@tearleads/client-sdk 0.1.61 → 0.1.63

package/workflows/organizations/readModelProjection.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"readModelProjection.js","sourceRoot":"","sources":["readModelProjection.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,mCAAmC,GAEpC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iCAAiC,EAAE,MAAM,8EAA8E,CAAC;AACjI,OAAO,EAAE,qCAAqC,EAAE,MAAM,gFAAgF,CAAC;AACvI,OAAO,EACL,qCAAqC,GAEtC,MAAM,sEAAsE,CAAC;AAC9E,OAAO,EAAE,iCAAiC,EAAE,MAAM,iFAAiF,CAAC;AACpI,OAAO,EACL,kCAAkC,EAClC,mCAAmC,EAEnC,oCAAoC,GACrC,MAAM,uEAAuE,CAAC;AAE/E,OAAO,EACL,4CAA4C,EAC5C,kCAAkC,EAClC,8CAA8C,EAC9C,wCAAwC,EAGxC,qCAAqC,EACrC,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,6CAA6C,EAAE,MAAM,oCAAoC,CAAC;AAGnG,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAwB5B,SAAS,oBAAoB,CAC3B,UAAkD;IAElD,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,SAAS,EAAE;YACT,GAAG,UAAU,CAAC,SAAS;YACvB,WAAW,EAAE,UAAU,CAAC,SAAS;SAClC;QACD,0EAA0E;QAC1E,iDAAiD;QACjD,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC/C,GAAG,KAAK;YACR,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,aAAa;QAC9C,eAAe,EAAE,UAAU,CAAC,MAAM;KACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,KAA2C;IAE3C,OAAO,+BAA+B,CACpC,mCAAmC,CAAC,KAAK,CAAC,EAC1C,WAAW,EACX,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA2C;IAE3C,OAAO,mCAAmC,CACxC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,aAAa,CACpB,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC,CAC1C,KAA2C;IAE3C,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,eAAe,EAAE,KAAK,CAAC,aAAa;KACrC,CAAC;AACJ,CAAC;AA2BD,SAAS,WAAW,CAClB,KAAmD,EACnD,KAA0B,EAC1B,OAAqC;IAErC,MAAM,WAAW,GAAG,mCAAmC,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,QAAQ,GACZ,8CAA8C,CAC5C,WAAW,EACX,KAAK,CAAC,aAAa,CACpB,IAAI,wCAAwC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,0EAA0E;IAC1E,4EAA4E;IAC5E,sCAAsC;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAA0B;IACpD,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,IAAI,CAAC;IAC7D,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,SAAS,CAAC;AAC9D,CAAC;AAED,SAAS,+BAA+B,CACtC,MAAoD;IAEpD,OAAO,CACL,CAAC,MAAM,CAAC,EAAE;QACV,MAAM,CAAC,IAAI,KAAK,MAAM;QACtB,MAAM,CAAC,MAAM,KAAK,GAAG;QACrB,MAAM,CAAC,IAAI,KAAK,mCAAmC,CAAC,aAAa,CAClE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAAmD,EACnD,KAA0B;IAE1B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,8BAA8B,CACjE,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,aAAa,EACnB,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB,CAAC;IACF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,6CAA6C,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,mCAAmC,CAAC,KAAK,CAAC,CAAC;QAC/D,kCAAkC,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,CAAC;YACH,MAAM,mCAAmC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAC5D,qCAAqC,CAAC,WAAW,EAAE;gBACjD,WAAW;gBACX,OAAO;aACR,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,QAAQ,EAAE,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,mCAAmC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAC5D,iCAAiC,CAAC;gBAChC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,eAAe,EAAE,KAAK,CAAC,aAAa;aACrC,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,QAAQ,EAAE,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,IACE,+BAA+B,CAAC,MAAM,CAAC;QACvC,KAAK,CAAC,aAAa,KAAK,SAAS;QACjC,CAAC,KAAK,CAAC,oBAAoB,EAC3B,CAAC;QACD,KAAK,CAAC,aAAa,GAAG,SAAS,CAAC;QAChC,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAmD,EACnD,KAA0B,EAC1B,QAAuC;IAEvC,IAAI,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QACrD,KAAK,CAAC,QAAQ,EAAE,CACd,yDAAyD,KAAK,CAAC,cAAc,EAAE,CAChF,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC1E,KAAK,CAAC,QAAQ,EAAE,CAAC,yDAAyD,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAmD,EACnD,KAA0B;IAE1B,OAAO,8CAA8C,CACnD,mCAAmC,CAAC,KAAK,CAAC,EAC1C,KAAK,CAAC,aAAa,CACpB,CAAC;AACJ,CAAC;AAWD,KAAK,UAAU,aAAa,CAC1B,KAAmD,EACnD,KAA0B,EAC1B,QAAuC;IAEvC,IAAI,CAAC;QACH,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,MAAM,kCAAkC,CAAC;gBAC/C,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,eAAe,EAAE,KAAK,CAAC,mBAAmB;gBAC1C,QAAQ;aACT,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,QAAQ,EAAE,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAC;QAC5E,IACE,CAAC,CAAC,KAAK,YAAY,iCAAiC,CAAC;YACrD,KAAK,CAAC,qBAAqB,EAC3B,CAAC;YACD,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC;QACnC,MAAM,oCAAoC,CACxC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,CACrB,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;QACD,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;QACxB,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,KAAmD,EACnD,KAA0B;IAE1B,IAAI,KAAK,CAAC,wBAAwB,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,sEAAsE;QACtE,uEAAuE;QACvE,2DAA2D;QAC3D,MAAM,oCAAoC,CACxC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,EACpB,EAAE,mBAAmB,EAAE,KAAK,CAAC,aAAa,EAAE,CAC7C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,QAAQ,EAAE,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;IACjC,KAAK,CAAC,wBAAwB,GAAG,IAAI,CAAC;IACtC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAAmD,EACnD,KAA0B,EAC1B,QAAuC;IAEvC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;QACpD,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,WAAW,GAAG,mCAAmC,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,mCAAmC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACnE,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,+BAA+B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACxE,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,UAAU,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,YAAY,IAAI,iBAAiB,EAAE,CAAC;gBAC5C,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;YACxB,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC9B,CAAC;QAED,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC;QAC5E,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,qCAAqC,CAC1C,WAAW,EACX,KAAK,CAAC,aAAa,CACpB;gBACC,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;gBAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,KAA2C;IAE3C,OAAO,oBAAoB,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,KAA0E;IAE1E,OAAO,+BAA+B,CACpC,mCAAmC,CAAC,KAAK,CAAC,EAC1C,WAAW,EACX,GAAG,EAAE,CACH,qCAAqC,CACnC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,aAAa,CACpB,CACJ,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,KAAmD;IAEnD,MAAM,WAAW,GAAG,mCAAmC,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,4CAA4C,CAChE,WAAW,EACX,WAAW,CACZ,CAAC;IACF,MAAM,KAAK,GAAwB;QACjC,aAAa;QACb,mBAAmB,EAAE,IAAI;QACzB,wBAAwB,EAAE,CAAC,aAAa,CAAC,aAAa;QACtD,UAAU,EAAE,MAAM,cAAc,CAAC,KAAK,CAAC;QACvC,aAAa,EAAE,SAAS;QACxB,qBAAqB,EAAE,KAAK;QAC5B,oBAAoB,EAAE,KAAK;QAC3B,YAAY,EAAE,CAAC;KAChB,CAAC;IACF,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAE1B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,oBAAoB,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,KAAK,CAAC;QACvB,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,EAAE,CACd,4DAA4D,CAC7D,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC","sourcesContent":["import type {\n  RequestResult,\n  RequestResultOptions,\n} from \"@tearleads/api-client\";\nimport {\n  ORGANIZATION_READ_MODEL_ERROR_CODES,\n  type OrganizationReadModelResponse,\n} from \"@tearleads/validators/response\";\nimport { purgeOrganizationAccessProjection } from \"../../data/persistence/organizations/organizationAccessRevocationPersistence\";\nimport { recordOrganizationPresentationDenials } from \"../../data/persistence/organizations/organizationPresentationDenialPersistence\";\nimport {\n  loadOrganizationReadModelGroupMembers,\n  type OrganizationReadModelGroupMembers,\n} from \"../../data/persistence/organizations/organizationReadModelMemberLoad\";\nimport { OrganizationReadModelBindingError } from \"../../data/persistence/organizations/organizationReadModelMembershipPersistence\";\nimport {\n  applyOrganizationReadModelResponse,\n  loadOrganizationReadModelProjection,\n  type OrganizationReadModelProjection,\n  purgeOrganizationReadModelProjection,\n} from \"../../data/persistence/organizations/organizationReadModelPersistence\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport {\n  captureOrganizationPresentationAccessAttempt,\n  denyOrganizationPresentationAccess,\n  isOrganizationPresentationAccessAttemptCurrent,\n  isOrganizationPresentationAccessReadable,\n  type OrganizationPresentationAccessAttempt,\n  type OrganizationPresentationAccessInput,\n  restoreOrganizationPresentationAccess,\n  runOrganizationPresentationMutation,\n  runOrganizationPresentationRead,\n} from \"./organizationPresentationAccessState\";\nimport { isOrganizationPresentationAccessDeniedFailure } from \"./organizationPresentationFailures\";\nimport type { OrganizationDirectoryAndGroups } from \"./readModel\";\n\nconst MAX_READ_MODEL_PAGES = 100;\nconst MAX_STALE_RETRIES = 1;\n\ninterface OrganizationReadModelApi {\n  getOrganizationReadModelResult(\n    organizationId: string,\n    cursor?: string,\n    options?: RequestResultOptions,\n  ): Promise<RequestResult<OrganizationReadModelResponse>>;\n}\n\ninterface OrganizationReadModelProjectionInput {\n  readonly currentUserId: string;\n  readonly execSql: ExecSql;\n  readonly organizationId: string;\n}\n\nexport interface ReconcileOrganizationDirectoryAndGroupsInput\n  extends OrganizationReadModelProjectionInput {\n  readonly apiClient: OrganizationReadModelApi;\n  readonly logError?:\n    | ((message: string | Error, cause?: unknown) => void)\n    | undefined;\n}\n\nfunction toDirectoryAndGroups(\n  projection: OrganizationReadModelProjection | null,\n): OrganizationDirectoryAndGroups | null {\n  if (!projection?.requester) {\n    return null;\n  }\n\n  return {\n    directory: {\n      ...projection.directory,\n      currentUser: projection.requester,\n    },\n    // Hydration decides whether a name is unreadable; a stored blank name may\n    // only mean the group has not been hydrated yet.