations: {
+                createdAt: string;
+                manifestHead: {
+                    epoch: number;
+                    manifestHash: string;
+                };
+                organizationId: string;
+                parentId: string | null;
+                referencedPrincipalHeads: {
+                    principalType: "group";
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    stateHash: string;
+                    version: number;
+                }[];
+                updatedAt: string;
+                accessManifest: {
+                    event: {
+                        body: unknown;
+                        event: Record<string, unknown>;
+                        eventHash: string;
+                    };
+                    manifest: Record<string, unknown>;
+                    manifestHash: string;
+                    state: Record<string, unknown>;
+                };
+                containerId: string;
+                containerKek: {
+                    accessManifestHash: string;
+                    containerId: string;
+                    containerKeyEpoch: number;
+                    containerKeyEpochId: string;
+                    containerManifestHistory: {
+                        event: {
+                            body: unknown;
+                            event: Record<string, unknown>;
+                            eventHash: string;
+                        };
+                        manifest: Record<string, unknown>;
+                        manifestHash: string;
+                        state: Record<string, unknown>;
+                    }[];
+                    keyEpoch: Record<string, unknown>;
+                    keyEpochHash: string;
+                    keyring: {
+                        containerId: string;
+                        containerKeyEpochId: string;
+                        iv: string;
+                        sealed: string;
+                        sealingSuite: string;
+                        version: number;
+                    } | null;
+                    keyTargetHash: string;
+                    parentContainerKeyEpochId: string | null;
+                    recipientTargets: Record<string, unknown>[];
+                    wraps: Record<string, unknown>[];
+                };
+                systemSlot?: string | null | undefined;
+            }[];
+            currentGrants: {
+                accessLevel: "admin" | "read" | "write";
+                containerId: string;
+            }[];
+            currentMemberEnvelopes: {
+                envelopes: {
+                    kemCipherText: string;
+                    memberKeyFingerprint: string;
+                    userId: string;
+                    wrappedKey: string;
+                }[];
+                epoch: number;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentPayload: {
+                cipherSuite: "aes-256-gcm";
+                ciphertext: string;
+                ciphertextHash: string;
+                createdAt: string;
+                principalId: string;
+                principalType: "group" | "organization";
+                stateHash: string;
+            };
+            currentProjection: {
+                role: "member" | "admin";
+                userId: string;
+            }[];
+            currentState: {
+                createdAt: string;
+                encapsulationPublicKey: string;
+                externalAuthority: {
+                    keyEpoch: number;
+                    keyFingerprint: string;
+                    principalId: string;
+                    principalType: "group";
+                    stateHash: string;
+                    version: number;
+                } | null;
+                grantCount: number;
+                grantRoot: string;
+                keyEpoch: number;
+                keyFingerprint: string;
+                memberCount: number;
+                memberEnvelopesRoot: string;
+                membershipMode: "projection";
+                membershipRoot: string;
+                payloadCiphertextHash: string;
+                prevStateHash: string | null;
