@tearleads/client-sdk 0.1.19 → 0.1.21

package/client/organizations/index.js

@@ -155,14 +155,14 @@ class OrganizationsService {
         }
         return listLocalOrganizations({ execSql: runtime.infra.execSql });
     }
-    loadPolicyHistory() {
+    loadPolicyHistory(beforeVersion) {
         const runtime = this.runtimeService.workflowInput();
         return runWithSecurityIncidentReporting(runtime.util.reportSecurityIncident, {
             objectId: runtime.auth.organizationId,
             objectKind: "principal",
             operation: "organization.policy_history.load",
             organizationId: runtime.auth.organizationId,
-        }, () => this.readModelCoordinator.loadOrganizationPolicyHistory());
+        }, () => this.readModelCoordinator.loadOrganizationPolicyHistory(undefined, beforeVersion));
     }
     loadUserDetail(userId) {
         return this.readModelCoordinator.loadLocalUserDetail(userId);

package/client/organizations/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,mCAAmC,EACnC,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,8BAA8B,EAC9B,oCAAoC,EACpC,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EACL,sCAAsC,GAEvC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EACL,sCAAsC,GAEvC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,wCAAwC,EAExC,2CAA2C,EAC3C,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAEL,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAG1B,+BAA+B,EAC/B,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AA4C9B,MAAM,UAAU,mBAAmB,CACjC,OAAwB,EACxB,iBAAoC;IAEpC,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,oBAAoB;IAKL;IACA;IALF,oBAAoB,CAAmC;IACvD,oBAAoB,CAAmC;IAExE,YACmB,cAA+B,EAC/B,iBAAoC;QADpC,mBAAc,GAAd,cAAc,CAAiB;QAC/B,sBAAiB,GAAjB,iBAAiB,CAAmB;QAErD,IAAI,CAAC,oBAAoB,GAAG,sCAAsC,CAChE,IAAI,CAAC,cAAc,CACpB,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,sCAAsC,CAChE,IAAI,CAAC,cAAc,CACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAoC;QACvD,OAAO,0BAA0B,CAAC;YAChC,GAAG,KAAK;YACR,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,yBAAyB,CAAC,cAAsB;QAC9C,OAAO,qCAAqC,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;IACJ,CAAC;IAED,+BAA+B,CAC7B,KAAuD;QAEvD,OAAO,2CAA2C,CAChD,IAAI,CAAC,cAAc,EACnB,KAAK,CACN,CAAC;IACJ,CAAC;IAED,0BAA0B,CAAC,cAAsB;QAC/C,OAAO,sCAAsC,CAC3C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;IACJ,CAAC;IAED,4BAA4B,CAAC,KAA6C;QACxE,OAAO,wCAAwC,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED,WAAW,CAAC,IAAY;QACtB,OAAO,0BAA0B,CAAC;YAChC,IAAI;YACJ,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,OAAO,0BAA0B,CAAC;YAChC,OAAO;YACP,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,sBAAsB,CAAC;YAC5B,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;YAC9D,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,WAAW;QACT,OAAO,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;IAC1E,CAAC;IAED,0BAA0B,CAAC,cAAsB;QAC/C,wEAAwE;QACxE,yEAAyE;QACzE,mCAAmC;QACnC,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,uBAAuB,EACvB,cAAc,CACf,CAAC;IACJ,CAAC;IAED,kBAAkB;QAChB,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,8BAA8B,CAC/B,CAAC;IACJ,CAAC;IAED,wBAAwB;QACtB,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,oCAAoC,CACrC,CAAC;IACJ,CAAC;IAED,yBAAyB,CAAC,cAAuB;QAC/C,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,yBAAyB,EACzB,cAAc,CACf,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,cAAuB;QAC1C,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,oBAAoB,EACpB,cAAc,CACf,CAAC;IACJ,CAAC;IAED,2BAA2B,CAAC,SAAiB,EAAE,cAAuB;QACpE,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,EAC/D,cAAc,CACf,CAAC;IACJ,CAAC;IAED,wBAAwB;QACtB,OAAO,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAC3E,CAAC;IAED,uBAAuB,CACrB,cAAsB,EACtB,KAA8B;QAE9B,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,CAAC,KAAK,EAAE,EAAE,CAAC,mCAAmC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,EACnE,cAAc,CACf,CAAC;IACJ,CAAC;IAED,8BAA8B,CAC5B,cAAsB,EACtB,KAA8B;QAE9B,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,CAAC,KAAK,EAAE,EAAE,CAAC,8BAA8B,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,EAC9D,cAAc,CACf,CAAC;IACJ,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,sBAAsB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;YACrC,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,mCAAmC;YAC9C,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,EACD,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAC5C,CAAC;IACJ,CAAC;IAED,mCAAmC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;YACrC,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,kDAAkD;YAC7D,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,EACD,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,CACzD,CAAC;IACJ,CAAC;IAED,2BAA2B;QACzB,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,gBAAgB,CAAC,OAAe;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,cAAc,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,OAAO,CAAC,SAAS,CAAC,4BAA4B,CACnD,cAAc,EACd,OAAO,CACR,CAAC;IACJ,CAAC;IAED,4BAA4B,CAAC,OAAe,EAAE,aAAsB;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,yBAAyB;YACpC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,EACD,GAAG,EAAE,CACH,wCAAwC,CAAC;YACvC,OAAO;YACP,aAAa;YACb,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,OAAO;SACR,CAAC,CACL,CAAC;IACJ,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,oBAAoB,CAAC,eAAe,EAAE,CAAC;IACrD,CAAC;IAED,mBAAmB,CAAC,OAAe;QACjC,OAAO,IAAI,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,sBAAsB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACvC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,sBAAsB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,iBAAiB;QACf,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;YACrC,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,kCAAkC;YAC7C,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,EACD,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,6BAA6B,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,OAAO,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED,iBAAiB,CAAC,MAAc,EAAE,iBAAgC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,cAAc,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,6BAA6B,CAAC;YACnC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc;YACd,iBAAiB;YACjB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,iBAAgC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,cAAc,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,yBAAyB,CAAC;YAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc;YACd,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAuC;QAC/D,OAAO,+BAA+B,CAAC;YACrC,GAAG,KAAK;YACR,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA2B;QAC3C,OAAO,uBAAuB,CAAC;YAC7B,GAAG,KAAK;YACR,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,cAAuB;QAChC,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,sBAAsB,EACtB,cAAc,CACf,CAAC;IACJ,CAAC;CACF","sourcesContent":["import type { NativeSubscriptionStore } from \"@tearleads/validators/billing\";\nimport { runWithSecurityIncidentReporting } from \"../../data/keyingProjectionVerification/error\";\nimport {\n  cancelStripeSubscription,\n  checkNativePurchaseEligibility,\n  claimNativeOrganizationSubscription,\n  createStripeCheckout,\n  createStripeCheckoutSession,\n  importOrganizationUser,\n  listLocalOrganizations,\n  loadOrganizationBilling,\n  loadOrganizationBillingHistory,\n  loadOrganizationBillingManagementUrl,\n  loadStripeCheckoutOptions,\n  startOrganizationTrial,\n  updateOrganizationProfile,\n  updateOrganizationRosterEntry,\n} from \"../../workflows/organizations\";\nimport type { ContainerContents } from \"../containerContents\";\nimport type { InternalRuntime } from \"../workflowRuntime\";\nimport {\n  createOrganizationDataUsageCoordinator,\n  type OrganizationDataUsageCoordinator,\n} from \"./organizationDataUsage\";\nimport { loadOrganizationGroupPresentationDetails } from \"./organizationGroupPresentation\";\nimport {\n  createOrganizationReadModelCoordinator,\n  type OrganizationReadModelCoordinator,\n} from \"./organizationReadModels\";\nimport type { Organizations } from \"./organizationsTypes\";\nimport {\n  authenticatedOrganizationId,\n  runForOrganization,\n} from \"./organizationWorkflowRuntime\";\nimport {\n  type AbandonOrganizationPolicyMutationInput,\n  abandonPendingOrganizationPolicyMutation,\n  type DiscardUnreadableOrganizationPolicyMutationInput,\n  discardUnreadableOrganizationPolicyMutation,\n  readPendingOrganizationPolicyMutation,\n  retryPendingOrganizationPolicyMutation,\n} from \"./principalMutationRecovery\";\nimport { currentOrganizationMutation } from \"./principalMutationScope\";\nimport {\n  type AddOrganizationGroupUserInput,\n  addUserToOrganizationGroup,\n  createGroupForOrganization,\n  deleteGroupForOrganization,\n  type OrganizationGrantRef,\n  type RemoveOrganizationGroupUserInput,\n  removeUserFromOrganizationGroup,\n  revokeOrganizationGrant,\n} from \"./principalMutations\";\n\nexport type {\n  ImportedOrganizationUser,\n  LocalOrganizationSummary,\n  OrganizationBilling,\n  OrganizationBillingHistory,\n  OrganizationBillingHistoryEntry,\n  OrganizationBillingManagementUrl,\n  OrganizationBillingView,\n  OrganizationContainerGrant,\n  OrganizationContainerGrants,\n  OrganizationDataUsage,\n  OrganizationDirectory,\n  OrganizationDirectoryAndGroups,\n  OrganizationDirectoryUser,\n  OrganizationGroupContainer,\n  OrganizationGroupContainers,\n  OrganizationGroupDetails,\n  OrganizationGroupMember,\n  OrganizationGroupMembers,\n  OrganizationGroupPolicyHistory,\n  OrganizationGroupSummary,\n  OrganizationPolicyGrantChange,\n  OrganizationPolicyGroupChange,\n  OrganizationPolicyHistory,\n  OrganizationPolicyHistoryEntry,\n  OrganizationProfile,\n  OrganizationUserDetail,\n} from \"../../workflows/organizations\";\nexport type {\n  OrganizationGroupMutationReceipt,\n  Organizations,\n} from \"./organizationsTypes\";\nexport type {\n  AbandonOrganizationPolicyMutationInput,\n  DiscardUnreadableOrganizationPolicyMutationInput,\n} from \"./principalMutationRecovery\";\nexport type {\n  AddOrganizationGroupUserInput,\n  OrganizationGrantRef,\n  RemoveOrganizationGroupUserInput,\n} from \"./principalMutations\";\n\nexport function createOrganizations(\n  runtime: InternalRuntime,\n  containerContents: ContainerContents,\n): Organizations {\n  return new OrganizationsService(runtime, containerContents);\n}\n\nclass OrganizationsService implements Organizations {\n  private readonly dataUsageCoordinator: OrganizationDataUsageCoordinator;\n  private readonly readModelCoordinator: OrganizationReadModelCoordinator;\n\n  constructor(\n    private readonly runtimeService: InternalRuntime,\n    private readonly containerContents: ContainerContents,\n  ) {\n    this.dataUsageCoordinator = createOrganizationDataUsageCoordinator(\n      this.runtimeService,\n    );\n    this.readModelCoordinator = createOrganizationReadModelCoordinator(\n      this.runtimeService,\n    );\n  }\n\n  async addUserToGroup(input: AddOrganizationGroupUserInput) {\n    return addUserToOrganizationGroup({\n      ...input,\n      containerContents: this.containerContents,\n      readModelCoordinator: this.readModelCoordinator,\n      ...currentOrganizationMutation(this.runtimeService),\n    });\n  }\n\n  readPendingPolicyMutation(organizationId: string) {\n    return readPendingOrganizationPolicyMutation(\n      this.runtimeService,\n      organizationId,\n    );\n  }\n\n  discardUnreadablePolicyMutation(\n    input: DiscardUnreadableOrganizationPolicyMutationInput,\n  ) {\n    return discardUnreadableOrganizationPolicyMutation(\n      this.runtimeService,\n      input,\n    );\n  }\n\n  retryPendingPolicyMutation(organizationId: string) {\n    return retryPendingOrganizationPolicyMutation(\n      this.runtimeService,\n      organizationId,\n    );\n  }\n\n  abandonPendingPolicyMutation(input: AbandonOrganizationPolicyMutationInput) {\n    return abandonPendingOrganizationPolicyMutation(this.runtimeService, input);\n  }\n\n  createGroup(name: string) {\n    return createGroupForOrganization({\n      name,\n      ...currentOrganizationMutation(this.runtimeService),\n    });\n  }\n\n  deleteGroup(groupId: string) {\n    return deleteGroupForOrganization({\n      groupId,\n      ...currentOrganizationMutation(this.runtimeService),\n    });\n  }\n\n  importUserById(userId: string) {\n    const runtime = this.runtimeService.workflowInput();\n    return importOrganizationUser({\n      resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,\n      userId,\n    });\n  }\n\n  loadBilling() {\n    return runForOrganization(this.runtimeService, loadOrganizationBilling);\n  }\n\n  loadBillingForOrganization(organizationId: string) {\n    // Gated on an authenticated session rather than on the target being the\n    // active org. The server still enforces membership, so an org the caller\n    // cannot reach resolves to `null`.\n    return runForOrganization(\n      this.runtimeService,\n      loadOrganizationBilling,\n      organizationId,\n    );\n  }\n\n  loadBillingHistory() {\n    return runForOrganization(\n      this.runtimeService,\n      loadOrganizationBillingHistory,\n    );\n  }\n\n  loadBillingManagementUrl() {\n    return runForOrganization(\n      this.runtimeService,\n      loadOrganizationBillingManagementUrl,\n    );\n  }\n\n  loadStripeCheckoutOptions(organizationId?: string) {\n    return runForOrganization(\n      this.runtimeService,\n      loadStripeCheckoutOptions,\n      organizationId,\n    );\n  }\n\n  createStripeCheckout(organizationId?: string) {\n    return runForOrganization(\n      this.runtimeService,\n      createStripeCheckout,\n      organizationId,\n    );\n  }\n\n  createStripeCheckoutSession(returnUrl: string, organizationId?: string) {\n    return runForOrganization(\n      this.runtimeService,\n      (input) => createStripeCheckoutSession({ ...input, returnUrl }),\n      organizationId,\n    );\n  }\n\n  cancelStripeSubscription() {\n    return runForOrganization(this.runtimeService, cancelStripeSubscription);\n  }\n\n  claimNativeSubscription(\n    organizationId: string,\n    store: NativeSubscriptionStore,\n  ) {\n    return runForOrganization(\n      this.runtimeService,\n      (input) => claimNativeOrganizationSubscription({ ...input, store }),\n      organizationId,\n    );\n  }\n\n  checkNativePurchaseEligibility(\n    organizationId: string,\n    store: NativeSubscriptionStore,\n  ) {\n    return runForOrganization(\n      this.runtimeService,\n      (input) => checkNativePurchaseEligibility({ ...input, store }),\n      organizationId,\n    );\n  }\n\n  loadDataUsage() {\n    return this.dataUsageCoordinator.reconcile();\n  }\n\n  loadLocalDataUsage() {\n    return this.dataUsageCoordinator.loadLocal();\n  }\n\n  loadDirectoryAndGroups() {\n    const runtime = this.runtimeService.workflowInput();\n    return runWithSecurityIncidentReporting(\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: runtime.auth.organizationId,\n        objectKind: \"principal\",\n        operation: \"organization.read_model.reconcile\",\n        organizationId: runtime.auth.organizationId,\n      },\n      () => this.readModelCoordinator.reconcile(),\n    );\n  }\n\n  loadDirectoryAndGroupsAfterMutation() {\n    const runtime = this.runtimeService.workflowInput();\n    return runWithSecurityIncidentReporting(\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: runtime.auth.organizationId,\n        objectKind: \"principal\",\n        operation: \"organization.read_model.reconcile_after_mutation\",\n        organizationId: runtime.auth.organizationId,\n      },\n      () => this.readModelCoordinator.reconcileAfterMutation(),\n    );\n  }\n\n  loadLocalDirectoryAndGroups() {\n    return this.readModelCoordinator.loadLocal();\n  }\n\n  loadGroupMembers(groupId: string) {\n    const runtime = this.runtimeService.workflowInput();\n    const organizationId = authenticatedOrganizationId(runtime);\n    if (!organizationId || groupId.length === 0) {\n      return Promise.resolve(null);\n    }\n\n    return runtime.apiClient.listOrganizationGroupMembers(\n      organizationId,\n      groupId,\n    );\n  }\n\n  loadGroupPresentationDetails(groupId: string, beforeVersion?: number) {\n    const runtime = this.runtimeService.workflowInput();\n    return runWithSecurityIncidentReporting(\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: groupId,\n        objectKind: \"principal\",\n        operation: \"group.presentation.load\",\n        organizationId: runtime.auth.organizationId,\n      },\n      () =>\n        loadOrganizationGroupPresentationDetails({\n          groupId,\n          beforeVersion,\n          readModelCoordinator: this.readModelCoordinator,\n          runtime,\n        }),\n    );\n  }\n\n  loadGrants() {\n    return this.readModelCoordinator.loadLocalGrants();\n  }\n\n  loadGroupContainers(groupId: string) {\n    return this.readModelCoordinator.loadLocalGroupContainers(groupId);\n  }\n\n  listLocalOrganizations() {\n    const runtime = this.runtimeService.workflowInput();\n    if (runtime.infra.dbStatus !