@tearleads/client-sdk 0.1.62 → 0.1.64

package/workflows/organizations/currentPolicyMutationAcknowledgement.js

@@ -1,65 +0,0 @@
-import { verifyPrincipalPolicyCheckpoint, verifyPrincipalPolicyCurrentSuccessor, } from "../../internal/crypto/index.js";
-import { canonicalKeyingJsonString } from "../../data/keying/canonicalJson.js";
-import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
-import { assertPrincipalPolicyCurrentStateMatchesHead } from "./groupPolicyMutationHead.js";
-/** Verify a single authored successor; this neither admits it nor persists a pin. */
-export async function verifyCurrentPolicyMutation(input, acknowledgedState) {
-    const previous = input.verifiedCurrentPolicy;
-    const stillCurrent = input.stillCurrent;
-    const owned = structuredClone({
-        expectedHead: input.expectedHead,
-        request: input.request,
-        signerPublicKeys: input.signerPublicKeys,
-        externalAuthority: input.externalAuthority,
-        localPolicyCheckpoint: input.localPolicyCheckpoint,
-        acknowledgedState,
-    });
-    assertProjectionVerificationCurrent(stillCurrent);
-    const { request, expectedHead } = owned;
-    const state = owned.acknowledgedState ?? {
-        ...request.state,
-        stateHash: expectedHead.stateHash,
-        createdAt: request.state.signedAt,
-    };
-    if (owned.acknowledgedState) {
-        const { createdAt: _createdAt, stateHash, ...responseState } = state;
-        if (stateHash !== expectedHead.stateHash ||
-            canonicalKeyingJsonString(responseState, "stored group policy state") !==
-                canonicalKeyingJsonString(request.state, "authored group policy state"))
-            throw new Error("Group policy state acknowledgement mismatch");
-    }
-    const verified = await verifyPrincipalPolicyCurrentSuccessor({
-        previous,
-        signerPublicKeys: owned.signerPublicKeys,
-        externalAuthority: owned.externalAuthority,
-        current: {
-            currentState: state,
-            currentProjection: request.projection,
-            currentGrants: request.grants,
-            currentPayload: {
-                ...request.encryptedPayload,
-                principalId: state.principalId,
-                principalType: state.principalType,
-                stateHash: state.stateHash,
-            },
-            currentMemberEnvelopes: {
-                envelopes: request.memberEnvelopes,
-                principalId: state.principalId,
-                principalType: state.principalType,
-                stateHash: state.stateHash,
-                epoch: state.keyEpoch,
-            },
-        },
-    });
-    if (!verified.ok)
-        throw verified.error;
-    assertPrincipalPolicyCurrentStateMatchesHead(verified.value.state, expectedHead);
-    verifyPrincipalPolicyCheckpoint({
-        chain: verified.value.retainedHistory,
-        currentState: verified.value.state,
-        localCheckpoint: owned.localPolicyCheckpoint,
-    });
-    assertProjectionVerificationCurrent(stillCurrent);
-    return verified.value;
-}
-//# sourceMappingURL=currentPolicyMutationAcknowledgement.js.map

package/workflows/organizations/currentPolicyMutationAcknowledgement.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"currentPolicyMutationAcknowledgement.js","sourceRoot":"","sources":["currentPolicyMutationAcknowledgement.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,+BAA+B,EAC/B,qCAAqC,GACtC,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,4CAA4C,EAAE,MAAM,2BAA2B,CAAC;AAazF,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAiC,EACjC,iBAA0C;IAE1C,MAAM,QAAQ,GAAG,KAAK,CAAC,qBAAqB,CAAC;IAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,iBAAiB;KAClB,CAAC,CAAC;IACH,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,iBAAiB,IAAI;QACvC,GAAG,OAAO,CAAC,KAAK;QAChB,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;KAClC,CAAC;IACF,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,aAAa,EAAE,GAAG,KAAK,CAAC;QACrE,IACE,SAAS,KAAK,YAAY,CAAC,SAAS;YACpC,yBAAyB,CAAC,aAAa,EAAE,2BAA2B,CAAC;gBACnE,yBAAyB,CAAC,OAAO,CAAC,KAAK,EAAE,6BAA6B,CAAC;YAEzE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,qCAAqC,CAAC;QAC3D,QAAQ;QACR,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,OAAO,EAAE;YACP,YAAY,EAAE,KAAK;YACnB,iBAAiB,EAAE,OAAO,CAAC,UAAU;YACrC,aAAa,EAAE,OAAO,CAAC,MAAM;YAC7B,cAAc,EAAE;gBACd,GAAG,OAAO,CAAC,gBAAgB;gBAC3B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B;YACD,sBAAsB,EAAE;gBACtB,SAAS,EAAE,OAAO,CAAC,eAAe;gBAClC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,QAAQ;aACtB;SACF;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,4CAA4C,CAC1C,QAAQ,CAAC,KAAK,CAAC,KAAK,EACpB,YAAY,CACb,CAAC;IACF,+BAA+B,CAAC;QAC9B,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe;QACrC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK;QAClC,eAAe,EAAE,KAAK,CAAC,qBAAqB;KAC7C,CAAC,CAAC;IACH,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,OAAO,QAAQ,CAAC,KAAK,CAAC;AACxB,CAAC","sourcesContent":["import {\n  type PrincipalPolicyCheckpoint,\n  type PrincipalPolicyExternalAuthority,\n  type PrincipalPolicySignerPublicKey,\n  type ReferencedPrincipalHead,\n  type VerifiedPrincipalPolicyCurrent,\n  verifyPrincipalPolicyCheckpoint,\n  verifyPrincipalPolicyCurrentSuccessor,\n} from \"@tearleads/crypto\";\nimport type { PutPrincipalPolicyRequest } from \"@tearleads/validators/request\";\nimport type { PrincipalStateResponse } from \"@tearleads/validators/response\";\nimport { canonicalKeyingJsonString } from \"../../data/keying/canonicalJson\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport { assertPrincipalPolicyCurrentStateMatchesHead } from \"./groupPolicyMutationHead\";\n\nexport interface CurrentPolicyMutationInput {\n  readonly currentPolicy?: never;\n  readonly verifiedCurrentPolicy: VerifiedPrincipalPolicyCurrent;\n  readonly expectedHead: ReferencedPrincipalHead;\n  readonly request: PutPrincipalPolicyRequest;\n  readonly signerPublicKeys: readonly PrincipalPolicySignerPublicKey[];\n  readonly externalAuthority?: PrincipalPolicyExternalAuthority | undefined;\n  readonly localPolicyCheckpoint?: PrincipalPolicyCheckpoint | null;\n  readonly stillCurrent: () => boolean;\n}\n\n/** Verify a single authored successor; this neither admits it nor persists a pin. */\nexport async function verifyCurrentPolicyMutation(\n  input: CurrentPolicyMutationInput,\n  acknowledgedState?: PrincipalStateResponse,\n): Promise<VerifiedPrincipalPolicyCurrent> {\n  const previous = input.verifiedCurrentPolicy;\n  const stillCurrent = input.stillCurrent;\n  const owned = structuredClone({\n    expectedHead: input.expectedHead,\n    request: input.request,\n    signerPublicKeys: input.signerPublicKeys,\n    externalAuthority: input.externalAuthority,\n    localPolicyCheckpoint: input.localPolicyCheckpoint,\n    acknowledgedState,\n  });\n  assertProjectionVerificationCurrent(stillCurrent);\n  const { request, expectedHead } = owned;\n  const state = owned.acknowledgedState ?? {\n    ...request.state,\n    stateHash: expectedHead.stateHash,\n    createdAt: request.state.signedAt,\n  };\n  if (owned.acknowledgedState) {\n    const { createdAt: _createdAt, stateHash, ...responseState } = state;\n    if (\n      stateHash !== expectedHead.stateHash ||\n      canonicalKeyingJsonString(responseState, \"stored group policy state\") !==\n        canonicalKeyingJsonString(request.state, \"authored group policy state\")\n    )\n      throw new Error(\"Group policy state acknowledgement mismatch\");\n  }\n  const verified = await verifyPrincipalPolicyCurrentSuccessor({\n    previous,\n    signerPublicKeys: owned.signerPublicKeys,\n    externalAuthority: owned.externalAuthority,\n    current: {\n      currentState: state,\n      currentProjection: request.projection,\n      currentGrants: request.grants,\n      currentPayload: {\n        ...request.encryptedPayload,\n        principalId: state.principalId,\n        principalType: state.principalType,\n        stateHash: state.stateHash,\n      },\n      currentMemberEnvelopes: {\n        envelopes: request.memberEnvelopes,\n        principalId: state.principalId,\n        principalType: state.principalType,\n        stateHash: state.stateHash,\n        epoch: state.keyEpoch,\n      },\n    },\n  });\n  if (!verified.ok) throw verified.error;\n  assertPrincipalPolicyCurrentStateMatchesHead(\n    verified.value.state,\n    expectedHead,\n  );\n  verifyPrincipalPolicyCheckpoint({\n    chain: verified.value.retainedHistory,\n    currentState: verified.value.state,\n    localCheckpoint: owned.localPolicyCheckpoint,\n  });\n  assertProjectionVerificationCurrent(stillCurrent);\n  return verified.value;\n}\n"]}