+                principalId: string;
+                principalType: "group" | "organization";
+                projectionRoot: string;
+                signature: string;
+                signedAt: string;
+                signerUserId: string;
+                signerUserKeyFingerprint: string;
+                stateHash: string;
+                version: number;
+            };
+        };
+        organizationId: string;
+    }>>;
+    private groupMutation;
     commitResult(organizationId: string, groupId: string, input: CommitOrganizationGroupPolicyRequest, options?: RequestResultOptions): Promise<import("./types.js").RequestResult<{
         groupPolicy: {
             containerMutations: {

package/internal/api-client/principalPolicyRequests.js

@@ -1,8 +1,10 @@
-import { commitOrganizationGroupPolicyOperation, putPrincipalPolicyOperation, } from "../validators/operation/index.js";
+import { commitOrganizationGroupPolicyOperation, createOrganizationGroupOperation, deleteOrganizationGroupOperation, putPrincipalPolicyOperation, } from "../validators/operation/index.js";
 import { principalHistoryRequest } from "./principalHistoryRequest.js";
 import { collectPrincipalPolicyPages, readPrincipalPolicyPages, } from "./principalPolicyPages.js";
 import { readProjectionPolicyHistoryPages } from "./projectionPolicyHistoryPages.js";
 import { dedupedRequest } from "./requestInternals.js";
+import { createOrganizationGroup } from "./routes/organizations/createGroup.js";
+import { deleteOrganizationGroup } from "./routes/organizations/deleteGroup.js";
 import { commitOrganizationGroupPolicy, putPrincipalPolicy, } from "./routes/principals/policy.js";
 export class PrincipalPolicyRequests {
     runtime;
@@ -45,6 +47,46 @@ export class PrincipalPolicyRequests {
             operation: putPrincipalPolicyOperation,
         }).finally(() => this.cache.delete(key));
     }
+    createResult(organizationId, input, options = {}) {
+        return this.groupMutation(organizationId, input.groupId, () => principalHistoryRequest(this.runtime, {
+            path: createOrganizationGroup.path(organizationId),
+            validator: createOrganizationGroup.isResponse,
+            method: createOrganizationGroup.method,
+            body: JSON.stringify(input),
+            options: {
+                expectedPaymentRequiredOrganizationId: organizationId,
+                ...options,
+            },
+            operation: createOrganizationGroupOperation,
+        }));
+    }
+    deleteResult(organizationId, groupId, input, options = {}) {
+        return this.groupMutation(organizationId, groupId, () => principalHistoryRequest(this.runtime, {
+            path: deleteOrganizationGroup.path(organizationId, groupId),
+            validator: deleteOrganizationGroup.isResponse,
+            method: deleteOrganizationGroup.method,
+            body: JSON.stringify(input),
+            options: {
+                expectedPaymentRequiredOrganizationId: organizationId,
+                ...options,
+            },
+            operation: deleteOrganizationGroupOperation,
+        }));
+    }
+    async groupMutation(organizationId, groupId, request) {
+        const groupKey = JSON.stringify(["group", groupId]);
+        const organizationKey = JSON.stringify(["organization", organizationId]);
+        this.cache.delete(groupKey);
+        this.cache.delete(organizationKey);
+        try {
+            return await request();
+        }
+        finally {
+            this.cache.delete(groupKey);
+            this.cache.delete(organizationKey);
+            this.clearWriterProjectionCaches();
+        }
+    }
     async commitResult(organizationId, groupId, input, options = {}) {
         const groupKey = JSON.stringify(["group", groupId]);
         const organizationKey = JSON.stringify(["organization", organizationId]);

package/internal/api-client/principalPolicyRequests.js.map

@@ -1 +1 @@