\n    groups: projection.groups.groups.map((group) => ({\n      ...group,\n      nameUnreadable: false,\n    })),\n    memberGroupId: projection.groups.memberGroupId,\n    readModelCursor: projection.cursor,\n  };\n}\n\nasync function loadProjection(\n  input: OrganizationReadModelProjectionInput,\n): Promise<OrganizationReadModelProjection | null> {\n  return runOrganizationPresentationRead(\n    organizationPresentationAccessInput(input),\n    \"readModel\",\n    () => loadRawProjection(input),\n  );\n}\n\nfunction loadRawProjection(\n  input: OrganizationReadModelProjectionInput,\n): Promise<OrganizationReadModelProjection | null> {\n  return loadOrganizationReadModelProjection(\n    input.execSql,\n    input.organizationId,\n    input.currentUserId,\n  );\n}\n\nfunction organizationPresentationAccessInput(\n  input: OrganizationReadModelProjectionInput,\n): OrganizationPresentationAccessInput {\n  return {\n    execSql: input.execSql,\n    organizationId: input.organizationId,\n    requesterUserId: input.currentUserId,\n  };\n}\n\ninterface ReconciliationState {\n  readonly accessAttempt: OrganizationPresentationAccessAttempt;\n  expectedLocalCursor: string | null;\n  preparedDeniedProjection: boolean;\n  projection: OrganizationReadModelProjection | null;\n  requestCursor: string | undefined;\n  retriedBindingFailure: boolean;\n  retriedInvalidCursor: boolean;\n  staleRetries: number;\n}\n\ntype ReconciliationStep =\n  | { readonly kind: \"continue\" }\n  | {\n      readonly kind: \"done\";\n      readonly value: OrganizationDirectoryAndGroups | null | undefined;\n    };\n\ntype PageRequestStep =\n  | ReconciliationStep\n  | {\n      readonly kind: \"response\";\n      readonly response: OrganizationReadModelResponse;\n    };\n\nfunction localResult(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n  outcome: { readonly failed: boolean },\n): ReconciliationStep {\n  const accessInput = organizationPresentationAccessInput(input);\n  const readable =\n    isOrganizationPresentationAccessAttemptCurrent(\n      accessInput,\n      state.accessAttempt,\n    ) && isOrganizationPresentationAccessReadable(accessInput, \"readModel\");\n  if (!readable) {\n    return { kind: \"done\", value: null };\n  }\n  const value = toDirectoryAndGroups(state.projection);\n  // A failed pass that retained nothing must not read as a completed (null)\n  // pass: consumers mark a scope caught up only on completed passes, and this\n  // scope still needs a fresh catch-up.\n  if (value === null && outcome.failed) {\n    return { kind: \"done\", value: undefined };\n  }\n  return { kind: \"done\", value };\n}\n\nfunction resetRequestCursor(state: ReconciliationState): void {\n  state.expectedLocalCursor = state.projection?.cursor ?? null;\n  state.requestCursor = state.projection?.cursor ?? undefined;\n}\n\nfunction isInvalidReadModelCursorFailure(\n  result: RequestResult<OrganizationReadModelResponse>,\n): boolean {\n  return (\n    !result.ok &&\n    result.kind === \"http\" &&\n    result.status === 400 &&\n    result.code === ORGANIZATION_READ_MODEL_ERROR_CODES.cursorInvalid\n  );\n}\n\nasync function requestReadModelPage(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n): Promise<PageRequestStep> {\n  const result = await input.apiClient.getOrganizationReadModelResult(\n    input.organizationId,\n    state.requestCursor,\n    { reportErrors: false },\n  );\n  if (result.ok) {\n    return { kind: \"response\", response: result.data };\n  }\n  if (isOrganizationPresentationAccessDeniedFailure(result)) {\n    const accessInput = organizationPresentationAccessInput(input);\n    denyOrganizationPresentationAccess(accessInput, [\"readModel\", \"usage\"]);\n    // The durable marker lands before the purge attempt: if the purge fails,\n    // an offline restart must still refuse to serve the revoked projection.\n    try {\n      await runOrganizationPresentationMutation(input.execSql, () =>\n        recordOrganizationPresentationDenials(accessInput, [\n          \"readModel\",\n          \"usage\",\n        ]),\n      );\n    } catch (error) {\n      input.logError?.(\"Failed to record denied organization access\", error);\n    }\n    try {\n      await runOrganizationPresentationMutation(input.execSql, () =>\n        purgeOrganizationAccessProjection({\n          execSql: input.execSql,\n          organizationId: input.organizationId,\n          requesterUserId: input.currentUserId,\n        }),\n      );\n    } catch (error) {\n      input.logError?.(\"Failed to purge denied organization access\", error);\n    }\n    return { kind: \"done\", value: null };\n  }\n  if (\n    isInvalidReadModelCursorFailure(result) &&\n    state.requestCursor !== undefined &&\n    !state.retriedInvalidCursor\n  ) {\n    state.requestCursor = undefined;\n    state.retriedInvalidCursor = true;\n    return { kind: \"continue\" };\n  }\n\n  result.report();\n  return localResult(input, state, { failed: true });\n}\n\nfunction responseMatchesRequest(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n  response: OrganizationReadModelResponse,\n): boolean {\n  if (response.organizationId !== input.organizationId) {\n    input.logError?.(\n      `Organization read-model response scope does not match ${input.organizationId}`,\n    );\n    return false;\n  }\n  if (response.hasMore && response.nextCursor === state.expectedLocalCursor) {\n    input.logError?.(\"Organization read-model page did not advance its cursor\");\n    return false;\n  }\n  return true;\n}\n\nfunction reconciliationIsCurrent(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n): boolean {\n  return isOrganizationPresentationAccessAttemptCurrent(\n    organizationPresentationAccessInput(input),\n    state.accessAttempt,\n  );\n}\n\ntype ApplyResponseStep =\n  | ReconciliationStep\n  | {\n      readonly kind: \"applied\";\n      readonly result: Awaited<\n        ReturnType<typeof applyOrganizationReadModelResponse>\n      >;\n    };\n\nasync function applyResponse(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n  response: OrganizationReadModelResponse,\n): Promise<ApplyResponseStep> {\n  try {\n    return {\n      kind: \"applied\",\n      result: await applyOrganizationReadModelResponse({\n        currentUserId: input.currentUserId,\n        execSql: input.execSql,\n        requestedCursor: state.expectedLocalCursor,\n        response,\n      }),\n    };\n  } catch (error) {\n    input.logError?.(\"Failed to apply organization read-model response\", error);\n    if (\n      !(error instanceof OrganizationReadModelBindingError) ||\n      state.retriedBindingFailure\n    ) {\n      return localResult(input, state, { failed: true });\n    }\n    state.retriedBindingFailure = true;\n    await purgeOrganizationReadModelProjection(\n      input.execSql,\n      input.organizationId,\n    );\n    if (!reconciliationIsCurrent(input, state)) {\n      return { kind: \"done\", value: null };\n    }\n    state.projection = null;\n    resetRequestCursor(state);\n    return { kind: \"continue\" };\n  }\n}\n\nasync function prepareDeniedProjectionForApply(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n): Promise<ReconciliationStep | null> {\n  if (state.preparedDeniedProjection) {\n    return null;\n  }\n  try {\n    // The apply that follows replaces the shared rows authoritatively, so\n    // only this requester's row is dropped: another local identity sharing\n    // the database keeps its access and reads the replacement.\n    await purgeOrganizationReadModelProjection(\n      input.execSql,\n      input.organizationId,\n      { onlyRequesterUserId: input.currentUserId },\n    );\n  } catch (error) {\n    input.logError?.(\"Failed to replace denied organization read model\", error);\n    return { kind: \"done\", value: null };\n  }\n  if (!reconciliationIsCurrent(input, state)) {\n    return { kind: \"done\", value: null };\n  }\n  state.expectedLocalCursor = null;\n  state.preparedDeniedProjection = true;\n  state.projection = null;\n  return null;\n}\n\nasync function applyReadModelPage(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n  response: OrganizationReadModelResponse,\n): Promise<ReconciliationStep> {\n  if (!responseMatchesRequest(input, state, response)) {\n    return localResult(input, state, { failed: true });\n  }\n\n  const accessInput = organizationPresentationAccessInput(input);\n  return runOrganizationPresentationMutation(input.execSql, async () => {\n    if (!reconciliationIsCurrent(input, state)) {\n      return { kind: \"done\", value: null };\n    }\n    const preparation = await prepareDeniedProjectionForApply(input, state);\n    if (preparation) {\n      return preparation;\n    }\n\n    const applied = await applyResponse(input, state, response);\n    if (applied.kind !== \"applied\") {\n      return applied;\n    }\n\n    state.projection = await loadRawProjection(input);\n    if (!reconciliationIsCurrent(input, state)) {\n      return { kind: \"done\", value: null };\n    }\n    if (applied.result === \"stale\") {\n      if (state.staleRetries >= MAX_STALE_RETRIES) {\n        return localResult(input, state, { failed: true });\n      }\n      state.staleRetries += 1;\n      resetRequestCursor(state);\n      return { kind: \"continue\" };\n    }\n\n    state.expectedLocalCursor = state.projection?.cursor ?? response.nextCursor;\n    if (!response.hasMore) {\n      return restoreOrganizationPresentationAccess(\n        accessInput,\n        state.accessAttempt,\n      )\n        ? localResult(input, state, { failed: false })\n        : { kind: \"done\", value: null };\n    }\n    state.requestCursor = response.nextCursor;\n    return { kind: \"continue\" };\n  });\n}\n\nexport async function loadLocalOrganizationDirectoryAndGroups(\n  input: OrganizationReadModelProjectionInput,\n): Promise<OrganizationDirectoryAndGroups | null> {\n  return toDirectoryAndGroups(await loadProjection(input));\n}\n\nexport async function loadLocalOrganizationGroupMembers(\n  input: OrganizationReadModelProjectionInput & { readonly groupId: string },\n): Promise<OrganizationReadModelGroupMembers | null> {\n  return runOrganizationPresentationRead(\n    organizationPresentationAccessInput(input),\n    \"readModel\",\n    () =>\n      loadOrganizationReadModelGroupMembers(\n        input.execSql,\n        input.organizationId,\n        input.groupId,\n        input.currentUserId,\n      ),\n  );\n}\n\n/**\n * Resolves the reconciled projection, `null` when the pass completed\n * authoritatively with nothing presentable (including a denial that purged\n * the projection), or `undefined` when the feed failed and no local\n * projection was retained — a pass that must not count as caught up.\n */\nexport async function reconcileOrganizationDirectoryAndGroups(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n): Promise<OrganizationDirectoryAndGroups | null | undefined> {\n  const accessInput = organizationPresentationAccessInput(input);\n  const accessAttempt = captureOrganizationPresentationAccessAttempt(\n    accessInput,\n    \"readModel\",\n  );\n  const state: ReconciliationState = {\n    accessAttempt,\n    expectedLocalCursor: null,\n    preparedDeniedProjection: !accessAttempt.startedDenied,\n    projection: await loadProjection(input),\n    requestCursor: undefined,\n    retriedBindingFailure: false,\n    retriedInvalidCursor: false,\n    staleRetries: 0,\n  };\n  resetRequestCursor(state);\n\n  for (let page = 0; page < MAX_READ_MODEL_PAGES; page += 1) {\n    const request = await requestReadModelPage(input, state);\n    if (request.kind === \"done\") {\n      return request.value;\n    }\n    if (request.kind === \"continue\") {\n      continue;\n    }\n    const applied = await applyReadModelPage(input, state, request.response);\n    if (applied.kind === \"done\") {\n      return applied.value;\n    }\n  }\n\n  input.logError?.(\n    \"Organization read-model reconciliation exceeded page limit\",\n  );\n  const retained = localResult(input, state, { failed: true });\n  return retained.kind === \"done\" ? retained.value : null;\n}\n"]}