package/workflows/organizations/currentPrincipalMutationLease.js

@@ -1,39 +0,0 @@
-import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
-import { readPrincipalHistoryProtection } from "../../data/principals/principalHistoryRuntime.js";
-import { directoryHistoryProtection } from "../../data/principals/principalHistoryScopeProtection.js";
-import { principalPolicyReferenceFromBundle } from "../../data/principals/principalPolicyAdminSigners.js";
-import { apiPrincipalPolicyPageReader, } from "../principals/principalPolicyHistoryReader.js";
-import { createRuntimePrincipalPolicyCurrentResolver, } from "../principals/runtimePolicyRecovery.js";
-/** One lifetime fence and private custody boundary for every current-policy mutation. */
-export function createCurrentPrincipalMutationLease(runtime) {
-    const lease = readPrincipalHistoryProtection(runtime);
-    const resolveCurrentPolicy = createRuntimePrincipalPolicyCurrentResolver(runtime);
-    const historyReader = apiPrincipalPolicyPageReader(runtime.apiClient);
-    if (!lease || !resolveCurrentPolicy || !historyReader)
-        return undefined;
-    return async (callerCurrent, work) => lease(async ({ protection, stillCurrent: leaseCurrent }) => {
-        let active = true;
-        const stillCurrent = () => active && leaseCurrent() && callerCurrent();
-        try {
-            assertProjectionVerificationCurrent(stillCurrent);
-            const result = await work({
-                protection,
-                stillCurrent,
-                resolveCurrentPolicy,
-                historyReader,
-                directoryRecovery: (current) => ({
-                    historyReader,
-                    expectedHead: principalPolicyReferenceFromBundle(current),
-                    protection: directoryHistoryProtection(protection),
-                    resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,
-                }),
-            });
-            assertProjectionVerificationCurrent(stillCurrent);
-            return result;
-        }
-        finally {
-            active = false;
-        }
-    });
-}
-//# sourceMappingURL=currentPrincipalMutationLease.js.map

package/workflows/organizations/currentPrincipalMutationLease.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"currentPrincipalMutationLease.js","sourceRoot":"","sources":["currentPrincipalMutationLease.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAC;AAC/F,OAAO,EAAE,0BAA0B,EAAE,MAAM,uDAAuD,CAAC;AACnG,OAAO,EAAE,kCAAkC,EAAE,MAAM,mDAAmD,CAAC;AACvG,OAAO,EACL,4BAA4B,GAE7B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,2CAA2C,GAE5C,MAAM,qCAAqC,CAAC;AAoB7C,yFAAyF;AACzF,MAAM,UAAU,mCAAmC,CACjD,OAAuC;IAEvC,MAAM,KAAK,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,oBAAoB,GACxB,2CAA2C,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,aAAa,GAAG,4BAA4B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,IAAI,CAAC,oBAAoB,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IACxE,OAAO,KAAK,EACV,aAA4B,EAC5B,IAAmE,EACvD,EAAE,CACd,KAAK,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,EAAE;QACzD,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,MAAM,IAAI,YAAY,EAAE,IAAI,aAAa,EAAE,CAAC;QACvE,IAAI,CAAC;YACH,mCAAmC,CAAC,YAAY,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;gBACxB,UAAU;gBACV,YAAY;gBACZ,oBAAoB;gBACpB,aAAa;gBACb,iBAAiB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC/B,aAAa;oBACb,YAAY,EAAE,kCAAkC,CAAC,OAAO,CAAC;oBACzD,UAAU,EAAE,0BAA0B,CAAC,UAAU,CAAC;oBAClD,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;iBAC/D,CAAC;aACH,CAAC,CAAC;YACH,mCAAmC,CAAC,YAAY,CAAC,CAAC;YAClD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC","sourcesContent":["import type { PrincipalPolicyPageCurrent } from \"@tearleads/api-client\";\nimport type { PrincipalPolicyHistoryProgressOptions } from \"@tearleads/crypto\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport { readPrincipalHistoryProtection } from \"../../data/principals/principalHistoryRuntime\";\nimport { directoryHistoryProtection } from \"../../data/principals/principalHistoryScopeProtection\";\nimport { principalPolicyReferenceFromBundle } from \"../../data/principals/principalPolicyAdminSigners\";\nimport {\n  apiPrincipalPolicyPageReader,\n  type PrincipalPolicyPageReader,\n} from \"../principals/principalPolicyHistoryReader\";\nimport {\n  createRuntimePrincipalPolicyCurrentResolver,\n  type PrincipalPolicyRecoveryRuntime,\n} from \"../principals/runtimePolicyRecovery\";\nimport type { AcknowledgedPrincipalCurrentInput } from \"./retainAcknowledgedPrincipalCurrents\";\n\ninterface CurrentPrincipalMutationLeaseContext {\n  readonly protection: PrincipalPolicyHistoryProgressOptions;\n  readonly stillCurrent: () => boolean;\n  readonly resolveCurrentPolicy: NonNullable<\n    ReturnType<typeof createRuntimePrincipalPolicyCurrentResolver>\n  >;\n  readonly historyReader: PrincipalPolicyPageReader;\n  readonly directoryRecovery: (\n    current: PrincipalPolicyPageCurrent,\n  ) => AcknowledgedPrincipalCurrentInput[\"recovery\"];\n}\n\ntype CurrentPrincipalMutationLease = <T>(\n  callerCurrent: () => boolean,\n  work: (context: CurrentPrincipalMutationLeaseContext) => Promise<T>,\n) => Promise<T>;\n\n/** One lifetime fence and private custody boundary for every current-policy mutation. */\nexport function createCurrentPrincipalMutationLease(\n  runtime: PrincipalPolicyRecoveryRuntime,\n): CurrentPrincipalMutationLease | undefined {\n  const lease = readPrincipalHistoryProtection(runtime);\n  const resolveCurrentPolicy =\n    createRuntimePrincipalPolicyCurrentResolver(runtime);\n  const historyReader = apiPrincipalPolicyPageReader(runtime.apiClient);\n  if (!lease || !resolveCurrentPolicy || !historyReader) return undefined;\n  return async <T>(\n    callerCurrent: () => boolean,\n    work: (context: CurrentPrincipalMutationLeaseContext) => Promise<T>,\n  ): Promise<T> =>\n    lease(async ({ protection, stillCurrent: leaseCurrent }) => {\n      let active = true;\n      const stillCurrent = () => active && leaseCurrent() && callerCurrent();\n      try {\n        assertProjectionVerificationCurrent(stillCurrent);\n        const result = await work({\n          protection,\n          stillCurrent,\n          resolveCurrentPolicy,\n          historyReader,\n          directoryRecovery: (current) => ({\n            historyReader,\n            expectedHead: principalPolicyReferenceFromBundle(current),\n            protection: directoryHistoryProtection(protection),\n            resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,\n          }),\n        });\n        assertProjectionVerificationCurrent(stillCurrent);\n        return result;\n      } finally {\n        active = false;\n      }\n    });\n}\n"]}

