@tearleads/client-sdk 0.1.61 → 0.1.63

package/workflows/organizations/organizationPolicyHistoryDetails.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"organizationPolicyHistoryDetails.js","sourceRoot":"","sources":["organizationPolicyHistoryDetails.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,+BAA+B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,mCAAmC,GAEpC,MAAM,+CAA+C,CAAC;AAEvD,OAAO,EAAE,uCAAuC,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAC1F,OAAO,EACL,8BAA8B,GAE/B,MAAM,0BAA0B,CAAC;AAMlC,SAAS,UAAU,CACjB,QAA4C,EAC5C,OAA2C;IAE3C,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAChE,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAC/D,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;SACrD,IAAI,EAAE;SACN,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE;QACvB,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;QACvD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;QAClD,OAAO,cAAc,KAAK,UAAU;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAA2C,EAC3C,OAA0C,EAC1C,UAA2E;IAE3E,MAAM,IAAI,GAAG,OAAO,IAAI,QAAQ,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,WAAW;QACzB,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACpE,eAAe,EAAE,QAAQ,EAAE,OAAO,IAAI,IAAI;QAC1C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI;QAC5C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,QAAQ;YACf,CAAC,CAAC,8BAA8B,CAAC;gBAC7B,QAAQ,EAAE,QAAQ,EAAE,UAAU,IAAI,EAAE;gBACpC,OAAO,EAAE,QAAQ,CAAC,UAAU;aAC7B,CAAC;YACJ,CAAC,CAAC,EAAE;QACN,YAAY,EAAE,QAAQ;YACpB,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC;YACrD,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,aAA+C,EAC/C,KAAuC,EACvC,UAA2E;IAE3E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAoC,EAAE,CAAC;IACpD,KAAK,MAAM,OAAO,IAAI;QACpB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;KAChD,CAAC,IAAI,EAAE,EAAE,CAAC;QACT,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,QAAQ,EAAE,SAAS,KAAK,OAAO,EAAE,SAAS;YAAE,SAAS;QACzD,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,KAKC;IAED,KAAK,GAAG;QACN,GAAG,KAAK;QACR,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC;QACjC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC;QACjC,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC;KAC1C,CAAC;IACF,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,GAC/B,MAAM,+BAA+B,CAAC,KAAK,CAAC,CAAC;IAC/C,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC;QAC1C,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;QACjC,UAAU;QACV,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,mCAAmC,CACjC,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,QAAQ,CAAC,YAAY,EAAE,CACtD,CAAC;IACF,MAAM,UAAU,GAAG,CACjB,IAA2B,EACK,EAAE;QAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/C,+BAA+B,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAC7D,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,EAAE,eAAe,CAAC,IAAI,CACxC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CACpD,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACvE,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,uCAAuC,CAAC;QACpD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;QAC/B,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;KACvC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2C,CAAC;IACnE,IAAI,aAAa,GAAqC,KAAK,CAAC,IAAI,CAAC,WAAW;QAC1E,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU;YACpE,EAAE,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;IACP,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;QAC3D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,aAAa,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;QAC3E,aAAa,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;QACnC,aAAa,EAAE,cAAc;QAC7B,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;QACtC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB;QAC/C,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACrC,GAAG,KAAK;YACR,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE;SACjD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC","sourcesContent":["import {\n  type PrincipalContainerGrant,\n  type PrincipalPolicyStateChainEntry,\n  principalPolicyMatchesReference,\n} from \"@tearleads/crypto\";\nimport {\n  assertProjectionVerificationCurrent,\n  type ReferencedPrincipalPolicyWarmer,\n} from \"../../data/keyingProjectionVerification/types\";\nimport type { OrganizationGroupHead } from \"../../data/principals/organizationAuthorityDescriptor\";\nimport { buildOrganizationGroupPolicyHistoryPage } from \"./groupPolicyHistoryPage\";\nimport { verifyOrganizationPolicyHistory } from \"./organizationPolicyHistoryVerification\";\nimport {\n  diffPrincipalProjectionMembers,\n  type OrganizationPolicyHistory,\n} from \"./policyHistoryReadModel\";\nimport type {\n  OrganizationPolicyGrantChange,\n  OrganizationPolicyGroupChange,\n} from \"./policyHistoryTypes\";\n\nfunction diffGrants(\n  previous: readonly PrincipalContainerGrant[],\n  current: readonly PrincipalContainerGrant[],\n): OrganizationPolicyGrantChange[] {\n  const before = new Map(\n    previous.map((grant) => [grant.containerId, grant.accessLevel]),\n  );\n  const after = new Map(\n    current.map((grant) => [grant.containerId, grant.accessLevel]),\n  );\n  return [...new Set([...before.keys(), ...after.keys()])]\n    .sort()\n    .flatMap((containerId) => {\n      const previousAccess = before.get(containerId) ?? null;\n      const nextAccess = after.get(containerId) ?? null;\n      return previousAccess === nextAccess\n        ? []\n        : [{ containerId, previousAccess, nextAccess }];\n    });\n}\n\nfunction describeGroupChange(\n  previous: OrganizationGroupHead | undefined,\n  current: OrganizationGroupHead | undefined,\n  groupState: (head: OrganizationGroupHead) => PrincipalPolicyStateChainEntry,\n): OrganizationPolicyGroupChange {\n  const head = current ?? previous;\n  if (!head) throw new Error(\"Group change has no state\");\n  const oldEntry = previous ? groupState(previous) : null;\n  const newEntry = current ? groupState(current) : null;\n  return {\n    groupId: head.principalId,\n    changeType: !previous ? \"created\" : !current ? \"deleted\" : \"updated\",\n    previousVersion: previous?.version ?? null,\n    version: head.version,\n    previousKeyEpoch: previous?.keyEpoch ?? null,\n    keyEpoch: head.keyEpoch,\n    changes: newEntry\n      ? diffPrincipalProjectionMembers({\n          previous: oldEntry?.projection ?? [],\n          current: newEntry.projection,\n        })\n      : [],\n    grantChanges: newEntry\n      ? diffGrants(oldEntry?.grants ?? [], newEntry.grants)\n      : [],\n  };\n}\n\nfunction diffGroups(\n  previousHeads: readonly OrganizationGroupHead[],\n  heads: readonly OrganizationGroupHead[],\n  groupState: (head: OrganizationGroupHead) => PrincipalPolicyStateChainEntry,\n): OrganizationPolicyGroupChange[] {\n  const before = new Map(previousHeads.map((head) => [head.principalId, head]));\n  const after = new Map(heads.map((head) => [head.principalId, head]));\n  const changes: OrganizationPolicyGroupChange[] = [];\n  for (const groupId of [\n    ...new Set([...before.keys(), ...after.keys()]),\n  ].sort()) {\n    const previous = before.get(groupId);\n    const current = after.get(groupId);\n    if (previous?.stateHash === current?.stateHash) continue;\n    changes.push(describeGroupChange(previous, current, groupState));\n  }\n  return changes;\n}\n\n/** Display only: historical group selections never advance current checkpoints. */\nexport async function buildDetailedOrganizationPolicyHistory(\n  input: Parameters<typeof verifyOrganizationPolicyHistory>[0] & {\n    readonly resolveHistory: NonNullable<\n      ReferencedPrincipalPolicyWarmer[\"resolveProjectionHistory\"]\n    >;\n    readonly stillCurrent: () => boolean;\n  },\n): Promise<OrganizationPolicyHistory> {\n  input = {\n    ...input,\n    head: structuredClone(input.head),\n    page: structuredClone(input.page),\n    evidence: structuredClone(input.evidence),\n  };\n  const { descriptors, references } =\n    await verifyOrganizationPolicyHistory(input);\n  assertProjectionVerificationCurrent(input.stillCurrent);\n  const resolved = await input.resolveHistory({\n    organizationId: input.head.principalId,\n    evidence: input.evidence.evidence,\n    references,\n    stillCurrent: input.stillCurrent,\n  });\n  assertProjectionVerificationCurrent(\n    () => input.stillCurrent() && resolved.stillCurrent(),\n  );\n  const groupState = (\n    head: OrganizationGroupHead,\n  ): PrincipalPolicyStateChainEntry => {\n    const policy = resolved.policies.find((policy) =>\n      principalPolicyMatchesReference({ policy, reference: head }),\n    );\n    const entry = policy?.retainedHistory.find(\n      (entry) => entry.state.stateHash === head.stateHash,\n    );\n    if (!entry) throw new Error(\"Verified group history state is missing\");\n    return entry;\n  };\n  const basic = buildOrganizationGroupPolicyHistoryPage({\n    page: input.page,\n    groupId: input.head.principalId,\n    organizationId: input.head.principalId,\n  });\n  const byState = new Map<string, OrganizationPolicyGroupChange[]>();\n  let previousHeads: readonly OrganizationGroupHead[] = input.page.predecessor\n    ? (descriptors.get(input.page.predecessor.state.stateHash)?.groupHeads ??\n      [])\n    : [];\n  for (const { state } of input.page.entries) {\n    const heads = descriptors.get(state.stateHash)?.groupHeads;\n    if (!heads) throw new Error(\"Verified organization directory is missing\");\n    byState.set(state.stateHash, diffGroups(previousHeads, heads, groupState));\n    previousHeads = heads;\n  }\n  return {\n    principalId: input.head.principalId,\n    principalType: \"organization\",\n    organizationId: input.head.principalId,\n    nextBeforeVersion: input.page.nextBeforeVersion,\n    entries: basic.entries.map((entry) => ({\n      ...entry,\n      groupChanges: byState.get(entry.stateHash) ?? [],\n    })),\n  };\n}\n"]}