package/workflows/organizations/retainAcknowledgedPrincipalCurrents.d.ts

@@ -1,6 +0,0 @@
-import type { VerifiedPrincipalPolicyCurrent } from "../../internal/crypto/index.js";
-import { type AcknowledgedPrincipalCurrentBatch } from "../principals/acknowledgedPrincipalCurrents.js";
-export type { AcknowledgedPrincipalCurrentRetirement } from "../../data/persistence/principalCurrentAcknowledgementPersistence.js";
-export type { AcknowledgedPrincipalCurrentInput } from "../principals/acknowledgedPrincipalCurrents.js";
-/** Extend authenticated local progress and retain exact acknowledged artifacts atomically with pins. */
-export declare function retainAcknowledgedPrincipalCurrents(input: AcknowledgedPrincipalCurrentBatch): Promise<VerifiedPrincipalPolicyCurrent[]>;

package/workflows/organizations/retainAcknowledgedPrincipalCurrents.js

@@ -1,20 +0,0 @@
-import { recordAcknowledgedPrincipalCurrents, } from "../principals/acknowledgedPrincipalCurrents.js";
-import { assertAcknowledgedDirectoryBindings } from "./acknowledgedDirectoryBindings.js";
-import { acknowledgeGroupPolicyState } from "./groupPolicyMutationAcknowledgement.js";
-import { groupPolicyMutationHead } from "./groupPolicyMutationHead.js";
-import { assertPrincipalPolicyReceiptArtifacts } from "./principalPolicyReceiptArtifacts.js";
-/** How organization and group mutations check an acknowledgement they authored. */
-const principalAcknowledgementChecks = {
-    authoredHead: groupPolicyMutationHead,
-    assertReceipt: assertPrincipalPolicyReceiptArtifacts,
-    acknowledgeSuccessor: (input) => acknowledgeGroupPolicyState(input),
-    assertDirectoryBindings: assertAcknowledgedDirectoryBindings,
-};
-/** Extend authenticated local progress and retain exact acknowledged artifacts atomically with pins. */
-export function retainAcknowledgedPrincipalCurrents(input) {
-    return recordAcknowledgedPrincipalCurrents({
-        ...input,
-        checks: principalAcknowledgementChecks,
-    });
-}
-//# sourceMappingURL=retainAcknowledgedPrincipalCurrents.js.map

package/workflows/organizations/retainAcknowledgedPrincipalCurrents.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"retainAcknowledgedPrincipalCurrents.js","sourceRoot":"","sources":["retainAcknowledgedPrincipalCurrents.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,mCAAmC,GACpC,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AACtF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,qCAAqC,EAAE,MAAM,mCAAmC,CAAC;AAK1F,mFAAmF;AACnF,MAAM,8BAA8B,GAAmC;IACrE,YAAY,EAAE,uBAAuB;IACrC,aAAa,EAAE,qCAAqC;IACpD,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC;IACnE,uBAAuB,EAAE,mCAAmC;CAC7D,CAAC;AAEF,wGAAwG;AACxG,MAAM,UAAU,mCAAmC,CACjD,KAAwC;IAExC,OAAO,mCAAmC,CAAC;QACzC,GAAG,KAAK;QACR,MAAM,EAAE,8BAA8B;KACvC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { VerifiedPrincipalPolicyCurrent } from \"@tearleads/crypto\";\nimport {\n  type AcknowledgedPrincipalCurrentBatch,\n  recordAcknowledgedPrincipalCurrents,\n} from \"../principals/acknowledgedPrincipalCurrents\";\nimport type { PrincipalAcknowledgementChecks } from \"../principals/principalAcknowledgementChecks\";\nimport { assertAcknowledgedDirectoryBindings } from \"./acknowledgedDirectoryBindings\";\nimport { acknowledgeGroupPolicyState } from \"./groupPolicyMutationAcknowledgement\";\nimport { groupPolicyMutationHead } from \"./groupPolicyMutationHead\";\nimport { assertPrincipalPolicyReceiptArtifacts } from \"./principalPolicyReceiptArtifacts\";\n\nexport type { AcknowledgedPrincipalCurrentRetirement } from \"../../data/persistence/principalCurrentAcknowledgementPersistence\";\nexport type { AcknowledgedPrincipalCurrentInput } from \"../principals/acknowledgedPrincipalCurrents\";\n\n/** How organization and group mutations check an acknowledgement they authored. */\nconst principalAcknowledgementChecks: PrincipalAcknowledgementChecks = {\n  authoredHead: groupPolicyMutationHead,\n  assertReceipt: assertPrincipalPolicyReceiptArtifacts,\n  acknowledgeSuccessor: (input) => acknowledgeGroupPolicyState(input),\n  assertDirectoryBindings: assertAcknowledgedDirectoryBindings,\n};\n\n/** Extend authenticated local progress and retain exact acknowledged artifacts atomically with pins. */\nexport function retainAcknowledgedPrincipalCurrents(\n  input: AcknowledgedPrincipalCurrentBatch,\n): Promise<VerifiedPrincipalPolicyCurrent[]> {\n  return recordAcknowledgedPrincipalCurrents({\n    ...input,\n    checks: principalAcknowledgementChecks,\n  });\n}\n"]}