== \"ready\") {\n      return Promise.resolve([]);\n    }\n\n    return listLocalOrganizations({ execSql: runtime.infra.execSql });\n  }\n\n  loadPolicyHistory() {\n    const runtime = this.runtimeService.workflowInput();\n    return runWithSecurityIncidentReporting(\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: runtime.auth.organizationId,\n        objectKind: \"principal\",\n        operation: \"organization.policy_history.load\",\n        organizationId: runtime.auth.organizationId,\n      },\n      () => this.readModelCoordinator.loadOrganizationPolicyHistory(),\n    );\n  }\n\n  loadUserDetail(userId: string) {\n    return this.readModelCoordinator.loadLocalUserDetail(userId);\n  }\n\n  updateRosterEntry(userId: string, profileDocumentId: string | null) {\n    const runtime = this.runtimeService.workflowInput();\n    const organizationId = authenticatedOrganizationId(runtime);\n    if (!organizationId || userId.length === 0) {\n      return Promise.resolve(null);\n    }\n\n    return updateOrganizationRosterEntry({\n      apiClient: runtime.apiClient,\n      organizationId,\n      profileDocumentId,\n      userId,\n    });\n  }\n\n  updateProfile(profileDocumentId: string | null) {\n    const runtime = this.runtimeService.workflowInput();\n    const organizationId = authenticatedOrganizationId(runtime);\n    if (!organizationId) {\n      return Promise.resolve(null);\n    }\n\n    return updateOrganizationProfile({\n      apiClient: runtime.apiClient,\n      organizationId,\n      profileDocumentId,\n    });\n  }\n\n  async removeUserFromGroup(input: RemoveOrganizationGroupUserInput) {\n    return removeUserFromOrganizationGroup({\n      ...input,\n      containerContents: this.containerContents,\n      readModelCoordinator: this.readModelCoordinator,\n      ...currentOrganizationMutation(this.runtimeService),\n    });\n  }\n\n  async revokeGrant(grant: OrganizationGrantRef) {\n    return revokeOrganizationGrant({\n      ...grant,\n      containerContents: this.containerContents,\n      readModelCoordinator: this.readModelCoordinator,\n      ...currentOrganizationMutation(this.runtimeService),\n    });\n  }\n\n  startTrial(organizationId?: string) {\n    return runForOrganization(\n      this.runtimeService,\n      startOrganizationTrial,\n      organizationId,\n    );\n  }\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,mCAAmC,EACnC,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,8BAA8B,EAC9B,oCAAoC,EACpC,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EACL,sCAAsC,GAEvC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wCAAwC,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EACL,sCAAsC,GAEvC,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,wCAAwC,EAExC,2CAA2C,EAC3C,qCAAqC,EACrC,sCAAsC,GACvC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAEL,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAG1B,+BAA+B,EAC/B,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AA4C9B,MAAM,UAAU,mBAAmB,CACjC,OAAwB,EACxB,iBAAoC;IAEpC,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,oBAAoB;IAKL;IACA;IALF,oBAAoB,CAAmC;IACvD,oBAAoB,CAAmC;IAExE,YACmB,cAA+B,EAC/B,iBAAoC;QADpC,mBAAc,GAAd,cAAc,CAAiB;QAC/B,sBAAiB,GAAjB,iBAAiB,CAAmB;QAErD,IAAI,CAAC,oBAAoB,GAAG,sCAAsC,CAChE,IAAI,CAAC,cAAc,CACpB,CAAC;QACF,IAAI,CAAC,oBAAoB,GAAG,sCAAsC,CAChE,IAAI,CAAC,cAAc,CACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAoC;QACvD,OAAO,0BAA0B,CAAC;YAChC,GAAG,KAAK;YACR,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,yBAAyB,CAAC,cAAsB;QAC9C,OAAO,qCAAqC,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;IACJ,CAAC;IAED,+BAA+B,CAC7B,KAAuD;QAEvD,OAAO,2CAA2C,CAChD,IAAI,CAAC,cAAc,EACnB,KAAK,CACN,CAAC;IACJ,CAAC;IAED,0BAA0B,CAAC,cAAsB;QAC/C,OAAO,sCAAsC,CAC3C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;IACJ,CAAC;IAED,4BAA4B,CAAC,KAA6C;QACxE,OAAO,wCAAwC,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAC9E,CAAC;IAED,WAAW,CAAC,IAAY;QACtB,OAAO,0BAA0B,CAAC;YAChC,IAAI;YACJ,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,OAAO,0BAA0B,CAAC;YAChC,OAAO;YACP,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,sBAAsB,CAAC;YAC5B,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;YAC9D,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,WAAW;QACT,OAAO,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;IAC1E,CAAC;IAED,0BAA0B,CAAC,cAAsB;QAC/C,wEAAwE;QACxE,yEAAyE;QACzE,mCAAmC;QACnC,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,uBAAuB,EACvB,cAAc,CACf,CAAC;IACJ,CAAC;IAED,kBAAkB;QAChB,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,8BAA8B,CAC/B,CAAC;IACJ,CAAC;IAED,wBAAwB;QACtB,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,oCAAoC,CACrC,CAAC;IACJ,CAAC;IAED,yBAAyB,CAAC,cAAuB;QAC/C,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,yBAAyB,EACzB,cAAc,CACf,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,cAAuB;QAC1C,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,oBAAoB,EACpB,cAAc,CACf,CAAC;IACJ,CAAC;IAED,2BAA2B,CAAC,SAAiB,EAAE,cAAuB;QACpE,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,EAC/D,cAAc,CACf,CAAC;IACJ,CAAC;IAED,wBAAwB;QACtB,OAAO,kBAAkB,CAAC,IAAI,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAC3E,CAAC;IAED,uBAAuB,CACrB,cAAsB,EACtB,KAA8B;QAE9B,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,CAAC,KAAK,EAAE,EAAE,CAAC,mCAAmC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,EACnE,cAAc,CACf,CAAC;IACJ,CAAC;IAED,8BAA8B,CAC5B,cAAsB,EACtB,KAA8B;QAE9B,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,CAAC,KAAK,EAAE,EAAE,CAAC,8BAA8B,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,EAC9D,cAAc,CACf,CAAC;IACJ,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,sBAAsB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;YACrC,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,mCAAmC;YAC9C,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,EACD,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAC5C,CAAC;IACJ,CAAC;IAED,mCAAmC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;YACrC,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,kDAAkD;YAC7D,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,EACD,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,EAAE,CACzD,CAAC;IACJ,CAAC;IAED,2BAA2B;QACzB,OAAO,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,gBAAgB,CAAC,OAAe;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,cAAc,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,OAAO,CAAC,SAAS,CAAC,4BAA4B,CACnD,cAAc,EACd,OAAO,CACR,CAAC;IACJ,CAAC;IAED,4BAA4B,CAAC,OAAe,EAAE,aAAsB;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,yBAAyB;YACpC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,EACD,GAAG,EAAE,CACH,wCAAwC,CAAC;YACvC,OAAO;YACP,aAAa;YACb,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,OAAO;SACR,CAAC,CACL,CAAC;IACJ,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,oBAAoB,CAAC,eAAe,EAAE,CAAC;IACrD,CAAC;IAED,mBAAmB,CAAC,OAAe;QACjC,OAAO,IAAI,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,sBAAsB;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACvC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,sBAAsB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,iBAAiB,CAAC,aAAsB;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,gCAAgC,CACrC,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;YACE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;YACrC,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,kCAAkC;YAC7C,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc;SAC5C,EACD,GAAG,EAAE,CACH,IAAI,CAAC,oBAAoB,CAAC,6BAA6B,CACrD,SAAS,EACT,aAAa,CACd,CACJ,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,OAAO,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAED,iBAAiB,CAAC,MAAc,EAAE,iBAAgC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,cAAc,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,6BAA6B,CAAC;YACnC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc;YACd,iBAAiB;YACjB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,iBAAgC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,cAAc,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,yBAAyB,CAAC;YAC/B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc;YACd,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAuC;QAC/D,OAAO,+BAA+B,CAAC;YACrC,GAAG,KAAK;YACR,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA2B;QAC3C,OAAO,uBAAuB,CAAC;YAC7B,GAAG,KAAK;YACR,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,GAAG,2BAA2B,CAAC,IAAI,CAAC,cAAc,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,cAAuB;QAChC,OAAO,kBAAkB,CACvB,IAAI,CAAC,cAAc,EACnB,sBAAsB,EACtB,cAAc,CACf,CAAC;IACJ,CAAC;CACF","sourcesContent":["import type { NativeSubscriptionStore } from \"@tearleads/validators/billing\";\nimport { runWithSecurityIncidentReporting } from \"../../data/keyingProjectionVerification/error\";\nimport {\n  cancelStripeSubscription,\n  checkNativePurchaseEligibility,\n  claimNativeOrganizationSubscription,\n  createStripeCheckout,\n  createStripeCheckoutSession,\n  importOrganizationUser,\n  listLocalOrganizations,\n  loadOrganizationBilling,\n  loadOrganizationBillingHistory,\n  loadOrganizationBillingManagementUrl,\n  loadStripeCheckoutOptions,\n  startOrganizationTrial,\n  updateOrganizationProfile,\n  updateOrganizationRosterEntry,\n} from \"../../workflows/organizations\";\nimport type { ContainerContents } from \"../containerContents\";\nimport type { InternalRuntime } from \"../workflowRuntime\";\nimport {\n  createOrganizationDataUsageCoordinator,\n  type OrganizationDataUsageCoordinator,\n} from \"./organizationDataUsage\";\nimport { loadOrganizationGroupPresentationDetails } from \"./organizationGroupPresentation\";\nimport {\n  createOrganizationReadModelCoordinator,\n  type OrganizationReadModelCoordinator,\n} from \"./organizationReadModels\";\nimport type { Organizations } from \"./organizationsTypes\";\nimport {\n  authenticatedOrganizationId,\n  runForOrganization,\n} from \"./organizationWorkflowRuntime\";\nimport {\n  type AbandonOrganizationPolicyMutationInput,\n  abandonPendingOrganizationPolicyMutation,\n  type DiscardUnreadableOrganizationPolicyMutationInput,\n  discardUnreadableOrganizationPolicyMutation,\n  readPendingOrganizationPolicyMutation,\n  retryPendingOrganizationPolicyMutation,\n} from \"./principalMutationRecovery\";\nimport { currentOrganizationMutation } from \"./principalMutationScope\";\nimport {\n  type AddOrganizationGroupUserInput,\n  addUserToOrganizationGroup,\n  createGroupForOrganization,\n  deleteGroupForOrganization,\n  type OrganizationGrantRef,\n  type RemoveOrganizationGroupUserInput,\n  removeUserFromOrganizationGroup,\n  revokeOrganizationGrant,\n} from \"./principalMutations\";\n\nexport type {\n  ImportedOrganizationUser,\n  LocalOrganizationSummary,\n  OrganizationBilling,\n  OrganizationBillingHistory,\n  OrganizationBillingHistoryEntry,\n  OrganizationBillingManagementUrl,\n  OrganizationBillingView,\n  OrganizationContainerGrant,\n  OrganizationContainerGrants,\n  OrganizationDataUsage,\n  OrganizationDirectory,\n  OrganizationDirectoryAndGroups,\n  OrganizationDirectoryUser,\n  OrganizationGroupContainer,\n  OrganizationGroupContainers,\n  OrganizationGroupDetails,\n  OrganizationGroupMember,\n  OrganizationGroupMembers,\n  OrganizationGroupPolicyHistory,\n  OrganizationGroupSummary,\n  OrganizationPolicyGrantChange,\n  OrganizationPolicyGroupChange,\n  OrganizationPolicyHistory,\n  OrganizationPolicyHistoryEntry,\n  OrganizationProfile,\n  OrganizationUserDetail,\n} from \"../../workflows/organizations\";\nexport type {\n  OrganizationGroupMutationReceipt,\n  Organizations,\n} from \"./organizationsTypes\";\nexport type {\n  AbandonOrganizationPolicyMutationInput,\n  DiscardUnreadableOrganizationPolicyMutationInput,\n} from \"./principalMutationRecovery\";\nexport type {\n  AddOrganizationGroupUserInput,\n  OrganizationGrantRef,\n  RemoveOrganizationGroupUserInput,\n} from \"./principalMutations\";\n\nexport function createOrganizations(\n  runtime: InternalRuntime,\n  containerContents: ContainerContents,\n): Organizations {\n  return new OrganizationsService(runtime, containerContents);\n}\n\nclass OrganizationsService implements Organizations {\n  private readonly dataUsageCoordinator: OrganizationDataUsageCoordinator;\n  private readonly readModelCoordinator: OrganizationReadModelCoordinator;\n\n  constructor(\n    private readonly runtimeService: InternalRuntime,\n    private readonly containerContents: ContainerContents,\n  ) {\n    this.dataUsageCoordinator = createOrganizationDataUsageCoordinator(\n      this.runtimeService,\n    );\n    this.readModelCoordinator = createOrganizationReadModelCoordinator(\n      this.runtimeService,\n    );\n  }\n\n  async addUserToGroup(input: AddOrganizationGroupUserInput) {\n    return addUserToOrganizationGroup({\n      ...input,\n      containerContents: this.containerContents,\n      readModelCoordinator: this.readModelCoordinator,\n      ...currentOrganizationMutation(this.runtimeService),\n    });\n  }\n\n  readPendingPolicyMutation(organizationId: string) {\n    return readPendingOrganizationPolicyMutation(\n      this.runtimeService,\n      organizationId,\n    );\n  }\n\n  discardUnreadablePolicyMutation(\n    input: DiscardUnreadableOrganizationPolicyMutationInput,\n  ) {\n    return discardUnreadableOrganizationPolicyMutation(\n      this.runtimeService,\n      input,\n    );\n  }\n\n  retryPendingPolicyMutation(organizationId: string) {\n    return retryPendingOrganizationPolicyMutation(\n      this.runtimeService,\n      organizationId,\n    );\n  }\n\n  abandonPendingPolicyMutation(input: AbandonOrganizationPolicyMutationInput) {\n    return abandonPendingOrganizationPolicyMutation(this.runtimeService, input);\n  }\n\n  createGroup(name: string) {\n    return createGroupForOrganization({\n      name,\n      ...currentOrganizationMutation(this.runtimeService),\n    });\n  }\n\n  deleteGroup(groupId: string) {\n    return deleteGroupForOrganization({\n      groupId,\n      ...currentOrganizationMutation(this.runtimeService),\n    });\n  }\n\n  importUserById(userId: string) {\n    const runtime = this.runtimeService.workflowInput();\n    return importOrganizationUser({\n      resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,\n      userId,\n    });\n  }\n\n  loadBilling() {\n    return runForOrganization(this.runtimeService, loadOrganizationBilling);\n  }\n\n  loadBillingForOrganization(organizationId: string) {\n    // Gated on an authenticated session rather than on the target being the\n    // active org. The server still enforces membership, so an org the caller\n    // cannot reach resolves to `null`.\n    return runForOrganization(\n      this.runtimeService,\n      loadOrganizationBilling,\n      organizationId,\n    );\n  }\n\n  loadBillingHistory() {\n    return runForOrganization(\n      this.runtimeService,\n      loadOrganizationBillingHistory,\n    );\n  }\n\n  loadBillingManagementUrl() {\n    return runForOrganization(\n      this.runtimeService,\n      loadOrganizationBillingManagementUrl,\n    );\n  }\n\n  loadStripeCheckoutOptions(organizationId?: string) {\n    return runForOrganization(\n      this.runtimeService,\n      loadStripeCheckoutOptions,\n      organizationId,\n    );\n  }\n\n  createStripeCheckout(organizationId?: string) {\n    return runForOrganization(\n      this.runtimeService,\n      createStripeCheckout,\n      organizationId,\n    );\n  }\n\n  createStripeCheckoutSession(returnUrl: string, organizationId?: string) {\n    return runForOrganization(\n      this.runtimeService,\n      (input) => createStripeCheckoutSession({ ...input, returnUrl }),\n      organizationId,\n    );\n  }\n\n  cancelStripeSubscription() {\n    return runForOrganization(this.runtimeService, cancelStripeSubscription);\n  }\n\n  claimNativeSubscription(\n    organizationId: string,\n    store: NativeSubscriptionStore,\n  ) {\n    return runForOrganization(\n      this.runtimeService,\n      (input) => claimNativeOrganizationSubscription({ ...input, store }),\n      organizationId,\n    );\n  }\n\n  checkNativePurchaseEligibility(\n    organizationId: string,\n    store: NativeSubscriptionStore,\n  ) {\n    return runForOrganization(\n      this.runtimeService,\n      (input) => checkNativePurchaseEligibility({ ...input, store }),\n      organizationId,\n    );\n  }\n\n  loadDataUsage() {\n    return this.dataUsageCoordinator.reconcile();\n  }\n\n  loadLocalDataUsage() {\n    return this.dataUsageCoordinator.loadLocal();\n  }\n\n  loadDirectoryAndGroups() {\n    const runtime = this.runtimeService.workflowInput();\n    return runWithSecurityIncidentReporting(\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: runtime.auth.organizationId,\n        objectKind: \"principal\",\n        operation: \"organization.read_model.reconcile\",\n        organizationId: runtime.auth.organizationId,\n      },\n      () => this.readModelCoordinator.reconcile(),\n    );\n  }\n\n  loadDirectoryAndGroupsAfterMutation() {\n    const runtime = this.runtimeService.workflowInput();\n    return runWithSecurityIncidentReporting(\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: runtime.auth.organizationId,\n        objectKind: \"principal\",\n        operation: \"organization.read_model.reconcile_after_mutation\",\n        organizationId: runtime.auth.organizationId,\n      },\n      () => this.readModelCoordinator.reconcileAfterMutation(),\n    );\n  }\n\n  loadLocalDirectoryAndGroups() {\n    return this.readModelCoordinator.loadLocal();\n  }\n\n  loadGroupMembers(groupId: string) {\n    const runtime = this.runtimeService.workflowInput();\n    const organizationId = authenticatedOrganizationId(runtime);\n    if (!organizationId || groupId.length === 0) {\n      return Promise.resolve(null);\n    }\n\n    return runtime.apiClient.listOrganizationGroupMembers(\n      organizationId,\n      groupId,\n    );\n  }\n\n  loadGroupPresentationDetails(groupId: string, beforeVersion?: number) {\n    const runtime = this.runtimeService.workflowInput();\n    return runWithSecurityIncidentReporting(\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: groupId,\n        objectKind: \"principal\",\n        operation: \"group.presentation.load\",\n        organizationId: runtime.auth.organizationId,\n      },\n      () =>\n        loadOrganizationGroupPresentationDetails({\n          groupId,\n          beforeVersion,\n          readModelCoordinator: this.readModelCoordinator,\n          runtime,\n        }),\n    );\n  }\n\n  loadGrants() {\n    return this.readModelCoordinator.loadLocalGrants();\n  }\n\n  loadGroupContainers(groupId: string) {\n    return this.readModelCoordinator.loadLocalGroupContainers(groupId);\n  }\n\n  listLocalOrganizations() {\n    const runtime = this.runtimeService.workflowInput();\n    if (runtime.infra.dbStatus !== \"ready\") {\n      return Promise.resolve([]);\n    }\n\n    return listLocalOrganizations({ execSql: runtime.infra.execSql });\n  }\n\n  loadPolicyHistory(beforeVersion?: number) {\n    const runtime = this.runtimeService.workflowInput();\n    return runWithSecurityIncidentReporting(\n      runtime.util.reportSecurityIncident,\n      {\n        objectId: runtime.auth.organizationId,\n        objectKind: \"principal\",\n        operation: \"organization.policy_history.load\",\n        organizationId: runtime.auth.organizationId,\n      },\n      () =>\n        this.readModelCoordinator.loadOrganizationPolicyHistory(\n          undefined,\n          beforeVersion,\n        ),\n    );\n  }\n\n  loadUserDetail(userId: string) {\n    return this.readModelCoordinator.loadLocalUserDetail(userId);\n  }\n\n  updateRosterEntry(userId: string, profileDocumentId: string | null) {\n    const runtime = this.runtimeService.workflowInput();\n    const organizationId = authenticatedOrganizationId(runtime);\n    if (!organizationId || userId.length === 0) {\n      return Promise.resolve(null);\n    }\n\n    return updateOrganizationRosterEntry({\n      apiClient: runtime.apiClient,\n      organizationId,\n      profileDocumentId,\n      userId,\n    });\n  }\n\n  updateProfile(profileDocumentId: string | null) {\n    const runtime = this.runtimeService.workflowInput();\n    const organizationId = authenticatedOrganizationId(runtime);\n    if (!organizationId) {\n      return Promise.resolve(null);\n    }\n\n    return updateOrganizationProfile({\n      apiClient: runtime.apiClient,\n      organizationId,\n      profileDocumentId,\n    });\n  }\n\n  async removeUserFromGroup(input: RemoveOrganizationGroupUserInput) {\n    return removeUserFromOrganizationGroup({\n      ...input,\n      containerContents: this.containerContents,\n      readModelCoordinator: this.readModelCoordinator,\n      ...currentOrganizationMutation(this.runtimeService),\n    });\n  }\n\n  async revokeGrant(grant: OrganizationGrantRef) {\n    return revokeOrganizationGrant({\n      ...grant,\n      containerContents: this.containerContents,\n      readModelCoordinator: this.readModelCoordinator,\n      ...currentOrganizationMutation(this.runtimeService),\n    });\n  }\n\n  startTrial(organizationId?: string) {\n    return runForOrganization(\n      this.runtimeService,\n      startOrganizationTrial,\n      organizationId,\n    );\n  }\n}\n"]}

