@tearleads/client-sdk 0.1.47 → 0.1.49

package/workflows/organizations/submitGroupPolicyCommit.d.ts

@@ -0,0 +1,22 @@
+import type { ContainerMutationRequest, PutPrincipalPolicyRequest } from "../../internal/validators/request/index.js";
+import { type CommitOrganizationGroupPolicyResponse } from "../../internal/validators/response/index.js";
+import type { PrincipalPolicyReadWriteApi } from "./principalPolicyApi.js";
+/**
+ * Commit, answering one refusal: a rematerialized rekey or revoke that would
+ * strand a level above a directly granted container is refused with the
+ * descendant rekeys it must carry. The refused attempt rolled back whole, so
+ * the served heads still stand; the batch is signed again with the named
+ * levels woven in, replaces the container mutations, and the commit is retried
+ * once. A second refusal means the tree moved underneath, and the caller's own
+ * retry starts from a fresh policy.
+ */
+export declare function submitGroupPolicyCommit(input: {
+    readonly apiClient: PrincipalPolicyReadWriteApi;
+    readonly carryDescendantRekeys?: ((requiredContainerIds: readonly string[]) => Promise<readonly ContainerMutationRequest[]>) | undefined;
+    readonly groupId: string;
+    readonly organizationId: string;
+    readonly organizationRequest: PutPrincipalPolicyRequest;
+    readonly memberRequest?: PutPrincipalPolicyRequest | undefined;
+    readonly request: PutPrincipalPolicyRequest;
+    readonly stillCurrent?: (() => boolean) | undefined;
+}): Promise<CommitOrganizationGroupPolicyResponse | null>;

package/workflows/organizations/submitGroupPolicyCommit.js

@@ -0,0 +1,71 @@
+import { CONTAINER_MUTATION_ERROR_CODES, } from "../../internal/validators/response/index.js";
+/**
+ * Commit, answering one refusal: a rematerialized rekey or revoke that would
+ * strand a level above a directly granted container is refused with the
+ * descendant rekeys it must carry. The refused attempt rolled back whole, so
+ * the served heads still stand; the batch is signed again with the named
+ * levels woven in, replaces the container mutations, and the commit is retried
+ * once. A second refusal means the tree moved underneath, and the caller's own
+ * retry starts from a fresh policy.
+ */
+export async function submitGroupPolicyCommit(input) {
+    const body = () => ({
+        groupPolicy: input.request,
+        ...(input.memberRequest ? { memberPolicy: input.memberRequest } : {}),
+        organizationPolicy: input.organizationRequest,
+    });
+    const { commitOrganizationGroupPolicyResult } = input.apiClient;
+    if (!commitOrganizationGroupPolicyResult) {
+        return input.apiClient.commitOrganizationGroupPolicy(input.organizationId, input.groupId, body());
+    }
+    const first = await commitOrganizationGroupPolicyResult.call(input.apiClient, input.organizationId, input.groupId, body(), { reportErrors: false });
+    if (first.ok)
+        return first.data;
+    if (first.kind === "cancelled")
+        return null;
+    if (first.kind === "outcome-unknown")
+        throw new Error(first.message ??
+            "Policy request may have committed; refresh before retrying");
+    if (input.memberRequest &&
+        first.code === CONTAINER_MUTATION_ERROR_CODES.descendantRekeysRequired) {
+        throw new Error("Repair the affected container keys before retrying enrollment; no memberships were changed");
+    }
+    if (!input.carryDescendantRekeys ||
+        first.code !== CONTAINER_MUTATION_ERROR_CODES.descendantRekeysRequired ||
+        !first.requiredContainerIds?.length) {
+        first.report?.();
+        return null;
+    }
+    let carried;
+    try {
+        carried = await input.carryDescendantRekeys(first.requiredContainerIds);
+    }
+    catch (error) {
+        // The refusal was answerable, and the answer failed: surface both. Once
+        // the generation that owned the attempt is gone, only the failure is
+        // surfaced; a superseded refusal is not an error.
+        if (input.stillCurrent?.() !== false)
+            first.report?.();
+        throw error;
+    }
+    if (input.stillCurrent?.() === false)
+        return null;
+    // Nothing signed means the same refusal again; report the one already had.
+    if (carried.length === 0) {
+        first.report?.();
+        return null;
+    }
+    input.request.containerMutations = [...carried];
+    const second = await commitOrganizationGroupPolicyResult.call(input.apiClient, input.organizationId, input.groupId, body(), { reportErrors: false });
+    if (!second.ok) {
+        if (second.kind === "cancelled")
+            return null;
+        if (second.kind === "outcome-unknown")
+            throw new Error(second.message ??
+                "Policy request may have committed; refresh before retrying");
+        second.report?.();
+        return null;
+    }
+    return second.data;
+}
+//# sourceMappingURL=submitGroupPolicyCommit.js.map