package/workflows/organizations/dataUsageReadModel.d.ts

@@ -1,19 +0,0 @@
-import type { RequestResult, RequestResultOptions } from "../../internal/api-client/index.js";
-import type { OrganizationDataUsageResponse } from "../../internal/validators/response/index.js";
-import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
-export type OrganizationDataUsage = OrganizationDataUsageResponse;
-interface OrganizationDataUsageApi {
-    getOrganizationDataUsageResult(organizationId: string, options?: RequestResultOptions): Promise<RequestResult<OrganizationDataUsageResponse>>;
-}
-interface OrganizationDataUsageProjectionInput {
-    readonly execSql: ExecSql;
-    readonly organizationId: string;
-    readonly requesterUserId: string;
-}
-export interface ReconcileOrganizationDataUsageInput extends OrganizationDataUsageProjectionInput {
-    readonly apiClient: OrganizationDataUsageApi;
-    readonly logError?: ((message: string | Error, cause?: unknown) => void) | undefined;
-}
-export declare function loadLocalOrganizationDataUsage(input: OrganizationDataUsageProjectionInput): Promise<OrganizationDataUsage | null>;
-export declare function reconcileOrganizationDataUsage(input: ReconcileOrganizationDataUsageInput): Promise<OrganizationDataUsage | null>;
-export {};

package/workflows/organizations/dataUsageReadModel.js

@@ -1,64 +0,0 @@
-import { loadOrganizationDataUsageProjection, purgeOrganizationDataUsageProjection, saveOrganizationDataUsageProjection, } from "../../data/persistence/organizations/organizationDataUsagePersistence.js";
-import { recordOrganizationPresentationDenials } from "../../data/persistence/organizations/organizationPresentationDenialPersistence.js";
-import { captureOrganizationPresentationAccessAttempt, denyOrganizationPresentationAccess, isOrganizationPresentationAccessAttemptCurrent, isOrganizationPresentationAccessReadable, restoreOrganizationPresentationAccess, runOrganizationPresentationMutation, runOrganizationPresentationRead, } from "./organizationPresentationAccessState.js";
-import { isOrganizationPresentationAccessDeniedFailure } from "./organizationPresentationFailures.js";
-export async function loadLocalOrganizationDataUsage(input) {
-    return runOrganizationPresentationRead(input, "usage", () => loadOrganizationDataUsageProjection(input.execSql, input.organizationId, input.requesterUserId));
-}
-function retainedIfUsageReadable(input, attempt, value) {
-    return isOrganizationPresentationAccessAttemptCurrent(input, attempt) &&
-        isOrganizationPresentationAccessReadable(input, "usage")
-        ? value
-        : null;
-}
-export async function reconcileOrganizationDataUsage(input) {
-    const attempt = captureOrganizationPresentationAccessAttempt(input, "usage");
-    const local = await loadLocalOrganizationDataUsage(input);
-    const result = await input.apiClient.getOrganizationDataUsageResult(input.organizationId, { reportErrors: false });
-    if (!result.ok) {
-        if (isOrganizationPresentationAccessDeniedFailure(result)) {
-            denyOrganizationPresentationAccess(input, ["usage"]);
-            // Durable marker first: a failed purge plus a restart must not serve
-            // the revoked usage projection.
-            try {
-                await runOrganizationPresentationMutation(input.execSql, () => recordOrganizationPresentationDenials(input, ["usage"]));
-            }
-            catch (error) {
-                input.logError?.("Failed to record denied organization data usage", error);
-            }
-            try {
-                await runOrganizationPresentationMutation(input.execSql, () => purgeOrganizationDataUsageProjection(input.execSql, input.organizationId, input.requesterUserId));
-            }
-            catch (error) {
-                input.logError?.("Failed to purge denied organization data usage", error);
-            }
-            return null;
-        }
-        result.report();
-        return retainedIfUsageReadable(input, attempt, local);
-    }
-    if (result.data.organizationId !== input.organizationId) {
-        input.logError?.(`Organization data-usage response scope does not match ${input.organizationId}`);
-        return retainedIfUsageReadable(input, attempt, local);
-    }
-    return runOrganizationPresentationMutation(input.execSql, async () => {
-        if (!isOrganizationPresentationAccessAttemptCurrent(input, attempt)) {
-            return null;
-        }
-        try {
-            await saveOrganizationDataUsageProjection({
-                execSql: input.execSql,
-                requesterUserId: input.requesterUserId,
-                response: result.data,
-            });
-        }
-        catch (error) {
-            input.logError?.("Failed to persist organization data usage", error);
-            return retainedIfUsageReadable(input, attempt, local);
-        }
-        return restoreOrganizationPresentationAccess(input, attempt)
-            ? result.data
-            : null;
-    });
-}
-//# sourceMappingURL=dataUsageReadModel.js.map