package/client/organizations/organizationHistory.js

@@ -0,0 +1,66 @@
+import { ProjectionDependencyUnavailableError } from "../../data/keyingProjectionVerification/dependencyUnavailable.js";
+import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
+import { loadLocalOrganizationPolicyReference } from "../../workflows/organizations/index.js";
+import { buildOrganizationGroupPolicyHistoryPage } from "../../workflows/organizations/groupPolicyHistoryPage.js";
+import { loadPolicyHistoryDetails } from "../../workflows/organizations/loadPolicyHistoryDetails.js";
+import { createRuntimePrincipalPolicyCurrentResolver } from "../../workflows/principals/runtimePolicyRecovery.js";
+import { createRuntimeProjectionPolicyResolver } from "../../workflows/principals/runtimeProjectionPolicyRecovery.js";
+export async function loadBoundedOrganizationHistory(input) {
+    const { active, stillCurrent } = input;
+    const { runtime } = active;
+    const resolve = createRuntimePrincipalPolicyCurrentResolver(runtime);
+    const resolveHistory = createRuntimeProjectionPolicyResolver(runtime);
+    if (!resolve || !resolveHistory)
+        throw new ProjectionDependencyUnavailableError("Organization history requires private paged recovery");
+    const reference = await loadLocalOrganizationPolicyReference({
+        currentUserId: active.userId,
+        execSql: runtime.infra.execSql,
+        organizationId: active.organizationId,
+        principalId: active.organizationId,
+        principalType: "organization",
+    });
+    assertProjectionVerificationCurrent(stillCurrent);
+    if (!reference)
+        return null;
+    const resolved = await resolve({
+        organizationId: active.organizationId,
+        reference,
+        preferLocalCurrent: true,
+        stillCurrent,
+        historyPage: input.beforeVersion === undefined
+            ? {}
+            : { beforeVersion: input.beforeVersion },
+    });
+    assertProjectionVerificationCurrent(stillCurrent);
+    const page = resolved.historyPage;
+    if (!page)
+        throw new Error("Verified organization history page is missing");
+    const basic = buildOrganizationGroupPolicyHistoryPage({
+        page,
+        organizationId: active.organizationId,
+        groupId: active.organizationId,
+    });
+    return loadPolicyHistoryDetails({
+        apiClient: runtime.apiClient,
+        currentUserId: active.userId,
+        domainScope: runtime.state.domainScope,
+        execSql: runtime.infra.execSql,
+        organizationId: active.organizationId,
+        head: reference,
+        page,
+        history: {
+            principalId: active.organizationId,
+            principalType: "organization",
+            organizationId: active.organizationId,
+            nextBeforeVersion: page.nextBeforeVersion,
+            entries: basic.entries.map((entry) => ({ ...entry, groupChanges: null })),
+        },
+        resolveHistory,
+        stillCurrent,
+        online: runtime.state.online,
+        olderPage: input.beforeVersion !== undefined,
+        logError: runtime.util.logError,
+        reportSecurityIncident: runtime.util.reportSecurityIncident,
+    });
+}
+//# sourceMappingURL=organizationHistory.js.map

package/client/organizations/organizationHistory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationHistory.js","sourceRoot":"","sources":["organizationHistory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oCAAoC,EAAE,MAAM,+DAA+D,CAAC;AACrH,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,EAAE,uCAAuC,EAAE,MAAM,sDAAsD,CAAC;AAC/G,OAAO,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAClG,OAAO,EAAE,2CAA2C,EAAE,MAAM,kDAAkD,CAAC;AAC/G,OAAO,EAAE,qCAAqC,EAAE,MAAM,4DAA4D,CAAC;AAGnH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAIpD;IACC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IACvC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,MAAM,OAAO,GAAG,2CAA2C,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,qCAAqC,CAAC,OAAO,CAAC,CAAC;IACtE,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc;QAC7B,MAAM,IAAI,oCAAoC,CAC5C,sDAAsD,CACvD,CAAC;IACJ,MAAM,SAAS,GAAG,MAAM,oCAAoC,CAAC;QAC3D,aAAa,EAAE,MAAM,CAAC,MAAM;QAC5B,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,WAAW,EAAE,MAAM,CAAC,cAAc;QAClC,aAAa,EAAE,cAAc;KAC9B,CAAC,CAAC;IACH,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;QAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,SAAS;QACT,kBAAkB,EAAE,IAAI;QACxB,YAAY;QACZ,WAAW,EACT,KAAK,CAAC,aAAa,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE;KAC7C,CAAC,CAAC;IACH,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,uCAAuC,CAAC;QACpD,IAAI;QACJ,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,OAAO,EAAE,MAAM,CAAC,cAAc;KAC/B,CAAC,CAAC;IACH,OAAO,wBAAwB,CAAC;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,MAAM,CAAC,MAAM;QAC5B,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW;QACtC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,IAAI,EAAE,SAAS;QACf,IAAI;QACJ,OAAO,EAAE;YACP,WAAW,EAAE,MAAM,CAAC,cAAc;YAClC,aAAa,EAAE,cAAc;YAC7B,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;SAC1E;QACD,cAAc;QACd,YAAY;QACZ,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;QAC5B,SAAS,EAAE,KAAK,CAAC,aAAa,KAAK,SAAS;QAC5C,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;QAC/B,sBAAsB,EAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB;KAC5D,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { ProjectionDependencyUnavailableError } from \"../../data/keyingProjectionVerification/dependencyUnavailable\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport { loadLocalOrganizationPolicyReference } from \"../../workflows/organizations\";\nimport { buildOrganizationGroupPolicyHistoryPage } from \"../../workflows/organizations/groupPolicyHistoryPage\";\nimport { loadPolicyHistoryDetails } from \"../../workflows/organizations/loadPolicyHistoryDetails\";\nimport { createRuntimePrincipalPolicyCurrentResolver } from \"../../workflows/principals/runtimePolicyRecovery\";\nimport { createRuntimeProjectionPolicyResolver } from \"../../workflows/principals/runtimeProjectionPolicyRecovery\";\nimport type { ActiveOrganizationDataRuntime } from \"./organizationWorkflowRuntime\";\n\nexport async function loadBoundedOrganizationHistory(input: {\n  readonly active: ActiveOrganizationDataRuntime;\n  readonly beforeVersion?: number | undefined;\n  readonly stillCurrent: () => boolean;\n}) {\n  const { active, stillCurrent } = input;\n  const { runtime } = active;\n  const resolve = createRuntimePrincipalPolicyCurrentResolver(runtime);\n  const resolveHistory = createRuntimeProjectionPolicyResolver(runtime);\n  if (!resolve || !resolveHistory)\n    throw new ProjectionDependencyUnavailableError(\n      \"Organization history requires private paged recovery\",\n    );\n  const reference = await loadLocalOrganizationPolicyReference({\n    currentUserId: active.userId,\n    execSql: runtime.infra.execSql,\n    organizationId: active.organizationId,\n    principalId: active.organizationId,\n    principalType: \"organization\",\n  });\n  assertProjectionVerificationCurrent(stillCurrent);\n  if (!reference) return null;\n  const resolved = await resolve({\n    organizationId: active.organizationId,\n    reference,\n    preferLocalCurrent: true,\n    stillCurrent,\n    historyPage:\n      input.beforeVersion === undefined\n        ? {}\n        : { beforeVersion: input.beforeVersion },\n  });\n  assertProjectionVerificationCurrent(stillCurrent);\n  const page = resolved.historyPage;\n  if (!page) throw new Error(\"Verified organization history page is missing\");\n  const basic = buildOrganizationGroupPolicyHistoryPage({\n    page,\n    organizationId: active.organizationId,\n    groupId: active.organizationId,\n  });\n  return loadPolicyHistoryDetails({\n    apiClient: runtime.apiClient,\n    currentUserId: active.userId,\n    domainScope: runtime.state.domainScope,\n    execSql: runtime.infra.execSql,\n    organizationId: active.organizationId,\n    head: reference,\n    page,\n    history: {\n      principalId: active.organizationId,\n      principalType: \"organization\",\n      organizationId: active.organizationId,\n      nextBeforeVersion: page.nextBeforeVersion,\n      entries: basic.entries.map((entry) => ({ ...entry, groupChanges: null })),\n    },\n    resolveHistory,\n    stillCurrent,\n    online: runtime.state.online,\n    olderPage: input.beforeVersion !== undefined,\n    logError: runtime.util.logError,\n    reportSecurityIncident: runtime.util.reportSecurityIncident,\n  });\n}\n"]}

package/client/organizations/organizationReadModels.d.ts

@@ -4,7 +4,7 @@ export interface OrganizationReadModelCoordinator {
     loadLocal(organizationId?: string | undefined): Promise<OrganizationDirectoryAndGroups | null>;
     loadLocalGroupMembers(groupId: string, organizationId?: string | undefined): Promise<OrganizationGroupMembers | null>;
     loadGroupPolicyHistory(groupId: string, organizationId?: string | undefined, beforeVersion?: number | undefined): Promise<OrganizationGroupPolicyHistory | null>;
-    loadOrganizationPolicyHistory(organizationId?: string | undefined): Promise<OrganizationPolicyHistory | null>;
+    loadOrganizationPolicyHistory(organizationId?: string | undefined, beforeVersion?: number | undefined): Promise<OrganizationPolicyHistory | null>;
     loadLocalGrants(organizationId?: string | undefined): Promise<OrganizationContainerGrants | null>;
     loadLocalGroupContainers(groupId: string, organizationId?: string | undefined): Promise<OrganizationGroupContainers | null>;
     loadLocalUserDetail(userId: string, organizationId?: string | undefined): Promise<OrganizationUserDetail | null>;

package/client/organizations/organizationReadModels.js

@@ -1,10 +1,10 @@
-import { loadLocalOrganizationContainerGrants, loadLocalOrganizationDirectoryAndGroups, loadLocalOrganizationGroupContainers, loadLocalOrganizationGroupMembers, loadLocalOrganizationGroupPolicyHistory, loadLocalOrganizationPolicyHistory, loadLocalOrganizationPolicyReference, loadLocalOrganizationUserDetail, reconcileOrganizationDirectoryAndGroups, } from "../../workflows/organizations/index.js";
-import { loadPolicyHistoryDetails } from "../../workflows/organizations/loadPolicyHistoryDetails.js";
+import { loadLocalOrganizationContainerGrants, loadLocalOrganizationDirectoryAndGroups, loadLocalOrganizationGroupContainers, loadLocalOrganizationGroupMembers, loadLocalOrganizationGroupPolicyHistory, loadLocalOrganizationPolicyReference, loadLocalOrganizationUserDetail, reconcileOrganizationDirectoryAndGroups, } from "../../workflows/organizations/index.js";
 import { organizationAccessScopeKey, wasOrganizationPresentationAccessDeniedByServer, } from "../../workflows/organizations/organizationPresentationAccessState.js";
 import { createRuntimePrincipalPolicyWarmer } from "../../workflows/principals/runtimePolicyWarmer.js";
 import { recoverOrganizationAccess } from "./organizationAccessRestoration.js";
 import { loadBoundedOrganizationGroupHistory } from "./organizationGroupHistory.js";
 import { hydrateOrganizationGroupNamesForRuntime } from "./organizationGroupNameHydration.js";
+import { loadBoundedOrganizationHistory } from "./organizationHistory.js";
 import { activeOrganizationDataRuntime, isOrganizationDataRuntimeCurrent, } from "./organizationWorkflowRuntime.js";
 const coordinatorsByRuntime = new WeakMap();
 class OrganizationReadModelCoordinatorImpl {
@@ -164,35 +164,15 @@ class OrganizationReadModelCoordinatorImpl {
             principalType: "group",
         });
     }
-    async loadOrganizationPolicyHistory(organizationId) {
+    async loadOrganizationPolicyHistory(organizationId, beforeVersion) {
         const active = activeOrganizationDataRuntime(this.runtimeService, organizationId);
-        if (!active) {
+        if (!active)
             return null;
-        }
-        const history = await this.loadPolicyHistoryAfterWarm({
-            active,
-            loadLocal: () => loadLocalOrganizationPolicyHistory({
-                currentUserId: active.userId,
-                execSql: active.runtime.infra.execSql,
-                organizationId: active.organizationId,
-            }),
-            principalId: active.organizationId,
-            principalType: "organization",
-        });
-        if (!history || !active.runtime.state.online)
-            return history;
         const domainScope = active.runtime.state.domainScope;
-        return loadPolicyHistoryDetails({
-            domainScope,
-            apiClient: active.runtime.apiClient,
-            currentUserId: active.userId,
-            execSql: active.runtime.infra.execSql,
-            organizationId: active.organizationId,
-            history,
-            resolveTrustedUserIdentity: active.runtime.resolveTrustedUserIdentity,
+        return loadBoundedOrganizationHistory({
+            active,
+            beforeVersion,
             stillCurrent: () => isOrganizationDataRuntimeCurrent(this.runtimeService, active, domainScope),
-            logError: active.runtime.util.logError,
-            reportSecurityIncident: active.runtime.util.reportSecurityIncident,
         });
     }
     async loadLocalUserDetail(userId, organizationId) {