package/workflows/organizations/runtimeCurrentGroupMutation.js

@@ -1,113 +0,0 @@
-import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
-import { scopedGroupHistoryProtection } from "../../data/principals/principalHistoryScopeProtection.js";
-import { principalPolicyReferenceFromBundle } from "../../data/principals/principalPolicyAdminSigners.js";
-import { captureAcknowledgedPrincipalPredecessor } from "../principals/acknowledgedPrincipalPredecessor.js";
-import { resolveCurrentGroupMutationReferences } from "./currentGroupMutationReferences.js";
-import { loadCurrentGroupPolicyMutationContext } from "./currentGroupPolicyMutationContext.js";
-import { createCurrentPrincipalMutationLease } from "./currentPrincipalMutationLease.js";
-import { retainAcknowledgedPrincipalCurrents, } from "./retainAcknowledgedPrincipalCurrents.js";
-/** Keep private prefix custody inside the entire mutation and its acknowledgement. */
-export function createRuntimeCurrentGroupMutation(runtime) {
-    const lease = createCurrentPrincipalMutationLease(runtime);
-    if (!lease)
-        return undefined;
-    return async (input, work) => {
-        input = { ...input };
-        return lease(input.stillCurrent, async ({ protection, stillCurrent, resolveCurrentPolicy, historyReader, directoryRecovery, }) => {
-            const loadGroup = async (groupId) => {
-                const context = await loadCurrentGroupPolicyMutationContext({
-                    ...input,
-                    groupId,
-                    execSql: runtime.infra.execSql,
-                    resolveCurrentPolicy,
-                    recoverPendingPrincipalMutation: (organizationId) => runtime.apiClient.recoverPendingPrincipalMutation(organizationId),
-                    stillCurrent,
-                });
-                const retention = await createCurrentMutationRetention(runtime, { ...input, groupId }, context, protection, historyReader, directoryRecovery(context.organizationCurrent.current));
-                return {
-                    ...context,
-                    ...retention,
-                    loadGroup,
-                    resolveAuthoredPolicyReferences: (current, references) => resolveCurrentGroupMutationReferences({
-                        current,
-                        predecessor: context.verifiedCurrentPolicy,
-                        references,
-                        readPredecessorReference: context.readPredecessorReference,
-                        stillCurrent: context.stillCurrent,
-                    }),
-                };
-            };
-            const context = await loadGroup(input.groupId);
-            const result = await work(context);
-            assertProjectionVerificationCurrent(context.stillCurrent);
-            return result;
-        });
-    };
-}
-async function createCurrentMutationRetention(runtime, input, context, protection, historyReader, directoryRecovery) {
-    const common = {
-        historyReader,
-        resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,
-    };
-    const groupRecovery = {
-        ...common,
-        expectedHead: principalPolicyReferenceFromBundle(context.currentPolicy),
-        protection: context.isOrganizationAdminsGroup
-            ? protection
-            : scopedGroupHistoryProtection(protection, input.organizationId, context.adminGroupId),
-        historyVerification: context.isOrganizationAdminsGroup
-            ? "direct-admins"
-            : "standard",
-        ...(context.isOrganizationAdminsGroup
-            ? {}
-            : { loadExternalAuthority: async () => context.externalAuthority }),
-    };
-    const capture = (recovery) => captureAcknowledgedPrincipalPredecessor({
-        ...recovery,
-        execSql: runtime.infra.execSql,
-        organizationId: input.organizationId,
-        stillCurrent: context.stillCurrent,
-    });
-    const groupPredecessor = await capture(groupRecovery);
-    const directoryPredecessor = await capture(directoryRecovery);
-    const retainAcknowledged = async (receipt) => {
-        assertProjectionVerificationCurrent(context.stillCurrent);
-        await retainAcknowledgedPrincipalCurrents({
-            execSql: runtime.infra.execSql,
-            organizationId: input.organizationId,
-            entries: [
-                ...(receipt.additionalGroups ?? []),
-                {
-                    recovery: groupRecovery,
-                    predecessor: groupPredecessor,
-                    request: receipt.request,
-                    response: receipt.response.groupPolicy,
-                },
-                {
-                    recovery: directoryRecovery,
-                    predecessor: directoryPredecessor,
-                    request: receipt.organizationRequest,
-                    response: receipt.response.organizationPolicy,
-                },
-            ],
-            retirements: [
-                ...(receipt.additionalGroups ?? []).map((entry) => ({
-                    principalId: entry.request.state.principalId,
-                    principalType: "group",
-                    containerIds: entry.retiredContainerIds ?? [],
-                })),
-                {
-                    principalId: input.groupId,
-                    principalType: "group",
-                    containerIds: receipt.retiredContainerIds ?? [],
-                },
-            ],
-            stillCurrent: context.stillCurrent,
-        });
-    };
-    return {
-        groupRetention: { recovery: groupRecovery, predecessor: groupPredecessor },
-        retainAcknowledged,
-    };
-}
-//# sourceMappingURL=runtimeCurrentGroupMutation.js.map