package/workflows/organizations/organizationPolicyHistoryVerification.js

@@ -1,67 +0,0 @@
-import { computePrincipalStatePayloadCiphertextHash, KeyingVerificationError, } from "../../internal/crypto/index.js";
-import { parseOrganizationAuthorityDescriptor, principalHeadMatchesReference, } from "../../data/principals/organizationAuthorityDescriptor.js";
-function reject(message) {
-    throw new KeyingVerificationError("hash_mismatch", `Organization policy history: ${message}`);
-}
-/** Bind every display payload and public source to the privately verified page. */
-export async function verifyOrganizationPolicyHistory(input) {
-    const { head, page, evidence } = input;
-    const beforeVersion = (page.entries.at(-1)?.state.version ?? 0) + 1;
-    if (head.principalType !== "organization" ||
-        evidence.organizationId !== head.principalId ||
-        evidence.stateHash !== head.stateHash ||
-        evidence.beforeVersion !== beforeVersion ||
-        evidence.nextBeforeVersion !== page.nextBeforeVersion ||
-        !evidence.evidence.organization ||
-        !principalHeadMatchesReference(evidence.evidence.organization.head, head))
-        reject("response does not match the requested organization page");
-    const entries = page.predecessor
-        ? [page.predecessor, ...page.entries]
-        : page.entries;
-    if (evidence.evidence.organizationPayloads.length !== entries.length)
-        reject("directory page is incomplete");
-    const descriptors = new Map();
-    const references = [head];
-    const groups = new Map();
-    for (const [index, item,] of evidence.evidence.organizationPayloads.entries()) {
-        const { reference, payload } = item;
-        const entry = entries[index];
-        if (!entry ||
-            !principalHeadMatchesReference(entry.state, reference) ||
-            payload.principalType !== "organization" ||
-            payload.principalId !== head.principalId ||
-            payload.stateHash !== reference.stateHash ||
-            descriptors.has(reference.stateHash))
-            reject("directory payload scope or order is invalid");
-        const hash = await computePrincipalStatePayloadCiphertextHash(payload.ciphertext);
-        if (hash !== entry.state.payloadCiphertextHash ||
-            hash !== payload.ciphertextHash)
-            reject("directory payload does not match its signed hash");
-        const descriptor = parseOrganizationAuthorityDescriptor(payload.ciphertext);
-        if (descriptor.organizationId !== head.principalId)
-            reject("directory belongs to another organization");
-        descriptors.set(reference.stateHash, descriptor);
-        references.push(reference, ...descriptor.groupHeads);
-        for (const group of descriptor.groupHeads) {
-            const previous = groups.get(group.principalId);
-            if (!previous || group.version > previous.version)
-                groups.set(group.principalId, group);
-        }
-    }
-    verifyGroupSources(evidence, groups);
-    return { descriptors, references };
-}
-function verifyGroupSources(evidence, groups) {
-    if (evidence.evidence.groups.length !== groups.size)
-        reject("unexpected group source");
-    const seen = new Set();
-    for (const source of evidence.evidence.groups) {
-        const expected = groups.get(source.head.principalId);
-        if (!expected ||
-            seen.has(source.head.principalId) ||
-            !principalHeadMatchesReference(source.head, expected))
-            reject("group source extends beyond the page's signed directory");
-        seen.add(source.head.principalId);
-    }
-}
-//# sourceMappingURL=organizationPolicyHistoryVerification.js.map

package/workflows/organizations/organizationPolicyHistoryVerification.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"organizationPolicyHistoryVerification.js","sourceRoot":"","sources":["organizationPolicyHistoryVerification.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0CAA0C,EAC1C,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAEL,oCAAoC,EACpC,6BAA6B,GAC9B,MAAM,uDAAuD,CAAC;AAG/D,SAAS,MAAM,CAAC,OAAe;IAC7B,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,gCAAgC,OAAO,EAAE,CAC1C,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAIrD;IACC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACvC,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACpE,IACE,IAAI,CAAC,aAAa,KAAK,cAAc;QACrC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,WAAW;QAC5C,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;QACrC,QAAQ,CAAC,aAAa,KAAK,aAAa;QACxC,QAAQ,CAAC,iBAAiB,KAAK,IAAI,CAAC,iBAAiB;QACrD,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY;QAC/B,CAAC,6BAA6B,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC;QAEzE,MAAM,CAAC,yDAAyD,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW;QAC9B,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IACjB,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAClE,MAAM,CAAC,8BAA8B,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,GAAG,EAA2C,CAAC;IACvE,MAAM,UAAU,GAA8B,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC1D,KAAK,MAAM,CACT,KAAK,EACL,IAAI,EACL,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,IACE,CAAC,KAAK;YACN,CAAC,6BAA6B,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC;YACtD,OAAO,CAAC,aAAa,KAAK,cAAc;YACxC,OAAO,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;YACxC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;YACzC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;YAEpC,MAAM,CAAC,6CAA6C,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,MAAM,0CAA0C,CAC3D,OAAO,CAAC,UAAU,CACnB,CAAC;QACF,IACE,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,qBAAqB;YAC1C,IAAI,KAAK,OAAO,CAAC,cAAc;YAE/B,MAAM,CAAC,kDAAkD,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,oCAAoC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5E,IAAI,UAAU,CAAC,cAAc,KAAK,IAAI,CAAC,WAAW;YAChD,MAAM,CAAC,2CAA2C,CAAC,CAAC;QACtD,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACjD,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACrD,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO;gBAC/C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,kBAAkB,CACzB,QAA2C,EAC3C,MAA4C;IAE5C,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI;QACjD,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,IACE,CAAC,QAAQ;YACT,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;YACjC,CAAC,6BAA6B,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC;YAErD,MAAM,CAAC,yDAAyD,CAAC,CAAC;QACpE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;AACH,CAAC","sourcesContent":["import {\n  computePrincipalStatePayloadCiphertextHash,\n  KeyingVerificationError,\n  type ReferencedPrincipalHead,\n} from \"@tearleads/crypto\";\nimport type { OrganizationPolicyHistoryResponse } from \"@tearleads/validators/response\";\nimport {\n  type OrganizationAuthorityDescriptor,\n  parseOrganizationAuthorityDescriptor,\n  principalHeadMatchesReference,\n} from \"../../data/principals/organizationAuthorityDescriptor\";\nimport type { RecoveredPrincipalHistoryPage } from \"../principals/loadRecoveredPrincipalHistoryPage\";\n\nfunction reject(message: string): never {\n  throw new KeyingVerificationError(\n    \"hash_mismatch\",\n    `Organization policy history: ${message}`,\n  );\n}\n\n/** Bind every display payload and public source to the privately verified page. */\nexport async function verifyOrganizationPolicyHistory(input: {\n  readonly head: ReferencedPrincipalHead;\n  readonly page: RecoveredPrincipalHistoryPage;\n  readonly evidence: OrganizationPolicyHistoryResponse;\n}) {\n  const { head, page, evidence } = input;\n  const beforeVersion = (page.entries.at(-1)?.state.version ?? 0) + 1;\n  if (\n    head.principalType !== \"organization\" ||\n    evidence.organizationId !== head.principalId ||\n    evidence.stateHash !== head.stateHash ||\n    evidence.beforeVersion !== beforeVersion ||\n    evidence.nextBeforeVersion !== page.nextBeforeVersion ||\n    !evidence.evidence.organization ||\n    !principalHeadMatchesReference(evidence.evidence.organization.head, head)\n  )\n    reject(\"response does not match the requested organization page\");\n  const entries = page.predecessor\n    ? [page.predecessor, ...page.entries]\n    : page.entries;\n  if (evidence.evidence.organizationPayloads.length !== entries.length)\n    reject(\"directory page is incomplete\");\n  const descriptors = new Map<string, OrganizationAuthorityDescriptor>();\n  const references: ReferencedPrincipalHead[] = [head];\n  const groups = new Map<string, ReferencedPrincipalHead>();\n  for (const [\n    index,\n    item,\n  ] of evidence.evidence.organizationPayloads.entries()) {\n    const { reference, payload } = item;\n    const entry = entries[index];\n    if (\n      !entry ||\n      !principalHeadMatchesReference(entry.state, reference) ||\n      payload.principalType !== \"organization\" ||\n      payload.principalId !== head.principalId ||\n      payload.stateHash !