-{"version":3,"file":"principalPolicyRequests.js","sourceRoot":"","sources":["principalPolicyRequests.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sCAAsC,EACtC,2BAA2B,GAC5B,MAAM,iCAAiC,CAAC;AAQzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACL,2BAA2B,EAE3B,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gCAAgC,EAAE,MAAM,gCAAgC,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EACL,6BAA6B,EAC7B,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAGpC,MAAM,OAAO,uBAAuB;IAEf;IACA;IAGA;IALnB,YACmB,OAA0B,EAC1B,KAEhB,EACgB,2BAAuC;QAJvC,YAAO,GAAP,OAAO,CAAmB;QAC1B,UAAK,GAAL,KAAK,CAErB;QACgB,gCAA2B,GAA3B,2BAA2B,CAAY;IACvD,CAAC;IAEJ,WAAW,CACT,MAA8D,EAC9D,UAAkE,EAAE;QAEpE,OAAO,gCAAgC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CACH,aAAuC,EACvC,WAAmB,EACnB,UAA0C,EAAE;QAE5C,OAAO,wBAAwB,CAC7B,IAAI,CAAC,OAAO,EACZ,aAAa,EACb,WAAW,EACX,OAAO,CACR,CAAC;IACJ,CAAC;IAED,GAAG,CACD,aAAuC,EACvC,WAAmB,EACnB,UAAgC,EAAE;QAElC,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,2BAA2B,CACzB,IAAI,CAAC,OAAO,EACZ,aAAa,EACb,WAAW,EACX,OAAO,CACR,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;QACzD,0EAA0E;QAC1E,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YACpC,CAAC,CAAC,OAAO,EAAE;YACX,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,GAAG,CAAC,GAAG,IAAsD;QAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7C,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/B,CAAC;IACJ,CAAC;IAED,SAAS,CACP,aAA6B,EAC7B,WAAmB,EACnB,KAAyC,EACzC,UAAgC,EAAE;QAElC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE;YAC3C,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC;YACzD,SAAS,EAAE,kBAAkB,CAAC,UAAU;YACxC,MAAM,EAAE,kBAAkB,CAAC,MAAM;YACjC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3B,OAAO,EAAE;gBACP,qCAAqC,EAAE,WAAW;gBAClD,GAAG,OAAO;aACX;YACD,SAAS,EAAE,2BAA2B;SACvC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,cAAsB,EACtB,OAAe,EACf,KAA2C,EAC3C,UAAgC,EAAE;QAElC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,MAAM,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE;gBACjD,IAAI,EAAE,6BAA6B,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC;gBACjE,SAAS,EAAE,6BAA6B,CAAC,UAAU;gBACnD,MAAM,EAAE,6BAA6B,CAAC,MAAM;gBAC5C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAC3B,OAAO,EAAE;oBACP,qCAAqC,EAAE,cAAc;oBACrD,GAAG,OAAO;iBACX;gBACD,SAAS,EAAE,sCAAsC;aAClD,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACnC,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;CACF","sourcesContent":["import {\n  commitOrganizationGroupPolicyOperation,\n  putPrincipalPolicyOperation,\n} from \"@tearleads/validators/operation\";\nimport type {\n  CommitOrganizationGroupPolicyRequest,\n  OrganizationPrincipalPolicyRequest,\n} from \"@tearleads/validators/request\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport type { BoundedCache } from \"./ApiCache\";\nimport type { ApiRequestRuntime } from \"./apiRequestRuntime\";\nimport { principalHistoryRequest } from \"./principalHistoryRequest\";\nimport {\n  collectPrincipalPolicyPages,\n  type PrincipalPolicyPageReadOptions,\n  readPrincipalPolicyPages,\n} from \"./principalPolicyPages\";\nimport { readProjectionPolicyHistoryPages } from \"./projectionPolicyHistoryPages\";\nimport { dedupedRequest } from \"./requestInternals\";\nimport {\n  commitOrganizationGroupPolicy,\n  putPrincipalPolicy,\n} from \"./routes/principals/policy\";\nimport type { RequestResultOptions } from \"./types\";\n\nexport class PrincipalPolicyRequests {\n  constructor(\n    private readonly runtime: ApiRequestRuntime,\n    private readonly cache: BoundedCache<\n      Promise<PrincipalPolicyBundleResponse | null>\n    >,\n    private readonly clearWriterProjectionCaches: () => void,\n  ) {}\n\n  publicPages(\n    source: Parameters<typeof readProjectionPolicyHistoryPages>[1],\n    options: Parameters<typeof readProjectionPolicyHistoryPages>[2] = {},\n  ) {\n    return readProjectionPolicyHistoryPages(this.runtime, source, options);\n  }\n\n  pages(\n    principalType: \"group\" | \"organization\",\n    principalId: string,\n    options: PrincipalPolicyPageReadOptions = {},\n  ) {\n    return readPrincipalPolicyPages(\n      this.runtime,\n      principalType,\n      principalId,\n      options,\n    );\n  }\n\n  get(\n    principalType: \"group\" | \"organization\",\n    principalId: string,\n    options: RequestResultOptions = {},\n  ) {\n    const request = () =>\n      collectPrincipalPolicyPages(\n        this.runtime,\n        principalType,\n        principalId,\n        options,\n      );\n    const key = JSON.stringify([principalType, principalId]);\n    // Cancellation, reporting and renewal preferences belong to their caller.