package/workflows/organizations/runtimeCurrentGroupMutation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtimeCurrentGroupMutation.js","sourceRoot":"","sources":["runtimeCurrentGroupMutation.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AAEpG,OAAO,EAAE,4BAA4B,EAAE,MAAM,uDAAuD,CAAC;AACrG,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AACvG,OAAO,EAAE,uCAAuC,EAAE,MAAM,gDAAgD,CAAC;AAGzG,OAAO,EAAE,qCAAqC,EAAE,MAAM,kCAAkC,CAAC;AACzF,OAAO,EAAE,qCAAqC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AAEtF,OAAO,EAEL,mCAAmC,GACpC,MAAM,uCAAuC,CAAC;AA4C/C,sFAAsF;AACtF,MAAM,UAAU,iCAAiC,CAAC,OAAwB;IACxE,MAAM,KAAK,GAAG,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,KAAK,EACV,KAAoB,EACpB,IAAiE,EACrD,EAAE;QACd,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QACrB,OAAO,KAAK,CACV,KAAK,CAAC,YAAY,EAClB,KAAK,EAAE,EACL,UAAU,EACV,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,iBAAiB,GAClB,EAAE,EAAE;YACH,MAAM,SAAS,GAAG,KAAK,EACrB,OAAe,EAC8B,EAAE;gBAC/C,MAAM,OAAO,GAAG,MAAM,qCAAqC,CAAC;oBAC1D,GAAG,KAAK;oBACR,OAAO;oBACP,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;oBAC9B,oBAAoB;oBACpB,+BAA+B,EAAE,CAAC,cAAc,EAAE,EAAE,CAClD,OAAO,CAAC,SAAS,CAAC,+BAA+B,CAAC,cAAc,CAAC;oBACnE,YAAY;iBACb,CAAC,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,8BAA8B,CACpD,OAAO,EACP,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EACrB,OAAO,EACP,UAAU,EACV,aAAa,EACb,iBAAiB,CAAC,OAAO,CAAC,mBAAmB,CAAC,OAAO,CAAC,CACvD,CAAC;gBACF,OAAO;oBACL,GAAG,OAAO;oBACV,GAAG,SAAS;oBACZ,SAAS;oBACT,+BAA+B,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,CACvD,qCAAqC,CAAC;wBACpC,OAAO;wBACP,WAAW,EAAE,OAAO,CAAC,qBAAqB;wBAC1C,UAAU;wBACV,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;wBAC1D,YAAY,EAAE,OAAO,CAAC,YAAY;qBACnC,CAAC;iBACL,CAAC;YACJ,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,mCAAmC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC1D,OAAO,MAAM,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,OAAwB,EACxB,KAAoB,EACpB,OAA+B,EAC/B,UAAiD,EACjD,aAAwC,EACxC,iBAAgE;IAEhE,MAAM,MAAM,GAAG;QACb,aAAa;QACb,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;KAC/D,CAAC;IACF,MAAM,aAAa,GAAkD;QACnE,GAAG,MAAM;QACT,YAAY,EAAE,kCAAkC,CAAC,OAAO,CAAC,aAAa,CAAC;QACvE,UAAU,EAAE,OAAO,CAAC,yBAAyB;YAC3C,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,4BAA4B,CAC1B,UAAU,EACV,KAAK,CAAC,cAAc,EACpB,OAAO,CAAC,YAAY,CACrB;QACL,mBAAmB,EAAE,OAAO,CAAC,yBAAyB;YACpD,CAAC,CAAC,eAAe;YACjB,CAAC,CAAC,UAAU;QACd,GAAG,CAAC,OAAO,CAAC,yBAAyB;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;KACtE,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,QAAuD,EAAE,EAAE,CAC1E,uCAAuC,CAAC;QACtC,GAAG,QAAQ;QACX,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;IACL,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9D,MAAM,kBAAkB,GAAG,KAAK,EAC9B,OAA+B,EAChB,EAAE;QACjB,mCAAmC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,mCAAmC,CAAC;YACxC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE;gBACP,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;gBACnC;oBACE,QAAQ,EAAE,aAAa;oBACvB,WAAW,EAAE,gBAAgB;oBAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW;iBACvC;gBACD;oBACE,QAAQ,EAAE,iBAAiB;oBAC3B,WAAW,EAAE,oBAAoB;oBACjC,OAAO,EAAE,OAAO,CAAC,mBAAmB;oBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,kBAAkB;iBAC9C;aACF;YACD,WAAW,EAAE;gBACX,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAClD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW;oBAC5C,aAAa,EAAE,OAAgB;oBAC/B,YAAY,EAAE,KAAK,CAAC,mBAAmB,IAAI,EAAE;iBAC9C,CAAC,CAAC;gBACH;oBACE,WAAW,EAAE,KAAK,CAAC,OAAO;oBAC1B,aAAa,EAAE,OAAO;oBACtB,YAAY,EAAE,OAAO,CAAC,mBAAmB,IAAI,EAAE;iBAChD;aACF;YACD,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,OAAO;QACL,cAAc,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE;QAC1E,kBAAkB;KACnB,CAAC;AACJ,CAAC","sourcesContent":["import type { PrincipalPolicyHistoryProgressOptions } from \"@tearleads/crypto\";\nimport type { PutPrincipalPolicyRequest } from \"@tearleads/validators/request\";\nimport type { CommitOrganizationGroupPolicyResponse } from \"@tearleads/validators/response\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport type { CurrentPolicyReferenceResolver } from \"../../data/principals/currentPolicyReferenceResolver\";\nimport { scopedGroupHistoryProtection } from \"../../data/principals/principalHistoryScopeProtection\";\nimport { principalPolicyReferenceFromBundle } from \"../../data/principals/principalPolicyAdminSigners\";\nimport { captureAcknowledgedPrincipalPredecessor } from \"../principals/acknowledgedPrincipalPredecessor\";\nimport type { PrincipalPolicyPageReader } from \"../principals/principalPolicyHistoryReader\";\nimport type { PrincipalPolicyRecoveryRuntime } from \"../principals/runtimePolicyRecovery\";\nimport { resolveCurrentGroupMutationReferences } from \"./currentGroupMutationReferences\";\nimport { loadCurrentGroupPolicyMutationContext } from \"./currentGroupPolicyMutationContext\";\nimport { createCurrentPrincipalMutationLease } from \"./currentPrincipalMutationLease\";\nimport type { PrincipalMutationRecoveryApi } from \"./principalMutationJournalManagement\";\nimport {\n  type AcknowledgedPrincipalCurrentInput,\n  retainAcknowledgedPrincipalCurrents,\n} from \"./retainAcknowledgedPrincipalCurrents\";\n\ntype MutationRuntime = PrincipalPolicyRecoveryRuntime & {\n  readonly apiClient: PrincipalPolicyRecoveryRuntime[\"apiClient\"] &\n    Pick<PrincipalMutationRecoveryApi, \"recoverPendingPrincipalMutation\">;\n};\n\ntype CurrentMutationContext = Awaited<\n  ReturnType<typeof loadCurrentGroupPolicyMutationContext>\n>;\n\nexport type RuntimeCurrentGroupMutationContext = CurrentMutationContext & {\n  readonly resolveAuthoredPolicyReferences: CurrentPolicyReferenceResolver;\n  readonly loadGroup: (\n    groupId: string,\n  ) => Promise<RuntimeCurrentGroupMutationContext>;\n  readonly groupRetention: Pick<\n    AcknowledgedPrincipalCurrentInput,\n    \"recovery\" | \"predecessor\"\n  >;\n  readonly retainAcknowledged: (\n    receipt: CurrentMutationReceipt,\n  ) => Promise<void>;\n};\n\ninterface CurrentMutationReceipt {\n  readonly additionalGroups?:\n    | readonly (AcknowledgedPrincipalCurrentInput & {\n        readonly retiredContainerIds?: readonly string[] | undefined;\n      })[]\n    | undefined;\n  readonly request: PutPrincipalPolicyRequest;\n  readonly organizationRequest: PutPrincipalPolicyRequest;\n  readonly response: CommitOrganizationGroupPolicyResponse;\n  readonly retiredContainerIds?: readonly string[] | undefined;\n}\n\ninterface MutationInput {\n  readonly groupId: string;\n  readonly organizationId: string;\n  readonly signerUserId: string;\n  readonly stillCurrent: () => boolean;\n}\n\n/** Keep private prefix custody inside the entire mutation and its acknowledgement. */\nexport function createRuntimeCurrentGroupMutation(runtime: MutationRuntime) {\n  const lease = createCurrentPrincipalMutationLease(runtime);\n  if (!lease) return undefined;\n  return async <T>(\n    input: MutationInput,\n    work: (context: RuntimeCurrentGroupMutationContext) => Promise<T>,\n  ): Promise<T> => {\n    input = { ...input };\n    return lease(\n      input.stillCurrent,\n      async ({\n        protection,\n        stillCurrent,\n        resolveCurrentPolicy,\n        historyReader,\n        directoryRecovery,\n      }) => {\n        const loadGroup = async (\n          groupId: string,\n        ): Promise<RuntimeCurrentGroupMutationContext> => {\n          const context = await loadCurrentGroupPolicyMutationContext({\n            ...input,\n            groupId,\n            execSql: runtime.infra.execSql,\n            resolveCurrentPolicy,\n            recoverPendingPrincipalMutation: (organizationId) =>\n              runtime.apiClient.recoverPendingPrincipalMutation(organizationId),\n            stillCurrent,\n          });\n          const retention = await createCurrentMutationRetention(\n            runtime,\n            { ...input, groupId },\n            context,\n            protection,\n            historyReader,\n            directoryRecovery(context.organizationCurrent.current),\n          );\n          return {\n            ...context,\n            ...retention,\n            loadGroup,\n            resolveAuthoredPolicyReferences: (current, references) =>\n              resolveCurrentGroupMutationReferences({\n                current,\n                predecessor: context.verifiedCurrentPolicy,\n                references,\n                readPredecessorReference: context.readPredecessorReference,\n                stillCurrent: context.stillCurrent,\n              }),\n          };\n        };\n        const context = await loadGroup(input.groupId);\n        const result = await work(context);\n        assertProjectionVerificationCurrent(context.stillCurrent);\n        return result;\n      },\n    );\n  };\n}\n\nasync function createCurrentMutationRetention(\n  runtime: MutationRuntime,\n  input: MutationInput,\n  context: CurrentMutationContext,\n  protection: PrincipalPolicyHistoryProgressOptions,\n  historyReader: PrincipalPolicyPageReader,\n  directoryRecovery: AcknowledgedPrincipalCurrentInput[\"recovery\"],\n) {\n  const common = {\n    historyReader,\n    resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,\n  };\n  const groupRecovery: AcknowledgedPrincipalCurrentInput[\"recovery\"] = {\n    ...common,\n    expectedHead: principalPolicyReferenceFromBundle(context.currentPolicy),\n    protection: context.isOrganizationAdminsGroup\n      ? protection\n      : scopedGroupHistoryProtection(\n          protection,\n          input.organizationId,\n          context.adminGroupId,\n        ),\n    historyVerification: context.isOrganizationAdminsGroup\n      ? \"direct-admins\"\n      : \"standard\",\n    ...(context.isOrganizationAdminsGroup\n      ? {}\n      : { loadExternalAuthority: async () => context.externalAuthority }),\n  };\n  const capture = (recovery: AcknowledgedPrincipalCurrentInput[\"recovery\"]) =>\n    captureAcknowledgedPrincipalPredecessor({\n      ...recovery,\n      execSql: runtime.infra.execSql,\n      organizationId: input.organizationId,\n      stillCurrent: context.stillCurrent,\n    });\n  const groupPredecessor = await capture(groupRecovery);\n  const directoryPredecessor = await capture(directoryRecovery);\n  const retainAcknowledged = async (\n    receipt: CurrentMutationReceipt,\n  ): Promise<void> => {\n    assertProjectionVerificationCurrent(context.stillCurrent);\n    await retainAcknowledgedPrincipalCurrents({\n      execSql: runtime.infra.execSql,\n      organizationId: input.organizationId,\n      entries: [\n        ...(receipt.additionalGroups ?? []),\n        {\n          recovery: groupRecovery,\n          predecessor: groupPredecessor,\n          request: receipt.request,\n          response: receipt.response.groupPolicy,\n        },\n        {\n          recovery: directoryRecovery,\n          predecessor: directoryPredecessor,\n          request: receipt.organizationRequest,\n          response: receipt.response.organizationPolicy,\n        },\n      ],\n      retirements: [\n        ...(receipt.additionalGroups ?? []).map((entry) => ({\n          principalId: entry.request.state.principalId,\n          principalType: \"group\" as const,\n          containerIds: entry.retiredContainerIds ?? [],\n        })),\n        {\n          principalId: input.groupId,\n          principalType: \"group\",\n          containerIds: receipt.retiredContainerIds ?? [],\n        },\n      ],\n      stillCurrent: context.stillCurrent,\n    });\n  };\n  return {\n    groupRetention: { recovery: groupRecovery, predecessor: groupPredecessor },\n    retainAcknowledged,\n  };\n}\n"]}

package/workflows/organizations/runtimeCurrentOrganizationMutation.js

@@ -1,48 +0,0 @@
-import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
-import { advanceKeyingCheckpointsAtomically } from "../../data/persistence/keyingCheckpointAdvancePersistence.js";
-import { loadCurrentOrganizationMutationAuthority } from "./currentOrganizationMutationAuthority.js";
-import { createCurrentOrganizationMutationRetention } from "./currentOrganizationMutationRetention.js";
-import { createCurrentPrincipalMutationLease } from "./currentPrincipalMutationLease.js";
-/** Keep directory authoring and exact acknowledgement inside one private lease. */
-export function createRuntimeCurrentOrganizationMutation(runtime) {
-    const lease = createCurrentPrincipalMutationLease(runtime);
-    if (!lease)
-        return undefined;
-    return async (input, work) => {
-        const owned = { ...input };
-        return lease(owned.stillCurrent, async ({ protection, historyReader, stillCurrent, resolveCurrentPolicy, directoryRecovery, }) => {
-            const { authority } = await loadCurrentOrganizationMutationAuthority({
-                execSql: runtime.infra.execSql,
-                organizationId: owned.organizationId,
-                signerUserId: owned.signerUserId,
-                recoverPendingPrincipalMutation: (organizationId) => runtime.apiClient.recoverPendingPrincipalMutation(organizationId),
-                resolveCurrentPolicy,
-                stillCurrent,
-            });
-            const current = () => stillCurrent() && authority.stillCurrent();
-            await advanceKeyingCheckpointsAtomically({
-                access: [],
-                execSql: runtime.infra.execSql,
-                organizationId: owned.organizationId,
-                policies: [authority.directory.policy, authority.admins.policy],
-                stillCurrent: current,
-            });
-            const result = await work({
-                ...authority,
-                stillCurrent: current,
-                ...(await createCurrentOrganizationMutationRetention({
-                    runtime,
-                    authority,
-                    protection,
-                    historyReader,
-                    organizationId: owned.organizationId,
-                    directoryRecovery: directoryRecovery(authority.directory.current),
-                    stillCurrent: current,
-                })),
-            });
-            assertProjectionVerificationCurrent(current);
-            return result;
-        });
-    };
-}
-//# sourceMappingURL=runtimeCurrentOrganizationMutation.js.map