package/client/organizations/organizationReadModels.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationReadModels.js","sourceRoot":"","sources":["organizationReadModels.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oCAAoC,EACpC,uCAAuC,EACvC,oCAAoC,EACpC,iCAAiC,EACjC,uCAAuC,EACvC,kCAAkC,EAClC,oCAAoC,EACpC,+BAA+B,EAQ/B,uCAAuC,GACxC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wDAAwD,CAAC;AAClG,OAAO,EACL,0BAA0B,EAC1B,+CAA+C,GAChD,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAEpG,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,mCAAmC,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,uCAAuC,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EAEL,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,+BAA+B,CAAC;AAEvC,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAGtC,CAAC;AA6CJ,MAAM,oCAAoC;IAYX;IATZ,sBAAsB,GAAG,IAAI,OAAO,EAGlD,CAAC;IACa,oBAAoB,GAAG,IAAI,OAAO,EAGhD,CAAC;IAEJ,YAA6B,cAA+B;QAA/B,mBAAc,GAAd,cAAc,CAAiB;IAAG,CAAC;IAExD,iBAAiB,CAAC,MAAqC;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAC/C,IAAI,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,eAAe,CAAC,MAAqC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAC/C,IAAI,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,MAAqC,EACrC,SAEC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,aAAa,KAAK,SAAS,CAAC,WAAW,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;QACrH,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,kCAAkC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjE,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,CAAC,SAAS,CAAC;SACxB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACd,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC/B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,0BAA0B,CAAU,KAKjD;QACC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAChC,qDAAqD,EACrD,KAAK,CACN,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,SAEH,CAAC;QACF,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,oCAAoC,CAAC;gBACrD,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAClC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC3C,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;gBAC3C,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAChC,oDAAoD,EACpD,KAAK,CACN,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAChC,uDAAuD,EACvD,KAAK,CACN,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,cAAuB;QACrC,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,uCAAuC,CAAC;YAC7C,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAuB;QAC3C,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,oCAAoC,CAAC;YAC1C,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,OAAe,EAAE,cAAuB;QACrE,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,oCAAoC,CAAC;YAC1C,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,OAAO;YACP,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAe,EAAE,cAAuB;QAClE,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,iCAAiC,CAAC;YACvC,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,OAAO;YACP,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,OAAe,EACf,cAAuB,EACvB,aAAsB;QAEtB,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,mCAAmC,CAAC;YACxD,MAAM;YACN,OAAO;YACP,aAAa;YACb,YAAY,EAAE,GAAG,EAAE,CACjB,gCAAgC,CAC9B,IAAI,CAAC,cAAc,EACnB,MAAM,EACN,WAAW,CACZ;SACJ,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,OAAO,IAAI,CAAC,0BAA0B,CAAC;YACrC,MAAM;YACN,SAAS,EAAE,GAAG,EAAE,CACd,uCAAuC,CAAC;gBACtC,aAAa,EAAE,MAAM,CAAC,MAAM;gBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;gBACrC,OAAO;gBACP,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CAAC;YACJ,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,6BAA6B,CAAC,cAAuB;QACzD,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC;YACpD,MAAM;YACN,SAAS,EAAE,GAAG,EAAE,CACd,kCAAkC,CAAC;gBACjC,aAAa,EAAE,MAAM,CAAC,MAAM;gBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;gBACrC,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CAAC;YACJ,WAAW,EAAE,MAAM,CAAC,cAAc;YAClC,aAAa,EAAE,cAAc;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC;QAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QACrD,OAAO,wBAAwB,CAAC;YAC9B,WAAW;YACX,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YACnC,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,OAAO;YACP,0BAA0B,EAAE,MAAM,CAAC,OAAO,CAAC,0BAA0B;YACrE,YAAY,EAAE,GAAG,EAAE,CACjB,gCAAgC,CAC9B,IAAI,CAAC,cAAc,EACnB,MAAM,EACN,WAAW,CACZ;YACH,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ;YACtC,sBAAsB,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,sBAAsB;SACnE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,cAAuB;QAC/D,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,+BAA+B,CAAC;YACrC,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CACP,cAAuB;QAEvB,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,0BAA0B,CACpC,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,MAAM,CACd,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,uEAAuE;QACvE,yEAAyE;QACzE,8DAA8D;QAC9D,0EAA0E;QAC1E,qEAAqE;QACrE,yEAAyE;QACzE,2EAA2E;QAC3E,oEAAoE;QACpE,MAAM,eAAe,GAAG,+CAA+C,CACrE;YACE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,eAAe,EAAE,MAAM,CAAC,MAAM;SAC/B,EACD,WAAW,CACZ,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QACrD,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,gCAAgC,CAC9B,IAAI,CAAC,cAAc,EACnB,MAAM,EACN,WAAW,CACZ,CAAC;QAEJ,MAAM,cAAc,GAAG,uCAAuC,CAAC;YAC7D,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YACnC,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ;YACtC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;aACC,IAAI,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE;YACjC,IAAI,CAAC,YAAY,EAAE;gBAAE,OAAO,IAAI,CAAC;YACjC,yEAAyE;YACzE,MAAM,iBAAiB,GACrB,eAAe;gBACf,kBAAkB,KAAK,IAAI;gBAC3B,kBAAkB,KAAK,SAAS,CAAC;YACnC,IAAI,iBAAiB;gBACnB,MAAM,yBAAyB,CAAC;oBAC9B,MAAM;oBACN,WAAW;oBACX,YAAY;iBACb,CAAC,CAAC;YACL,IAAI,CAAC,YAAY,EAAE;gBAAE,OAAO,IAAI,CAAC;YACjC,OAAO,uCAAuC,CAC5C,IAAI,CAAC,cAAc,EACnB,MAAM,EACN,WAAW,EACX,kBAAkB,CACnB,CAAC;QACJ,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,cAAc,EAAE,CAAC;gBACtC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;QACL,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC/B,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,cAAuB;QAEvB,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,GAAG,CACjD,0BAA0B,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CACjE,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC/C,CAAC;CACF;AAED,MAAM,UAAU,sCAAsC,CACpD,cAA+B;IAE/B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,oCAAoC,CAAC,cAAc,CAAC,CAAC;IAC7E,qBAAqB,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACvD,OAAO,WAAW,CAAC;AACrB,CAAC","sourcesContent":["import type { DomainScope } from \"../../data/domainScope\";\nimport {\n  loadLocalOrganizationContainerGrants,\n  loadLocalOrganizationDirectoryAndGroups,\n  loadLocalOrganizationGroupContainers,\n  loadLocalOrganizationGroupMembers,\n  loadLocalOrganizationGroupPolicyHistory,\n  loadLocalOrganizationPolicyHistory,\n  loadLocalOrganizationPolicyReference,\n  loadLocalOrganizationUserDetail,\n  type OrganizationContainerGrants,\n  type OrganizationDirectoryAndGroups,\n  type OrganizationGroupContainers,\n  type OrganizationGroupMembers,\n  type OrganizationGroupPolicyHistory,\n  type OrganizationPolicyHistory,\n  type OrganizationUserDetail,\n  reconcileOrganizationDirectoryAndGroups,\n} from \"../../workflows/organizations\";\nimport { loadPolicyHistoryDetails } from \"../../workflows/organizations/loadPolicyHistoryDetails\";\nimport {\n  organizationAccessScopeKey,\n  wasOrganizationPresentationAccessDeniedByServer,\n} from \"../../workflows/organizations/organizationPresentationAccessState\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../workflows/principals/runtimePolicyWarmer\";\nimport type { InternalRuntime } from \"../workflowRuntime\";\nimport { recoverOrganizationAccess } from \"./organizationAccessRestoration\";\nimport { loadBoundedOrganizationGroupHistory } from \"./organizationGroupHistory\";\nimport { hydrateOrganizationGroupNamesForRuntime } from \"./organizationGroupNameHydration\";\nimport {\n  type ActiveOrganizationDataRuntime,\n  activeOrganizationDataRuntime,\n  isOrganizationDataRuntimeCurrent,\n} from \"./organizationWorkflowRuntime\";\n\nconst coordinatorsByRuntime = new WeakMap<\n  InternalRuntime,\n  OrganizationReadModelCoordinator\n>();\n\nexport interface OrganizationReadModelCoordinator {\n  loadLocal(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationDirectoryAndGroups | null>;\n  loadLocalGroupMembers(\n    groupId: string,\n    organizationId?: string | undefined,\n  ): Promise<OrganizationGroupMembers | null>;\n  loadGroupPolicyHistory(\n    groupId: string,\n    organizationId?: string | undefined,\n    beforeVersion?: number | undefined,\n  ): Promise<OrganizationGroupPolicyHistory | null>;\n  loadOrganizationPolicyHistory(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationPolicyHistory | null>;\n  loadLocalGrants(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationContainerGrants | null>;\n  loadLocalGroupContainers(\n    groupId: string,\n    organizationId?: string | undefined,\n  ): Promise<OrganizationGroupContainers | null>;\n  loadLocalUserDetail(\n    userId: string,\n    organizationId?: string | undefined,\n  ): Promise<OrganizationUserDetail | null>;\n  /**\n   * Resolves `undefined` when the runtime declines without I/O (offline,\n   * database not ready, organization mismatch) or when the feed failed with\n   * no locally retained projection — passes that must not count as caught\n   * up; `null` when the reconcile completed but produced nothing presentable\n   * — including an authoritative denial that purged the projection, which\n   * consumers must repaint.\n   */\n  reconcile(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationDirectoryAndGroups | null | undefined>;\n  reconcileAfterMutation(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationDirectoryAndGroups | null | undefined>;\n}\n\nclass OrganizationReadModelCoordinatorImpl\n  implements OrganizationReadModelCoordinator\n{\n  private readonly reconciliationsByScope = new WeakMap<\n    DomainScope,\n    Map<string, Promise<OrganizationDirectoryAndGroups | null | undefined>>\n  >();\n  private readonly policyWarmersByScope = new WeakMap<\n    DomainScope,\n    Map<string, Promise<void>>\n  >();\n\n  constructor(private readonly runtimeService: InternalRuntime) {}\n\n  private reconciliationMap(active: ActiveOrganizationDataRuntime) {\n    const scope = active.runtime.state.domainScope;\n    let byKey = this.reconciliationsByScope.get(scope);\n    if (!byKey) {\n      byKey = new Map();\n      this.reconciliationsByScope.set(scope, byKey);\n    }\n    return byKey;\n  }\n\n  private policyWarmerMap(active: ActiveOrganizationDataRuntime) {\n    const scope = active.runtime.state.domainScope;\n    let byKey = this.policyWarmersByScope.get(scope);\n    if (!byKey) {\n      byKey = new Map();\n      this.policyWarmersByScope.set(scope, byKey);\n    }\n    return byKey;\n  }\n\n  private async warmPolicyReference(\n    active: ActiveOrganizationDataRuntime,\n    reference: NonNullable<\n      Awaited<ReturnType<typeof loadLocalOrganizationPolicyReference>>\n    >,\n  ): Promise<void> {\n    if (!active.runtime.state.online) {\n      return;\n    }\n    const byKey = this.policyWarmerMap(active);\n    const key = `${active.organizationId}\\0${reference.principalType}\\0${reference.principalId}\\0${reference.stateHash}`;\n    const existing = byKey.get(key);\n    if (existing) {\n      return existing;\n    }\n    const warming = createRuntimePrincipalPolicyWarmer(active.runtime)({\n      organizationId: active.organizationId,\n      references: [reference],\n    }).finally(() => {\n      if (byKey.get(key) === warming) {\n        byKey.delete(key);\n      }\n    });\n    byKey.set(key, warming);\n    return warming;\n  }\n\n  private async loadPolicyHistoryAfterWarm<History>(input: {\n    readonly active: ActiveOrganizationDataRuntime;\n    readonly loadLocal: () => Promise<History | null>;\n    readonly principalId: string;\n    readonly principalType: \"group\" | \"organization\";\n  }): Promise<History | null> {\n    try {\n      const local = await input.loadLocal();\n      if (local) {\n        return local;\n      }\n    } catch (error) {\n      input.active.runtime.util.logError(\n        \"Failed to load verified organization policy history\",\n        error,\n      );\n    }\n    if (!input.active.runtime.state.online) {\n      return null;\n    }\n\n    let reference: Awaited<\n      ReturnType<typeof loadLocalOrganizationPolicyReference>\n    >;\n    try {\n      reference = await loadLocalOrganizationPolicyReference({\n        currentUserId: input.active.userId,\n        execSql: input.active.runtime.infra.execSql,\n        organizationId: input.active.organizationId,\n        principalId: input.principalId,\n        principalType: input.principalType,\n      });\n    } catch (error) {\n      input.active.runtime.util.logError(\n        \"Failed to load organization policy-head projection\",\n        error,\n      );\n      return null;\n    }\n    if (!reference) {\n      return null;\n    }\n\n    await this.warmPolicyReference(input.active, reference);\n    try {\n      return await input.loadLocal();\n    } catch (error) {\n      input.active.runtime.util.logError(\n        \"Failed to reload verified organization policy history\",\n        error,\n      );\n      return null;\n    }\n  }\n\n  async loadLocal(organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active) {\n      return null;\n    }\n    return loadLocalOrganizationDirectoryAndGroups({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      organizationId: active.organizationId,\n    });\n  }\n\n  async loadLocalGrants(organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active) {\n      return null;\n    }\n    return loadLocalOrganizationContainerGrants({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      organizationId: active.organizationId,\n    });\n  }\n\n  async loadLocalGroupContainers(groupId: string, organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active || groupId.length === 0) {\n      return null;\n    }\n    return loadLocalOrganizationGroupContainers({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      groupId,\n      organizationId: active.organizationId,\n    });\n  }\n\n  async loadLocalGroupMembers(groupId: string, organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active || groupId.length === 0) {\n      return null;\n    }\n    return loadLocalOrganizationGroupMembers({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      groupId,\n      organizationId: active.organizationId,\n    });\n  }\n\n  async loadGroupPolicyHistory(\n    groupId: string,\n    organizationId?: string,\n    beforeVersion?: number,\n  ) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active || groupId.length === 0) {\n      return null;\n    }\n    const domainScope = active.runtime.state.domainScope;\n    const bounded = await loadBoundedOrganizationGroupHistory({\n      active,\n      groupId,\n      beforeVersion,\n      stillCurrent: () =>\n        isOrganizationDataRuntimeCurrent(\n          this.runtimeService,\n          active,\n          domainScope,\n        ),\n    });\n    if (bounded !== undefined) return bounded;\n    return this.loadPolicyHistoryAfterWarm({\n      active,\n      loadLocal: () =>\n        loadLocalOrganizationGroupPolicyHistory({\n          currentUserId: active.userId,\n          execSql: active.runtime.infra.execSql,\n          groupId,\n          organizationId: active.organizationId,\n        }),\n      principalId: groupId,\n      principalType: \"group\",\n    });\n  }\n\n  async loadOrganizationPolicyHistory(organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active) {\n      return null;\n    }\n    const history = await this.loadPolicyHistoryAfterWarm({\n      active,\n      loadLocal: () =>\n        loadLocalOrganizationPolicyHistory({\n          currentUserId: active.userId,\n          execSql: active.runtime.infra.execSql,\n          organizationId: active.organizationId,\n        }),\n      principalId: active.organizationId,\n      principalType: \"organization\",\n    });\n    if (!history || !active.runtime.state.online) return history;\n    const domainScope = active.runtime.state.domainScope;\n    return loadPolicyHistoryDetails({\n      domainScope,\n      apiClient: active.runtime.apiClient,\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      organizationId: active.organizationId,\n      history,\n      resolveTrustedUserIdentity: active.runtime.resolveTrustedUserIdentity,\n      stillCurrent: () =>\n        isOrganizationDataRuntimeCurrent(\n          this.runtimeService,\n          active,\n          domainScope,\n        ),\n      logError: active.runtime.util.logError,\n      reportSecurityIncident: active.runtime.util.reportSecurityIncident,\n    });\n  }\n\n  async loadLocalUserDetail(userId: string, organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active || userId.length === 0) {\n      return null;\n    }\n    return loadLocalOrganizationUserDetail({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      organizationId: active.organizationId,\n      userId,\n    });\n  }\n\n  reconcile(\n    organizationId?: string,\n  ): Promise<OrganizationDirectoryAndGroups | null | undefined> {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active?.runtime.state.online) {\n      return Promise.resolve(undefined);\n    }\n\n    const byKey = this.reconciliationMap(active);\n    const key = organizationAccessScopeKey(\n      active.organizationId,\n      active.userId,\n    );\n    const existing = byKey.get(key);\n    if (existing) {\n      return existing;\n    }\n\n    // Snapshot the server-denied flag before reconciling. A reconcile that\n    // flips it back to readable means org access was just restored (e.g. the\n    // user was re-added to a group), and any write lanes idled by\n    // permission-denied submissions have no self re-arm — regaining access is\n    // their retry signal, mirroring how billing recovery re-requests all\n    // lanes. Only a genuine server denial counts: a local session reset also\n    // marks scopes denied, and re-arming on its first reconcile would race the\n    // startup sync passes (e.g. pending-create adoption between panes).\n    const accessWasDenied = wasOrganizationPresentationAccessDeniedByServer(\n      {\n        execSql: active.runtime.infra.execSql,\n        organizationId: active.organizationId,\n        requesterUserId: active.userId,\n      },\n      \"readModel\",\n    );\n    const domainScope = active.runtime.state.domainScope;\n    const stillCurrent = () =>\n      isOrganizationDataRuntimeCurrent(\n        this.runtimeService,\n        active,\n        domainScope,\n      );\n\n    const reconciliation = reconcileOrganizationDirectoryAndGroups({\n      apiClient: active.runtime.apiClient,\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      logError: active.runtime.util.logError,\n      organizationId: active.organizationId,\n    })\n      .then(async (directoryAndGroups) => {\n        if (!stillCurrent()) return null;\n        // Feed success restores retry eligibility even if name decryption fails.\n        const accessWasRestored =\n          accessWasDenied &&\n          directoryAndGroups !== null &&\n          directoryAndGroups !== undefined;\n        if (accessWasRestored)\n          await recoverOrganizationAccess({\n            active,\n            domainScope,\n            stillCurrent,\n          });\n        if (!stillCurrent()) return null;\n        return hydrateOrganizationGroupNamesForRuntime(\n          this.runtimeService,\n          active,\n          domainScope,\n          directoryAndGroups,\n        );\n      })\n      .finally(() => {\n        if (byKey.get(key) === reconciliation) {\n          byKey.delete(key);\n        }\n      });\n    byKey.set(key, reconciliation);\n    return reconciliation;\n  }\n\n  async reconcileAfterMutation(\n    organizationId?: string,\n  ): Promise<OrganizationDirectoryAndGroups | null | undefined> {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active?.runtime.state.online) {\n      return undefined;\n    }\n    const existing = this.reconciliationMap(active).get(\n      organizationAccessScopeKey(active.organizationId, active.userId),\n    );\n    if (existing) {\n      await existing.catch(() => null);\n    }\n    return this.reconcile(active.organizationId);\n  }\n}\n\nexport function createOrganizationReadModelCoordinator(\n  runtimeService: InternalRuntime,\n): OrganizationReadModelCoordinator {\n  const existing = coordinatorsByRuntime.get(runtimeService);\n  if (existing) {\n    return existing;\n  }\n\n  const coordinator = new OrganizationReadModelCoordinatorImpl(runtimeService);\n  coordinatorsByRuntime.set(runtimeService, coordinator);\n  return coordinator;\n}\n"]}