\n    return Object.keys(options).length > 0\n      ? request()\n      : dedupedRequest(this.cache, key, request);\n  }\n\n  put(...args: Parameters<PrincipalPolicyRequests[\"putResult\"]>) {\n    return this.putResult(...args).then((result) =>\n      result.ok ? result.data : null,\n    );\n  }\n\n  putResult(\n    principalType: \"organization\",\n    principalId: string,\n    input: OrganizationPrincipalPolicyRequest,\n    options: RequestResultOptions = {},\n  ) {\n    const key = JSON.stringify([principalType, principalId]);\n    this.cache.delete(key);\n    return principalHistoryRequest(this.runtime, {\n      path: putPrincipalPolicy.path(principalType, principalId),\n      validator: putPrincipalPolicy.isResponse,\n      method: putPrincipalPolicy.method,\n      body: JSON.stringify(input),\n      options: {\n        expectedPaymentRequiredOrganizationId: principalId,\n        ...options,\n      },\n      operation: putPrincipalPolicyOperation,\n    }).finally(() => this.cache.delete(key));\n  }\n\n  async commitResult(\n    organizationId: string,\n    groupId: string,\n    input: CommitOrganizationGroupPolicyRequest,\n    options: RequestResultOptions = {},\n  ) {\n    const groupKey = JSON.stringify([\"group\", groupId]);\n    const organizationKey = JSON.stringify([\"organization\", organizationId]);\n    this.cache.delete(groupKey);\n    this.cache.delete(organizationKey);\n    try {\n      return await principalHistoryRequest(this.runtime, {\n        path: commitOrganizationGroupPolicy.path(organizationId, groupId),\n        validator: commitOrganizationGroupPolicy.isResponse,\n        method: commitOrganizationGroupPolicy.method,\n        body: JSON.stringify(input),\n        options: {\n          expectedPaymentRequiredOrganizationId: organizationId,\n          ...options,\n        },\n        operation: commitOrganizationGroupPolicyOperation,\n      });\n    } finally {\n      this.cache.delete(groupKey);\n      this.cache.delete(organizationKey);\n      this.clearWriterProjectionCaches();\n    }\n  }\n}\n"]}
+{"version":3,"file":"principalPolicyRequests.js","sourceRoot":"","sources":["principalPolicyRequests.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sCAAsC,EACtC,gCAAgC,EAChC,gCAAgC,EAChC,2BAA2B,GAC5B,MAAM,iCAAiC,CAAC;AAUzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACL,2BAA2B,EAE3B,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gCAAgC,EAAE,MAAM,gCAAgC,CAAC;AAClF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EACL,6BAA6B,EAC7B,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AAGpC,MAAM,OAAO,uBAAuB;IAEf;IACA;IAGA;IALnB,YACmB,OAA0B,EAC1B,KAEhB,EACgB,2BAAuC;QAJvC,YAAO,GAAP,OAAO,CAAmB;QAC1B,UAAK,GAAL,KAAK,CAErB;QACgB,gCAA2B,GAA3B,2BAA2B,CAAY;IACvD,CAAC;IAEJ,WAAW,CACT,MAA8D,EAC9D,UAAkE,EAAE;QAEpE,OAAO,gCAAgC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CACH,aAAuC,EACvC,WAAmB,EACnB,UAA0C,EAAE;QAE5C,OAAO,wBAAwB,CAC7B,IAAI,CAAC,OAAO,EACZ,aAAa,EACb,WAAW,EACX,OAAO,CACR,CAAC;IACJ,CAAC;IAED,GAAG,CACD,aAAuC,EACvC,WAAmB,EACnB,UAAgC,EAAE;QAElC,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,2BAA2B,CACzB,IAAI,CAAC,OAAO,EACZ,aAAa,EACb,WAAW,EACX,OAAO,CACR,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;QACzD,0EAA0E;QAC1E,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YACpC,CAAC,CAAC,OAAO,EAAE;YACX,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,GAAG,CAAC,GAAG,IAAsD;QAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7C,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAC/B,CAAC;IACJ,CAAC;IAED,SAAS,CACP,aAA6B,EAC7B,WAAmB,EACnB,KAAyC,EACzC,UAAgC,EAAE;QAElC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE;YAC3C,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC;YACzD,SAAS,EAAE,kBAAkB,CAAC,UAAU;YACxC,MAAM,EAAE,kBAAkB,CAAC,MAAM;YACjC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3B,OAAO,EAAE;gBACP,qCAAqC,EAAE,WAAW;gBAClD,GAAG,OAAO;aACX;YACD,SAAS,EAAE,2BAA2B;SACvC