== reference.stateHash ||\n      descriptors.has(reference.stateHash)\n    )\n      reject(\"directory payload scope or order is invalid\");\n    const hash = await computePrincipalStatePayloadCiphertextHash(\n      payload.ciphertext,\n    );\n    if (\n      hash !== entry.state.payloadCiphertextHash ||\n      hash !== payload.ciphertextHash\n    )\n      reject(\"directory payload does not match its signed hash\");\n    const descriptor = parseOrganizationAuthorityDescriptor(payload.ciphertext);\n    if (descriptor.organizationId !== head.principalId)\n      reject(\"directory belongs to another organization\");\n    descriptors.set(reference.stateHash, descriptor);\n    references.push(reference, ...descriptor.groupHeads);\n    for (const group of descriptor.groupHeads) {\n      const previous = groups.get(group.principalId);\n      if (!previous || group.version > previous.version)\n        groups.set(group.principalId, group);\n    }\n  }\n  verifyGroupSources(evidence, groups);\n  return { descriptors, references };\n}\n\nfunction verifyGroupSources(\n  evidence: OrganizationPolicyHistoryResponse,\n  groups: Map<string, ReferencedPrincipalHead>,\n) {\n  if (evidence.evidence.groups.length !== groups.size)\n    reject(\"unexpected group source\");\n  const seen = new Set<string>();\n  for (const source of evidence.evidence.groups) {\n    const expected = groups.get(source.head.principalId);\n    if (\n      !expected ||\n      seen.has(source.head.principalId) ||\n      !principalHeadMatchesReference(source.head, expected)\n    )\n      reject(\"group source extends beyond the page's signed directory\");\n    seen.add(source.head.principalId);\n  }\n}\n"]}

package/workflows/organizations/organizationPresentationAccessState.js

@@ -1,173 +0,0 @@
-import { hasOrganizationPresentationDenial } from "../../data/persistence/organizations/organizationPresentationDenialPersistence.js";
-const accessByExecutor = new WeakMap();
-export function organizationAccessScopeKey(organizationId, requesterUserId) {
-    return JSON.stringify([organizationId, requesterUserId]);
-}
-function accessExecutorState(execSql) {
-    let state = accessByExecutor.get(execSql);
-    if (!state) {
-        state = {
-            generationByOrganization: new Map(),
-            resetDepthByOrganization: new Map(),
-            scopes: new Map(),
-        };
-        accessByExecutor.set(execSql, state);
-    }
-    return state;
-}
-function newProjectionState(denied) {
-    return { denied, deniedByServer: false, generation: 0 };
-}
-function organizationResetDepth(executor, organizationId) {
-    return executor.resetDepthByOrganization.get(organizationId) ?? 0;
-}
-function organizationGeneration(executor, organizationId) {
-    return executor.generationByOrganization.get(organizationId) ?? 0;
-}
-function accessScopeState(executor, organizationId, requesterUserId) {
-    const key = organizationAccessScopeKey(organizationId, requesterUserId);
-    let scope = executor.scopes.get(key);
-    if (!scope) {
-        const denied = organizationResetDepth(executor, organizationId) > 0;
-        scope = {
-            organizationId,
-            readModel: newProjectionState(denied),
-            usage: newProjectionState(denied),
-        };
-        executor.scopes.set(key, scope);
-    }
-    return scope;
-}
-function projectionState(scope, projection) {
-    return scope[projection];
-}
-export function captureOrganizationPresentationAccessAttempt(input, projection) {
-    const executor = accessExecutorState(input.execSql);
-    const state = projectionState(accessScopeState(executor, input.organizationId, input.requesterUserId), projection);
-    return {
-        executorGeneration: organizationGeneration(executor, input.organizationId),
-        projection,
-        projectionGeneration: state.generation,
-        startedDenied: state.denied,
-        startedDuringReset: organizationResetDepth(executor, input.organizationId) > 0,
-    };
-}
-export function isOrganizationPresentationAccessAttemptCurrent(input, attempt) {
-    const executor = accessExecutorState(input.execSql);
-    const state = projectionState(accessScopeState(executor, input.organizationId, input.requesterUserId), attempt.projection);
-    return (!attempt.startedDuringReset &&
-        organizationResetDepth(executor, input.organizationId) === 0 &&
-        organizationGeneration(executor, input.organizationId) ===
-            attempt.executorGeneration &&
-        state.generation === attempt.projectionGeneration);
-}
-export function isOrganizationPresentationAccessReadable(input, projection) {
-    const executor = accessExecutorState(input.execSql);
-    const state = projectionState(accessScopeState(executor, input.organizationId, input.requesterUserId), projection);
-    return (organizationResetDepth(executor, input.organizationId) === 0 &&
-        !state.denied);
-}
-export function denyOrganizationPresentationAccess(input, projections) {
-    const executor = accessExecutorState(input.execSql);
-    const scope = accessScopeState(executor, input.organizationId, input.requesterUserId);
-    for (const projection of new Set(projections)) {
-        const state = projectionState(scope, projection);
-        state.denied = true;
-        state.deniedByServer = true;
-        state.generation += 1;
-    }
-}
-/**
- * Whether the scope's projection is currently denied because the server
- * refused it (as opposed to a local session reset). The flip back to readable
- * after this returns true is the "org access was just restored" edge.
- */
-export function wasOrganizationPresentationAccessDeniedByServer(input, projection) {
-    const executor = accessExecutorState(input.execSql);
-    const state = projectionState(accessScopeState(executor, input.organizationId, input.requesterUserId), projection);
-    return state.denied && state.deniedByServer;
-}
-export function restoreOrganizationPresentationAccess(input, attempt) {
-    if (!isOrganizationPresentationAccessAttemptCurrent(input, attempt)) {
-        return false;
-    }
-    const executor = accessExecutorState(input.execSql);
-    const state = projectionState(accessScopeState(executor, input.organizationId, input.requesterUserId), attempt.projection);
-    state.denied = false;
-    state.deniedByServer = false;
-    return true;
-}
-export async function runOrganizationPresentationRead(input, projection, operation) {
-    const attempt = captureOrganizationPresentationAccessAttempt(input, projection);
-    if (!isOrganizationPresentationAccessReadable(input, projection)) {
-        return null;
-    }
-    // In-memory denial dies with the process. The durable marker keeps a
-    // revoked projection unreadable when its purge failed and the app
-    // restarted; a successful reconcile clears it.
-    if (await hasOrganizationPresentationDenial(input, projection)) {
-        return null;
-    }
-    const value = await operation();
-    return isOrganizationPresentationAccessAttemptCurrent(input, attempt) &&
-        isOrganizationPresentationAccessReadable(input, projection)
-        ? value
-        : null;
-}
-function beginOrganizationPresentationAccessReset(execSql, organizationId) {
-    const executor = accessExecutorState(execSql);
-    executor.generationByOrganization.set(organizationId, organizationGeneration(executor, organizationId) + 1);
-    executor.resetDepthByOrganization.set(organizationId, organizationResetDepth(executor, organizationId) + 1);
-    for (const scope of executor.scopes.values()) {
-        if (scope.organizationId !== organizationId)
-            continue;
-        // A reset denies presentation locally but is not a server denial: the next
-        // session re-derives server state, and startup sync already re-drives the
-        // lanes, so the lost-access memory must not survive into it.
-        scope.readModel.denied = true;
-        scope.readModel.deniedByServer = false;
-        scope.usage.denied = true;
-        scope.usage.deniedByServer = false;
-    }
-}
-function finishOrganizationPresentationAccessReset(execSql, organizationId) {
-    const executor = accessExecutorState(execSql);
-    const nextDepth = Math.max(0, organizationResetDepth(executor, organizationId) - 1);
-    if (nextDepth === 0) {
-        executor.resetDepthByOrganization.delete(organizationId);
-    }
-    else {
-        executor.resetDepthByOrganization.set(organizationId, nextDepth);
-    }
-}
-export async function runOrganizationPresentationMutation(execSql, operation) {
-    const executor = accessExecutorState(execSql);
-    const previous = executor.mutationQueue ?? Promise.resolve();
-    let releaseCurrent = () => { };
-    const current = new Promise((resolve) => {
-        releaseCurrent = resolve;
-    });
-    const waitForPrevious = previous.catch(() => undefined);
-    const queuedCurrent = waitForPrevious.then(() => current);
-    executor.mutationQueue = queuedCurrent;
-    await waitForPrevious;
-    try {
-        return await operation();
-    }
-    finally {
-        releaseCurrent();
-        if (executor.mutationQueue === queuedCurrent) {
-            executor.mutationQueue = undefined;
-        }
-    }
-}
-export async function runOrganizationPresentationReset(execSql, organizationId, operation) {
-    beginOrganizationPresentationAccessReset(execSql, organizationId);
-    try {
-        return await runOrganizationPresentationMutation(execSql, operation);