package/workflows/organizations/dataUsageReadModel.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dataUsageReadModel.js","sourceRoot":"","sources":["dataUsageReadModel.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,GACpC,MAAM,uEAAuE,CAAC;AAC/E,OAAO,EAAE,qCAAqC,EAAE,MAAM,gFAAgF,CAAC;AAEvI,OAAO,EACL,4CAA4C,EAC5C,kCAAkC,EAClC,8CAA8C,EAC9C,wCAAwC,EAExC,qCAAqC,EACrC,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,6CAA6C,EAAE,MAAM,oCAAoC,CAAC;AAyBnG,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAA2C;IAE3C,OAAO,+BAA+B,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAC1D,mCAAmC,CACjC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,eAAe,CACtB,CACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAA2C,EAC3C,OAA8C,EAC9C,KAAQ;IAER,OAAO,8CAA8C,CAAC,KAAK,EAAE,OAAO,CAAC;QACnE,wCAAwC,CAAC,KAAK,EAAE,OAAO,CAAC;QACxD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAA0C;IAE1C,MAAM,OAAO,GAAG,4CAA4C,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,MAAM,8BAA8B,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,8BAA8B,CACjE,KAAK,CAAC,cAAc,EACpB,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,IAAI,6CAA6C,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,kCAAkC,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YACrD,qEAAqE;YACrE,gCAAgC;YAChC,IAAI,CAAC;gBACH,MAAM,mCAAmC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAC5D,qCAAqC,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CACxD,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,CAAC,QAAQ,EAAE,CACd,iDAAiD,EACjD,KAAK,CACN,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,mCAAmC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAC5D,oCAAoC,CAClC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,eAAe,CACtB,CACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,CAAC,QAAQ,EAAE,CACd,gDAAgD,EAChD,KAAK,CACN,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QACxD,KAAK,CAAC,QAAQ,EAAE,CACd,yDAAyD,KAAK,CAAC,cAAc,EAAE,CAChF,CAAC;QACF,OAAO,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,mCAAmC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACnE,IAAI,CAAC,8CAA8C,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,MAAM,mCAAmC,CAAC;gBACxC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,QAAQ,EAAE,MAAM,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,QAAQ,EAAE,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;YACrE,OAAO,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,qCAAqC,CAAC,KAAK,EAAE,OAAO,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,IAAI,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type {\n  RequestResult,\n  RequestResultOptions,\n} from \"@tearleads/api-client\";\nimport type { OrganizationDataUsageResponse } from \"@tearleads/validators/response\";\nimport {\n  loadOrganizationDataUsageProjection,\n  purgeOrganizationDataUsageProjection,\n  saveOrganizationDataUsageProjection,\n} from \"../../data/persistence/organizations/organizationDataUsagePersistence\";\nimport { recordOrganizationPresentationDenials } from \"../../data/persistence/organizations/organizationPresentationDenialPersistence\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport {\n  captureOrganizationPresentationAccessAttempt,\n  denyOrganizationPresentationAccess,\n  isOrganizationPresentationAccessAttemptCurrent,\n  isOrganizationPresentationAccessReadable,\n  type OrganizationPresentationAccessAttempt,\n  restoreOrganizationPresentationAccess,\n  runOrganizationPresentationMutation,\n  runOrganizationPresentationRead,\n} from \"./organizationPresentationAccessState\";\nimport { isOrganizationPresentationAccessDeniedFailure } from \"./organizationPresentationFailures\";\n\nexport type OrganizationDataUsage = OrganizationDataUsageResponse;\n\ninterface OrganizationDataUsageApi {\n  getOrganizationDataUsageResult(\n    organizationId: string,\n    options?: RequestResultOptions,\n  ): Promise<RequestResult<OrganizationDataUsageResponse>>;\n}\n\ninterface OrganizationDataUsageProjectionInput {\n  readonly execSql: ExecSql;\n  readonly organizationId: string;\n  readonly requesterUserId: string;\n}\n\nexport interface ReconcileOrganizationDataUsageInput\n  extends OrganizationDataUsageProjectionInput {\n  readonly apiClient: OrganizationDataUsageApi;\n  readonly logError?:\n    | ((message: string | Error, cause?: unknown) => void)\n    | undefined;\n}\n\nexport async function loadLocalOrganizationDataUsage(\n  input: OrganizationDataUsageProjectionInput,\n): Promise<OrganizationDataUsage | null> {\n  return runOrganizationPresentationRead(input, \"usage\", () =>\n    loadOrganizationDataUsageProjection(\n      input.execSql,\n      input.organizationId,\n      input.requesterUserId,\n    ),\n  );\n}\n\nfunction retainedIfUsageReadable<T>(\n  input: OrganizationDataUsageProjectionInput,\n  attempt: OrganizationPresentationAccessAttempt,\n  value: T,\n): T | null {\n  return isOrganizationPresentationAccessAttemptCurrent(input, attempt) &&\n    isOrganizationPresentationAccessReadable(input, \"usage\")\n    ? value\n    : null;\n}\n\nexport async function reconcileOrganizationDataUsage(\n  input: ReconcileOrganizationDataUsageInput,\n): Promise<OrganizationDataUsage | null> {\n  const attempt = captureOrganizationPresentationAccessAttempt(input, \"usage\");\n  const local = await loadLocalOrganizationDataUsage(input);\n  const result = await input.apiClient.getOrganizationDataUsageResult(\n    input.organizationId,\n    { reportErrors: false },\n  );\n  if (!result.ok) {\n    if (isOrganizationPresentationAccessDeniedFailure(result)) {\n      denyOrganizationPresentationAccess(input, [\"usage\"]);\n      // Durable marker first: a failed purge plus a restart must not serve\n      // the revoked usage projection.\n      try {\n        await runOrganizationPresentationMutation(input.execSql, () =>\n          recordOrganizationPresentationDenials(input, [\"usage\"]),\n        );\n      } catch (error) {\n        input.logError?.(\n          \"Failed to record denied organization data usage\",\n          error,\n        );\n      }\n      try {\n        await runOrganizationPresentationMutation(input.execSql, () =>\n          purgeOrganizationDataUsageProjection(\n            input.execSql,\n            input.organizationId,\n            input.requesterUserId,\n          ),\n        );\n      } catch (error) {\n        input.logError?.(\n          \"Failed to purge denied organization data usage\",\n          error,\n        );\n      }\n      return null;\n    }\n\n    result.report();\n    return retainedIfUsageReadable(input, attempt, local);\n  }\n\n  if (result.data.organizationId !== input.organizationId) {\n    input.logError?.(\n      `Organization data-usage response scope does not match ${input.organizationId}`,\n    );\n    return retainedIfUsageReadable(input, attempt, local);\n  }\n\n  return runOrganizationPresentationMutation(input.execSql, async () => {\n    if (!isOrganizationPresentationAccessAttemptCurrent(input, attempt)) {\n      return null;\n    }\n    try {\n      await saveOrganizationDataUsageProjection({\n        execSql: input.execSql,\n        requesterUserId: input.requesterUserId,\n        response: result.data,\n      });\n    } catch (error) {\n      input.logError?.(\"Failed to persist organization data usage\", error);\n      return retainedIfUsageReadable(input, attempt, local);\n    }\n    return restoreOrganizationPresentationAccess(input, attempt)\n      ? result.data\n      : null;\n  });\n}\n"]}

package/workflows/organizations/deleteCurrentOrganizationGroup.js

@@ -1,35 +0,0 @@
-import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
-import { buildOrganizationGroupDirectoryPolicyRequest, removeOrganizationGroupHead, } from "./organizationGroupDirectory.js";
-import { projectionUserIds, resolveRequiredUserIdentities, } from "./trustedOrganizationUsers.js";
-/** Delete against a verified directory without loading the removed group's history. */
-export async function deleteCurrentOrganizationGroup(input) {
-    const { context } = input;
-    assertProjectionVerificationCurrent(context.stillCurrent);
-    const adminProjection = context.admins.policy.projection;
-    const request = await buildOrganizationGroupDirectoryPolicyRequest({
-        ...input,
-        adminProjection,
-        adminUsers: await resolveRequiredUserIdentities({
-            resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,
-            userIds: projectionUserIds(adminProjection),
-        }),
-        currentPolicy: context.directory.current,
-        descriptor: context.descriptor,
-        groupHeads: removeOrganizationGroupHead({
-            descriptor: context.descriptor,
-            groupId: input.groupId,
-        }),
-    });
-    assertProjectionVerificationCurrent(context.stillCurrent);
-    const stored = await input.apiClient.deleteOrganizationGroup(input.organizationId, input.groupId, { organizationPolicy: request });
-    assertProjectionVerificationCurrent(context.stillCurrent);
-    if (!stored)
-        throw new Error("Group could not be deleted");
-    if (stored.organizationId !== input.organizationId ||
-        stored.groupId !== input.groupId)
-        throw new Error("Group deletion response target mismatch");
-    await context.retainDirectory(request, stored.organizationPolicy);
-    assertProjectionVerificationCurrent(context.stillCurrent);
-    return stored;
-}
-//# sourceMappingURL=deleteCurrentOrganizationGroup.js.map