package/workflows/organizations/runtimeCurrentOrganizationMutation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtimeCurrentOrganizationMutation.js","sourceRoot":"","sources":["runtimeCurrentOrganizationMutation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,kCAAkC,EAAE,MAAM,2DAA2D,CAAC;AAG/G,OAAO,EAAE,wCAAwC,EAAE,MAAM,wCAAwC,CAAC;AAClG,OAAO,EAAE,0CAA0C,EAAE,MAAM,wCAAwC,CAAC;AACpG,OAAO,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AAmBtF,mFAAmF;AACnF,MAAM,UAAU,wCAAwC,CAAC,OAAgB;IACvE,MAAM,KAAK,GAAG,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,KAAK,EACV,KAAY,EACZ,IAAiE,EACrD,EAAE;QACd,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CACV,KAAK,CAAC,YAAY,EAClB,KAAK,EAAE,EACL,UAAU,EACV,aAAa,EACb,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,GAClB,EAAE,EAAE;YACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,wCAAwC,CAAC;gBACnE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,+BAA+B,EAAE,CAAC,cAAc,EAAE,EAAE,CAClD,OAAO,CAAC,SAAS,CAAC,+BAA+B,CAAC,cAAc,CAAC;gBACnE,oBAAoB;gBACpB,YAAY;aACb,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,YAAY,EAAE,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;YACjE,MAAM,kCAAkC,CAAC;gBACvC,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,QAAQ,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC/D,YAAY,EAAE,OAAO;aACtB,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;gBACxB,GAAG,SAAS;gBACZ,YAAY,EAAE,OAAO;gBACrB,GAAG,CAAC,MAAM,0CAA0C,CAAC;oBACnD,OAAO;oBACP,SAAS;oBACT,UAAU;oBACV,aAAa;oBACb,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,iBAAiB,EAAE,iBAAiB,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC;oBACjE,YAAY,EAAE,OAAO;iBACtB,CAAC,CAAC;aACJ,CAAC,CAAC;YACH,mCAAmC,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO,MAAM,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport { advanceKeyingCheckpointsAtomically } from \"../../data/persistence/keyingCheckpointAdvancePersistence\";\nimport type { PrincipalPolicyRecoveryRuntime } from \"../principals/runtimePolicyRecovery\";\nimport type { loadCurrentOrganizationAuthority } from \"./currentOrganizationAuthority\";\nimport { loadCurrentOrganizationMutationAuthority } from \"./currentOrganizationMutationAuthority\";\nimport { createCurrentOrganizationMutationRetention } from \"./currentOrganizationMutationRetention\";\nimport { createCurrentPrincipalMutationLease } from \"./currentPrincipalMutationLease\";\nimport type { PrincipalMutationRecoveryApi } from \"./principalMutationJournalManagement\";\n\ntype Runtime = PrincipalPolicyRecoveryRuntime & {\n  readonly apiClient: PrincipalPolicyRecoveryRuntime[\"apiClient\"] &\n    Pick<PrincipalMutationRecoveryApi, \"recoverPendingPrincipalMutation\">;\n};\n\ninterface Input {\n  readonly organizationId: string;\n  readonly signerUserId: string;\n  readonly stillCurrent: () => boolean;\n}\n\ntype Authority = Awaited<ReturnType<typeof loadCurrentOrganizationAuthority>>;\n\nexport type CurrentOrganizationMutationContext = Authority &\n  Awaited<ReturnType<typeof createCurrentOrganizationMutationRetention>>;\n\n/** Keep directory authoring and exact acknowledgement inside one private lease. */\nexport function createRuntimeCurrentOrganizationMutation(runtime: Runtime) {\n  const lease = createCurrentPrincipalMutationLease(runtime);\n  if (!lease) return undefined;\n  return async <T>(\n    input: Input,\n    work: (context: CurrentOrganizationMutationContext) => Promise<T>,\n  ): Promise<T> => {\n    const owned = { ...input };\n    return lease(\n      owned.stillCurrent,\n      async ({\n        protection,\n        historyReader,\n        stillCurrent,\n        resolveCurrentPolicy,\n        directoryRecovery,\n      }) => {\n        const { authority } = await loadCurrentOrganizationMutationAuthority({\n          execSql: runtime.infra.execSql,\n          organizationId: owned.organizationId,\n          signerUserId: owned.signerUserId,\n          recoverPendingPrincipalMutation: (organizationId) =>\n            runtime.apiClient.recoverPendingPrincipalMutation(organizationId),\n          resolveCurrentPolicy,\n          stillCurrent,\n        });\n        const current = () => stillCurrent() && authority.stillCurrent();\n        await advanceKeyingCheckpointsAtomically({\n          access: [],\n          execSql: runtime.infra.execSql,\n          organizationId: owned.organizationId,\n          policies: [authority.directory.policy, authority.admins.policy],\n          stillCurrent: current,\n        });\n        const result = await work({\n          ...authority,\n          stillCurrent: current,\n          ...(await createCurrentOrganizationMutationRetention({\n            runtime,\n            authority,\n            protection,\n            historyReader,\n            organizationId: owned.organizationId,\n            directoryRecovery: directoryRecovery(authority.directory.current),\n            stillCurrent: current,\n          })),\n        });\n        assertProjectionVerificationCurrent(current);\n        return result;\n      },\n    );\n  };\n}\n"]}

package/workflows/organizations/runtimeGroupMetadataAuthority.js

@@ -1,16 +0,0 @@
-import { ProjectionDependencyUnavailableError } from "../../data/keyingProjectionVerification/dependencyUnavailable.js";
-import { createRuntimePrincipalPolicyCurrentResolver, } from "../principals/runtimePolicyRecovery.js";
-import { createCurrentGroupMetadataContainerVerifier } from "./currentGroupMetadataAuthority.js";
-/** Remote metadata destinations require the same private authority as name reads. */
-export async function verifyRuntimeGroupMetadataAuthority(input) {
-    const resolveCurrentPolicy = createRuntimePrincipalPolicyCurrentResolver(input.runtime);
-    if (!resolveCurrentPolicy)
-        throw new ProjectionDependencyUnavailableError("Group metadata requires private paged recovery");
-    await createCurrentGroupMetadataContainerVerifier({
-        execSql: input.runtime.infra.execSql,
-        organizationId: input.organizationId,
-        resolveCurrentPolicy,
-        stillCurrent: input.stillCurrent,
-    })(input.state, input.organizationReference);
-}
-//# sourceMappingURL=runtimeGroupMetadataAuthority.js.map

package/workflows/organizations/runtimeGroupMetadataAuthority.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtimeGroupMetadataAuthority.js","sourceRoot":"","sources":["runtimeGroupMetadataAuthority.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oCAAoC,EAAE,MAAM,+DAA+D,CAAC;AACrH,OAAO,EACL,2CAA2C,GAE5C,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,2CAA2C,EAAE,MAAM,iCAAiC,CAAC;AAE9F,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,KAMzD;IACC,MAAM,oBAAoB,GAAG,2CAA2C,CACtE,KAAK,CAAC,OAAO,CACd,CAAC;IACF,IAAI,CAAC,oBAAoB;QACvB,MAAM,IAAI,oCAAoC,CAC5C,gDAAgD,CACjD,CAAC;IACJ,MAAM,2CAA2C,CAAC;QAChD,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,oBAAoB;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;AAC/C,CAAC","sourcesContent":["import type {\n  ContainerAccessManifestState,\n  ReferencedPrincipalHead,\n} from \"@tearleads/crypto\";\nimport { ProjectionDependencyUnavailableError } from \"../../data/keyingProjectionVerification/dependencyUnavailable\";\nimport {\n  createRuntimePrincipalPolicyCurrentResolver,\n  type PrincipalPolicyRecoveryRuntime,\n} from \"../principals/runtimePolicyRecovery\";\nimport { createCurrentGroupMetadataContainerVerifier } from \"./currentGroupMetadataAuthority\";\n\n/** Remote metadata destinations require the same private authority as name reads. */\nexport async function verifyRuntimeGroupMetadataAuthority(input: {\n  readonly runtime: PrincipalPolicyRecoveryRuntime;\n  readonly organizationId: string;\n  readonly state: ContainerAccessManifestState;\n  readonly organizationReference?: ReferencedPrincipalHead | undefined;\n  readonly stillCurrent: () => boolean;\n}): Promise<void> {\n  const resolveCurrentPolicy = createRuntimePrincipalPolicyCurrentResolver(\n    input.runtime,\n  );\n  if (!resolveCurrentPolicy)\n    throw new ProjectionDependencyUnavailableError(\n      \"Group metadata requires private paged recovery\",\n    );\n  await createCurrentGroupMetadataContainerVerifier({\n    execSql: input.runtime.infra.execSql,\n    organizationId: input.organizationId,\n    resolveCurrentPolicy,\n    stillCurrent: input.stillCurrent,\n  })(input.state, input.organizationReference);\n}\n"]}