+{"version":3,"file":"organizationReadModels.js","sourceRoot":"","sources":["organizationReadModels.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oCAAoC,EACpC,uCAAuC,EACvC,oCAAoC,EACpC,iCAAiC,EACjC,uCAAuC,EACvC,oCAAoC,EACpC,+BAA+B,EAQ/B,uCAAuC,GACxC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,0BAA0B,EAC1B,+CAA+C,GAChD,MAAM,mEAAmE,CAAC;AAC3E,OAAO,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAEpG,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,mCAAmC,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,uCAAuC,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAEL,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,+BAA+B,CAAC;AAEvC,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAGtC,CAAC;AA8CJ,MAAM,oCAAoC;IAYX;IATZ,sBAAsB,GAAG,IAAI,OAAO,EAGlD,CAAC;IACa,oBAAoB,GAAG,IAAI,OAAO,EAGhD,CAAC;IAEJ,YAA6B,cAA+B;QAA/B,mBAAc,GAAd,cAAc,CAAiB;IAAG,CAAC;IAExD,iBAAiB,CAAC,MAAqC;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAC/C,IAAI,KAAK,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,eAAe,CAAC,MAAqC;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAC/C,IAAI,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,MAAqC,EACrC,SAEC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,aAAa,KAAK,SAAS,CAAC,WAAW,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;QACrH,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,OAAO,GAAG,kCAAkC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjE,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,CAAC,SAAS,CAAC;SACxB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;YACd,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC/B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,0BAA0B,CAAU,KAKjD;QACC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAChC,qDAAqD,EACrD,KAAK,CACN,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,SAEH,CAAC;QACF,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,oCAAoC,CAAC;gBACrD,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAClC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC3C,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc;gBAC3C,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAChC,oDAAoD,EACpD,KAAK,CACN,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAChC,uDAAuD,EACvD,KAAK,CACN,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,cAAuB;QACrC,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,uCAAuC,CAAC;YAC7C,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAuB;QAC3C,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,oCAAoC,CAAC;YAC1C,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,OAAe,EAAE,cAAuB;QACrE,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,oCAAoC,CAAC;YAC1C,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,OAAO;YACP,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAe,EAAE,cAAuB;QAClE,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,iCAAiC,CAAC;YACvC,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,OAAO;YACP,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,OAAe,EACf,cAAuB,EACvB,aAAsB;QAEtB,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,mCAAmC,CAAC;YACxD,MAAM;YACN,OAAO;YACP,aAAa;YACb,YAAY,EAAE,GAAG,EAAE,CACjB,gCAAgC,CAC9B,IAAI,CAAC,cAAc,EACnB,MAAM,EACN,WAAW,CACZ;SACJ,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,OAAO,IAAI,CAAC,0BAA0B,CAAC;YACrC,MAAM;YACN,SAAS,EAAE,GAAG,EAAE,CACd,uCAAuC,CAAC;gBACtC,aAAa,EAAE,MAAM,CAAC,MAAM;gBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;gBACrC,OAAO;gBACP,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CAAC;YACJ,WAAW,EAAE,OAAO;YACpB,aAAa,EAAE,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,cAAuB,EACvB,aAAsB;QAEtB,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QACrD,OAAO,8BAA8B,CAAC;YACpC,MAAM;YACN,aAAa;YACb,YAAY,EAAE,GAAG,EAAE,CACjB,gCAAgC,CAC9B,IAAI,CAAC,cAAc,EACnB,MAAM,EACN,WAAW,CACZ;SACJ,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAc,EAAE,cAAuB;QAC/D,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,+BAA+B,CAAC;YACrC,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CACP,cAAuB;QAEvB,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,0BAA0B,CACpC,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,MAAM,CACd,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,uEAAuE;QACvE,yEAAyE;QACzE,8DAA8D;QAC9D,0EAA0E;QAC1E,qEAAqE;QACrE,yEAAyE;QACzE,2EAA2E;QAC3E,oEAAoE;QACpE,MAAM,eAAe,GAAG,+CAA+C,CACrE;YACE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,eAAe,EAAE,MAAM,CAAC,MAAM;SAC/B,EACD,WAAW,CACZ,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QACrD,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,gCAAgC,CAC9B,IAAI,CAAC,cAAc,EACnB,MAAM,EACN,WAAW,CACZ,CAAC;QAEJ,MAAM,cAAc,GAAG,uCAAuC,CAAC;YAC7D,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;YACnC,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;YACrC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ;YACtC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;aACC,IAAI,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE;YACjC,IAAI,CAAC,YAAY,EAAE;gBAAE,OAAO,IAAI,CAAC;YACjC,yEAAyE;YACzE,MAAM,iBAAiB,GACrB,eAAe;gBACf,kBAAkB,KAAK,IAAI;gBAC3B,kBAAkB,KAAK,SAAS,CAAC;YACnC,IAAI,iBAAiB;gBACnB,MAAM,yBAAyB,CAAC;oBAC9B,MAAM;oBACN,WAAW;oBACX,YAAY;iBACb,CAAC,CAAC;YACL,IAAI,CAAC,YAAY,EAAE;gBAAE,OAAO,IAAI,CAAC;YACjC,OAAO,uCAAuC,CAC5C,IAAI,CAAC,cAAc,EACnB,MAAM,EACN,WAAW,EACX,kBAAkB,CACnB,CAAC;QACJ,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,cAAc,EAAE,CAAC;gBACtC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;QACL,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC/B,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,sBAAsB,CAC1B,cAAuB;QAEvB,MAAM,MAAM,GAAG,6BAA6B,CAC1C,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,GAAG,CACjD,0BAA0B,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CACjE,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC/C,CAAC;CACF;AAED,MAAM,UAAU,sCAAsC,CACpD,cAA+B;IAE/B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,oCAAoC,CAAC,cAAc,CAAC,CAAC;IAC7E,qBAAqB,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACvD,OAAO,WAAW,CAAC;AACrB,CAAC","sourcesContent":["import type { DomainScope } from \"../../data/domainScope\";\nimport {\n  loadLocalOrganizationContainerGrants,\n  loadLocalOrganizationDirectoryAndGroups,\n  loadLocalOrganizationGroupContainers,\n  loadLocalOrganizationGroupMembers,\n  loadLocalOrganizationGroupPolicyHistory,\n  loadLocalOrganizationPolicyReference,\n  loadLocalOrganizationUserDetail,\n  type OrganizationContainerGrants,\n  type OrganizationDirectoryAndGroups,\n  type OrganizationGroupContainers,\n  type OrganizationGroupMembers,\n  type OrganizationGroupPolicyHistory,\n  type OrganizationPolicyHistory,\n  type OrganizationUserDetail,\n  reconcileOrganizationDirectoryAndGroups,\n} from \"../../workflows/organizations\";\nimport {\n  organizationAccessScopeKey,\n  wasOrganizationPresentationAccessDeniedByServer,\n} from \"../../workflows/organizations/organizationPresentationAccessState\";\nimport { createRuntimePrincipalPolicyWarmer } from \"../../workflows/principals/runtimePolicyWarmer\";\nimport type { InternalRuntime } from \"../workflowRuntime\";\nimport { recoverOrganizationAccess } from \"./organizationAccessRestoration\";\nimport { loadBoundedOrganizationGroupHistory } from \"./organizationGroupHistory\";\nimport { hydrateOrganizationGroupNamesForRuntime } from \"./organizationGroupNameHydration\";\nimport { loadBoundedOrganizationHistory } from \"./organizationHistory\";\nimport {\n  type ActiveOrganizationDataRuntime,\n  activeOrganizationDataRuntime,\n  isOrganizationDataRuntimeCurrent,\n} from \"./organizationWorkflowRuntime\";\n\nconst coordinatorsByRuntime = new WeakMap<\n  InternalRuntime,\n  OrganizationReadModelCoordinator\n>();\n\nexport interface OrganizationReadModelCoordinator {\n  loadLocal(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationDirectoryAndGroups | null>;\n  loadLocalGroupMembers(\n    groupId: string,\n    organizationId?: string | undefined,\n  ): Promise<OrganizationGroupMembers | null>;\n  loadGroupPolicyHistory(\n    groupId: string,\n    organizationId?: string | undefined,\n    beforeVersion?: number | undefined,\n  ): Promise<OrganizationGroupPolicyHistory | null>;\n  loadOrganizationPolicyHistory(\n    organizationId?: string | undefined,\n    beforeVersion?: number | undefined,\n  ): Promise<OrganizationPolicyHistory | null>;\n  loadLocalGrants(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationContainerGrants | null>;\n  loadLocalGroupContainers(\n    groupId: string,\n    organizationId?: string | undefined,\n  ): Promise<OrganizationGroupContainers | null>;\n  loadLocalUserDetail(\n    userId: string,\n    organizationId?: string | undefined,\n  ): Promise<OrganizationUserDetail | null>;\n  /**\n   * Resolves `undefined` when the runtime declines without I/O (offline,\n   * database not ready, organization mismatch) or when the feed failed with\n   * no locally retained projection — passes that must not count as caught\n   * up; `null` when the reconcile completed but produced nothing presentable\n   * — including an authoritative denial that purged the projection, which\n   * consumers must repaint.\n   */\n  reconcile(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationDirectoryAndGroups | null | undefined>;\n  reconcileAfterMutation(\n    organizationId?: string | undefined,\n  ): Promise<OrganizationDirectoryAndGroups | null | undefined>;\n}\n\nclass OrganizationReadModelCoordinatorImpl\n  implements OrganizationReadModelCoordinator\n{\n  private readonly reconciliationsByScope = new WeakMap<\n    DomainScope,\n    Map<string, Promise<OrganizationDirectoryAndGroups | null | undefined>>\n  >();\n  private readonly policyWarmersByScope = new WeakMap<\n    DomainScope,\n    Map<string, Promise<void>>\n  >();\n\n  constructor(private readonly runtimeService: InternalRuntime) {}\n\n  private reconciliationMap(active: ActiveOrganizationDataRuntime) {\n    const scope = active.runtime.state.domainScope;\n    let byKey = this.reconciliationsByScope.get(scope);\n    if (!byKey) {\n      byKey = new Map();\n      this.reconciliationsByScope.set(scope, byKey);\n    }\n    return byKey;\n  }\n\n  private policyWarmerMap(active: ActiveOrganizationDataRuntime) {\n    const scope = active.runtime.state.domainScope;\n    let byKey = this.policyWarmersByScope.get(scope);\n    if (!byKey) {\n      byKey = new Map();\n      this.policyWarmersByScope.set(scope, byKey);\n    }\n    return byKey;\n  }\n\n  private async warmPolicyReference(\n    active: ActiveOrganizationDataRuntime,\n    reference: NonNullable<\n      Awaited<ReturnType<typeof loadLocalOrganizationPolicyReference>>\n    >,\n  ): Promise<void> {\n    if (!active.runtime.state.online) {\n      return;\n    }\n    const byKey = this.policyWarmerMap(active);\n    const key = `${active.organizationId}\\0${reference.principalType}\\0${reference.principalId}\\0${reference.stateHash}`;\n    const existing = byKey.get(key);\n    if (existing) {\n      return existing;\n    }\n    const warming = createRuntimePrincipalPolicyWarmer(active.runtime)({\n      organizationId: active.organizationId,\n      references: [reference],\n    }).finally(() => {\n      if (byKey.get(key) === warming) {\n        byKey.delete(key);\n      }\n    });\n    byKey.set(key, warming);\n    return warming;\n  }\n\n  private async loadPolicyHistoryAfterWarm<History>(input: {\n    readonly active: ActiveOrganizationDataRuntime;\n    readonly loadLocal: () => Promise<History | null>;\n    readonly principalId: string;\n    readonly principalType: \"group\" | \"organization\";\n  }): Promise<History | null> {\n    try {\n      const local = await input.loadLocal();\n      if (local) {\n        return local;\n      }\n    } catch (error) {\n      input.active.runtime.util.logError(\n        \"Failed to load verified organization policy history\",\n        error,\n      );\n    }\n    if (!input.active.runtime.state.online) {\n      return null;\n    }\n\n    let reference: Awaited<\n      ReturnType<typeof loadLocalOrganizationPolicyReference>\n    >;\n    try {\n      reference = await loadLocalOrganizationPolicyReference({\n        currentUserId: input.active.userId,\n        execSql: input.active.runtime.infra.execSql,\n        organizationId: input.active.organizationId,\n        principalId: input.principalId,\n        principalType: input.principalType,\n      });\n    } catch (error) {\n      input.active.runtime.util.logError(\n        \"Failed to load organization policy-head projection\",\n        error,\n      );\n      return null;\n    }\n    if (!reference) {\n      return null;\n    }\n\n    await this.warmPolicyReference(input.active, reference);\n    try {\n      return await input.loadLocal();\n    } catch (error) {\n      input.active.runtime.util.logError(\n        \"Failed to reload verified organization policy history\",\n        error,\n      );\n      return null;\n    }\n  }\n\n  async loadLocal(organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active) {\n      return null;\n    }\n    return loadLocalOrganizationDirectoryAndGroups({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      organizationId: active.organizationId,\n    });\n  }\n\n  async loadLocalGrants(organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active) {\n      return null;\n    }\n    return loadLocalOrganizationContainerGrants({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      organizationId: active.organizationId,\n    });\n  }\n\n  async loadLocalGroupContainers(groupId: string, organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active || groupId.length === 0) {\n      return null;\n    }\n    return loadLocalOrganizationGroupContainers({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      groupId,\n      organizationId: active.organizationId,\n    });\n  }\n\n  async loadLocalGroupMembers(groupId: string, organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active || groupId.length === 0) {\n      return null;\n    }\n    return loadLocalOrganizationGroupMembers({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      groupId,\n      organizationId: active.organizationId,\n    });\n  }\n\n  async loadGroupPolicyHistory(\n    groupId: string,\n    organizationId?: string,\n    beforeVersion?: number,\n  ) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active || groupId.length === 0) {\n      return null;\n    }\n    const domainScope = active.runtime.state.domainScope;\n    const bounded = await loadBoundedOrganizationGroupHistory({\n      active,\n      groupId,\n      beforeVersion,\n      stillCurrent: () =>\n        isOrganizationDataRuntimeCurrent(\n          this.runtimeService,\n          active,\n          domainScope,\n        ),\n    });\n    if (bounded !== undefined) return bounded;\n    return this.loadPolicyHistoryAfterWarm({\n      active,\n      loadLocal: () =>\n        loadLocalOrganizationGroupPolicyHistory({\n          currentUserId: active.userId,\n          execSql: active.runtime.infra.execSql,\n          groupId,\n          organizationId: active.organizationId,\n        }),\n      principalId: groupId,\n      principalType: \"group\",\n    });\n  }\n\n  async loadOrganizationPolicyHistory(\n    organizationId?: string,\n    beforeVersion?: number,\n  ) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active) return null;\n    const domainScope = active.runtime.state.domainScope;\n    return loadBoundedOrganizationHistory({\n      active,\n      beforeVersion,\n      stillCurrent: () =>\n        isOrganizationDataRuntimeCurrent(\n          this.runtimeService,\n          active,\n          domainScope,\n        ),\n    });\n  }\n\n  async loadLocalUserDetail(userId: string, organizationId?: string) {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active || userId.length === 0) {\n      return null;\n    }\n    return loadLocalOrganizationUserDetail({\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      organizationId: active.organizationId,\n      userId,\n    });\n  }\n\n  reconcile(\n    organizationId?: string,\n  ): Promise<OrganizationDirectoryAndGroups | null | undefined> {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active?.runtime.state.online) {\n      return Promise.resolve(undefined);\n    }\n\n    const byKey = this.reconciliationMap(active);\n    const key = organizationAccessScopeKey(\n      active.organizationId,\n      active.userId,\n    );\n    const existing = byKey.get(key);\n    if (existing) {\n      return existing;\n    }\n\n    // Snapshot the server-denied flag before reconciling. A reconcile that\n    // flips it back to readable means org access was just restored (e.g. the\n    // user was re-added to a group), and any write lanes idled by\n    // permission-denied submissions have no self re-arm — regaining access is\n    // their retry signal, mirroring how billing recovery re-requests all\n    // lanes. Only a genuine server denial counts: a local session reset also\n    // marks scopes denied, and re-arming on its first reconcile would race the\n    // startup sync passes (e.g. pending-create adoption between panes).\n    const accessWasDenied = wasOrganizationPresentationAccessDeniedByServer(\n      {\n        execSql: active.runtime.infra.execSql,\n        organizationId: active.organizationId,\n        requesterUserId: active.userId,\n      },\n      \"readModel\",\n    );\n    const domainScope = active.runtime.state.domainScope;\n    const stillCurrent = () =>\n      isOrganizationDataRuntimeCurrent(\n        this.runtimeService,\n        active,\n        domainScope,\n      );\n\n    const reconciliation = reconcileOrganizationDirectoryAndGroups({\n      apiClient: active.runtime.apiClient,\n      currentUserId: active.userId,\n      execSql: active.runtime.infra.execSql,\n      logError: active.runtime.util.logError,\n      organizationId: active.organizationId,\n    })\n      .then(async (directoryAndGroups) => {\n        if (!stillCurrent()) return null;\n        // Feed success restores retry eligibility even if name decryption fails.\n        const accessWasRestored =\n          accessWasDenied &&\n          directoryAndGroups !== null &&\n          directoryAndGroups !== undefined;\n        if (accessWasRestored)\n          await recoverOrganizationAccess({\n            active,\n            domainScope,\n            stillCurrent,\n          });\n        if (!stillCurrent()) return null;\n        return hydrateOrganizationGroupNamesForRuntime(\n          this.runtimeService,\n          active,\n          domainScope,\n          directoryAndGroups,\n        );\n      })\n      .finally(() => {\n        if (byKey.get(key) === reconciliation) {\n          byKey.delete(key);\n        }\n      });\n    byKey.set(key, reconciliation);\n    return reconciliation;\n  }\n\n  async reconcileAfterMutation(\n    organizationId?: string,\n  ): Promise<OrganizationDirectoryAndGroups | null | undefined> {\n    const active = activeOrganizationDataRuntime(\n      this.runtimeService,\n      organizationId,\n    );\n    if (!active?.runtime.state.online) {\n      return undefined;\n    }\n    const existing = this.reconciliationMap(active).get(\n      organizationAccessScopeKey(active.organizationId, active.userId),\n    );\n    if (existing) {\n      await existing.catch(() => null);\n    }\n    return this.reconcile(active.organizationId);\n  }\n}\n\nexport function createOrganizationReadModelCoordinator(\n  runtimeService: InternalRuntime,\n): OrganizationReadModelCoordinator {\n  const existing = coordinatorsByRuntime.get(runtimeService);\n  if (existing) {\n    return existing;\n  }\n\n  const coordinator = new OrganizationReadModelCoordinatorImpl(runtimeService);\n  coordinatorsByRuntime.set(runtimeService, coordinator);\n  return coordinator;\n}\n"]}