-    }
-    finally {
-        finishOrganizationPresentationAccessReset(execSql, organizationId);
-    }
-}
-//# sourceMappingURL=organizationPresentationAccessState.js.map

package/workflows/organizations/organizationPresentationAccessState.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"organizationPresentationAccessState.js","sourceRoot":"","sources":["organizationPresentationAccessState.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iCAAiC,EAAE,MAAM,gFAAgF,CAAC;AA4CnI,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAAgC,CAAC;AAErE,MAAM,UAAU,0BAA0B,CACxC,cAAsB,EACtB,eAAuB;IAEvB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,IAAI,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG;YACN,wBAAwB,EAAE,IAAI,GAAG,EAAE;YACnC,wBAAwB,EAAE,IAAI,GAAG,EAAE;YACnC,MAAM,EAAE,IAAI,GAAG,EAAE;SAClB,CAAC;QACF,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAe;IACzC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAA6B,EAC7B,cAAsB;IAEtB,OAAO,QAAQ,CAAC,wBAAwB,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAA6B,EAC7B,cAAsB;IAEtB,OAAO,QAAQ,CAAC,wBAAwB,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,gBAAgB,CACvB,QAA6B,EAC7B,cAAsB,EACtB,eAAuB;IAEvB,MAAM,GAAG,GAAG,0BAA0B,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IACxE,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC;QACpE,KAAK,GAAG;YACN,cAAc;YACd,SAAS,EAAE,kBAAkB,CAAC,MAAM,CAAC;YACrC,KAAK,EAAE,kBAAkB,CAAC,MAAM,CAAC;SAClC,CAAC;QACF,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CACtB,KAAuB,EACvB,UAA8C;IAE9C,OAAO,KAAK,CAAC,UAAU,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,4CAA4C,CAC1D,KAA0C,EAC1C,UAA8C;IAE9C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,eAAe,CAC3B,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,EACvE,UAAU,CACX,CAAC;IACF,OAAO;QACL,kBAAkB,EAAE,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC;QAC1E,UAAU;QACV,oBAAoB,EAAE,KAAK,CAAC,UAAU;QACtC,aAAa,EAAE,KAAK,CAAC,MAAM;QAC3B,kBAAkB,EAChB,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8CAA8C,CAC5D,KAA0C,EAC1C,OAA8C;IAE9C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,eAAe,CAC3B,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,EACvE,OAAO,CAAC,UAAU,CACnB,CAAC;IACF,OAAO,CACL,CAAC,OAAO,CAAC,kBAAkB;QAC3B,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC;QAC5D,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC;YACpD,OAAO,CAAC,kBAAkB;QAC5B,KAAK,CAAC,UAAU,KAAK,OAAO,CAAC,oBAAoB,CAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wCAAwC,CACtD,KAA0C,EAC1C,UAA8C;IAE9C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,eAAe,CAC3B,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,EACvE,UAAU,CACX,CAAC;IACF,OAAO,CACL,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC;QAC5D,CAAC,KAAK,CAAC,MAAM,CACd,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAA0C,EAC1C,WAA0D;IAE1D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,gBAAgB,CAC5B,QAAQ,EACR,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,eAAe,CACtB,CAAC;IACF,KAAK,MAAM,UAAU,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACjD,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;QACpB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;QAC5B,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+CAA+C,CAC7D,KAA0C,EAC1C,UAA8C;IAE9C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,eAAe,CAC3B,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,EACvE,UAAU,CACX,CAAC;IACF,OAAO,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,KAA0C,EAC1C,OAA8C;IAE9C,IAAI,CAAC,8CAA8C,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,eAAe,CAC3B,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,EACvE,OAAO,CAAC,UAAU,CACnB,CAAC;IACF,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;IACrB,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,KAA0C,EAC1C,UAA8C,EAC9C,SAA2B;IAE3B,MAAM,OAAO,GAAG,4CAA4C,CAC1D,KAAK,EACL,UAAU,CACX,CAAC;IACF,IAAI,CAAC,wCAAwC,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,qEAAqE;IACrE,kEAAkE;IAClE,+CAA+C;IAC/C,IAAI,MAAM,iCAAiC,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,OAAO,8CAA8C,CAAC,KAAK,EAAE,OAAO,CAAC;QACnE,wCAAwC,CAAC,KAAK,EAAE,UAAU,CAAC;QAC3D,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,wCAAwC,CAC/C,OAAgB,EAChB,cAAsB;IAEtB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,QAAQ,CAAC,wBAAwB,CAAC,GAAG,CACnC,cAAc,EACd,sBAAsB,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,CACrD,CAAC;IACF,QAAQ,CAAC,wBAAwB,CAAC,GAAG,CACnC,cAAc,EACd,sBAAsB,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,CACrD,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,cAAc,KAAK,cAAc;YAAE,SAAS;QACtD,2EAA2E;QAC3E,0EAA0E;QAC1E,6DAA6D;QAC7D,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC;QAC9B,KAAK,CAAC,SAAS,CAAC,cAAc,GAAG,KAAK,CAAC;QACvC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;QAC1B,KAAK,CAAC,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,yCAAyC,CAChD,OAAgB,EAChB,cAAsB;IAEtB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,CAAC,EACD,sBAAsB,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG,CAAC,CACrD,CAAC;IACF,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACpB,QAAQ,CAAC,wBAAwB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,wBAAwB,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,OAAgB,EAChB,SAA2B;IAE3B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,aAAa,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7D,IAAI,cAAc,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5C,cAAc,GAAG,OAAO,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IAC1D,QAAQ,CAAC,aAAa,GAAG,aAAa,CAAC;IACvC,MAAM,eAAe,CAAC;IAEtB,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,cAAc,EAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;YAC7C,QAAQ,CAAC,aAAa,GAAG,SAAS,CAAC;QACrC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAgB,EAChB,cAAsB,EACtB,SAA2B;IAE3B,wCAAwC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,OAAO,MAAM,mCAAmC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACvE,CAAC;YAAS,CAAC;QACT,yCAAyC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACrE,CAAC;AACH,CAAC","sourcesContent":["import { hasOrganizationPresentationDenial } from \"../../data/persistence/organizations/organizationPresentationDenialPersistence\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\n\nexport type OrganizationPresentationProjection = \"readModel\" | \"usage\";\n\nexport interface OrganizationPresentationAccessInput {\n  readonly execSql: ExecSql;\n  readonly organizationId: string;\n  readonly requesterUserId: string;\n}\n\ninterface ProjectionAccessState {\n  denied: boolean;\n  /**\n   * True only when the server itself denied the projection (a 403/404 read).\n   * A session reset also flips `denied`, but that is a local lifecycle event —\n   * consumers reacting specifically to lost-then-regained org access (e.g.\n   * re-arming write lanes) must not treat a routine reset as a denial.\n   */\n  deniedByServer: boolean;\n  generation: number;\n}\n\ninterface AccessScopeState {\n  readonly organizationId: string;\n  readonly readModel: ProjectionAccessState;\n  readonly usage: ProjectionAccessState;\n}\n\ninterface AccessExecutorState {\n  readonly generationByOrganization: Map<string, number>;\n  mutationQueue?: Promise<void> | undefined;\n  readonly resetDepthByOrganization: Map<string, number>;\n  readonly scopes: Map<string, AccessScopeState>;\n}\n\nexport interface OrganizationPresentationAccessAttempt {\n  readonly executorGeneration: number;\n  readonly projection: OrganizationPresentationProjection;\n  readonly projectionGeneration: number;\n  readonly startedDenied: boolean;\n  readonly startedDuringReset: boolean;\n}\n\nconst accessByExecutor = new WeakMap<ExecSql, AccessExecutorState>();\n\nexport function organizationAccessScopeKey(\n  organizationId: string,\n  requesterUserId: string,\n): string {\n  return JSON.stringify([organizationId, requesterUserId]);\n}\n\nfunction accessExecutorState(execSql: ExecSql): AccessExecutorState {\n  let state = accessByExecutor.get(execSql);\n  if (!state) {\n    state = {\n      generationByOrganization: new Map(),\n      resetDepthByOrganization: new Map(),\n      scopes: new Map(),\n    };\n    accessByExecutor.set(execSql, state);\n  }\n  return state;\n}\n\nfunction newProjectionState(denied: boolean): ProjectionAccessState {\n  return { denied, deniedByServer: false, generation: 0 };\n}\n\nfunction organizationResetDepth(\n  executor: AccessExecutorState,\n  organizationId: string,\n): number {\n  return executor.resetDepthByOrganization.get(organizationId) ?? 0;\n}\n\nfunction organizationGeneration(\n  executor: AccessExecutorState,\n  organizationId: string,\n): number {\n  return executor.generationByOrganization.get(organizationId) ?? 