package/workflows/organizations/submitGroupPolicyCommit.d.ts

@@ -1,22 +0,0 @@
-import type { ContainerMutationRequest, PutPrincipalPolicyRequest } from "../../internal/validators/request/index.js";
-import { type CommitOrganizationGroupPolicyResponse } from "../../internal/validators/response/index.js";
-import type { PrincipalPolicyReadWriteApi } from "./principalPolicyApi.js";
-/**
- * Commit, answering one refusal: a rematerialized rekey or revoke that would
- * strand a level above a directly granted container is refused with the
- * descendant rekeys it must carry. The refused attempt rolled back whole, so
- * the served heads still stand; the batch is signed again with the named
- * levels woven in, replaces the container mutations, and the commit is retried
- * once. A second refusal means the tree moved underneath, and the caller's own
- * retry starts from a fresh policy.
- */
-export declare function submitGroupPolicyCommit(input: {
-    readonly apiClient: PrincipalPolicyReadWriteApi;
-    readonly carryDescendantRekeys?: ((requiredContainerIds: readonly string[]) => Promise<readonly ContainerMutationRequest[]>) | undefined;
-    readonly groupId: string;
-    readonly organizationId: string;
-    readonly organizationRequest: PutPrincipalPolicyRequest;
-    readonly memberRequest?: PutPrincipalPolicyRequest | undefined;
-    readonly request: PutPrincipalPolicyRequest;
-    readonly stillCurrent?: (() => boolean) | undefined;
-}): Promise<CommitOrganizationGroupPolicyResponse | null>;

package/workflows/organizations/submitGroupPolicyCommit.js

@@ -1,71 +0,0 @@
-import { CONTAINER_MUTATION_ERROR_CODES, } from "../../internal/validators/response/index.js";
-/**
- * Commit, answering one refusal: a rematerialized rekey or revoke that would
- * strand a level above a directly granted container is refused with the
- * descendant rekeys it must carry. The refused attempt rolled back whole, so
- * the served heads still stand; the batch is signed again with the named
- * levels woven in, replaces the container mutations, and the commit is retried
- * once. A second refusal means the tree moved underneath, and the caller's own
- * retry starts from a fresh policy.
- */
-export async function submitGroupPolicyCommit(input) {
-    const body = () => ({
-        groupPolicy: input.request,
-        ...(input.memberRequest ? { memberPolicy: input.memberRequest } : {}),
-        organizationPolicy: input.organizationRequest,
-    });
-    const { commitOrganizationGroupPolicyResult } = input.apiClient;
-    if (!commitOrganizationGroupPolicyResult) {
-        return input.apiClient.commitOrganizationGroupPolicy(input.organizationId, input.groupId, body());
-    }
-    const first = await commitOrganizationGroupPolicyResult.call(input.apiClient, input.organizationId, input.groupId, body(), { reportErrors: false });
-    if (first.ok)
-        return first.data;
-    if (first.kind === "cancelled")
-        return null;
-    if (first.kind === "outcome-unknown")
-        throw new Error(first.message ??
-            "Policy request may have committed; refresh before retrying");
-    if (input.memberRequest &&
-        first.code === CONTAINER_MUTATION_ERROR_CODES.descendantRekeysRequired) {
-        throw new Error("Repair the affected container keys before retrying enrollment; no memberships were changed");
-    }
-    if (!input.carryDescendantRekeys ||
-        first.code !== CONTAINER_MUTATION_ERROR_CODES.descendantRekeysRequired ||
-        !first.requiredContainerIds?.length) {
-        first.report?.();
-        return null;
-    }
-    let carried;
-    try {
-        carried = await input.carryDescendantRekeys(first.requiredContainerIds);
-    }
-    catch (error) {
-        // The refusal was answerable, and the answer failed: surface both. Once
-        // the generation that owned the attempt is gone, only the failure is
-        // surfaced; a superseded refusal is not an error.
-        if (input.stillCurrent?.() !== false)
-            first.report?.();
-        throw error;
-    }
-    if (input.stillCurrent?.() === false)
-        return null;
-    // Nothing signed means the same refusal again; report the one already had.
-    if (carried.length === 0) {
-        first.report?.();
-        return null;
-    }
-    input.request.containerMutations = [...carried];
-    const second = await commitOrganizationGroupPolicyResult.call(input.apiClient, input.organizationId, input.groupId, body(), { reportErrors: false });
-    if (!second.ok) {
-        if (second.kind === "cancelled")
-            return null;
-        if (second.kind === "outcome-unknown")
-            throw new Error(second.message ??
-                "Policy request may have committed; refresh before retrying");
-        second.report?.();
-        return null;
-    }
-    return second.data;
-}
-//# sourceMappingURL=submitGroupPolicyCommit.js.map

package/workflows/organizations/submitGroupPolicyCommit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"submitGroupPolicyCommit.js","sourceRoot":"","sources":["submitGroupPolicyCommit.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,8BAA8B,GAE/B,MAAM,gCAAgC,CAAC;AAGxC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAa7C;IACC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC;QAClB,WAAW,EAAE,KAAK,CAAC,OAAO;QAC1B,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,kBAAkB,EAAE,KAAK,CAAC,mBAAmB;KAC9C,CAAC,CAAC;IACH,MAAM,EAAE,mCAAmC,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;IAChE,IAAI,CAAC,mCAAmC,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC,SAAS,CAAC,6BAA6B,CAClD,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,EACb,IAAI,EAAE,CACP,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,mCAAmC,CAAC,IAAI,CAC1D,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,EACb,IAAI,EAAE,EACN,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB,CAAC;IACF,IAAI,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IAChC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;QAClC,MAAM,IAAI,KAAK,CACb,KAAK,CAAC,OAAO;YACX,4DAA4D,CAC/D,CAAC;IACJ,IACE,KAAK,CAAC,aAAa;QACnB,KAAK,CAAC,IAAI,KAAK,8BAA8B,CAAC,wBAAwB,EACtE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IACD,IACE,CAAC,KAAK,CAAC,qBAAqB;QAC5B,KAAK,CAAC,IAAI,KAAK,8BAA8B,CAAC,wBAAwB;QACtE,CAAC,KAAK,CAAC,oBAAoB,EAAE,MAAM,EACnC,CAAC;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAA4C,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,qEAAqE;QACrE,kDAAkD;QAClD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;YAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACvD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAClD,2EAA2E;IAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,kBAAkB,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,mCAAmC,CAAC,IAAI,CAC3D,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,EACb,IAAI,EAAE,EACN,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB;YACnC,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,OAAO;gBACZ,4DAA4D,CAC/D,CAAC;QACJ,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC","sourcesContent":["import type {\n  ContainerMutationRequest,\n  PutPrincipalPolicyRequest,\n} from \"@tearleads/validators/request\";\nimport {\n  CONTAINER_MUTATION_ERROR_CODES,\n  type CommitOrganizationGroupPolicyResponse,\n} from \"@tearleads/validators/response\";\nimport type { PrincipalPolicyReadWriteApi } from \"./principalPolicyApi\";\n\n/**\n * Commit, answering one refusal: a rematerialized rekey or revoke that would\n * strand a level above a directly granted container is refused with the\n * descendant rekeys it must carry. The refused attempt rolled back whole, so\n * the served heads still stand; the batch is signed again with the named\n * levels woven in, replaces the container mutations, and the commit is retried\n * once. A second refusal means the tree moved underneath, and the caller's own\n * retry starts from a fresh policy.\n */\nexport async function submitGroupPolicyCommit(input: {\n  readonly apiClient: PrincipalPolicyReadWriteApi;\n  readonly carryDescendantRekeys?:\n    | ((\n        requiredContainerIds: readonly string[],\n      ) => Promise<readonly ContainerMutationRequest[]>)\n    | undefined;\n  readonly groupId: string;\n  readonly organizationId: string;\n  readonly organizationRequest: PutPrincipalPolicyRequest;\n  readonly memberRequest?: PutPrincipalPolicyRequest | undefined;\n  readonly request: PutPrincipalPolicyRequest;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<CommitOrganizationGroupPolicyResponse | null> {\n  const body = () => ({\n    groupPolicy: input.request,\n    ...(input.memberRequest ? { memberPolicy: input.memberRequest } : {}),\n    organizationPolicy: input.organizationRequest,\n  });\n  const { commitOrganizationGroupPolicyResult } = input.apiClient;\n  if (!commitOrganizationGroupPolicyResult) {\n    return input.apiClient.commitOrganizationGroupPolicy(\n      input.organizationId,\n      input.groupId,\n      body(),\n    );\n  }\n  const first = await commitOrganizationGroupPolicyResult.call(\n    input.apiClient,\n    input.organizationId,\n    input.groupId,\n    body(),\n    { reportErrors: false },\n  );\n  if (first.ok) return first.data;\n  if (first.kind === \"cancelled\") return null;\n  if (first.kind === \"outcome-unknown\")\n    throw new Error(\n      first.message ??\n        \"Policy request may have committed; refresh before retrying\",\n    );\n  if (\n    input.memberRequest &&\n    first.code === CONTAINER_MUTATION_ERROR_CODES.descendantRekeysRequired\n  ) {\n    throw new Error(\n      \"Repair the affected container keys before retrying enrollment; no memberships were changed\",\n    );\n  }\n  if (\n    !input.carryDescendantRekeys ||\n    first.code !== CONTAINER_MUTATION_ERROR_CODES.descendantRekeysRequired ||\n    !first.requiredContainerIds?.length\n  ) {\n    first.report?.();\n    return null;\n  }\n  let carried: readonly ContainerMutationRequest[];\n  try {\n    carried = await input.carryDescendantRekeys(first.requiredContainerIds);\n  } catch (error) {\n    // The refusal was answerable, and the answer failed: surface both. Once\n    // the generation that owned the attempt is gone, only the failure is\n    // surfaced; a superseded refusal is not an error.\n    if (input.stillCurrent?.() !== false) first.report?.();\n    throw error;\n  }\n  if (input.stillCurrent?.() === false) return null;\n  // Nothing signed means the same refusal again; report the one already had.\n  if (carried.length === 0) {\n    first.report?.();\n    return null;\n  }\n  input.request.containerMutations = [...carried];\n  const second = await commitOrganizationGroupPolicyResult.call(\n    input.apiClient,\n    input.organizationId,\n    input.groupId,\n    body(),\n    { reportErrors: false },\n  );\n  if (!second.ok) {\n    if (second.kind === \"cancelled\") return null;\n    if (second.kind === \"outcome-unknown\")\n      throw new Error(\n        second.message ??\n          \"Policy request may have committed; refresh before retrying\",\n      );\n    second.report?.();\n    return null;\n  }\n  return second.data;\n}\n"]}