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,YAAY,CACV,cAAsB,EACtB,KAA+C,EAC/C,UAAgC,EAAE;QAElC,OAAO,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAC5D,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE;YACpC,IAAI,EAAE,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC;YAClD,SAAS,EAAE,uBAAuB,CAAC,UAAU;YAC7C,MAAM,EAAE,uBAAuB,CAAC,MAAM;YACtC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3B,OAAO,EAAE;gBACP,qCAAqC,EAAE,cAAc;gBACrD,GAAG,OAAO;aACX;YACD,SAAS,EAAE,gCAAgC;SAC5C,CAAC,CACH,CAAC;IACJ,CAAC;IAED,YAAY,CACV,cAAsB,EACtB,OAAe,EACf,KAAqC,EACrC,UAAgC,EAAE;QAElC,OAAO,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,CACtD,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE;YACpC,IAAI,EAAE,uBAAuB,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC;YAC3D,SAAS,EAAE,uBAAuB,CAAC,UAAU;YAC7C,MAAM,EAAE,uBAAuB,CAAC,MAAM;YACtC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3B,OAAO,EAAE;gBACP,qCAAqC,EAAE,cAAc;gBACrD,GAAG,OAAO;aACX;YACD,SAAS,EAAE,gCAAgC;SAC5C,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,cAAsB,EACtB,OAAe,EACf,OAAyB;QAEzB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,EAAE,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACnC,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,cAAsB,EACtB,OAAe,EACf,KAA2C,EAC3C,UAAgC,EAAE;QAElC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,MAAM,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE;gBACjD,IAAI,EAAE,6BAA6B,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC;gBACjE,SAAS,EAAE,6BAA6B,CAAC,UAAU;gBACnD,MAAM,EAAE,6BAA6B,CAAC,MAAM;gBAC5C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAC3B,OAAO,EAAE;oBACP,qCAAqC,EAAE,cAAc;oBACrD,GAAG,OAAO;iBACX;gBACD,SAAS,EAAE,sCAAsC;aAClD,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACnC,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;CACF","sourcesContent":["import {\n  commitOrganizationGroupPolicyOperation,\n  createOrganizationGroupOperation,\n  deleteOrganizationGroupOperation,\n  putPrincipalPolicyOperation,\n} from \"@tearleads/validators/operation\";\nimport type {\n  CommitOrganizationGroupPolicyRequest,\n  CreateOrganizationGroupWithPolicyRequest,\n  DeleteOrganizationGroupRequest,\n  OrganizationPrincipalPolicyRequest,\n} from \"@tearleads/validators/request\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport type { BoundedCache } from \"./ApiCache\";\nimport type { ApiRequestRuntime } from \"./apiRequestRuntime\";\nimport { principalHistoryRequest } from \"./principalHistoryRequest\";\nimport {\n  collectPrincipalPolicyPages,\n  type PrincipalPolicyPageReadOptions,\n  readPrincipalPolicyPages,\n} from \"./principalPolicyPages\";\nimport { readProjectionPolicyHistoryPages } from \"./projectionPolicyHistoryPages\";\nimport { dedupedRequest } from \"./requestInternals\";\nimport { createOrganizationGroup } from \"./routes/organizations/createGroup\";\nimport { deleteOrganizationGroup } from \"./routes/organizations/deleteGroup\";\nimport {\n  commitOrganizationGroupPolicy,\n  putPrincipalPolicy,\n} from \"./routes/principals/policy\";\nimport type { RequestResultOptions } from \"./types\";\n\nexport class PrincipalPolicyRequests {\n  constructor(\n    private readonly runtime: ApiRequestRuntime,\n    private readonly cache: BoundedCache<\n      Promise<PrincipalPolicyBundleResponse | null>\n    >,\n    private readonly clearWriterProjectionCaches: () => void,\n  ) {}\n\n  publicPages(\n    source: Parameters<typeof readProjectionPolicyHistoryPages>[1],\n    options: Parameters<typeof readProjectionPolicyHistoryPages>[2] = {},\n  ) {\n    return readProjectionPolicyHistoryPages(this.runtime, source, options);\n  }\n\n  pages(\n    principalType: \"group\" | \"organization\",\n    principalId: string,\n    options: PrincipalPolicyPageReadOptions = {},\n  ) {\n    return readPrincipalPolicyPages(\n      this.runtime,\n      principalType,\n      principalId,\n      options,\n    );\n  }\n\n  get(\n    principalType: \"group\" | \"organization\",\n    principalId: string,\n    options: RequestResultOptions = {},\n  ) {\n    const request = () =>\n      collectPrincipalPolicyPages(\n        this.runtime,\n        principalType,\n        principalId,\n        options,\n      );\n    const key = JSON.stringify([principalType, principalId]);\n    // Cancellation, reporting and renewal preferences belong to their caller.