package/workflows/organizations/deleteCurrentOrganizationGroup.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"deleteCurrentOrganizationGroup.js","sourceRoot":"","sources":["deleteCurrentOrganizationGroup.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AAGpG,OAAO,EACL,4CAA4C,EAC5C,2BAA2B,GAC5B,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,iBAAiB,EACjB,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC;AAEpC,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAYpD;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,mCAAmC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,4CAA4C,CAAC;QACjE,GAAG,KAAK;QACR,eAAe;QACf,UAAU,EAAE,MAAM,6BAA6B,CAAC;YAC9C,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;YAC5D,OAAO,EAAE,iBAAiB,CAAC,eAAe,CAAC;SAC5C,CAAC;QACF,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO;QACxC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,2BAA2B,CAAC;YACtC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;KACH,CAAC,CAAC;IACH,mCAAmC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,uBAAuB,CAC1D,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,EACb,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAChC,CAAC;IACF,mCAAmC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC3D,IACE,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;QAC9C,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAEhC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,MAAM,OAAO,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAClE,mCAAmC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import type { SigningKeyPair } from \"@tearleads/crypto\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport type { TrustedUserIdentityResolver } from \"../../data/trustedUserIdentity\";\nimport type { deleteOrganizationGroup } from \"./deleteOrganizationGroup\";\nimport {\n  buildOrganizationGroupDirectoryPolicyRequest,\n  removeOrganizationGroupHead,\n} from \"./organizationGroupDirectory\";\nimport type { CurrentOrganizationMutationContext } from \"./runtimeCurrentOrganizationMutation\";\nimport {\n  projectionUserIds,\n  resolveRequiredUserIdentities,\n} from \"./trustedOrganizationUsers\";\n\n/** Delete against a verified directory without loading the removed group's history. */\nexport async function deleteCurrentOrganizationGroup(input: {\n  readonly apiClient: Pick<\n    Parameters<typeof deleteOrganizationGroup>[0][\"apiClient\"],\n    \"deleteOrganizationGroup\"\n  >;\n  readonly context: CurrentOrganizationMutationContext;\n  readonly groupId: string;\n  readonly organizationId: string;\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  readonly signerUserId: string;\n  readonly signingFingerprint: string;\n  readonly signingKeyPair: SigningKeyPair;\n}) {\n  const { context } = input;\n  assertProjectionVerificationCurrent(context.stillCurrent);\n  const adminProjection = context.admins.policy.projection;\n  const request = await buildOrganizationGroupDirectoryPolicyRequest({\n    ...input,\n    adminProjection,\n    adminUsers: await resolveRequiredUserIdentities({\n      resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n      userIds: projectionUserIds(adminProjection),\n    }),\n    currentPolicy: context.directory.current,\n    descriptor: context.descriptor,\n    groupHeads: removeOrganizationGroupHead({\n      descriptor: context.descriptor,\n      groupId: input.groupId,\n    }),\n  });\n  assertProjectionVerificationCurrent(context.stillCurrent);\n  const stored = await input.apiClient.deleteOrganizationGroup(\n    input.organizationId,\n    input.groupId,\n    { organizationPolicy: request },\n  );\n  assertProjectionVerificationCurrent(context.stillCurrent);\n  if (!stored) throw new Error(\"Group could not be deleted\");\n  if (\n    stored.organizationId !== input.organizationId ||\n    stored.groupId !== input.groupId\n  )\n    throw new Error(\"Group deletion response target mismatch\");\n  await context.retainDirectory(request, stored.organizationPolicy);\n  assertProjectionVerificationCurrent(context.stillCurrent);\n  return stored;\n}\n"]}

package/workflows/organizations/deleteOrganizationGroup.d.ts

@@ -1,19 +0,0 @@
-import type { SigningKeyPair } from "../../internal/crypto/index.js";
-import type { DeleteOrganizationGroupRequest } from "../../internal/validators/request/index.js";
-import type { DeleteOrganizationGroupResponse } from "../../internal/validators/response/index.js";
-import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
-import type { TrustedUserIdentityResolver } from "../../data/trustedUserIdentity/index.js";
-import type { PrincipalPolicyReadApi } from "./groupPolicyMutationContext.js";
-export declare function deleteOrganizationGroup(input: {
-    readonly apiClient: PrincipalPolicyReadApi & {
-        deleteOrganizationGroup: (organizationId: string, groupId: string, request: DeleteOrganizationGroupRequest) => Promise<DeleteOrganizationGroupResponse | null>;
-    };
-    readonly execSql: ExecSql;
-    readonly groupId: string;
-    readonly organizationId: string;
-    readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;
-    readonly signerUserId: string;
-    readonly signingFingerprint: string;
-    readonly signingKeyPair: SigningKeyPair;
-    readonly stillCurrent?: (() => boolean) | undefined;
-}): Promise<DeleteOrganizationGroupResponse>;

package/workflows/organizations/deleteOrganizationGroup.js

@@ -1,75 +0,0 @@
-import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
-import { persistLocallyAcknowledgedPrincipalPolicyBundles } from "../../data/persistence/locallyAcknowledgedCheckpointPersistence.js";
-import { loadOrganizationExternalAdminPolicy } from "../principals/externalAdminPolicy.js";
-import { acknowledgeGroupPolicyState, buildAcknowledgedGroupPolicyBundle, } from "./groupPolicyMutationAcknowledgement.js";
-import { groupPolicyMutationHead } from "./groupPolicyMutationHead.js";
-import { buildOrganizationGroupDirectoryPolicyRequest, removeOrganizationGroupHead, } from "./organizationGroupDirectory.js";
-import { projectionUserIds, resolveRequiredUserIdentities, } from "./trustedOrganizationUsers.js";
-export async function deleteOrganizationGroup(input) {
-    const stillCurrent = input.stillCurrent;
-    assertProjectionVerificationCurrent(stillCurrent);
-    await input.apiClient.recoverPendingPrincipalMutation?.(input.organizationId);
-    assertProjectionVerificationCurrent(stillCurrent);
-    const externalAdminPolicy = await loadOrganizationExternalAdminPolicy({
-        currentPolicyReader: input.apiClient,
-        execSql: input.execSql,
-        organizationId: input.organizationId,
-        resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,
-        stillCurrent,
-    });
-    assertProjectionVerificationCurrent(stillCurrent);
-    if (!externalAdminPolicy?.signerUserIds.includes(input.signerUserId)) {
-        throw new Error("Organization admin authority could not be verified");
-    }
-    const adminProjection = externalAdminPolicy.adminBundle.currentProjection;
-    const adminUsers = await resolveRequiredUserIdentities({
-        resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,
-        userIds: projectionUserIds(adminProjection),
-    });
-    const organizationRequest = await buildOrganizationGroupDirectoryPolicyRequest({
-        adminProjection,
-        adminUsers,
-        currentPolicy: externalAdminPolicy.bundle,
-        descriptor: externalAdminPolicy.descriptor,
-        groupHeads: removeOrganizationGroupHead({
-            descriptor: externalAdminPolicy.descriptor,
-            groupId: input.groupId,
-        }),
-        signerUserId: input.signerUserId,
-        signingFingerprint: input.signingFingerprint,
-        signingKeyPair: input.signingKeyPair,
-    });
-    assertProjectionVerificationCurrent(stillCurrent);
-    const stored = await input.apiClient.deleteOrganizationGroup(input.organizationId, input.groupId, { organizationPolicy: organizationRequest });
-    assertProjectionVerificationCurrent(stillCurrent);
-    if (!stored) {
-        throw new Error("Group could not be deleted");
-    }
-    if (stored.organizationId !== input.organizationId ||
-        stored.groupId !== input.groupId) {
-        throw new Error("Group deletion response target mismatch");
-    }
-    const organizationHead = await groupPolicyMutationHead(organizationRequest);
-    const organizationPolicy = await acknowledgeGroupPolicyState({
-        currentPolicy: externalAdminPolicy.bundle,
-        expectedHead: organizationHead,
-        request: organizationRequest,
-        response: stored.organizationPolicy.currentState,
-    });
-    const organizationBundle = buildAcknowledgedGroupPolicyBundle({
-        currentPolicy: externalAdminPolicy.bundle,
-        expectedHead: organizationHead,
-        request: organizationRequest,
-        response: stored.organizationPolicy,
-    });
-    await persistLocallyAcknowledgedPrincipalPolicyBundles({
-        entries: [{ bundle: organizationBundle, policy: organizationPolicy }],
-        execSql: input.execSql,
-        organizationId: input.organizationId,
-        updatedAt: new Date().toISOString(),
-        stillCurrent,
-    });
-    assertProjectionVerificationCurrent(stillCurrent);
-    return stored;
-}
-//# sourceMappingURL=deleteOrganizationGroup.js.map