package/client/organizations/organizationsTypes.d.ts

@@ -40,7 +40,7 @@ export interface Organizations {
     loadGroupContainers: (groupId: string) => ReturnType<OrganizationReadModelCoordinator["loadLocalGroupContainers"]>;
     loadGrants: () => ReturnType<OrganizationReadModelCoordinator["loadLocalGrants"]>;
     listLocalOrganizations: () => Promise<LocalOrganizationSummary[]>;
-    loadPolicyHistory: () => ReturnType<OrganizationReadModelCoordinator["loadOrganizationPolicyHistory"]>;
+    loadPolicyHistory: (beforeVersion?: number) => ReturnType<OrganizationReadModelCoordinator["loadOrganizationPolicyHistory"]>;
     loadUserDetail: (userId: string) => ReturnType<OrganizationReadModelCoordinator["loadLocalUserDetail"]>;
     updateRosterEntry: (userId: string, profileDocumentId: string | null) => ReturnType<typeof updateOrganizationRosterEntry>;
     updateProfile: (profileDocumentId: string | null) => ReturnType<typeof updateOrganizationProfile>;

package/client/organizations/organizationsTypes.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationsTypes.js","sourceRoot":"","sources":["organizationsTypes.ts"],"names":[],"mappings":"","sourcesContent":["import type { NativeSubscriptionStore } from \"@tearleads/validators/billing\";\nimport type { PrincipalPolicyMutationResponse } from \"@tearleads/validators/response\";\nimport type {\n  cancelStripeSubscription,\n  checkNativePurchaseEligibility,\n  claimNativeOrganizationSubscription,\n  createOrganizationGroup,\n  createStripeCheckout,\n  createStripeCheckoutSession,\n  importOrganizationUser,\n  LocalOrganizationSummary,\n  loadOrganizationBilling,\n  loadOrganizationBillingHistory,\n  loadOrganizationBillingManagementUrl,\n  loadStripeCheckoutOptions,\n  revokeOrganizationContainerGrant,\n  startOrganizationTrial,\n  updateOrganizationProfile,\n  updateOrganizationRosterEntry,\n} from \"../../workflows/organizations\";\nimport type { InternalWorkflowRuntimeInput } from \"../workflowRuntime\";\nimport type { OrganizationDataUsageCoordinator } from \"./organizationDataUsage\";\nimport type { loadOrganizationGroupPresentationDetails } from \"./organizationGroupPresentation\";\nimport type { OrganizationReadModelCoordinator } from \"./organizationReadModels\";\nimport type {\n  AbandonOrganizationPolicyMutationInput,\n  DiscardUnreadableOrganizationPolicyMutationInput,\n  readPendingOrganizationPolicyMutation,\n} from \"./principalMutationRecovery\";\nimport type {\n  AddOrganizationGroupUserInput,\n  deleteGroupForOrganization,\n  OrganizationGrantRef,\n  RemoveOrganizationGroupUserInput,\n} from \"./principalMutations\";\n\n/** Exact current artifacts and container receipts; no historical prefix. */\nexport type OrganizationGroupMutationReceipt = PrincipalPolicyMutationResponse;\n\nexport interface Organizations {\n  discardUnreadablePolicyMutation: (\n    input: DiscardUnreadableOrganizationPolicyMutationInput,\n  ) => Promise<boolean>;\n  readPendingPolicyMutation: (\n    organizationId: string,\n  ) => ReturnType<typeof readPendingOrganizationPolicyMutation>;\n  retryPendingPolicyMutation: (organizationId: string) => Promise<void>;\n  abandonPendingPolicyMutation: (\n    input: AbandonOrganizationPolicyMutationInput,\n  ) => Promise<boolean>;\n  addUserToGroup: (\n    input: AddOrganizationGroupUserInput,\n  ) => Promise<OrganizationGroupMutationReceipt>;\n  createGroup: (name: string) => ReturnType<typeof createOrganizationGroup>;\n  deleteGroup: (\n    groupId: string,\n  ) => ReturnType<typeof deleteGroupForOrganization>;\n  importUserById: (userId: string) => ReturnType<typeof importOrganizationUser>;\n  loadBilling: () => ReturnType<typeof loadOrganizationBilling>;\n  /** Billing for an organization the session is not currently switched to. */\n  loadBillingForOrganization: (\n    organizationId: string,\n  ) => ReturnType<typeof loadOrganizationBilling>;\n  loadBillingHistory: () => ReturnType<typeof loadOrganizationBillingHistory>;\n  loadBillingManagementUrl: () => ReturnType<\n    typeof loadOrganizationBillingManagementUrl\n  >;\n  /** Direct Stripe checkout (issue #1654): options, start, and cancel. */\n  loadStripeCheckoutOptions: (\n    organizationId?: string,\n  ) => ReturnType<typeof loadStripeCheckoutOptions>;\n  createStripeCheckout: (\n    organizationId?: string,\n  ) => ReturnType<typeof createStripeCheckout>;\n  createStripeCheckoutSession: (\n    returnUrl: string,\n    organizationId?: string,\n  ) => ReturnType<typeof createStripeCheckoutSession>;\n  cancelStripeSubscription: () => ReturnType<typeof cancelStripeSubscription>;\n  claimNativeSubscription: (\n    organizationId: string,\n    store: NativeSubscriptionStore,\n  ) => ReturnType<typeof claimNativeOrganizationSubscription>;\n  checkNativePurchaseEligibility: (\n    organizationId: string,\n    store: NativeSubscriptionStore,\n  ) => ReturnType<typeof checkNativePurchaseEligibility>;\n  loadDataUsage: () => ReturnType<\n    OrganizationDataUsageCoordinator[\"reconcile\"]\n  >;\n  loadLocalDataUsage: () => ReturnType<\n    OrganizationDataUsageCoordinator[\"loadLocal\"]\n  >;\n  loadDirectoryAndGroups: () => ReturnType<\n    OrganizationReadModelCoordinator[\"reconcile\"]\n  >;\n  loadDirectoryAndGroupsAfterMutation: () => ReturnType<\n    OrganizationReadModelCoordinator[\"reconcileAfterMutation\"]\n  >;\n  loadLocalDirectoryAndGroups: () => ReturnType<\n    OrganizationReadModelCoordinator[\"loadLocal\"]\n  >;\n  loadGroupMembers: (\n    groupId: string,\n  ) => ReturnType<\n    InternalWorkflowRuntimeInput[\"apiClient\"][\"listOrganizationGroupMembers\"]\n  >;\n  loadGroupPresentationDetails(\n    groupId: string,\n    beforeVersion?: number,\n  ): ReturnType<typeof loadOrganizationGroupPresentationDetails>;\n  loadGroupContainers: (\n    groupId: string,\n  ) => ReturnType<OrganizationReadModelCoordinator[\"loadLocalGroupContainers\"]>;\n  loadGrants: () => ReturnType<\n    OrganizationReadModelCoordinator[\"loadLocalGrants\"]\n  >;\n  listLocalOrganizations: () => Promise<LocalOrganizationSummary[]>;\n  loadPolicyHistory: () => ReturnType<\n    OrganizationReadModelCoordinator[\"loadOrganizationPolicyHistory\"]\n  >;\n  loadUserDetail: (\n    userId: string,\n  ) => ReturnType<OrganizationReadModelCoordinator[\"loadLocalUserDetail\"]>;\n  updateRosterEntry: (\n    userId: string,\n    profileDocumentId: string | null,\n  ) => ReturnType<typeof updateOrganizationRosterEntry>;\n  updateProfile: (\n    profileDocumentId: string | null,\n  ) => ReturnType<typeof updateOrganizationProfile>;\n  removeUserFromGroup: (\n    input: RemoveOrganizationGroupUserInput,\n  ) => Promise<OrganizationGroupMutationReceipt>;\n  revokeGrant: (\n    grant: OrganizationGrantRef,\n  ) => Promise<\n    | Awaited<ReturnType<typeof revokeOrganizationContainerGrant>>\n    | OrganizationGroupMutationReceipt\n  >;\n  startTrial: (\n    organizationId?: string,\n  ) => ReturnType<typeof startOrganizationTrial>;\n}\n"]}
+{"version":3,"file":"organizationsTypes.js","sourceRoot":"","sources":["organizationsTypes.ts"],"names":[],"mappings":"","sourcesContent":["import type { NativeSubscriptionStore } from \"@tearleads/validators/billing\";\nimport type { PrincipalPolicyMutationResponse } from \"@tearleads/validators/response\";\nimport type {\n  cancelStripeSubscription,\n  checkNativePurchaseEligibility,\n  claimNativeOrganizationSubscription,\n  createOrganizationGroup,\n  createStripeCheckout,\n  createStripeCheckoutSession,\n  importOrganizationUser,\n  LocalOrganizationSummary,\n  loadOrganizationBilling,\n  loadOrganizationBillingHistory,\n  loadOrganizationBillingManagementUrl,\n  loadStripeCheckoutOptions,\n  revokeOrganizationContainerGrant,\n  startOrganizationTrial,\n  updateOrganizationProfile,\n  updateOrganizationRosterEntry,\n} from \"../../workflows/organizations\";\nimport type { InternalWorkflowRuntimeInput } from \"../workflowRuntime\";\nimport type { OrganizationDataUsageCoordinator } from \"./organizationDataUsage\";\nimport type { loadOrganizationGroupPresentationDetails } from \"./organizationGroupPresentation\";\nimport type { OrganizationReadModelCoordinator } from \"./organizationReadModels\";\nimport type {\n  AbandonOrganizationPolicyMutationInput,\n  DiscardUnreadableOrganizationPolicyMutationInput,\n  readPendingOrganizationPolicyMutation,\n} from \"./principalMutationRecovery\";\nimport type {\n  AddOrganizationGroupUserInput,\n  deleteGroupForOrganization,\n  OrganizationGrantRef,\n  RemoveOrganizationGroupUserInput,\n} from \"./principalMutations\";\n\n/** Exact current artifacts and container receipts; no historical prefix. */\nexport type OrganizationGroupMutationReceipt = PrincipalPolicyMutationResponse;\n\nexport interface Organizations {\n  discardUnreadablePolicyMutation: (\n    input: DiscardUnreadableOrganizationPolicyMutationInput,\n  ) => Promise<boolean>;\n  readPendingPolicyMutation: (\n    organizationId: string,\n  ) => ReturnType<typeof readPendingOrganizationPolicyMutation>;\n  retryPendingPolicyMutation: (organizationId: string) => Promise<void>;\n  abandonPendingPolicyMutation: (\n    input: AbandonOrganizationPolicyMutationInput,\n  ) => Promise<boolean>;\n  addUserToGroup: (\n    input: AddOrganizationGroupUserInput,\n  ) => Promise<OrganizationGroupMutationReceipt>;\n  createGroup: (name: string) => ReturnType<typeof createOrganizationGroup>;\n  deleteGroup: (\n    groupId: string,\n  ) => ReturnType<typeof deleteGroupForOrganization>;\n  importUserById: (userId: string) => ReturnType<typeof importOrganizationUser>;\n  loadBilling: () => ReturnType<typeof loadOrganizationBilling>;\n  /** Billing for an organization the session is not currently switched to. */\n  loadBillingForOrganization: (\n    organizationId: string,\n  ) => ReturnType<typeof loadOrganizationBilling>;\n  loadBillingHistory: () => ReturnType<typeof loadOrganizationBillingHistory>;\n  loadBillingManagementUrl: () => ReturnType<\n    typeof loadOrganizationBillingManagementUrl\n  >;\n  /** Direct Stripe checkout (issue #1654): options, start, and cancel. */\n  loadStripeCheckoutOptions: (\n    organizationId?: string,\n  ) => ReturnType<typeof loadStripeCheckoutOptions>;\n  createStripeCheckout: (\n    organizationId?: string,\n  ) => ReturnType<typeof createStripeCheckout>;\n  createStripeCheckoutSession: (\n    returnUrl: string,\n    organizationId?: string,\n  ) => ReturnType<typeof createStripeCheckoutSession>;\n  cancelStripeSubscription: () => ReturnType<typeof cancelStripeSubscription>;\n  claimNativeSubscription: (\n    organizationId: string,\n    store: NativeSubscriptionStore,\n  ) => ReturnType<typeof claimNativeOrganizationSubscription>;\n  checkNativePurchaseEligibility: (\n    organizationId: string,\n    store: NativeSubscriptionStore,\n  ) => ReturnType<typeof checkNativePurchaseEligibility>;\n  loadDataUsage: () => ReturnType<\n    OrganizationDataUsageCoordinator[\"reconcile\"]\n  >;\n  loadLocalDataUsage: () => ReturnType<\n    OrganizationDataUsageCoordinator[\"loadLocal\"]\n  >;\n  loadDirectoryAndGroups: () => ReturnType<\n    OrganizationReadModelCoordinator[\"reconcile\"]\n  >;\n  loadDirectoryAndGroupsAfterMutation: () => ReturnType<\n    OrganizationReadModelCoordinator[\"reconcileAfterMutation\"]\n  >;\n  loadLocalDirectoryAndGroups: () => ReturnType<\n    OrganizationReadModelCoordinator[\"loadLocal\"]\n  >;\n  loadGroupMembers: (\n    groupId: string,\n  ) => ReturnType<\n    InternalWorkflowRuntimeInput[\"apiClient\"][\"listOrganizationGroupMembers\"]\n  >;\n  loadGroupPresentationDetails(\n    groupId: string,\n    beforeVersion?: number,\n  ): ReturnType<typeof loadOrganizationGroupPresentationDetails>;\n  loadGroupContainers: (\n    groupId: string,\n  ) => ReturnType<OrganizationReadModelCoordinator[\"loadLocalGroupContainers\"]>;\n  loadGrants: () => ReturnType<\n    OrganizationReadModelCoordinator[\"loadLocalGrants\"]\n  >;\n  listLocalOrganizations: () => Promise<LocalOrganizationSummary[]>;\n  loadPolicyHistory: (\n    beforeVersion?: number,\n  ) => ReturnType<\n    OrganizationReadModelCoordinator[\"loadOrganizationPolicyHistory\"]\n  >;\n  loadUserDetail: (\n    userId: string,\n  ) => ReturnType<OrganizationReadModelCoordinator[\"loadLocalUserDetail\"]>;\n  updateRosterEntry: (\n    userId: string,\n    profileDocumentId: string | null,\n  ) => ReturnType<typeof updateOrganizationRosterEntry>;\n  updateProfile: (\n    profileDocumentId: string | null,\n  ) => ReturnType<typeof updateOrganizationProfile>;\n  removeUserFromGroup: (\n    input: RemoveOrganizationGroupUserInput,\n  ) => Promise<OrganizationGroupMutationReceipt>;\n  revokeGrant: (\n    grant: OrganizationGrantRef,\n  ) => Promise<\n    | Awaited<ReturnType<typeof revokeOrganizationContainerGrant>>\n    | OrganizationGroupMutationReceipt\n  >;\n  startTrial: (\n    organizationId?: string,\n  ) => ReturnType<typeof startOrganizationTrial>;\n}\n"]}