\n    return Object.keys(options).length > 0\n      ? request()\n      : dedupedRequest(this.cache, key, request);\n  }\n\n  put(...args: Parameters<PrincipalPolicyRequests[\"putResult\"]>) {\n    return this.putResult(...args).then((result) =>\n      result.ok ? result.data : null,\n    );\n  }\n\n  putResult(\n    principalType: \"organization\",\n    principalId: string,\n    input: OrganizationPrincipalPolicyRequest,\n    options: RequestResultOptions = {},\n  ) {\n    const key = JSON.stringify([principalType, principalId]);\n    this.cache.delete(key);\n    return principalHistoryRequest(this.runtime, {\n      path: putPrincipalPolicy.path(principalType, principalId),\n      validator: putPrincipalPolicy.isResponse,\n      method: putPrincipalPolicy.method,\n      body: JSON.stringify(input),\n      options: {\n        expectedPaymentRequiredOrganizationId: principalId,\n        ...options,\n      },\n      operation: putPrincipalPolicyOperation,\n    }).finally(() => this.cache.delete(key));\n  }\n\n  createResult(\n    organizationId: string,\n    input: CreateOrganizationGroupWithPolicyRequest,\n    options: RequestResultOptions = {},\n  ) {\n    return this.groupMutation(organizationId, input.groupId, () =>\n      principalHistoryRequest(this.runtime, {\n        path: createOrganizationGroup.path(organizationId),\n        validator: createOrganizationGroup.isResponse,\n        method: createOrganizationGroup.method,\n        body: JSON.stringify(input),\n        options: {\n          expectedPaymentRequiredOrganizationId: organizationId,\n          ...options,\n        },\n        operation: createOrganizationGroupOperation,\n      }),\n    );\n  }\n\n  deleteResult(\n    organizationId: string,\n    groupId: string,\n    input: DeleteOrganizationGroupRequest,\n    options: RequestResultOptions = {},\n  ) {\n    return this.groupMutation(organizationId, groupId, () =>\n      principalHistoryRequest(this.runtime, {\n        path: deleteOrganizationGroup.path(organizationId, groupId),\n        validator: deleteOrganizationGroup.isResponse,\n        method: deleteOrganizationGroup.method,\n        body: JSON.stringify(input),\n        options: {\n          expectedPaymentRequiredOrganizationId: organizationId,\n          ...options,\n        },\n        operation: deleteOrganizationGroupOperation,\n      }),\n    );\n  }\n\n  private async groupMutation<T>(\n    organizationId: string,\n    groupId: string,\n    request: () => Promise<T>,\n  ): Promise<T> {\n    const groupKey = JSON.stringify([\"group\", groupId]);\n    const organizationKey = JSON.stringify([\"organization\", organizationId]);\n    this.cache.delete(groupKey);\n    this.cache.delete(organizationKey);\n    try {\n      return await request();\n    } finally {\n      this.cache.delete(groupKey);\n      this.cache.delete(organizationKey);\n      this.clearWriterProjectionCaches();\n    }\n  }\n\n  async commitResult(\n    organizationId: string,\n    groupId: string,\n    input: CommitOrganizationGroupPolicyRequest,\n    options: RequestResultOptions = {},\n  ) {\n    const groupKey = JSON.stringify([\"group\", groupId]);\n    const organizationKey = JSON.stringify([\"organization\", organizationId]);\n    this.cache.delete(groupKey);\n    this.cache.delete(organizationKey);\n    try {\n      return await principalHistoryRequest(this.runtime, {\n        path: commitOrganizationGroupPolicy.path(organizationId, groupId),\n        validator: commitOrganizationGroupPolicy.isResponse,\n        method: commitOrganizationGroupPolicy.method,\n        body: JSON.stringify(input),\n        options: {\n          expectedPaymentRequiredOrganizationId: organizationId,\n          ...options,\n        },\n        operation: commitOrganizationGroupPolicyOperation,\n      });\n    } finally {\n      this.cache.delete(groupKey);\n      this.cache.delete(organizationKey);\n      this.clearWriterProjectionCaches();\n    }\n  }\n}\n"]}

package/internal/validators/operation/organizations.d.ts