0;\n}\n\nfunction accessScopeState(\n  executor: AccessExecutorState,\n  organizationId: string,\n  requesterUserId: string,\n): AccessScopeState {\n  const key = organizationAccessScopeKey(organizationId, requesterUserId);\n  let scope = executor.scopes.get(key);\n  if (!scope) {\n    const denied = organizationResetDepth(executor, organizationId) > 0;\n    scope = {\n      organizationId,\n      readModel: newProjectionState(denied),\n      usage: newProjectionState(denied),\n    };\n    executor.scopes.set(key, scope);\n  }\n  return scope;\n}\n\nfunction projectionState(\n  scope: AccessScopeState,\n  projection: OrganizationPresentationProjection,\n): ProjectionAccessState {\n  return scope[projection];\n}\n\nexport function captureOrganizationPresentationAccessAttempt(\n  input: OrganizationPresentationAccessInput,\n  projection: OrganizationPresentationProjection,\n): OrganizationPresentationAccessAttempt {\n  const executor = accessExecutorState(input.execSql);\n  const state = projectionState(\n    accessScopeState(executor, input.organizationId, input.requesterUserId),\n    projection,\n  );\n  return {\n    executorGeneration: organizationGeneration(executor, input.organizationId),\n    projection,\n    projectionGeneration: state.generation,\n    startedDenied: state.denied,\n    startedDuringReset:\n      organizationResetDepth(executor, input.organizationId) > 0,\n  };\n}\n\nexport function isOrganizationPresentationAccessAttemptCurrent(\n  input: OrganizationPresentationAccessInput,\n  attempt: OrganizationPresentationAccessAttempt,\n): boolean {\n  const executor = accessExecutorState(input.execSql);\n  const state = projectionState(\n    accessScopeState(executor, input.organizationId, input.requesterUserId),\n    attempt.projection,\n  );\n  return (\n    !attempt.startedDuringReset &&\n    organizationResetDepth(executor, input.organizationId) === 0 &&\n    organizationGeneration(executor, input.organizationId) ===\n      attempt.executorGeneration &&\n    state.generation === attempt.projectionGeneration\n  );\n}\n\nexport function isOrganizationPresentationAccessReadable(\n  input: OrganizationPresentationAccessInput,\n  projection: OrganizationPresentationProjection,\n): boolean {\n  const executor = accessExecutorState(input.execSql);\n  const state = projectionState(\n    accessScopeState(executor, input.organizationId, input.requesterUserId),\n    projection,\n  );\n  return (\n    organizationResetDepth(executor, input.organizationId) === 0 &&\n    !state.denied\n  );\n}\n\nexport function denyOrganizationPresentationAccess(\n  input: OrganizationPresentationAccessInput,\n  projections: readonly OrganizationPresentationProjection[],\n): void {\n  const executor = accessExecutorState(input.execSql);\n  const scope = accessScopeState(\n    executor,\n    input.organizationId,\n    input.requesterUserId,\n  );\n  for (const projection of new Set(projections)) {\n    const state = projectionState(scope, projection);\n    state.denied = true;\n    state.deniedByServer = true;\n    state.generation += 1;\n  }\n}\n\n/**\n * Whether the scope's projection is currently denied because the server\n * refused it (as opposed to a local session reset). The flip back to readable\n * after this returns true is the \"org access was just restored\" edge.\n */\nexport function wasOrganizationPresentationAccessDeniedByServer(\n  input: OrganizationPresentationAccessInput,\n  projection: OrganizationPresentationProjection,\n): boolean {\n  const executor = accessExecutorState(input.execSql);\n  const state = projectionState(\n    accessScopeState(executor, input.organizationId, input.requesterUserId),\n    projection,\n  );\n  return state.denied && state.deniedByServer;\n}\n\nexport function restoreOrganizationPresentationAccess(\n  input: OrganizationPresentationAccessInput,\n  attempt: OrganizationPresentationAccessAttempt,\n): boolean {\n  if (!isOrganizationPresentationAccessAttemptCurrent(input, attempt)) {\n    return false;\n  }\n  const executor = accessExecutorState(input.execSql);\n  const state = projectionState(\n    accessScopeState(executor, input.organizationId, input.requesterUserId),\n    attempt.projection,\n  );\n  state.denied = false;\n  state.deniedByServer = false;\n  return true;\n}\n\nexport async function runOrganizationPresentationRead<T>(\n  input: OrganizationPresentationAccessInput,\n  projection: OrganizationPresentationProjection,\n  operation: () => Promise<T>,\n): Promise<T | null> {\n  const attempt = captureOrganizationPresentationAccessAttempt(\n    input,\n    projection,\n  );\n  if (!isOrganizationPresentationAccessReadable(input, projection)) {\n    return null;\n  }\n  // In-memory denial dies with the process. The durable marker keeps a\n  // revoked projection unreadable when its purge failed and the app\n  // restarted; a successful reconcile clears it.\n  if (await hasOrganizationPresentationDenial(input, projection)) {\n    return null;\n  }\n  const value = await operation();\n  return isOrganizationPresentationAccessAttemptCurrent(input, attempt) &&\n    isOrganizationPresentationAccessReadable(input, projection)\n    ? value\n    : null;\n}\n\nfunction beginOrganizationPresentationAccessReset(\n  execSql: ExecSql,\n  organizationId: string,\n): void {\n  const executor = accessExecutorState(execSql);\n  executor.generationByOrganization.set(\n    organizationId,\n    organizationGeneration(executor, organizationId) + 1,\n  );\n  executor.resetDepthByOrganization.set(\n    organizationId,\n    organizationResetDepth(executor, organizationId) + 1,\n  );\n  for (const scope of executor.scopes.values()) {\n    if (scope.organizationId !== organizationId) continue;\n    // A reset denies presentation locally but is not a server denial: the next\n    // session re-derives server state, and startup sync already re-drives the\n    // lanes, so the lost-access memory must not survive into it.\n    scope.readModel.denied = true;\n    scope.readModel.deniedByServer = false;\n    scope.usage.denied = true;\n    scope.usage.deniedByServer = false;\n  }\n}\n\nfunction finishOrganizationPresentationAccessReset(\n  execSql: ExecSql,\n  organizationId: string,\n): void {\n  const executor = accessExecutorState(execSql);\n  const nextDepth = Math.max(\n    0,\n    organizationResetDepth(executor, organizationId) - 1,\n  );\n  if (nextDepth === 0) {\n    executor.resetDepthByOrganization.delete(organizationId);\n  } else {\n    executor.resetDepthByOrganization.set(organizationId, nextDepth);\n  }\n}\n\nexport async function runOrganizationPresentationMutation<T>(\n  execSql: ExecSql,\n  operation: () => Promise<T>,\n): Promise<T> {\n  const executor = accessExecutorState(execSql);\n  const previous = executor.mutationQueue ?? Promise.resolve();\n  let releaseCurrent = () => {};\n  const current = new Promise<void>((resolve) => {\n    releaseCurrent = resolve;\n  });\n  const waitForPrevious = previous.catch(() => undefined);\n  const queuedCurrent = waitForPrevious.then(() => current);\n  executor.mutationQueue = queuedCurrent;\n  await waitForPrevious;\n\n  try {\n    return await operation();\n  } finally {\n    releaseCurrent();\n    if (executor.mutationQueue === queuedCurrent) {\n      executor.mutationQueue = undefined;\n    }\n  }\n}\n\nexport async function runOrganizationPresentationReset<T>(\n  execSql: ExecSql,\n  organizationId: string,\n  operation: () => Promise<T>,\n): Promise<T> {\n  beginOrganizationPresentationAccessReset(execSql, organizationId);\n  try {\n    return await runOrganizationPresentationMutation(execSql, operation);\n  } finally {\n    finishOrganizationPresentationAccessReset(execSql, organizationId);\n  }\n}\n"]}

package/workflows/organizations/organizationPresentationFailures.js

@@ -1,7 +0,0 @@
-import { ORGANIZATION_PRESENTATION_ERROR_CODES } from "../../internal/validators/response/index.js";
-export function isOrganizationPresentationAccessDeniedFailure(failure) {
-    return (failure.kind === "http" &&
-        (failure.status === 403 || failure.status === 404) &&
-        failure.code === ORGANIZATION_PRESENTATION_ERROR_CODES.accessDenied);
-}
-//# sourceMappingURL=organizationPresentationFailures.js.map

package/workflows/organizations/organizationProvisioningAttempt.d.ts

@@ -1,36 +0,0 @@
-import { type CreateOrganizationRequest } from "../../internal/validators/request/index.js";
-import type { ExecSql, ExecSqlClientLike } from "../../data/sqlite/sqlSchema.js";
-import type { OrganizationProvisioningArtifacts } from "../registration/registerIdentity.js";
-interface DurableOrganizationProvisioningAttempt {
-    readonly artifacts: OrganizationProvisioningArtifacts;
-    readonly request: CreateOrganizationRequest;
-    readonly rootContainerId: string;
-}
-export declare function loadOrganizationReplacementFinalizationRequest(input: {
-    execSql: ExecSql;
-    replacedOrganizationId: string;
-    userId: string;
-}): Promise<CreateOrganizationRequest>;
-export declare function makeOrganizationProvisioningAttemptDurable(input: {
-    artifacts: OrganizationProvisioningArtifacts;
-    canStartDurableMutation?: (() => boolean) | undefined;
-    dbClient: ExecSqlClientLike;
-    nativeSubscriptionRestore?: boolean | undefined;
-    replacesOrganizationId?: string | undefined;
-    rootContainerId: string;
-    userId: string;
-}): Promise<DurableOrganizationProvisioningAttempt | null>;
-export declare function removeNativeSubscriptionRestoreProvisioningAttempt(input: {
-    canCommit?: (() => boolean) | undefined;
-    dbClient: ExecSqlClientLike;
-    organizationId: string;
-    userId: string;
-}): Promise<boolean>;
-export declare function removeOrganizationProvisioningAttempt(input: {
-    canCommit?: (() => boolean) | undefined;
-    execSql: ExecSql;
-    organizationId?: string | undefined;
-    replacedOrganizationId: string;
-    userId: string;
-}): Promise<boolean>;
-export {};

package/workflows/organizations/organizationProvisioningAttempt.js

@@ -1,205 +0,0 @@
-import { base64ToBytes, bytesToBase64 } from "../../internal/encoding/index.js";
-import { isPlainObject } from "../../internal/validators/isPlainObject.js";