package/data/containers/shared/types.d.ts

@@ -1,6 +1,6 @@
 import type { AccessEvent, AccessManifest, ContainerAccessManifestState, ContainerCreateAccessEventBody, ContainerDirectGrant, ContainerGrantAccessEventBody, ContainerGrantPrincipalHead, ContainerKekKeyring, ContainerKekRecipientTarget, ContainerKeyEpoch, ContainerKeyWrap, ContainerMoveAccessEventBody, ContainerRekeyAccessEventBody, ContainerRevokeAccessEventBody, ContainerUserRecipientKey } from "../../../internal/crypto/index.js";
 import type { AccessManifestBundleWire, ContainerCreateWithMetadataDocumentRequest, ContainerMutationRequest, ContainerRotationRequest } from "../../../internal/validators/request/index.js";
-import type { ContainerCreateWithMetadataDocumentResponse, ContainerKekResponse, ContainerMutationResponse, ContainerRotationResponse, ContainerWriterProjectionResponse, PrincipalPolicyBundleResponse } from "../../../internal/validators/response/index.js";
+import type { ContainerCreateWithMetadataDocumentResponse, ContainerKekResponse, ContainerMutationResponse, ContainerRotationResponse, ContainerWriterProjectionResponse, PrincipalPolicyBundleResponse, ReferencedPrincipalStateResponse } from "../../../internal/validators/response/index.js";
 import type { PrincipalPolicyCurrentEvidence } from "../../principals/principalPolicyEvidence.js";
 import type { ExecSql } from "../../sqlite/sqlSchema.js";
 import type { ContainerMutationRequestOptions } from "./mutationRequestOptions.js";
@@ -75,7 +75,7 @@ export interface ContainerMutationSubmitFailure {
     readonly message: string;
     readonly ok: false;
     readonly report: () => void;
-    readonly stalePrincipalPolicies?: readonly PrincipalPolicyBundleResponse[] | undefined;
+    readonly stalePrincipalHeads?: readonly ReferencedPrincipalStateResponse[] | undefined;
     readonly status: number | null;
 }
 export type ContainerMutationSubmitResult<T> = {

package/data/containers/shared/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  AccessEvent,\n  AccessManifest,\n  ContainerAccessManifestState,\n  ContainerCreateAccessEventBody,\n  ContainerDirectGrant,\n  ContainerGrantAccessEventBody,\n  ContainerGrantPrincipalHead,\n  ContainerKekKeyring,\n  ContainerKekRecipientTarget,\n  ContainerKeyEpoch,\n  ContainerKeyWrap,\n  ContainerMoveAccessEventBody,\n  ContainerRekeyAccessEventBody,\n  ContainerRevokeAccessEventBody,\n  ContainerUserRecipientKey,\n} from \"@tearleads/crypto\";\nimport type {\n  AccessManifestBundleWire,\n  ContainerCreateWithMetadataDocumentRequest,\n  ContainerMutationRequest,\n  ContainerRotationRequest,\n} from \"@tearleads/validators/request\";\nimport type {\n  ContainerCreateWithMetadataDocumentResponse,\n  ContainerKekResponse,\n  ContainerMutationResponse,\n  ContainerRotationResponse,\n  ContainerWriterProjectionResponse,\n  PrincipalPolicyBundleResponse,\n} from \"@tearleads/validators/response\";\nimport type { PrincipalPolicyCurrentEvidence } from \"../../principals/principalPolicyEvidence\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport type { ContainerMutationRequestOptions } from \"./mutationRequestOptions\";\nimport type { ContainerReciteApi } from \"./reciteApi\";\n\nexport interface ContainerMutationAuthor {\n  organizationId: string;\n  signerDeviceId: string;\n  signerKeyFingerprint: string;\n  signerPrivateKey: Uint8Array;\n  signerUserId: string;\n}\n\nexport interface BuildContainerCreatePlanInput {\n  author: ContainerMutationAuthor;\n  containerId?: string | undefined;\n  containerKey: Uint8Array;\n  containerKeyEpochId?: string | undefined;\n  eventId?: string | undefined;\n  /**\n   * Optional group grant to bake into the\n   * create manifest, wrapping the new container key to that principal in\n   * addition to the normal parent-inheritance wrap. Used to birth a child\n   * container that is directly readable by a group — e.g. the org public\n   * metadata container granted to the reserved Members group. The principal's\n   * verified policy must also be supplied via `principalPolicies` so the server\n   * can derive the recipient target.\n   */\n  managedPrincipalGrant?:\n    | {\n        accessLevel: ContainerDirectGrant[\"accessLevel\"];\n        principalEncapsulationPublicKey: string;\n        principalHead: ContainerGrantPrincipalHead;\n      }\n    | undefined;\n  metadataDocumentId?: string | undefined;\n  systemSlot?: string | null | undefined;\n  parentProjection: ContainerWriterProjectionResponse;\n  principalPolicies?: readonly PrincipalPolicyCurrentEvidence[] | undefined;\n  signedAt?: string | undefined;\n}\n\nexport interface ContainerCreatePlan {\n  body: ContainerCreateAccessEventBody;\n  containerId: string;\n  containerKeyEpochId: string;\n  event: AccessEvent;\n  eventHash: string;\n  keyEpoch: ContainerKeyEpoch;\n  keyEpochHash: string;\n  keyTargetHash: string;\n  manifest: AccessManifest;\n  manifestHash: string;\n  metadataDocumentId: string;\n  parentContainerId: string | null;\n  parentManifestHash: string | null;\n  recipientTargets: ContainerKekRecipientTarget[];\n  request: ContainerMutationRequest;\n  state: ContainerAccessManifestState;\n  wraps: ContainerKeyWrap[];\n}\n\nexport interface MaterializedContainerCreatePlan {\n  containerKey: Uint8Array;\n  plan: ContainerCreatePlan;\n}\n\nexport interface ContainerCreatePlanContext\n  extends BuildContainerCreatePlanInput {\n  containerKeyPublicKey: string;\n  containerId: string;\n  containerKeyEpochId: string;\n  eventId: string;\n  metadataDocumentId: string;\n  parent: ParentContainerCreateContext;\n  signedAt: string;\n}\n\nexport interface ContainerMutationSubmitFailure {\n  readonly code?: string | undefined;\n  readonly message: string;\n  readonly ok: false;\n  readonly report: () => void;\n  readonly stalePrincipalPolicies?:\n    | readonly PrincipalPolicyBundleResponse[]\n    | undefined;\n  readonly status: number | null;\n}\n\nexport type ContainerMutationSubmitResult<T> =\n  | {\n      readonly data: T;\n      readonly ok: true;\n    }\n  | ContainerMutationSubmitFailure;\n\nexport interface ContainerCreateApi {\n  createContainerResult(\n    input: ContainerMutationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerMutationSubmitResult<ContainerMutationResponse>>;\n  createContainerWithMetadataDocumentResult(\n    input: ContainerCreateWithMetadataDocumentRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<\n    ContainerMutationSubmitResult<ContainerCreateWithMetadataDocumentResponse>\n  >;\n  evictContainerWriterProjection(containerId: string): void;\n  getContainerWriterProjection(\n    containerId: string,\n  ): Promise<ContainerWriterProjectionResponse | null>;\n  getCurrentPrincipalPolicy(\n    principalType: \"group\" | \"organization\",\n    principalId: string,\n  ): Promise<PrincipalPolicyBundleResponse | null>;\n}\n\nexport interface ContainerShareApi extends ContainerReciteApi {\n  getContainerWriterProjection(\n    containerId: string,\n  ): Promise<ContainerWriterProjectionResponse | null>;\n  shareContainer(\n    containerId: string,\n    input: ContainerMutationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerMutationResponse | null>;\n}\n\n/**\n * A status-bearing rotation outcome. A refusal that names\n * `requiredContainerIds` is answerable: sign those descendant rekeys and\n * resubmit with them carried.\n */\nexport type ContainerRotationResult =\n  | { readonly ok: true; readonly data: ContainerRotationResponse }\n  | {\n      readonly ok: false;\n      readonly code?: string | undefined;\n      /** Surface a failure that was submitted with `reportErrors: false`. */\n      readonly report?: (() => void) | undefined;\n      readonly requiredContainerIds?: readonly string[] | undefined;\n      readonly status: number | null;\n    };\n\nexport interface ContainerMoveApi extends ContainerReciteApi {\n  getContainerWriterProjection(\n    containerId: string,\n  ): Promise<ContainerWriterProjectionResponse | null>;\n  moveContainer(\n    containerId: string,\n    input: ContainerRotationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerRotationResponse | null>;\n  /** Optional status-bearing variant; without it nothing can be carried. */\n  moveContainerResult?(\n    containerId: string,\n    input: ContainerRotationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerRotationResult>;\n}\n\nexport interface ContainerRevokeApi extends ContainerReciteApi {\n  getContainerWriterProjection(\n    containerId: string,\n  ): Promise<ContainerWriterProjectionResponse | null>;\n  revokeContainer(\n    containerId: string,\n    input: ContainerRotationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerRotationResponse | null>;\n  /** Optional status-bearing variant; without it nothing can be carried. */\n  revokeContainerResult?(\n    containerId: string,\n    input: ContainerRotationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerRotationResult>;\n}\n\nexport interface CreateRemoteContainerResult {\n  containerKey: Uint8Array;\n  containerId: string;\n  metadataDocumentId: string;\n  plan: ContainerCreatePlan;\n  response: ContainerMutationResponse;\n}\n\nexport interface ContainerSharePlan {\n  body: ContainerGrantAccessEventBody;\n  /** The unchanged epoch's stored keyring, echoed back by the server. */\n  previousKeyring?: Record<string, unknown> | null | undefined;\n  containerId: string;\n  event: AccessEvent;\n  eventHash: string;\n  grant: ContainerDirectGrant;\n  keyEpoch: ContainerKeyEpoch;\n  manifest: AccessManifest;\n  manifestHash: string;\n  previousManifest: AccessManifestBundleWire;\n  recipientTarget: ContainerKekRecipientTarget;\n  request: ContainerMutationRequest;\n  state: ContainerAccessManifestState;\n  userRecipientKeys: ContainerUserRecipientKey[];\n  wraps: ContainerKeyWrap[];\n}\n\nexport interface MaterializedContainerSharePlan {\n  containerKey: Uint8Array;\n  plan: ContainerSharePlan;\n}\n\nexport interface ContainerRevokePlan {\n  body: ContainerRevokeAccessEventBody;\n  containerId: string;\n  containerKeyEpochId: string;\n  event: AccessEvent;\n  eventHash: string;\n  keyEpoch: ContainerKeyEpoch;\n  keyring: ContainerKekKeyring;\n  manifest: AccessManifest;\n  manifestHash: string;\n  previousManifest: AccessManifestBundleWire;\n  request: ContainerMutationRequest;\n  state: ContainerAccessManifestState;\n  userRecipientKeys: ContainerUserRecipientKey[];\n  wraps: ContainerKeyWrap[];\n}\n\nexport interface MaterializedContainerRevokePlan {\n  containerKey: Uint8Array;\n  plan: ContainerRevokePlan;\n}\n\nexport interface ContainerRekeyPlan {\n  body: ContainerRekeyAccessEventBody;\n  containerId: string;\n  containerKeyEpochId: string;\n  event: AccessEvent;\n  eventHash: string;\n  keyEpoch: ContainerKeyEpoch;\n  keyring: ContainerKekKeyring;\n  manifest: AccessManifest;\n  manifestHash: string;\n  previousManifest: AccessManifestBundleWire;\n  request: ContainerMutationRequest;\n  state: ContainerAccessManifestState;\n  userRecipientKeys: ContainerUserRecipientKey[];\n  wraps: ContainerKeyWrap[];\n}\n\nexport interface MaterializedContainerRekeyPlan {\n  containerKey: Uint8Array;\n  plan: ContainerRekeyPlan;\n  writerProjection: ContainerWriterProjectionResponse;\n}\n\nexport interface ContainerRekeyApi extends ContainerReciteApi {\n  getContainerWriterProjection(\n    containerId: string,\n  ): Promise<ContainerWriterProjectionResponse | null>;\n  rekeyContainer(\n    containerId: string,\n    input: ContainerRotationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerRotationResponse | null>;\n  /** Optional status-bearing variant; see DocumentSyncApi. */\n  rekeyContainerResult?(\n    containerId: string,\n    input: ContainerRotationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerRotationResult>;\n}\n\nexport interface ContainerMovePlan {\n  body: ContainerMoveAccessEventBody;\n  containerId: string;\n  containerKeyEpochId: string;\n  event: AccessEvent;\n  eventHash: string;\n  keyEpoch: ContainerKeyEpoch;\n  keyring: ContainerKekKeyring;\n  manifest: AccessManifest;\n  manifestHash: string;\n  previousManifest: AccessManifestBundleWire;\n  request: ContainerMutationRequest;\n  state: ContainerAccessManifestState;\n  wraps: ContainerKeyWrap[];\n}\n\nexport interface MaterializedContainerMovePlan {\n  containerKey: Uint8Array;\n  plan: ContainerMovePlan;\n}\n\nexport interface BuildMaterializedContainerMovePlanInput {\n  author: ContainerMutationAuthor;\n  containerKeyEpochId?: string | undefined;\n  destinationParentProjection: ContainerWriterProjectionResponse;\n  eventId?: string | undefined;\n  execSql: ExecSql;\n  previousProjection: ContainerWriterProjectionResponse;\n  signedAt?: string | undefined;\n  targetSecretKey: Uint8Array;\n}\n\nexport interface ParentContainerCreateContext {\n  manifest: ContainerWriterProjectionResponse[\"path\"][number];\n  kek: ContainerKekResponse;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  AccessEvent,\n  AccessManifest,\n  ContainerAccessManifestState,\n  ContainerCreateAccessEventBody,\n  ContainerDirectGrant,\n  ContainerGrantAccessEventBody,\n  ContainerGrantPrincipalHead,\n  ContainerKekKeyring,\n  ContainerKekRecipientTarget,\n  ContainerKeyEpoch,\n  ContainerKeyWrap,\n  ContainerMoveAccessEventBody,\n  ContainerRekeyAccessEventBody,\n  ContainerRevokeAccessEventBody,\n  ContainerUserRecipientKey,\n} from \"@tearleads/crypto\";\nimport type {\n  AccessManifestBundleWire,\n  ContainerCreateWithMetadataDocumentRequest,\n  ContainerMutationRequest,\n  ContainerRotationRequest,\n} from \"@tearleads/validators/request\";\nimport type {\n  ContainerCreateWithMetadataDocumentResponse,\n  ContainerKekResponse,\n  ContainerMutationResponse,\n  ContainerRotationResponse,\n  ContainerWriterProjectionResponse,\n  PrincipalPolicyBundleResponse,\n  ReferencedPrincipalStateResponse,\n} from \"@tearleads/validators/response\";\nimport type { PrincipalPolicyCurrentEvidence } from \"../../principals/principalPolicyEvidence\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport type { ContainerMutationRequestOptions } from \"./mutationRequestOptions\";\nimport type { ContainerReciteApi } from \"./reciteApi\";\n\nexport interface ContainerMutationAuthor {\n  organizationId: string;\n  signerDeviceId: string;\n  signerKeyFingerprint: string;\n  signerPrivateKey: Uint8Array;\n  signerUserId: string;\n}\n\nexport interface BuildContainerCreatePlanInput {\n  author: ContainerMutationAuthor;\n  containerId?: string | undefined;\n  containerKey: Uint8Array;\n  containerKeyEpochId?: string | undefined;\n  eventId?: string | undefined;\n  /**\n   * Optional group grant to bake into the\n   * create manifest, wrapping the new container key to that principal in\n   * addition to the normal parent-inheritance wrap. Used to birth a child\n   * container that is directly readable by a group — e.g. the org public\n   * metadata container granted to the reserved Members group. The principal's\n   * verified policy must also be supplied via `principalPolicies` so the server\n   * can derive the recipient target.\n   */\n  managedPrincipalGrant?:\n    | {\n        accessLevel: ContainerDirectGrant[\"accessLevel\"];\n        principalEncapsulationPublicKey: string;\n        principalHead: ContainerGrantPrincipalHead;\n      }\n    | undefined;\n  metadataDocumentId?: string | undefined;\n  systemSlot?: string | null | undefined;\n  parentProjection: ContainerWriterProjectionResponse;\n  principalPolicies?: readonly PrincipalPolicyCurrentEvidence[] | undefined;\n  signedAt?: string | undefined;\n}\n\nexport interface ContainerCreatePlan {\n  body: ContainerCreateAccessEventBody;\n  containerId: string;\n  containerKeyEpochId: string;\n  event: AccessEvent;\n  eventHash: string;\n  keyEpoch: ContainerKeyEpoch;\n  keyEpochHash: string;\n  keyTargetHash: string;\n  manifest: AccessManifest;\n  manifestHash: string;\n  metadataDocumentId: string;\n  parentContainerId: string | null;\n  parentManifestHash: string | null;\n  recipientTargets: ContainerKekRecipientTarget[];\n  request: ContainerMutationRequest;\n  state: ContainerAccessManifestState;\n  wraps: ContainerKeyWrap[];\n}\n\nexport interface MaterializedContainerCreatePlan {\n  containerKey: Uint8Array;\n  plan: ContainerCreatePlan;\n}\n\nexport interface ContainerCreatePlanContext\n  extends BuildContainerCreatePlanInput {\n  containerKeyPublicKey: string;\n  containerId: string;\n  containerKeyEpochId: string;\n  eventId: string;\n  metadataDocumentId: string;\n  parent: ParentContainerCreateContext;\n  signedAt: string;\n}\n\nexport interface ContainerMutationSubmitFailure {\n  readonly code?: string | undefined;\n  readonly message: string;\n  readonly ok: false;\n  readonly report: () => void;\n  readonly stalePrincipalHeads?:\n    | readonly ReferencedPrincipalStateResponse[]\n    | undefined;\n  readonly status: number | null;\n}\n\nexport type ContainerMutationSubmitResult<T> =\n  | {\n      readonly data: T;\n      readonly ok: true;\n    }\n  | ContainerMutationSubmitFailure;\n\nexport interface ContainerCreateApi {\n  createContainerResult(\n    input: ContainerMutationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerMutationSubmitResult<ContainerMutationResponse>>;\n  createContainerWithMetadataDocumentResult(\n    input: ContainerCreateWithMetadataDocumentRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<\n    ContainerMutationSubmitResult<ContainerCreateWithMetadataDocumentResponse>\n  >;\n  evictContainerWriterProjection(containerId: string): void;\n  getContainerWriterProjection(\n    containerId: string,\n  ): Promise<ContainerWriterProjectionResponse | null>;\n  getCurrentPrincipalPolicy(\n    principalType: \"group\" | \"organization\",\n    principalId: string,\n  ): Promise<PrincipalPolicyBundleResponse | null>;\n}\n\nexport interface ContainerShareApi extends ContainerReciteApi {\n  getContainerWriterProjection(\n    containerId: string,\n  ): Promise<ContainerWriterProjectionResponse | null>;\n  shareContainer(\n    containerId: string,\n    input: ContainerMutationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerMutationResponse | null>;\n}\n\n/**\n * A status-bearing rotation outcome. A refusal that names\n * `requiredContainerIds` is answerable: sign those descendant rekeys and\n * resubmit with them carried.\n */\nexport type ContainerRotationResult =\n  | { readonly ok: true; readonly data: ContainerRotationResponse }\n  | {\n      readonly ok: false;\n      readonly code?: string | undefined;\n      /** Surface a failure that was submitted with `reportErrors: false`. */\n      readonly report?: (() => void) | undefined;\n      readonly requiredContainerIds?: readonly string[] | undefined;\n      readonly status: number | null;\n    };\n\nexport interface ContainerMoveApi extends ContainerReciteApi {\n  getContainerWriterProjection(\n    containerId: string,\n  ): Promise<ContainerWriterProjectionResponse | null>;\n  moveContainer(\n    containerId: string,\n    input: ContainerRotationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerRotationResponse | null>;\n  /** Optional status-bearing variant; without it nothing can be carried. */\n  moveContainerResult?(\n    containerId: string,\n    input: ContainerRotationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerRotationResult>;\n}\n\nexport interface ContainerRevokeApi extends ContainerReciteApi {\n  getContainerWriterProjection(\n    containerId: string,\n  ): Promise<ContainerWriterProjectionResponse | null>;\n  revokeContainer(\n    containerId: string,\n    input: ContainerRotationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerRotationResponse | null>;\n  /** Optional status-bearing variant; without it nothing can be carried. */\n  revokeContainerResult?(\n    containerId: string,\n    input: ContainerRotationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerRotationResult>;\n}\n\nexport interface CreateRemoteContainerResult {\n  containerKey: Uint8Array;\n  containerId: string;\n  metadataDocumentId: string;\n  plan: ContainerCreatePlan;\n  response: ContainerMutationResponse;\n}\n\nexport interface ContainerSharePlan {\n  body: ContainerGrantAccessEventBody;\n  /** The unchanged epoch's stored keyring, echoed back by the server. */\n  previousKeyring?: Record<string, unknown> | null | undefined;\n  containerId: string;\n  event: AccessEvent;\n  eventHash: string;\n  grant: ContainerDirectGrant;\n  keyEpoch: ContainerKeyEpoch;\n  manifest: AccessManifest;\n  manifestHash: string;\n  previousManifest: AccessManifestBundleWire;\n  recipientTarget: ContainerKekRecipientTarget;\n  request: ContainerMutationRequest;\n  state: ContainerAccessManifestState;\n  userRecipientKeys: ContainerUserRecipientKey[];\n  wraps: ContainerKeyWrap[];\n}\n\nexport interface MaterializedContainerSharePlan {\n  containerKey: Uint8Array;\n  plan: ContainerSharePlan;\n}\n\nexport interface ContainerRevokePlan {\n  body: ContainerRevokeAccessEventBody;\n  containerId: string;\n  containerKeyEpochId: string;\n  event: AccessEvent;\n  eventHash: string;\n  keyEpoch: ContainerKeyEpoch;\n  keyring: ContainerKekKeyring;\n  manifest: AccessManifest;\n  manifestHash: string;\n  previousManifest: AccessManifestBundleWire;\n  request: ContainerMutationRequest;\n  state: ContainerAccessManifestState;\n  userRecipientKeys: ContainerUserRecipientKey[];\n  wraps: ContainerKeyWrap[];\n}\n\nexport interface MaterializedContainerRevokePlan {\n  containerKey: Uint8Array;\n  plan: ContainerRevokePlan;\n}\n\nexport interface ContainerRekeyPlan {\n  body: ContainerRekeyAccessEventBody;\n  containerId: string;\n  containerKeyEpochId: string;\n  event: AccessEvent;\n  eventHash: string;\n  keyEpoch: ContainerKeyEpoch;\n  keyring: ContainerKekKeyring;\n  manifest: AccessManifest;\n  manifestHash: string;\n  previousManifest: AccessManifestBundleWire;\n  request: ContainerMutationRequest;\n  state: ContainerAccessManifestState;\n  userRecipientKeys: ContainerUserRecipientKey[];\n  wraps: ContainerKeyWrap[];\n}\n\nexport interface MaterializedContainerRekeyPlan {\n  containerKey: Uint8Array;\n  plan: ContainerRekeyPlan;\n  writerProjection: ContainerWriterProjectionResponse;\n}\n\nexport interface ContainerRekeyApi extends ContainerReciteApi {\n  getContainerWriterProjection(\n    containerId: string,\n  ): Promise<ContainerWriterProjectionResponse | null>;\n  rekeyContainer(\n    containerId: string,\n    input: ContainerRotationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerRotationResponse | null>;\n  /** Optional status-bearing variant; see DocumentSyncApi. */\n  rekeyContainerResult?(\n    containerId: string,\n    input: ContainerRotationRequest,\n    options?: ContainerMutationRequestOptions,\n  ): Promise<ContainerRotationResult>;\n}\n\nexport interface ContainerMovePlan {\n  body: ContainerMoveAccessEventBody;\n  containerId: string;\n  containerKeyEpochId: string;\n  event: AccessEvent;\n  eventHash: string;\n  keyEpoch: ContainerKeyEpoch;\n  keyring: ContainerKekKeyring;\n  manifest: AccessManifest;\n  manifestHash: string;\n  previousManifest: AccessManifestBundleWire;\n  request: ContainerMutationRequest;\n  state: ContainerAccessManifestState;\n  wraps: ContainerKeyWrap[];\n}\n\nexport interface MaterializedContainerMovePlan {\n  containerKey: Uint8Array;\n  plan: ContainerMovePlan;\n}\n\nexport interface BuildMaterializedContainerMovePlanInput {\n  author: ContainerMutationAuthor;\n  containerKeyEpochId?: string | undefined;\n  destinationParentProjection: ContainerWriterProjectionResponse;\n  eventId?: string | undefined;\n  execSql: ExecSql;\n  previousProjection: ContainerWriterProjectionResponse;\n  signedAt?: string | undefined;\n  targetSecretKey: Uint8Array;\n}\n\nexport interface ParentContainerCreateContext {\n  manifest: ContainerWriterProjectionResponse[\"path\"][number];\n  kek: ContainerKekResponse;\n}\n"]}