@@ -9008,12 +9008,20 @@ export declare const createOrganizationGroupOperation: Omit<{
         }>>;
         readonly 503: z.ZodType<{
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, z.core.$ZodTypeInternals<{
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }>>;
     };
     readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503];
@@ -9023,7 +9031,15 @@ export declare const createOrganizationGroupOperation: Omit<{
         organizationId: z.ZodCustom<string, string>;
     }, z.core.$strict>;
     readonly path: "/organizations/{organizationId}/groups";
+    readonly responseDescriptions: {
+        readonly 202: "The attempted operation rolled back. Retry the identical request to continue verification preparation.";
+    };
     readonly responses: {
+        readonly 202: z.ZodObject<{
+            code: z.ZodLiteral<"principal_history_preparation_pending">;
+            committed: z.ZodLiteral<false>;
+            progressToken: z.ZodCustom<string, string>;
+        }, z.core.$strict>;
         readonly 200: z.ZodType<{
             group: {
                 createdAt: string;
@@ -9573,6 +9589,9 @@ export declare const createOrganizationGroupOperation: Omit<{
     readonly runtimeRefinements: readonly [{
         readonly description: "a container response keyring is null exactly for container key epoch 1";
         readonly id: "response.organization-provisioning-container-keyring";
+    }, {
+        readonly id: "response.principal-history-preparation-rollback";
+        readonly description: "A 503 with code principal_history_preparation_unavailable requires committed:false; other 503 responses do not guarantee rollback.";
     }];
 }, "failureResponses" | "failureStatuses"> & {
     readonly failureResponses: {
@@ -9653,12 +9672,20 @@ export declare const createOrganizationGroupOperation: Omit<{
         }>>;
         readonly 503: z.ZodType<{
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, z.core.$ZodTypeInternals<{
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }>>;
     } & {
         readonly 503: typeof ErrorResponseSchema;
@@ -10122,12 +10149,20 @@ export declare const deleteOrganizationGroupOperation: Omit<{
         }>>;
         readonly 503: z.ZodType<{
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, z.core.$ZodTypeInternals<{
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }>>;
     };
     readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503];
@@ -10138,7 +10173,15 @@ export declare const deleteOrganizationGroupOperation: Omit<{
         groupId: z.ZodCustom<string, string>;
     }, z.core.$strict>;
     readonly path: "/organizations/{organizationId}/groups/{groupId}";
+    readonly responseDescriptions: {
+        readonly 202: "The attempted operation rolled back. Retry the identical request to continue verification preparation.";
+    };
     readonly responses: {
+        readonly 202: z.ZodObject<{
+            code: z.ZodLiteral<"principal_history_preparation_pending">;
+            committed: z.ZodLiteral<false>;
+            progressToken: z.ZodCustom<string, string>;
+        }, z.core.$strict>;
         readonly 200: z.ZodType<{
             deleted: true;
             groupId: string;
@@ -10648,6 +10691,9 @@ export declare const deleteOrganizationGroupOperation: Omit<{
     readonly runtimeRefinements: readonly [{
         readonly description: "a container response keyring is null exactly for container key epoch 1";
         readonly id: "response.organization-provisioning-container-keyring";
+    }, {
+        readonly id: "response.principal-history-preparation-rollback";
+        readonly description: "A 503 with code principal_history_preparation_unavailable requires committed:false; other 503 responses do not guarantee rollback.";
     }];
 }, "failureResponses" | "failureStatuses"> & {
     readonly failureResponses: {
@@ -10728,12 +10774,20 @@ export declare const deleteOrganizationGroupOperation: Omit<{
         }>>;
         readonly 503: z.ZodType<{
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, z.core.$ZodTypeInternals<{
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }>>;
     } & {