-import { isCreateOrganizationRequest, } from "../../internal/validators/request/index.js";
-import { isOrganizationReplacementAuthorization } from "../../internal/validators/util/index.js";
-import { sqlOrganizationProvisioningAttemptPersistence } from "../../data/persistence/organizations/organizationProvisioningAttemptPersistence.js";
-import { createExecSql } from "../../data/sqlite/sqlSchema.js";
-const BYTE_MARKER = "__tearleadsProvisioningBytes";
-function buildCreateOrganizationRequest(input) {
-    const { artifacts } = input;
-    return {
-        userId: input.userId,
-        ...(artifacts.replacementAuthorization
-            ? { replacementAuthorization: artifacts.replacementAuthorization }
-            : {}),
-        organizationId: artifacts.organizationId,
-        rootContainerId: input.rootContainerId,
-        initialAdminGroup: artifacts.initialAdminGroup,
-        initialMemberGroup: artifacts.initialMemberGroup,
-        initialOrganizationPolicy: artifacts.initialOrganizationPolicy,
-        initialRootContainer: artifacts.initialRootContainer,
-        initialRootMetadataDocument: artifacts.rootMetadataDocumentRequest,
-        initialRosterProfileContainer: artifacts.rosterProfileBootstrap.containerRequest,
-        initialRosterProfileDocument: artifacts.rosterProfileBootstrap.profileDocumentRequest,
-        initialOrganizationMetadataContainer: artifacts.organizationMetadataBootstrap.containerRequest,
-        initialOrganizationProfileDocument: artifacts.organizationMetadataBootstrap
-            .organizationProfileDocumentRequest,
-        initialSystemContainers: artifacts.systemContainerBootstraps.map((systemContainer) => systemContainer.containerRequest),
-        ...(input.finalizeReplacement ? { finalizeReplacement: true } : {}),
-        ...(input.nativeSubscriptionRestore
-            ? { nativeSubscriptionRestore: true }
-            : {}),
-        ...(input.replacesOrganizationId
-            ? { replacesOrganizationId: input.replacesOrganizationId }
-            : {}),
-    };
-}
-export async function loadOrganizationReplacementFinalizationRequest(input) {
-    const stored = await sqlOrganizationProvisioningAttemptPersistence.load(input.execSql, input.replacedOrganizationId);
-    if (!stored) {
-        throw new Error("Organization replacement attempt is unavailable");
-    }
-    if (stored.userId !== input.userId) {
-        throw new Error("Stored organization provisioning attempt belongs to another user");
-    }
-    const artifacts = deserializeArtifacts(stored.serializedArtifacts);
-    const request = buildCreateOrganizationRequest({
-        artifacts,
-        finalizeReplacement: true,
-        replacesOrganizationId: input.replacedOrganizationId,
-        rootContainerId: stored.rootContainerId,
-        userId: stored.userId,
-    });
-    if (artifacts.organizationId !== stored.organizationId ||
-        request.organizationId !== stored.organizationId ||
-        request.rootContainerId !== stored.rootContainerId ||
-        !isCreateOrganizationRequest(request)) {
-        throw new Error("Stored organization provisioning attempt is inconsistent");
-    }
-    return request;
-}
-function serializeArtifacts(artifacts) {
-    return JSON.stringify(artifacts, (_key, value) => {
-        if (value instanceof Uint8Array) {
-            return { [BYTE_MARKER]: bytesToBase64(value) };
-        }
-        return value;
-    });
-}
-function hasRecord(value, key) {
-    return isPlainObject(Reflect.get(value, key));
-}
-function hasBytes(value, key) {
-    return Reflect.get(value, key) instanceof Uint8Array;
-}
-function isMaterializedDocument(value) {
-    return (isPlainObject(value) &&
-        hasBytes(value, "contentKey") &&
-        hasRecord(value, "plan"));
-}
-function isMaterializedContainer(value) {
-    return (isPlainObject(value) &&
-        hasBytes(value, "containerKey") &&
-        hasRecord(value, "plan"));
-}
-function hasContainerBootstrapCore(value) {
-    return (typeof Reflect.get(value, "containerId") === "string" &&
-        isMaterializedDocument(Reflect.get(value, "containerMetadataDocument")) &&
-        hasBytes(value, "containerMetadataInitialUpdate") &&
-        isMaterializedContainer(Reflect.get(value, "containerPlan")) &&
-        hasRecord(value, "containerRequest") &&
-        Reflect.get(value, "systemSlot") !== undefined);
-}
-function isOrganizationProvisioningArtifacts(value) {
-    if (!isPlainObject(value))
-        return false;
-    const bootstrap = Reflect.get(value, "bootstrap");
-    const roster = Reflect.get(value, "rosterProfileBootstrap");
-    const metadata = Reflect.get(value, "organizationMetadataBootstrap");
-    const systemContainers = Reflect.get(value, "systemContainerBootstraps");
-    return ((Reflect.get(value, "replacementAuthorization") === null ||
-        isOrganizationReplacementAuthorization(Reflect.get(value, "replacementAuthorization"))) &&
-        typeof Reflect.get(value, "organizationId") === "string" &&
-        isPlainObject(bootstrap) &&
-        hasBytes(bootstrap, "initialUpdate") &&
-        typeof Reflect.get(bootstrap, "metadataDocumentId") === "string" &&
-        hasRecord(value, "initialAdminGroup") &&
-        hasRecord(value, "initialMemberGroup") &&
-        hasRecord(value, "initialOrganizationPolicy") &&
-        hasRecord(value, "initialRootContainer") &&
-        isMaterializedContainer(Reflect.get(value, "rootContainer")) &&
-        isMaterializedDocument(Reflect.get(value, "rootMetadataDocument")) &&
-        hasRecord(value, "rootMetadataDocumentRequest") &&
-        isPlainObject(roster) &&
-        hasContainerBootstrapCore(roster) &&
-        isMaterializedDocument(Reflect.get(roster, "profileDocument")) &&
-        hasBytes(roster, "profileDocumentInitialUpdate") &&
-        hasRecord(roster, "profileDocumentRequest") &&
-        isPlainObject(metadata) &&
-        hasContainerBootstrapCore(metadata) &&
-        isMaterializedDocument(Reflect.get(metadata, "organizationProfileDocument")) &&
-        hasRecord(metadata, "organizationProfileDocumentRequest") &&
-        typeof Reflect.get(metadata, "organizationProfileSnapshot") === "string" &&
-        Array.isArray(systemContainers) &&
-        systemContainers.every((container) => isPlainObject(container) && hasContainerBootstrapCore(container)));
-}
-function deserializeArtifacts(value) {
-    const parsed = JSON.parse(value, (_key, candidate) => {
-        if (typeof candidate === "object" &&
-            candidate !== null &&
-            Object.keys(candidate).length === 1 &&
-            BYTE_MARKER in candidate) {
-            const encoded = Reflect.get(candidate, BYTE_MARKER);
-            if (typeof encoded === "string") {
-                return base64ToBytes(encoded);
-            }
-        }
-        return candidate;
-    });
-    if (!isOrganizationProvisioningArtifacts(parsed)) {
-        throw new Error("Stored organization provisioning attempt is invalid");
-    }
-    return parsed;
-}
-export async function makeOrganizationProvisioningAttemptDurable(input) {
-    const attemptKey = input.replacesOrganizationId ??
-        (input.nativeSubscriptionRestore
-            ? `native-subscription-restore:${input.userId}`
-            : null);
-    if (!attemptKey) {
-        return {
-            artifacts: input.artifacts,
-            request: buildCreateOrganizationRequest(input),
-            rootContainerId: input.rootContainerId,
-        };
-    }
-    const stored = await sqlOrganizationProvisioningAttemptPersistence.loadOrSave(createExecSql(input.dbClient), {
-        replacedOrganizationId: attemptKey,
-        userId: input.userId,
-        organizationId: input.artifacts.organizationId,
-        rootContainerId: input.rootContainerId,
-        serializedArtifacts: serializeArtifacts(input.artifacts),
-    }, input.canStartDurableMutation);
-    if (!stored)
-        return null;
-    if (stored.userId !== input.userId) {
-        throw new Error("Stored organization provisioning attempt belongs to another user");
-    }
-    const artifacts = deserializeArtifacts(stored.serializedArtifacts);
-    const request = buildCreateOrganizationRequest({
-        artifacts,
-        nativeSubscriptionRestore: input.nativeSubscriptionRestore,
-        replacesOrganizationId: input.replacesOrganizationId,
-        rootContainerId: stored.rootContainerId,
-        userId: stored.userId,
-    });
-    if (artifacts.organizationId !== stored.organizationId ||
-        request.organizationId !== stored.organizationId ||
-        request.rootContainerId !== stored.rootContainerId ||
-        !isCreateOrganizationRequest(request)) {
-        throw new Error("Stored organization provisioning attempt is inconsistent");
-    }
-    return { artifacts, request, rootContainerId: stored.rootContainerId };
-}
-export async function removeNativeSubscriptionRestoreProvisioningAttempt(input) {
-    const attemptKey = `native-subscription-restore:${input.userId}`;
-    const execSql = createExecSql(input.dbClient);
-    const stored = await sqlOrganizationProvisioningAttemptPersistence.load(execSql, attemptKey);
-    if (!stored)
-        return true;
-    if (stored.userId !== input.userId ||
-        stored.organizationId !== input.organizationId) {
-        throw new Error("Stored native restore organization provisioning attempt is inconsistent");
-    }
-    return removeOrganizationProvisioningAttempt({
-        canCommit: input.canCommit,