package/workflows/organizations/deleteOrganizationGroup.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"deleteOrganizationGroup.js","sourceRoot":"","sources":["deleteOrganizationGroup.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,gDAAgD,EAAE,MAAM,iEAAiE,CAAC;AAGnI,OAAO,EAAE,mCAAmC,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,EACL,2BAA2B,EAC3B,kCAAkC,GACnC,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EACL,4CAA4C,EAC5C,2BAA2B,GAC5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,iBAAiB,EACjB,6BAA6B,GAC9B,MAAM,4BAA4B,CAAC;AAEpC,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAgB7C;IACC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACxC,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,KAAK,CAAC,SAAS,CAAC,+BAA+B,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9E,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,mBAAmB,GAAG,MAAM,mCAAmC,CAAC;QACpE,mBAAmB,EAAE,KAAK,CAAC,SAAS;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;QAC5D,YAAY;KACb,CAAC,CAAC;IACH,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,mBAAmB,EAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,eAAe,GAAG,mBAAmB,CAAC,WAAW,CAAC,iBAAiB,CAAC;IAC1E,MAAM,UAAU,GAAG,MAAM,6BAA6B,CAAC;QACrD,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;QAC5D,OAAO,EAAE,iBAAiB,CAAC,eAAe,CAAC;KAC5C,CAAC,CAAC;IACH,MAAM,mBAAmB,GACvB,MAAM,4CAA4C,CAAC;QACjD,eAAe;QACf,UAAU;QACV,aAAa,EAAE,mBAAmB,CAAC,MAAM;QACzC,UAAU,EAAE,mBAAmB,CAAC,UAAU;QAC1C,UAAU,EAAE,2BAA2B,CAAC;YACtC,UAAU,EAAE,mBAAmB,CAAC,UAAU;YAC1C,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACL,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,uBAAuB,CAC1D,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,EACb,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,CAC5C,CAAC;IACF,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IACE,MAAM,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;QAC9C,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAChC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;IAC5E,MAAM,kBAAkB,GAAG,MAAM,2BAA2B,CAAC;QAC3D,aAAa,EAAE,mBAAmB,CAAC,MAAM;QACzC,YAAY,EAAE,gBAAgB;QAC9B,OAAO,EAAE,mBAAmB;QAC5B,QAAQ,EAAE,MAAM,CAAC,kBAAkB,CAAC,YAAY;KACjD,CAAC,CAAC;IACH,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;QAC5D,aAAa,EAAE,mBAAmB,CAAC,MAAM;QACzC,YAAY,EAAE,gBAAgB;QAC9B,OAAO,EAAE,mBAAmB;QAC5B,QAAQ,EAAE,MAAM,CAAC,kBAAkB;KACpC,CAAC,CAAC;IACH,MAAM,gDAAgD,CAAC;QACrD,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACrE,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,YAAY;KACb,CAAC,CAAC;IACH,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import type { SigningKeyPair } from \"@tearleads/crypto\";\nimport type { DeleteOrganizationGroupRequest } from \"@tearleads/validators/request\";\nimport type { DeleteOrganizationGroupResponse } from \"@tearleads/validators/response\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport { persistLocallyAcknowledgedPrincipalPolicyBundles } from \"../../data/persistence/locallyAcknowledgedCheckpointPersistence\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport type { TrustedUserIdentityResolver } from \"../../data/trustedUserIdentity\";\nimport { loadOrganizationExternalAdminPolicy } from \"../principals/externalAdminPolicy\";\nimport {\n  acknowledgeGroupPolicyState,\n  buildAcknowledgedGroupPolicyBundle,\n} from \"./groupPolicyMutationAcknowledgement\";\nimport type { PrincipalPolicyReadApi } from \"./groupPolicyMutationContext\";\nimport { groupPolicyMutationHead } from \"./groupPolicyMutationHead\";\nimport {\n  buildOrganizationGroupDirectoryPolicyRequest,\n  removeOrganizationGroupHead,\n} from \"./organizationGroupDirectory\";\nimport {\n  projectionUserIds,\n  resolveRequiredUserIdentities,\n} from \"./trustedOrganizationUsers\";\n\nexport async function deleteOrganizationGroup(input: {\n  readonly apiClient: PrincipalPolicyReadApi & {\n    deleteOrganizationGroup: (\n      organizationId: string,\n      groupId: string,\n      request: DeleteOrganizationGroupRequest,\n    ) => Promise<DeleteOrganizationGroupResponse | null>;\n  };\n  readonly execSql: ExecSql;\n  readonly groupId: string;\n  readonly organizationId: string;\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  readonly signerUserId: string;\n  readonly signingFingerprint: string;\n  readonly signingKeyPair: SigningKeyPair;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<DeleteOrganizationGroupResponse> {\n  const stillCurrent = input.stillCurrent;\n  assertProjectionVerificationCurrent(stillCurrent);\n  await input.apiClient.recoverPendingPrincipalMutation?.(input.organizationId);\n  assertProjectionVerificationCurrent(stillCurrent);\n  const externalAdminPolicy = await loadOrganizationExternalAdminPolicy({\n    currentPolicyReader: input.apiClient,\n    execSql: input.execSql,\n    organizationId: input.organizationId,\n    resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n    stillCurrent,\n  });\n  assertProjectionVerificationCurrent(stillCurrent);\n  if (!externalAdminPolicy?.signerUserIds.includes(input.signerUserId)) {\n    throw new Error(\"Organization admin authority could not be verified\");\n  }\n  const adminProjection = externalAdminPolicy.adminBundle.currentProjection;\n  const adminUsers = await resolveRequiredUserIdentities({\n    resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n    userIds: projectionUserIds(adminProjection),\n  });\n  const organizationRequest =\n    await buildOrganizationGroupDirectoryPolicyRequest({\n      adminProjection,\n      adminUsers,\n      currentPolicy: externalAdminPolicy.bundle,\n      descriptor: externalAdminPolicy.descriptor,\n      groupHeads: removeOrganizationGroupHead({\n        descriptor: externalAdminPolicy.descriptor,\n        groupId: input.groupId,\n      }),\n      signerUserId: input.signerUserId,\n      signingFingerprint: input.signingFingerprint,\n      signingKeyPair: input.signingKeyPair,\n    });\n  assertProjectionVerificationCurrent(stillCurrent);\n  const stored = await input.apiClient.deleteOrganizationGroup(\n    input.organizationId,\n    input.groupId,\n    { organizationPolicy: organizationRequest },\n  );\n  assertProjectionVerificationCurrent(stillCurrent);\n  if (!stored) {\n    throw new Error(\"Group could not be deleted\");\n  }\n  if (\n    stored.organizationId !== input.organizationId ||\n    stored.groupId !== input.groupId\n  ) {\n    throw new Error(\"Group deletion response target mismatch\");\n  }\n  const organizationHead = await groupPolicyMutationHead(organizationRequest);\n  const organizationPolicy = await acknowledgeGroupPolicyState({\n    currentPolicy: externalAdminPolicy.bundle,\n    expectedHead: organizationHead,\n    request: organizationRequest,\n    response: stored.organizationPolicy.currentState,\n  });\n  const organizationBundle = buildAcknowledgedGroupPolicyBundle({\n    currentPolicy: externalAdminPolicy.bundle,\n    expectedHead: organizationHead,\n    request: organizationRequest,\n    response: stored.organizationPolicy,\n  });\n  await persistLocallyAcknowledgedPrincipalPolicyBundles({\n    entries: [{ bundle: organizationBundle, policy: organizationPolicy }],\n    execSql: input.execSql,\n    organizationId: input.organizationId,\n    updatedAt: new Date().toISOString(),\n    stillCurrent,\n  });\n  assertProjectionVerificationCurrent(stillCurrent);\n  return stored;\n}\n"]}

package/workflows/organizations/groupCreation.d.ts

@@ -1,21 +0,0 @@
-import type { EncapsulationKeyPair, SigningKeyPair } from "../../internal/crypto/index.js";
-import type { SecurityIncidentReporter } from "../../data/shared/securityIncidents.js";
-import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
-import type { TrustedUserIdentityResolver } from "../../data/trustedUserIdentity/index.js";
-import type { createGroupMetadataAccess } from "./groupMetadataAccess.js";
-import { type OrganizationPrincipalPolicyApi } from "./groupPolicyMutationContext.js";
-import type { OrganizationGroupSummary } from "./readModel.js";
-export declare function createOrganizationGroup(input: {
-    readonly metadataAccess: ReturnType<typeof createGroupMetadataAccess>;
-    readonly apiClient: OrganizationPrincipalPolicyApi;
-    readonly creatorEncapsulationKeyPair: EncapsulationKeyPair;
-    readonly execSql: ExecSql;
-    readonly name: string;
-    readonly organizationId: string;
-    readonly reportSecurityIncident: SecurityIncidentReporter;
-    readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;
-    readonly signerUserId: string;
-    readonly signingFingerprint: string;
-    readonly signingKeyPair: SigningKeyPair;
-    readonly stillCurrent?: (() => boolean) | undefined;
-}): Promise<OrganizationGroupSummary>;