package/workflows/principals/acknowledgedPrincipalCurrents.d.ts

@@ -1,33 +0,0 @@
-import { type VerifiedPrincipalPolicyCurrent } from "../../internal/crypto/index.js";
-import type { PutPrincipalPolicyRequest } from "../../internal/validators/request/index.js";
-import type { PrincipalPolicyMutationResponse } from "../../internal/validators/response/index.js";
-import { type AcknowledgedPrincipalCurrentRetirement } from "../../data/persistence/principalCurrentAcknowledgementPersistence.js";
-import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
-import { type AcknowledgedPrincipalPredecessor } from "./acknowledgedPrincipalPredecessor.js";
-import type { PrincipalAcknowledgementChecks } from "./principalAcknowledgementChecks.js";
-import type { RecoverPrincipalPolicyHistoryOptions } from "./principalHistoryRecoveryTypes.js";
-export interface AcknowledgedPrincipalCurrentInput {
-    /** Capture before submitting the mutation; null only for a new group. */
-    readonly predecessor: AcknowledgedPrincipalPredecessor | null;
-    /** Only a newly authored group at version one; never skips a predecessor. */
-    readonly initialGroup?: boolean | undefined;
-    /** The same scoped protection and verification mode used to recover the predecessor. */
-    readonly recovery: Omit<RecoverPrincipalPolicyHistoryOptions, "execSql" | "organizationId" | "stillCurrent">;
-    readonly request: PutPrincipalPolicyRequest;
-    readonly response: PrincipalPolicyMutationResponse;
-}
-/** The acknowledged currents of one mutation, recorded together. */
-export interface AcknowledgedPrincipalCurrentBatch {
-    readonly execSql: ExecSql;
-    readonly organizationId: string;
-    readonly entries: readonly AcknowledgedPrincipalCurrentInput[];
-    readonly retirements?: readonly AcknowledgedPrincipalCurrentRetirement[] | undefined;
-    readonly stillCurrent: () => boolean;
-}
-/**
- * Extend authenticated local progress and retain exact acknowledged artifacts
- * atomically with pins, once `checks` accept each acknowledgement.
- */
-export declare function recordAcknowledgedPrincipalCurrents(input: AcknowledgedPrincipalCurrentBatch & {
-    readonly checks: PrincipalAcknowledgementChecks;
-}): Promise<VerifiedPrincipalPolicyCurrent[]>;

package/workflows/principals/acknowledgedPrincipalCurrents.js

@@ -1,140 +0,0 @@
-import { KeyingVerificationError, } from "../../internal/crypto/index.js";
-import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
-import { PrincipalAcknowledgementChangedError, persistAcknowledgedPrincipalCurrents, } from "../../data/persistence/principalCurrentAcknowledgementPersistence.js";
-import { preparePrincipalHistoryEvidencePage } from "../../data/persistence/principalHistoryEvidencePersistence.js";
-import { ownPrincipalHistoryProtection } from "../../data/principals/principalHistoryProtection.js";
-import { restoreAcknowledgedPrincipalPredecessor, } from "./acknowledgedPrincipalPredecessor.js";
-import { prepareInitialGroupCurrentPublication } from "./initialPrincipalCurrentPublication.js";
-import { collectPrincipalPolicySignerPublicKeys } from "./policyVerification.js";
-import { sealPrincipalCurrentPublication, sealPrincipalCurrentStage, } from "./principalCurrentPublicationSeal.js";
-import { assertPrincipalHistoryVerificationMode, principalHistoryVerificationContext, } from "./principalHistoryRecoveryVerification.js";
-import { reconcileAcknowledgedPrincipalCurrent } from "./reconcileAcknowledgedPrincipalCurrent.js";
-async function preparePublication(options, request, response, predecessor, checks) {
-    options = {
-        ...options,
-        protection: {
-            ...options.protection,
-            context: principalHistoryVerificationContext(options),
-        },
-    };
-    const current = () => !options.signal?.aborted && options.stillCurrent();
-    assertProjectionVerificationCurrent(current);
-    const { scopeId, saved, artifacts, verifier, previous, predecessorIndexRootHash, } = await restoreAcknowledgedPrincipalPredecessor(options, predecessor);
-    const expectedHead = await checks.authoredHead(request);
-    checks.assertReceipt({ expectedHead, request, response });
-    const keys = await collectPrincipalPolicySignerPublicKeys({
-        bundle: { currentState: response.currentState, previousStates: [] },
-        resolveTrustedUserIdentity: options.resolveTrustedUserIdentity,
-    });
-    assertProjectionVerificationCurrent(current);
-    if ("error" in keys)
-        throw new KeyingVerificationError(keys.error === "not-found" ? "missing_dependency" : "signer_mismatch", "Acknowledged principal signer could not be authenticated");
-    const externalAuthority = await options.loadExternalAuthority?.(request.state.externalAuthority ? [request.state.externalAuthority] : []);
-    assertProjectionVerificationCurrent(current);
-    const policy = await checks.acknowledgeSuccessor({
-        verifiedCurrentPolicy: previous,
-        expectedHead,
-        request,
-        response: response.currentState,
-        signerPublicKeys: keys.signerPublicKeys,
-        externalAuthority,
-        stillCurrent: current,
-    });
-    const entry = {
-        state: response.currentState,
-        projection: response.currentProjection,
-        grants: response.currentGrants,
-    };
-    assertPrincipalHistoryVerificationMode(options, [entry]);
-    const predecessorStage = await sealPrincipalCurrentStage(options, previous.state, verifier, artifacts);
-    const appended = await verifier.append({
-        entries: [entry],
-        signerPublicKeys: keys.signerPublicKeys,
-        ...(externalAuthority ? { externalAuthority } : {}),
-    });
-    if (!appended.ok)
-        throw appended.error;
-    const sealed = await sealPrincipalCurrentPublication(options, scopeId, expectedHead, verifier, response);
-    assertProjectionVerificationCurrent(current);
-    return {
-        policy,
-        previousPrefixProgress: saved.progress,
-        predecessorStage,
-        predecessorIndexRootHash,
-        ...sealed,
-        evidence: await preparePrincipalHistoryEvidencePage({
-            indexRootHash: appended.value.indexRootHash,
-            scopeId,
-            organizationId: options.organizationId,
-            entries: [entry],
-            nodes: appended.value.indexNodes,
-        }),
-    };
-}
-/**
- * Extend authenticated local progress and retain exact acknowledged artifacts
- * atomically with pins, once `checks` accept each acknowledgement.
- */
-export async function recordAcknowledgedPrincipalCurrents(input) {
-    const checks = input.checks;
-    const execSql = input.execSql;
-    const organizationId = input.organizationId;
-    const stillCurrent = input.stillCurrent;
-    const retirements = structuredClone(input.retirements ?? []);
-    const entries = [];
-    try {
-        assertProjectionVerificationCurrent(stillCurrent);
-        for (const entry of input.entries)
-            entries.push({
-                initialGroup: entry.initialGroup === true,
-                predecessor: structuredClone(entry.predecessor),
-                request: structuredClone(entry.request),
-                response: structuredClone(entry.response),
-                options: {
-                    ...entry.recovery,
-                    expectedHead: structuredClone(entry.recovery.expectedHead),
-                    protection: ownPrincipalHistoryProtection(entry.recovery.protection),
-                    execSql,
-                    organizationId,
-                    stillCurrent,
-                },
-            });
-        const publications = [];
-        for (const entry of entries)
-            publications.push(await (entry.initialGroup
-                ? prepareInitialGroupCurrentPublication
-                : preparePublication)(entry.options, entry.request, entry.response, entry.predecessor, checks));
-        checks.assertDirectoryBindings(organizationId, entries.map(({ response }) => response));
-        for (let attempt = 0;; attempt += 1) {
-            const reconciled = [];
-            for (const [index, publication] of publications.entries()) {
-                const entry = entries[index];
-                if (!entry)
-                    throw new Error("Missing acknowledgement entry");
-                reconciled.push(await reconcileAcknowledgedPrincipalCurrent(entry.options, publication));
-            }
-            try {
-                await persistAcknowledgedPrincipalCurrents({
-                    execSql,
-                    organizationId,
-                    entries: reconciled,
-                    retirements,
-                    stillCurrent: () => stillCurrent() &&
-                        entries.every((entry) => !entry.options.signal?.aborted),
-                });
-                break;
-            }
-            catch (error) {
-                if (!(error instanceof PrincipalAcknowledgementChangedError) ||
-                    attempt >= 7)
-                    throw error;
-            }
-        }
-        return publications.map(({ policy }) => policy);
-    }
-    finally {
-        for (const entry of entries)
-            entry.options.protection.localKey.fill(0);
-    }
-}
-//# sourceMappingURL=acknowledgedPrincipalCurrents.js.map