package/data/documents/shared/syncSubmitFailure.d.ts

@@ -1,9 +1,9 @@
-import type { PrincipalPolicyBundleResponse } from "../../../internal/validators/response/index.js";
+import type { ReferencedPrincipalStateResponse } from "../../../internal/validators/response/index.js";
 export interface DocumentSyncSubmitFailure {
     readonly code?: string | undefined;
     readonly message: string;
     readonly ok: false;
     readonly report: () => void;
-    readonly stalePrincipalPolicies?: readonly PrincipalPolicyBundleResponse[] | undefined;
+    readonly stalePrincipalHeads?: readonly ReferencedPrincipalStateResponse[] | undefined;
     readonly status: number | null;
 }

package/data/documents/shared/syncSubmitFailure.js.map

@@ -1 +1 @@
-{"version":3,"file":"syncSubmitFailure.js","sourceRoot":"","sources":["syncSubmitFailure.ts"],"names":[],"mappings":"","sourcesContent":["import type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\n\nexport interface DocumentSyncSubmitFailure {\n  readonly code?: string | undefined;\n  readonly message: string;\n  readonly ok: false;\n  readonly report: () => void;\n  readonly stalePrincipalPolicies?:\n    | readonly PrincipalPolicyBundleResponse[]\n    | undefined;\n  readonly status: number | null;\n}\n"]}
+{"version":3,"file":"syncSubmitFailure.js","sourceRoot":"","sources":["syncSubmitFailure.ts"],"names":[],"mappings":"","sourcesContent":["import type { ReferencedPrincipalStateResponse } from \"@tearleads/validators/response\";\n\nexport interface DocumentSyncSubmitFailure {\n  readonly code?: string | undefined;\n  readonly message: string;\n  readonly ok: false;\n  readonly report: () => void;\n  readonly stalePrincipalHeads?:\n    | readonly ReferencedPrincipalStateResponse[]\n    | undefined;\n  readonly status: number | null;\n}\n"]}

package/data/keyingProjectionVerification/documentPurgeCheckpointCurrency.js

@@ -1,11 +1,16 @@
 import { validateAccessManifestCheckpointEvidence } from "../persistence/keyingCheckpointEvidence.js";
 import { accessManifestObjectKey, loadAccessManifestCheckpoint, } from "../persistence/keyingCheckpointPersistence.js";
+import { PrincipalAuthorizationCheckpointUnavailableError, validatePrincipalAuthorizationCheckpoints, } from "../persistence/principalAuthorizationCheckpoints.js";
+import { ensurePrincipalPolicyTables } from "../persistence/principalPolicyPersistence.js";
+import { registerClientSQLiteCommitGuard } from "../sqlite/sqliteCommitGuards.js";
 import { getClientSQLitePersistenceRuntime } from "../sqlite/sqlitePersistenceRuntime.js";
 import { runSerializedSqlMutation } from "../sqlite/sqlSchema.js";
 import { validateAccessManifestCheckpoints } from "./accessManifestCheckpointEnforcement.js";
 import { commitProjectionCheckpoints, } from "./checkpointContext.js";
 import { ProjectionDependencyUnavailableError } from "./dependencyUnavailable.js";
-import { enforcePrincipalPolicySnapshotCheckpoints } from "./principalPolicySnapshotVerification.js";
+import { admitDocumentPurgePolicyCheckpoints } from "./documentPurgePolicyCheckpoints.js";
+import { projectionLifetimeGuard } from "./projectionLifetimes.js";
+import { assertProjectionVerificationCurrent } from "./types.js";
 /** All artifacts must already be authenticated before currency is considered. */
 async function currentContainerHeads(input) {
     const current = [];
@@ -36,11 +41,9 @@ async function checkPurgeCheckpointCurrency(input, documentPurgeCheckpoint) {
     // Keep comparison and optional advancement in the same immediate transaction.
     // Pass the locked executor through nested readers and checkpoint commits.
     await runSerializedSqlMutation(input.execSql, async (execSql) => {
-        await getClientSQLitePersistenceRuntime(execSql).transaction(async () => {
-            const policies = await enforcePrincipalPolicySnapshotCheckpoints({
-                execSql,
-                policies: input.principalPolicies,
-            });
+        await getClientSQLitePersistenceRuntime(execSql).transaction(async (transaction) => {
+            const stillCurrent = projectionLifetimeGuard(input.context);
+            registerClientSQLiteCommitGuard(execSql, () => assertProjectionVerificationCurrent(stillCurrent));
             const { current, superseded } = await currentContainerHeads({
                 ...input,
                 execSql,
@@ -49,20 +52,43 @@ async function checkPurgeCheckpointCurrency(input, documentPurgeCheckpoint) {
             // conflicting current evidence for another container in the same proof.
             await validateAccessManifestCheckpoints({
                 execSql,
-                policies,
+                policies: [],
                 verifiedHeads: current,
                 verifiedManifests: input.context.verifiedManifests,
             });
+            if (input.currencyPolicies.length) {
+                await ensurePrincipalPolicyTables(execSql);
+                await validatePrincipalAuthorizationCheckpoints(transaction, input.currencyPolicies);
+            }
             if (superseded) {
                 throw new ProjectionDependencyUnavailableError("Document purge cannot be ordered against a newer container checkpoint");
             }
             if (documentPurgeCheckpoint) {
-                await commitProjectionCheckpoints({ ...input.context, policies }, {
+                // Only the complete authenticated terminal proof admits these public
+                // observations. Page recovery and baseline verification never pin.
+                await admitDocumentPurgePolicyCheckpoints({
+                    transaction,
+                    organizationId: input.context.organizationId,
+                    policies: input.principalPolicies,
+                    heads: input.observedPrincipalHeads,
+                });
+                assertProjectionVerificationCurrent(stillCurrent);
+                await commitProjectionCheckpoints({
+                    ...input.context,
+                    policies: [],
+                    // Currency was rechecked above in this same transaction. Private
+                    // ancestry bridges must never become newly admitted purge heads.
+                    authorizationPolicies: [],
+                }, {
                     documentPurgeCheckpoint,
                     execSql,
                 });
             }
         }, { behavior: "immediate" });
+    }).catch((error) => {
+        if (error instanceof PrincipalAuthorizationCheckpointUnavailableError)
+            throw new ProjectionDependencyUnavailableError(error.message);
+        throw error;
     });
 }
 export function validateDocumentPurgeCheckpoints(input) {