package/workflows/organizations/groupCreation.js

@@ -1,68 +0,0 @@
-import { assertProjectionVerificationCurrent } from "../../data/keyingProjectionVerification/types.js";
-import { loadOrganizationExternalAdminPolicy } from "../principals/externalAdminPolicy.js";
-import { cacheGroupPolicy, } from "./groupPolicyMutationContext.js";
-import { commitCreatedGroupToDirectory } from "./organizationGroupDirectory.js";
-import { buildInitialGroupPolicyRequest } from "./principalPolicyRequest.js";
-export async function createOrganizationGroup(input) {
-    assertProjectionVerificationCurrent(input.stillCurrent);
-    await input.apiClient.recoverPendingPrincipalMutation?.(input.organizationId);
-    assertProjectionVerificationCurrent(input.stillCurrent);
-    const externalAdminPolicy = await loadOrganizationExternalAdminPolicy({
-        currentPolicyReader: input.apiClient,
-        execSql: input.execSql,
-        organizationId: input.organizationId,
-        resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,
-        stillCurrent: input.stillCurrent,
-    });
-    assertProjectionVerificationCurrent(input.stillCurrent);
-    if (!externalAdminPolicy) {
-        throw new Error("Organization admin authority could not be verified");
-    }
-    if (!externalAdminPolicy.signerUserIds.includes(input.signerUserId)) {
-        throw new Error("Organization admin authority could not be verified");
-    }
-    const request = await buildInitialGroupPolicyRequest({
-        creatorEncapsulationKeyPair: input.creatorEncapsulationKeyPair,
-        externalAuthority: externalAdminPolicy.externalAuthority.currentHead,
-        groupId: crypto.randomUUID(),
-        includeSignerAsAdmin: false,
-        name: input.name,
-        metadataKey: await input.metadataAccess.loadEncryptionKey(),
-        signerUserId: input.signerUserId,
-        signingFingerprint: input.signingFingerprint,
-        signingKeyPair: input.signingKeyPair,
-    });
-    const { group, head: expectedHead } = await commitCreatedGroupToDirectory({
-        ...input,
-        externalAdminPolicy,
-        readEncryptedName: input.metadataAccess.readName,
-        request,
-    });
-    assertProjectionVerificationCurrent(input.stillCurrent);
-    await cacheGroupPolicy({
-        acknowledgedMemberEnvelopes: {
-            envelopes: request.initialGroupPolicy.memberEnvelopes,
-            epoch: request.initialGroupPolicy.state.keyEpoch,
-            principalId: request.groupId,
-            principalType: "group",
-            stateHash: expectedHead.stateHash,
-        },
-        apiClient: input.apiClient,
-        execSql: input.execSql,
-        expectedCurrentHead: expectedHead,
-        externalAuthority: externalAdminPolicy.externalAuthority,
-        groupId: group.groupId,
-        localPolicyCheckpoint: {
-            principalId: request.groupId,
-            principalType: "group",
-            stateHash: expectedHead.stateHash,
-            version: expectedHead.version,
-        },
-        organizationId: input.organizationId,
-        resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,
-        stillCurrent: input.stillCurrent,
-    });
-    assertProjectionVerificationCurrent(input.stillCurrent);
-    return { ...group, name: input.name.trim(), nameUnreadable: false };
-}
-//# sourceMappingURL=groupCreation.js.map

package/workflows/organizations/groupCreation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"groupCreation.js","sourceRoot":"","sources":["groupCreation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AAIpG,OAAO,EAAE,mCAAmC,EAAE,MAAM,mCAAmC,CAAC;AAExF,OAAO,EACL,gBAAgB,GAEjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,8BAA8B,EAAE,MAAM,0BAA0B,CAAC;AAG1E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAa7C;IACC,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,KAAK,CAAC,SAAS,CAAC,+BAA+B,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9E,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,mBAAmB,GAAG,MAAM,mCAAmC,CAAC;QACpE,mBAAmB,EAAE,KAAK,CAAC,SAAS;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;QAC5D,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAAC;QACnD,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;QAC9D,iBAAiB,EAAE,mBAAmB,CAAC,iBAAiB,CAAC,WAAW;QACpE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE;QAC5B,oBAAoB,EAAE,KAAK;QAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,MAAM,KAAK,CAAC,cAAc,CAAC,iBAAiB,EAAE;QAC3D,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,MAAM,6BAA6B,CAAC;QACxE,GAAG,KAAK;QACR,mBAAmB;QACnB,iBAAiB,EAAE,KAAK,CAAC,cAAc,CAAC,QAAQ;QAChD,OAAO;KACR,CAAC,CAAC;IACH,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,gBAAgB,CAAC;QACrB,2BAA2B,EAAE;YAC3B,SAAS,EAAE,OAAO,CAAC,kBAAkB,CAAC,eAAe;YACrD,KAAK,EAAE,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ;YAChD,WAAW,EAAE,OAAO,CAAC,OAAO;YAC5B,aAAa,EAAE,OAAO;YACtB,SAAS,EAAE,YAAY,CAAC,SAAS;SAClC;QACD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,mBAAmB,EAAE,YAAY;QACjC,iBAAiB,EAAE,mBAAmB,CAAC,iBAAiB;QACxD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,qBAAqB,EAAE;YACrB,WAAW,EAAE,OAAO,CAAC,OAAO;YAC5B,aAAa,EAAE,OAAO;YACtB,SAAS,EAAE,YAAY,CAAC,SAAS;YACjC,OAAO,EAAE,YAAY,CAAC,OAAO;SAC9B;QACD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;QAC5D,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxD,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;AACtE,CAAC","sourcesContent":["import type { EncapsulationKeyPair, SigningKeyPair } from \"@tearleads/crypto\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport type { SecurityIncidentReporter } from \"../../data/shared/securityIncidents\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport type { TrustedUserIdentityResolver } from \"../../data/trustedUserIdentity\";\nimport { loadOrganizationExternalAdminPolicy } from \"../principals/externalAdminPolicy\";\nimport type { createGroupMetadataAccess } from \"./groupMetadataAccess\";\nimport {\n  cacheGroupPolicy,\n  type OrganizationPrincipalPolicyApi,\n} from \"./groupPolicyMutationContext\";\nimport { commitCreatedGroupToDirectory } from \"./organizationGroupDirectory\";\nimport { buildInitialGroupPolicyRequest } from \"./principalPolicyRequest\";\nimport type { OrganizationGroupSummary } from \"./readModel\";\n\nexport async function createOrganizationGroup(input: {\n  readonly metadataAccess: ReturnType<typeof createGroupMetadataAccess>;\n  readonly apiClient: OrganizationPrincipalPolicyApi;\n  readonly creatorEncapsulationKeyPair: EncapsulationKeyPair;\n  readonly execSql: ExecSql;\n  readonly name: string;\n  readonly organizationId: string;\n  readonly reportSecurityIncident: SecurityIncidentReporter;\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  readonly signerUserId: string;\n  readonly signingFingerprint: string;\n  readonly signingKeyPair: SigningKeyPair;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<OrganizationGroupSummary> {\n  assertProjectionVerificationCurrent(input.stillCurrent);\n  await input.apiClient.recoverPendingPrincipalMutation?.(input.organizationId);\n  assertProjectionVerificationCurrent(input.stillCurrent);\n  const externalAdminPolicy = await loadOrganizationExternalAdminPolicy({\n    currentPolicyReader: input.apiClient,\n    execSql: input.execSql,\n    organizationId: input.organizationId,\n    resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n    stillCurrent: input.stillCurrent,\n  });\n  assertProjectionVerificationCurrent(input.stillCurrent);\n  if (!externalAdminPolicy) {\n    throw new Error(\"Organization admin authority could not be verified\");\n  }\n  if (!externalAdminPolicy.signerUserIds.includes(input.signerUserId)) {\n    throw new Error(\"Organization admin authority could not be verified\");\n  }\n  const request = await buildInitialGroupPolicyRequest({\n    creatorEncapsulationKeyPair: input.creatorEncapsulationKeyPair,\n    externalAuthority: externalAdminPolicy.externalAuthority.currentHead,\n    groupId: crypto.randomUUID(),\n    includeSignerAsAdmin: false,\n    name: input.name,\n    metadataKey: await input.metadataAccess.loadEncryptionKey(),\n    signerUserId: input.signerUserId,\n    signingFingerprint: input.signingFingerprint,\n    signingKeyPair: input.signingKeyPair,\n  });\n  const { group, head: expectedHead } = await commitCreatedGroupToDirectory({\n    ...input,\n    externalAdminPolicy,\n    readEncryptedName: input.metadataAccess.readName,\n    request,\n  });\n  assertProjectionVerificationCurrent(input.stillCurrent);\n  await cacheGroupPolicy({\n    acknowledgedMemberEnvelopes: {\n      envelopes: request.initialGroupPolicy.memberEnvelopes,\n      epoch: request.initialGroupPolicy.state.keyEpoch,\n      principalId: request.groupId,\n      principalType: \"group\",\n      stateHash: expectedHead.stateHash,\n    },\n    apiClient: input.apiClient,\n    execSql: input.execSql,\n    expectedCurrentHead: expectedHead,\n    externalAuthority: externalAdminPolicy.externalAuthority,\n    groupId: group.groupId,\n    localPolicyCheckpoint: {\n      principalId: request.groupId,\n      principalType: \"group\",\n      stateHash: expectedHead.stateHash,\n      version: expectedHead.version,\n    },\n    organizationId: input.organizationId,\n    resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n    stillCurrent: input.stillCurrent,\n  });\n  assertProjectionVerificationCurrent(input.stillCurrent);\n  return { ...group, name: input.name.trim(), nameUnreadable: false };\n}\n"]}