package/workflows/organizations/submitGroupPolicyCommit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submitGroupPolicyCommit.js","sourceRoot":"","sources":["submitGroupPolicyCommit.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,8BAA8B,GAE/B,MAAM,gCAAgC,CAAC;AAGxC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAa7C;IACC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC;QAClB,WAAW,EAAE,KAAK,CAAC,OAAO;QAC1B,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,kBAAkB,EAAE,KAAK,CAAC,mBAAmB;KAC9C,CAAC,CAAC;IACH,MAAM,EAAE,mCAAmC,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;IAChE,IAAI,CAAC,mCAAmC,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC,SAAS,CAAC,6BAA6B,CAClD,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,EACb,IAAI,EAAE,CACP,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,mCAAmC,CAAC,IAAI,CAC1D,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,EACb,IAAI,EAAE,EACN,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB,CAAC;IACF,IAAI,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IAChC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;QAClC,MAAM,IAAI,KAAK,CACb,KAAK,CAAC,OAAO;YACX,4DAA4D,CAC/D,CAAC;IACJ,IACE,KAAK,CAAC,aAAa;QACnB,KAAK,CAAC,IAAI,KAAK,8BAA8B,CAAC,wBAAwB,EACtE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IACD,IACE,CAAC,KAAK,CAAC,qBAAqB;QAC5B,KAAK,CAAC,IAAI,KAAK,8BAA8B,CAAC,wBAAwB;QACtE,CAAC,KAAK,CAAC,oBAAoB,EAAE,MAAM,EACnC,CAAC;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAA4C,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,qEAAqE;QACrE,kDAAkD;QAClD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;YAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACvD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,2EAA2E;IAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,kBAAkB,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,mCAAmC,CAAC,IAAI,CAC3D,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,EACb,IAAI,EAAE,EACN,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB;YACnC,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,OAAO;gBACZ,4DAA4D,CAC/D,CAAC;QACJ,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC","sourcesContent":["import type {\n  ContainerMutationRequest,\n  PutPrincipalPolicyRequest,\n} from \"@tearleads/validators/request\";\nimport {\n  CONTAINER_MUTATION_ERROR_CODES,\n  type CommitOrganizationGroupPolicyResponse,\n} from \"@tearleads/validators/response\";\nimport type { PrincipalPolicyReadWriteApi } from \"./principalPolicyApi\";\n\n/**\n * Commit, answering one refusal: a rematerialized rekey or revoke that would\n * strand a level above a directly granted container is refused with the\n * descendant rekeys it must carry. The refused attempt rolled back whole, so\n * the served heads still stand; the batch is signed again with the named\n * levels woven in, replaces the container mutations, and the commit is retried\n * once. A second refusal means the tree moved underneath, and the caller's own\n * retry starts from a fresh policy.\n */\nexport async function submitGroupPolicyCommit(input: {\n  readonly apiClient: PrincipalPolicyReadWriteApi;\n  readonly carryDescendantRekeys?:\n    | ((\n        requiredContainerIds: readonly string[],\n      ) => Promise<readonly ContainerMutationRequest[]>)\n    | undefined;\n  readonly groupId: string;\n  readonly organizationId: string;\n  readonly organizationRequest: PutPrincipalPolicyRequest;\n  readonly memberRequest?: PutPrincipalPolicyRequest | undefined;\n  readonly request: PutPrincipalPolicyRequest;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<CommitOrganizationGroupPolicyResponse | null> {\n  const body = () => ({\n    groupPolicy: input.request,\n    ...(input.memberRequest ? { memberPolicy: input.memberRequest } : {}),\n    organizationPolicy: input.organizationRequest,\n  });\n  const { commitOrganizationGroupPolicyResult } = input.apiClient;\n  if (!commitOrganizationGroupPolicyResult) {\n    return input.apiClient.commitOrganizationGroupPolicy(\n      input.organizationId,\n      input.groupId,\n      body(),\n    );\n  }\n  const first = await commitOrganizationGroupPolicyResult.call(\n    input.apiClient,\n    input.organizationId,\n    input.groupId,\n    body(),\n    { reportErrors: false },\n  );\n  if (first.ok) return first.data;\n  if (first.kind === \"cancelled\") return null;\n  if (first.kind === \"outcome-unknown\")\n    throw new Error(\n      first.message ??\n        \"Policy request may have committed; refresh before retrying\",\n    );\n  if (\n    input.memberRequest &&\n    first.code === CONTAINER_MUTATION_ERROR_CODES.descendantRekeysRequired\n  ) {\n    throw new Error(\n      \"Repair the affected container keys before retrying enrollment; no memberships were changed\",\n    );\n  }\n  if (\n    !input.carryDescendantRekeys ||\n    first.code !== CONTAINER_MUTATION_ERROR_CODES.descendantRekeysRequired ||\n    !first.requiredContainerIds?.length\n  ) {\n    first.report?.();\n    return null;\n  }\n  let carried: readonly ContainerMutationRequest[];\n  try {\n    carried = await input.carryDescendantRekeys(first.requiredContainerIds);\n  } catch (error) {\n    // The refusal was answerable, and the answer failed: surface both. Once\n    // the generation that owned the attempt is gone, only the failure is\n    // surfaced; a superseded refusal is not an error.\n    if (input.stillCurrent?.() !== false) first.report?.();\n    throw error;\n  }\n  if (input.stillCurrent?.() === false) return null;\n  // Nothing signed means the same refusal again; report the one already had.\n  if (carried.length === 0) {\n    first.report?.();\n    return null;\n  }\n  input.request.containerMutations = [...carried];\n  const second = await commitOrganizationGroupPolicyResult.call(\n    input.apiClient,\n    input.organizationId,\n    input.groupId,\n    body(),\n    { reportErrors: false },\n  );\n  if (!second.ok) {\n    if (second.kind === \"cancelled\") return null;\n    if (second.kind === \"outcome-unknown\")\n      throw new Error(\n        second.message ??\n          \"Policy request may have committed; refresh before retrying\",\n      );\n    second.report?.();\n    return null;\n  }\n  return second.data;\n}\n"]}