-        execSql,
-        organizationId: input.organizationId,
-        replacedOrganizationId: attemptKey,
-        userId: input.userId,
-    });
-}
-export async function removeOrganizationProvisioningAttempt(input) {
-    return sqlOrganizationProvisioningAttemptPersistence.remove(input.execSql, input, input.canCommit);
-}
-//# sourceMappingURL=organizationProvisioningAttempt.js.map

package/workflows/organizations/organizationProvisioningAttempt.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"organizationProvisioningAttempt.js","sourceRoot":"","sources":["organizationProvisioningAttempt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAEL,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,sCAAsC,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAE,6CAA6C,EAAE,MAAM,iFAAiF,CAAC;AAEhJ,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAG5D,MAAM,WAAW,GAAG,8BAA8B,CAAC;AAQnD,SAAS,8BAA8B,CAAC,KAOvC;IACC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IAC5B,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,SAAS,CAAC,wBAAwB;YACpC,CAAC,CAAC,EAAE,wBAAwB,EAAE,SAAS,CAAC,wBAAwB,EAAE;YAClE,CAAC,CAAC,EAAE,CAAC;QACP,cAAc,EAAE,SAAS,CAAC,cAAc;QACxC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;QAC9C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;QAChD,yBAAyB,EAAE,SAAS,CAAC,yBAAyB;QAC9D,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;QACpD,2BAA2B,EAAE,SAAS,CAAC,2BAA2B;QAClE,6BAA6B,EAC3B,SAAS,CAAC,sBAAsB,CAAC,gBAAgB;QACnD,4BAA4B,EAC1B,SAAS,CAAC,sBAAsB,CAAC,sBAAsB;QACzD,oCAAoC,EAClC,SAAS,CAAC,6BAA6B,CAAC,gBAAgB;QAC1D,kCAAkC,EAChC,SAAS,CAAC,6BAA6B;aACpC,kCAAkC;QACvC,uBAAuB,EAAE,SAAS,CAAC,yBAAyB,CAAC,GAAG,CAC9D,CAAC,eAAe,EAAE,EAAE,CAAC,eAAe,CAAC,gBAAgB,CACtD;QACD,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,KAAK,CAAC,yBAAyB;YACjC,CAAC,CAAC,EAAE,yBAAyB,EAAE,IAAa,EAAE;YAC9C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,sBAAsB;YAC9B,CAAC,CAAC,EAAE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,EAAE;YAC1D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8CAA8C,CAAC,KAIpE;IACC,MAAM,MAAM,GAAG,MAAM,6CAA6C,CAAC,IAAI,CACrE,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,sBAAsB,CAC7B,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,8BAA8B,CAAC;QAC7C,SAAS;QACT,mBAAmB,EAAE,IAAI;QACzB,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IACH,IACE,SAAS,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;QAClD,OAAO,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;QAChD,OAAO,CAAC,eAAe,KAAK,MAAM,CAAC,eAAe;QAClD,CAAC,2BAA2B,CAAC,OAAO,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,SAA4C;IACtE,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,KAAc,EAAE,EAAE;QACxD,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAChC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,GAAW;IAC5D,OAAO,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,QAAQ,CAAC,KAA8B,EAAE,GAAW;IAC3D,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,UAAU,CAAC;AACvD,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,OAAO,CACL,aAAa,CAAC,KAAK,CAAC;QACpB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;QAC7B,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,OAAO,CACL,aAAa,CAAC,KAAK,CAAC;QACpB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;QAC/B,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAA8B;IAC/D,OAAO,CACL,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,QAAQ;QACrD,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;QACvE,QAAQ,CAAC,KAAK,EAAE,gCAAgC,CAAC;QACjD,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC5D,SAAS,CAAC,KAAK,EAAE,kBAAkB,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,SAAS,CAC/C,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC,CAC1C,KAAc;IAEd,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,+BAA+B,CAAC,CAAC;IACrE,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAC;IACzE,OAAO,CACL,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,0BAA0B,CAAC,KAAK,IAAI;QACtD,sCAAsC,CACpC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAC/C,CAAC;QACJ,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,gBAAgB,CAAC,KAAK,QAAQ;QACxD,aAAa,CAAC,SAAS,CAAC;QACxB,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;QACpC,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,oBAAoB,CAAC,KAAK,QAAQ;QAChE,SAAS,CAAC,KAAK,EAAE,mBAAmB,CAAC;QACrC,SAAS,CAAC,KAAK,EAAE,oBAAoB,CAAC;QACtC,SAAS,CAAC,KAAK,EAAE,2BAA2B,CAAC;QAC7C,SAAS,CAAC,KAAK,EAAE,sBAAsB,CAAC;QACxC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC5D,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;QAClE,SAAS,CAAC,KAAK,EAAE,6BAA6B,CAAC;QAC/C,aAAa,CAAC,MAAM,CAAC;QACrB,yBAAyB,CAAC,MAAM,CAAC;QACjC,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAC9D,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;QAChD,SAAS,CAAC,MAAM,EAAE,wBAAwB,CAAC;QAC3C,aAAa,CAAC,QAAQ,CAAC;QACvB,yBAAyB,CAAC,QAAQ,CAAC;QACnC,sBAAsB,CACpB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CACrD;QACD,SAAS,CAAC,QAAQ,EAAE,oCAAoC,CAAC;QACzD,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,6BAA6B,CAAC,KAAK,QAAQ;QACxE,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC/B,gBAAgB,CAAC,KAAK,CACpB,CAAC,SAAS,EAAE,EAAE,CACZ,aAAa,CAAC,SAAS,CAAC,IAAI,yBAAyB,CAAC,SAAS,CAAC,CACnE,CACF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAa;IAEb,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,SAAkB,EAAE,EAAE;QACrE,IACE,OAAO,SAAS,KAAK,QAAQ;YAC7B,SAAS,KAAK,IAAI;YAClB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC;YACnC,WAAW,IAAI,SAAS,EACxB,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YACpD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,mCAAmC,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0CAA0C,CAAC,KAQhE;IACC,MAAM,UAAU,GACd,KAAK,CAAC,sBAAsB;QAC5B,CAAC,KAAK,CAAC,yBAAyB;YAC9B,CAAC,CAAC,+BAA+B,KAAK,CAAC,MAAM,EAAE;YAC/C,CAAC,CAAC,IAAI,CAAC,CAAC;IACZ,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,8BAA8B,CAAC,KAAK,CAAC;YAC9C,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,6CAA6C,CAAC,UAAU,CAC3E,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAC7B;QACE,sBAAsB,EAAE,UAAU;QAClC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,cAAc;QAC9C,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,mBAAmB,EAAE,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC;KACzD,EACD,KAAK,CAAC,uBAAuB,CAC9B,CAAC;IACF,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,8BAA8B,CAAC;QAC7C,SAAS;QACT,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IACH,IACE,SAAS,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;QAClD,OAAO,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;QAChD,OAAO,CAAC,eAAe,KAAK,MAAM,CAAC,eAAe;QAClD,CAAC,2BAA2B,CAAC,OAAO,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kDAAkD,CAAC,KAKxE;IACC,MAAM,UAAU,GAAG,+BAA+B,KAAK,CAAC,MAAM,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,6CAA6C,CAAC,IAAI,CACrE,OAAO,EACP,UAAU,CACX,CAAC;IACF,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IACE,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC9B,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,qCAAqC,CAAC;QAC3C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO;QACP,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,sBAAsB,EAAE,UAAU;QAClC,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAAC,KAM3D;IACC,OAAO,6CAA6C,CAAC,MAAM,CACzD,KAAK,CAAC,OAAO,EACb,KAAK,EACL,KAAK,CAAC,SAAS,CAChB,CAAC;AACJ,CAAC","sourcesContent":["import { base64ToBytes, bytesToBase64 } from \"@tearleads/encoding\";\nimport { isPlainObject } from \"@tearleads/validators/isPlainObject\";\nimport {\n  type CreateOrganizationRequest,\n  isCreateOrganizationRequest,\n} from \"@tearleads/validators/request\";\nimport { isOrganizationReplacementAuthorization } from \"@tearleads/validators/util\";\nimport { sqlOrganizationProvisioningAttemptPersistence } from \"../../data/persistence/organizations/organizationProvisioningAttemptPersistence\";\nimport type { ExecSql, ExecSqlClientLike } from \"../../data/sqlite/sqlSchema\";\nimport { createExecSql } from \"../../data/sqlite/sqlSchema\";\nimport type { OrganizationProvisioningArtifacts } from \"../registration/registerIdentity\";\n\nconst BYTE_MARKER = \"__tearleadsProvisioningBytes\";\n\ninterface DurableOrganizationProvisioningAttempt {\n  readonly artifacts: OrganizationProvisioningArtifacts;\n  readonly request: CreateOrganizationRequest;\n  readonly rootContainerId: string;\n}\n\nfunction buildCreateOrganizationRequest(input: {\n  artifacts: OrganizationProvisioningArtifacts;\n  finalizeReplacement?: boolean | undefined;\n  nativeSubscriptionRestore?: boolean | undefined;\n  replacesOrganizationId?: string | undefined;\n  rootContainerId: string;\n  userId: string;\n}): CreateOrganizationRequest {\n  const { artifacts } = input;\n  return {\n    userId: input.userId,\n    ...(artifacts.replacementAuthorization\n      ? { replacementAuthorization: artifacts.replacementAuthorization }\n      : {}),\n    organizationId: artifacts.organizationId,\n    rootContainerId: input.rootContainerId,\n    initialAdminGroup: artifacts.initialAdminGroup,\n    initialMemberGroup: artifacts.initialMemberGroup,\n    initialOrganizationPolicy: artifacts.initialOrganizationPolicy,\n    initialRootContainer: artifacts.initialRootContainer,\n    initialRootMetadataDocument: artifacts.rootMetadataDocumentRequest,\n    initialRosterProfileContainer:\n      artifacts.rosterProfileBootstrap.containerRequest,\n    initialRosterProfileDocument:\n      artifacts.rosterProfileBootstrap.profileDocumentRequest,\n    initialOrganizationMetadataContainer:\n      artifacts.organizationMetadataBootstrap.containerRequest,\n    initialOrganizationProfileDocument:\n      artifacts.organizationMetadataBootstrap\n        .organizationProfileDocumentRequest,\n    initialSystemContainers: artifacts.systemContainerBootstraps.map(\n      (systemContainer) => systemContainer.containerRequest,\n    ),\n    ...