package/workflows/organizations/groupMembershipName.d.ts

@@ -1,8 +0,0 @@
-import { KeyingVerificationError } from "../../internal/crypto/index.js";
-import type { PrincipalPolicyBundleResponse } from "../../internal/validators/response/index.js";
-import { type GroupPolicyNameReader } from "./principalPolicyRequest.js";
-export declare class GroupMembershipNameMismatchError extends KeyingVerificationError {
-    constructor(reason: "forbidden_characters" | "name_mismatch");
-}
-/** Check the selected label only after verifying the signed policy bundle. */
-export declare function assertGroupMembershipName(verifiedBundle: Pick<PrincipalPolicyBundleResponse, "currentState" | "currentPayload">, expectedGroupName: string, readEncryptedName?: GroupPolicyNameReader): Promise<void>;

package/workflows/organizations/groupMembershipName.js

@@ -1,18 +0,0 @@
-import { KeyingVerificationError } from "../../internal/crypto/index.js";
-import { groupPolicyNameMismatch, } from "./principalPolicyRequest.js";
-export class GroupMembershipNameMismatchError extends KeyingVerificationError {
-    constructor(reason) {
-        super("object_mismatch", reason === "forbidden_characters"
-            ? "Group membership name contains forbidden control or format characters"
-            : "Group membership name does not match the signed group policy");
-        this.name = "GroupMembershipNameMismatchError";
-    }
-}
-/** Check the selected label only after verifying the signed policy bundle. */
-export async function assertGroupMembershipName(verifiedBundle, expectedGroupName, readEncryptedName) {
-    const mismatch = await groupPolicyNameMismatch(verifiedBundle, expectedGroupName, readEncryptedName);
-    if (mismatch) {
-        throw new GroupMembershipNameMismatchError(mismatch);
-    }
-}
-//# sourceMappingURL=groupMembershipName.js.map

package/workflows/organizations/groupMembershipName.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"groupMembershipName.js","sourceRoot":"","sources":["groupMembershipName.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAEL,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAElC,MAAM,OAAO,gCAAiC,SAAQ,uBAAuB;IAC3E,YAAY,MAAgD;QAC1D,KAAK,CACH,iBAAiB,EACjB,MAAM,KAAK,sBAAsB;YAC/B,CAAC,CAAC,uEAAuE;YACzE,CAAC,CAAC,8DAA8D,CACnE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,cAGC,EACD,iBAAyB,EACzB,iBAAyC;IAEzC,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAC5C,cAAc,EACd,iBAAiB,EACjB,iBAAiB,CAClB,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,gCAAgC,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;AACH,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport {\n  type GroupPolicyNameReader,\n  groupPolicyNameMismatch,\n} from \"./principalPolicyRequest\";\n\nexport class GroupMembershipNameMismatchError extends KeyingVerificationError {\n  constructor(reason: \"forbidden_characters\" | \"name_mismatch\") {\n    super(\n      \"object_mismatch\",\n      reason === \"forbidden_characters\"\n        ? \"Group membership name contains forbidden control or format characters\"\n        : \"Group membership name does not match the signed group policy\",\n    );\n    this.name = \"GroupMembershipNameMismatchError\";\n  }\n}\n\n/** Check the selected label only after verifying the signed policy bundle. */\nexport async function assertGroupMembershipName(\n  verifiedBundle: Pick<\n    PrincipalPolicyBundleResponse,\n    \"currentState\" | \"currentPayload\"\n  >,\n  expectedGroupName: string,\n  readEncryptedName?: GroupPolicyNameReader,\n): Promise<void> {\n  const mismatch = await groupPolicyNameMismatch(\n    verifiedBundle,\n    expectedGroupName,\n    readEncryptedName,\n  );\n  if (mismatch) {\n    throw new GroupMembershipNameMismatchError(mismatch);\n  }\n}\n"]}

package/workflows/organizations/groupMetadataAccess.d.ts

@@ -1,33 +0,0 @@
-import { type ContainerAccessManifestState, type GroupMetadataKey, type ReferencedPrincipalHead } from "../../internal/crypto/index.js";
-import type { ContainerWriterProjectionResponse } from "../../internal/validators/response/index.js";
-import type { ProjectionUserKeyResolver, ReferencedPrincipalPolicyWarmer } from "../../data/keyingProjectionVerification/index.js";
-import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
-import type { GroupPolicyNameReader } from "./principalPolicyRequest.js";
-export interface GroupMetadataAccessInput {
-    readonly apiClient: {
-        evictContainerWriterProjection(containerId: string): void;
-        getContainerWriterProjection(containerId: string): Promise<ContainerWriterProjectionResponse | null>;
-    };
-    readonly verifyMetadataContainer: (state: ContainerAccessManifestState, organizationReference?: ReferencedPrincipalHead | undefined) => Promise<void>;
-    readonly execSql: ExecSql;
-    readonly organizationId: string;
-    readonly resolveProjectionUserKey: ProjectionUserKeyResolver;
-    readonly targetSecretKey: Uint8Array;
-    readonly stillCurrent?: (() => boolean) | undefined;
-    readonly warmReferencedPrincipalPolicies?: ReferencedPrincipalPolicyWarmer | undefined;
-}
-/**
- * A group's signed name does not open under the metadata key it cites, or opens
- * to an invalid name. Every reader holding that key gets the same result. The
- * API checks the citation but can never check the ciphertext, so a dishonest
- * admin can sign such a name; directory walks isolate the group instead of
- * failing every name in the organization.
- */
-export declare class GroupMetadataUnreadableError extends Error {
-    constructor(groupId: string, cause: unknown);
-}
-/** Uses the shared metadata container's authenticated keyring, including old epochs. */
-export declare function createGroupMetadataAccess(input: GroupMetadataAccessInput): {
-    readName: GroupPolicyNameReader;
-    loadEncryptionKey(): Promise<GroupMetadataKey>;
-};