         readonly 503: typeof ErrorResponseSchema;

package/internal/validators/operation/organizations.js

@@ -5,6 +5,7 @@ import { organizationProvisioningContainerKeyringRefinement, organizationProvisi
 import { organizationReadModelResponseRuntimeRefinements } from "../organizationReadModelRefinements.js";
 import { CreateOrganizationGroupWithPolicyRequestSchema, CreateOrganizationRequestSchema, DeleteOrganizationGroupRequestSchema, isCreateOrganizationGroupWithPolicyRequest, isCreateOrganizationRequest, isUpdateOrganizationProfileRequest, isUpdateOrganizationRosterEntryRequest, OrganizationReadModelQuerySchema, UpdateOrganizationProfileRequestSchema, UpdateOrganizationRosterEntryRequestSchema, } from "../request/index.js";
 import { CreateOrganizationGroupResponseSchema, CreateOrganizationResponseSchema, DeleteOrganizationGroupResponseSchema, ErrorResponseSchema, isCreateOrganizationGroupResponse, isCreateOrganizationResponse, isDeleteOrganizationGroupResponse, isOrganizationDataUsageResponse, isOrganizationDirectoryUserResponse, isOrganizationGroupMembersResponse, isOrganizationProfileResponse, isOrganizationReadModelResponse, OrganizationDataUsageResponseSchema, OrganizationDirectoryUserResponseSchema, OrganizationGroupMembersResponseSchema, OrganizationPresentationFailureResponseSchema, OrganizationProfileResponseSchema, OrganizationReadModelFailureResponseSchema, OrganizationReadModelResponseSchema, PaymentRequiredErrorResponseSchema, SessionFailureResponseSchema, } from "../response/index.js";
+import { PrincipalHistoryPreparationFailureResponseSchema, PrincipalHistoryPreparationResponseSchema, principalHistoryRollbackRefinement, } from "../response/principalHistoryPreparation.js";
 import { uuidV4StringSchema } from "../schema.js";
 import { defineJsonOperation } from "./definition.js";
 const CreateOrganizationPathParamsSchema = z.strictObject({});
@@ -95,17 +96,24 @@ export const createOrganizationGroupOperation = defineJsonOperation({
         404: ErrorResponseSchema,
         409: ErrorResponseSchema,
         500: ErrorResponseSchema,
-        503: ErrorResponseSchema,
+        503: PrincipalHistoryPreparationFailureResponseSchema,
     },
     failureStatuses: [400, 401, 402, 403, 404, 409, 500, 503],
     id: "organizations.groups.create",
     method: "POST",
     params: OrganizationPathParamsSchema,
     path: "/organizations/{organizationId}/groups",
+    responseDescriptions: {
+        202: "The attempted operation rolled back. Retry the identical request to continue verification preparation.",
+    },
     responses: {
+        202: PrincipalHistoryPreparationResponseSchema,
         200: CreateOrganizationGroupResponseSchema,
     },
-    runtimeRefinements: [organizationProvisioningContainerKeyringRefinement],
+    runtimeRefinements: [
+        organizationProvisioningContainerKeyringRefinement,
+        principalHistoryRollbackRefinement,
+    ],
 });
 export const deleteOrganizationGroupOperation = defineJsonOperation({
     auth: "session",
@@ -118,17 +126,24 @@ export const deleteOrganizationGroupOperation = defineJsonOperation({
         404: ErrorResponseSchema,
         409: ErrorResponseSchema,
         500: ErrorResponseSchema,
-        503: ErrorResponseSchema,
+        503: PrincipalHistoryPreparationFailureResponseSchema,
     },
     failureStatuses: [400, 401, 402, 403, 404, 409, 500, 503],
     id: "organizations.groups.delete",
     method: "DELETE",
     params: OrganizationGroupPathParamsSchema,
     path: "/organizations/{organizationId}/groups/{groupId}",
+    responseDescriptions: {
+        202: "The attempted operation rolled back. Retry the identical request to continue verification preparation.",
+    },
     responses: {
+        202: PrincipalHistoryPreparationResponseSchema,
         200: DeleteOrganizationGroupResponseSchema,
     },
-    runtimeRefinements: [organizationProvisioningContainerKeyringRefinement],
+    runtimeRefinements: [
+        organizationProvisioningContainerKeyringRefinement,
+        principalHistoryRollbackRefinement,
+    ],
 });
 export const listOrganizationGroupMembersOperation = defineJsonOperation({
     auth: "session",