(input.finalizeReplacement ? { finalizeReplacement: true } : {}),\n    ...(input.nativeSubscriptionRestore\n      ? { nativeSubscriptionRestore: true as const }\n      : {}),\n    ...(input.replacesOrganizationId\n      ? { replacesOrganizationId: input.replacesOrganizationId }\n      : {}),\n  };\n}\n\nexport async function loadOrganizationReplacementFinalizationRequest(input: {\n  execSql: ExecSql;\n  replacedOrganizationId: string;\n  userId: string;\n}): Promise<CreateOrganizationRequest> {\n  const stored = await sqlOrganizationProvisioningAttemptPersistence.load(\n    input.execSql,\n    input.replacedOrganizationId,\n  );\n  if (!stored) {\n    throw new Error(\"Organization replacement attempt is unavailable\");\n  }\n  if (stored.userId !== input.userId) {\n    throw new Error(\n      \"Stored organization provisioning attempt belongs to another user\",\n    );\n  }\n  const artifacts = deserializeArtifacts(stored.serializedArtifacts);\n  const request = buildCreateOrganizationRequest({\n    artifacts,\n    finalizeReplacement: true,\n    replacesOrganizationId: input.replacedOrganizationId,\n    rootContainerId: stored.rootContainerId,\n    userId: stored.userId,\n  });\n  if (\n    artifacts.organizationId !== stored.organizationId ||\n    request.organizationId !== stored.organizationId ||\n    request.rootContainerId !== stored.rootContainerId ||\n    !isCreateOrganizationRequest(request)\n  ) {\n    throw new Error(\"Stored organization provisioning attempt is inconsistent\");\n  }\n  return request;\n}\n\nfunction serializeArtifacts(artifacts: OrganizationProvisioningArtifacts) {\n  return JSON.stringify(artifacts, (_key, value: unknown) => {\n    if (value instanceof Uint8Array) {\n      return { [BYTE_MARKER]: bytesToBase64(value) };\n    }\n    return value;\n  });\n}\n\nfunction hasRecord(value: Record<string, unknown>, key: string): boolean {\n  return isPlainObject(Reflect.get(value, key));\n}\n\nfunction hasBytes(value: Record<string, unknown>, key: string): boolean {\n  return Reflect.get(value, key) instanceof Uint8Array;\n}\n\nfunction isMaterializedDocument(value: unknown): boolean {\n  return (\n    isPlainObject(value) &&\n    hasBytes(value, \"contentKey\") &&\n    hasRecord(value, \"plan\")\n  );\n}\n\nfunction isMaterializedContainer(value: unknown): boolean {\n  return (\n    isPlainObject(value) &&\n    hasBytes(value, \"containerKey\") &&\n    hasRecord(value, \"plan\")\n  );\n}\n\nfunction hasContainerBootstrapCore(value: Record<string, unknown>): boolean {\n  return (\n    typeof Reflect.get(value, \"containerId\") === \"string\" &&\n    isMaterializedDocument(Reflect.get(value, \"containerMetadataDocument\")) &&\n    hasBytes(value, \"containerMetadataInitialUpdate\") &&\n    isMaterializedContainer(Reflect.get(value, \"containerPlan\")) &&\n    hasRecord(value, \"containerRequest\") &&\n    Reflect.get(value, \"systemSlot\") !== undefined\n  );\n}\n\nfunction isOrganizationProvisioningArtifacts(\n  value: unknown,\n): value is OrganizationProvisioningArtifacts {\n  if (!isPlainObject(value)) return false;\n  const bootstrap = Reflect.get(value, \"bootstrap\");\n  const roster = Reflect.get(value, \"rosterProfileBootstrap\");\n  const metadata = Reflect.get(value, \"organizationMetadataBootstrap\");\n  const systemContainers = Reflect.get(value, \"systemContainerBootstraps\");\n  return (\n    (Reflect.get(value, \"replacementAuthorization\") === null ||\n      isOrganizationReplacementAuthorization(\n        Reflect.get(value, \"replacementAuthorization\"),\n      )) &&\n    typeof Reflect.get(value, \"organizationId\") === \"string\" &&\n    isPlainObject(bootstrap) &&\n    hasBytes(bootstrap, \"initialUpdate\") &&\n    typeof Reflect.get(bootstrap, \"metadataDocumentId\") === \"string\" &&\n    hasRecord(value, \"initialAdminGroup\") &&\n    hasRecord(value, \"initialMemberGroup\") &&\n    hasRecord(value, \"initialOrganizationPolicy\") &&\n    hasRecord(value, \"initialRootContainer\") &&\n    isMaterializedContainer(Reflect.get(value, \"rootContainer\")) &&\n    isMaterializedDocument(Reflect.get(value, \"rootMetadataDocument\")) &&\n    hasRecord(value, \"rootMetadataDocumentRequest\") &&\n    isPlainObject(roster) &&\n    hasContainerBootstrapCore(roster) &&\n    isMaterializedDocument(Reflect.get(roster, \"profileDocument\")) &&\n    hasBytes(roster, \"profileDocumentInitialUpdate\") &&\n    hasRecord(roster, \"profileDocumentRequest\") &&\n    isPlainObject(metadata) &&\n    hasContainerBootstrapCore(metadata) &&\n    isMaterializedDocument(\n      Reflect.get(metadata, \"organizationProfileDocument\"),\n    ) &&\n    hasRecord(metadata, \"organizationProfileDocumentRequest\") &&\n    typeof Reflect.get(metadata, \"organizationProfileSnapshot\") === \"string\" &&\n    Array.isArray(systemContainers) &&\n    systemContainers.every(\n      (container) =>\n        isPlainObject(container) && hasContainerBootstrapCore(container),\n    )\n  );\n}\n\nfunction deserializeArtifacts(\n  value: string,\n): OrganizationProvisioningArtifacts {\n  const parsed: unknown = JSON.parse(value, (_key, candidate: unknown) => {\n    if (\n      typeof candidate === \"object\" &&\n      candidate !== null &&\n      Object.keys(candidate).length === 1 &&\n      BYTE_MARKER in candidate\n    ) {\n      const encoded = Reflect.get(candidate, BYTE_MARKER);\n      if (typeof encoded === \"string\") {\n        return base64ToBytes(encoded);\n      }\n    }\n    return candidate;\n  });\n  if (!isOrganizationProvisioningArtifacts(parsed)) {\n    throw new Error(\"Stored organization provisioning attempt is invalid\");\n  }\n  return parsed;\n}\n\nexport async function makeOrganizationProvisioningAttemptDurable(input: {\n  artifacts: OrganizationProvisioningArtifacts;\n  canStartDurableMutation?: (() => boolean) | undefined;\n  dbClient: ExecSqlClientLike;\n  nativeSubscriptionRestore?: boolean | undefined;\n  replacesOrganizationId?: string | undefined;\n  rootContainerId: string;\n  userId: string;\n}): Promise<DurableOrganizationProvisioningAttempt | null> {\n  const attemptKey =\n    input.replacesOrganizationId ??\n    (input.nativeSubscriptionRestore\n      ? `native-subscription-restore:${input.userId}`\n      : null);\n  if (!attemptKey) {\n    return {\n      artifacts: input.artifacts,\n      request: buildCreateOrganizationRequest(input),\n      rootContainerId: input.rootContainerId,\n    };\n  }\n  const stored = await sqlOrganizationProvisioningAttemptPersistence.loadOrSave(\n    createExecSql(input.dbClient),\n    {\n      replacedOrganizationId: attemptKey,\n      userId: input.userId,\n      organizationId: input.artifacts.organizationId,\n      rootContainerId: input.rootContainerId,\n      serializedArtifacts: serializeArtifacts(input.artifacts),\n    },\n    input.canStartDurableMutation,\n  );\n  if (!stored) return null;\n  if (stored.userId !== input.userId) {\n    throw new Error(\n      \"Stored organization provisioning attempt belongs to another user\",\n    );\n  }\n  const artifacts = deserializeArtifacts(stored.serializedArtifacts);\n  const request = buildCreateOrganizationRequest({\n    artifacts,\n    nativeSubscriptionRestore: input.nativeSubscriptionRestore,\n    replacesOrganizationId: input.replacesOrganizationId,\n    rootContainerId: stored.rootContainerId,\n    userId: stored.userId,\n  });\n  if (\n    artifacts.organizationId !== stored.organizationId ||\n    request.organizationId !== stored.organizationId ||\n    request.rootContainerId !== stored.rootContainerId ||\n    !isCreateOrganizationRequest(request)\n  ) {\n    throw new Error(\"Stored organization provisioning attempt is inconsistent\");\n  }\n  return { artifacts, request, rootContainerId: stored.rootContainerId };\n}\n\nexport async function removeNativeSubscriptionRestoreProvisioningAttempt(input: {\n  canCommit?: (() => boolean) | undefined;\n  dbClient: ExecSqlClientLike;\n  organizationId: string;\n  userId: string;\n}): Promise<boolean> {\n  const attemptKey = `native-subscription-restore:${input.userId}`;\n  const execSql = createExecSql(input.dbClient);\n  const stored = await sqlOrganizationProvisioningAttemptPersistence.load(\n    execSql,\n    attemptKey,\n  );\n  if (!stored) return true;\n  if (\n    stored.userId !== input.userId ||\n    stored.organizationId !== input.organizationId\n  ) {\n    throw new Error(\n      \"Stored native restore organization provisioning attempt is inconsistent\",\n    );\n  }\n  return removeOrganizationProvisioningAttempt({\n    canCommit: input.canCommit,\n    execSql,\n    organizationId: input.organizationId,\n    replacedOrganizationId: attemptKey,\n    userId: input.userId,\n  });\n}\n\nexport async function removeOrganizationProvisioningAttempt(input: {\n  canCommit?: (() => boolean) | undefined;\n  execSql: ExecSql;\n  organizationId?: string | undefined;\n  replacedOrganizationId: string;\n  userId: string;\n}): Promise<boolean> {\n  return sqlOrganizationProvisioningAttemptPersistence.remove(\n    input.execSql,\n    input,\n    input.canCommit,\n  );\n}\n"]}