@tearleads/client-sdk 0.1.62 → 0.1.64

package/workflows/organizations/readModel/readModelProjection.js

@@ -0,0 +1,255 @@
+import { ORGANIZATION_READ_MODEL_ERROR_CODES, } from "../../../internal/validators/response/index.js";
+import { purgeOrganizationAccessProjection } from "../../../data/persistence/organizations/organizationAccessRevocationPersistence.js";
+import { recordOrganizationPresentationDenials } from "../../../data/persistence/organizations/organizationPresentationDenialPersistence.js";
+import { loadOrganizationReadModelGroupMembers, } from "../../../data/persistence/organizations/organizationReadModelMemberLoad.js";
+import { OrganizationReadModelBindingError } from "../../../data/persistence/organizations/organizationReadModelMembershipPersistence.js";
+import { applyOrganizationReadModelResponse, loadOrganizationReadModelProjection, purgeOrganizationReadModelProjection, } from "../../../data/persistence/organizations/organizationReadModelPersistence.js";
+import { captureOrganizationPresentationAccessAttempt, denyOrganizationPresentationAccess, isOrganizationPresentationAccessAttemptCurrent, isOrganizationPresentationAccessReadable, restoreOrganizationPresentationAccess, runOrganizationPresentationMutation, runOrganizationPresentationRead, } from "./organizationPresentationAccessState.js";
+import { isOrganizationPresentationAccessDeniedFailure } from "./organizationPresentationFailures.js";
+const MAX_READ_MODEL_PAGES = 100;
+const MAX_STALE_RETRIES = 1;
+function toDirectoryAndGroups(projection) {
+    if (!projection?.requester) {
+        return null;
+    }
+    return {
+        directory: {
+            ...projection.directory,
+            currentUser: projection.requester,
+        },
+        // Hydration decides whether a name is unreadable; a stored blank name may
+        // only mean the group has not been hydrated yet.
+        groups: projection.groups.groups.map((group) => ({
+            ...group,
+            nameUnreadable: false,
+        })),
+        memberGroupId: projection.groups.memberGroupId,
+        readModelCursor: projection.cursor,
+    };
+}
+async function loadProjection(input) {
+    return runOrganizationPresentationRead(organizationPresentationAccessInput(input), "readModel", () => loadRawProjection(input));
+}
+function loadRawProjection(input) {
+    return loadOrganizationReadModelProjection(input.execSql, input.organizationId, input.currentUserId);
+}
+function organizationPresentationAccessInput(input) {
+    return {
+        execSql: input.execSql,
+        organizationId: input.organizationId,
+        requesterUserId: input.currentUserId,
+    };
+}
+function localResult(input, state, outcome) {
+    const accessInput = organizationPresentationAccessInput(input);
+    const readable = isOrganizationPresentationAccessAttemptCurrent(accessInput, state.accessAttempt) && isOrganizationPresentationAccessReadable(accessInput, "readModel");
+    if (!readable) {
+        return { kind: "done", value: null };
+    }
+    const value = toDirectoryAndGroups(state.projection);
+    // A failed pass that retained nothing must not read as a completed (null)
+    // pass: consumers mark a scope caught up only on completed passes, and this
+    // scope still needs a fresh catch-up.
+    if (value === null && outcome.failed) {
+        return { kind: "done", value: undefined };
+    }
+    return { kind: "done", value };
+}
+function resetRequestCursor(state) {
+    state.expectedLocalCursor = state.projection?.cursor ?? null;
+    state.requestCursor = state.projection?.cursor ?? undefined;
+}
+function isInvalidReadModelCursorFailure(result) {
+    return (!result.ok &&
+        result.kind === "http" &&
+        result.status === 400 &&
+        result.code === ORGANIZATION_READ_MODEL_ERROR_CODES.cursorInvalid);
+}
+async function requestReadModelPage(input, state) {
+    const result = await input.apiClient.getOrganizationReadModelResult(input.organizationId, state.requestCursor, { reportErrors: false });
+    if (result.ok) {
+        return { kind: "response", response: result.data };
+    }
+    if (isOrganizationPresentationAccessDeniedFailure(result)) {
+        const accessInput = organizationPresentationAccessInput(input);
+        denyOrganizationPresentationAccess(accessInput, ["readModel", "usage"]);
+        // The durable marker lands before the purge attempt: if the purge fails,
+        // an offline restart must still refuse to serve the revoked projection.
+        try {
+            await runOrganizationPresentationMutation(input.execSql, () => recordOrganizationPresentationDenials(accessInput, [
+                "readModel",
+                "usage",
+            ]));
+        }
+        catch (error) {
+            input.logError?.("Failed to record denied organization access", error);
+        }
+        try {
+            await runOrganizationPresentationMutation(input.execSql, () => purgeOrganizationAccessProjection({
+                execSql: input.execSql,
+                organizationId: input.organizationId,
+                requesterUserId: input.currentUserId,
+            }));
+        }
+        catch (error) {
+            input.logError?.("Failed to purge denied organization access", error);
+        }
+        return { kind: "done", value: null };
+    }
+    if (isInvalidReadModelCursorFailure(result) &&
+        state.requestCursor !== undefined &&
+        !state.retriedInvalidCursor) {
+        state.requestCursor = undefined;
+        state.retriedInvalidCursor = true;
+        return { kind: "continue" };
+    }
+    result.report();
+    return localResult(input, state, { failed: true });
+}
+function responseMatchesRequest(input, state, response) {
+    if (response.organizationId !== input.organizationId) {
+        input.logError?.(`Organization read-model response scope does not match ${input.organizationId}`);
+        return false;
+    }
+    if (response.hasMore && response.nextCursor === state.expectedLocalCursor) {
+        input.logError?.("Organization read-model page did not advance its cursor");
+        return false;
+    }
+    return true;
+}
+function reconciliationIsCurrent(input, state) {
+    return isOrganizationPresentationAccessAttemptCurrent(organizationPresentationAccessInput(input), state.accessAttempt);
+}
+async function applyResponse(input, state, response) {
+    try {
+        return {
+            kind: "applied",
+            result: await applyOrganizationReadModelResponse({
+                currentUserId: input.currentUserId,
+                execSql: input.execSql,
+                requestedCursor: state.expectedLocalCursor,
+                response,
+            }),
+        };
+    }
+    catch (error) {
+        input.logError?.("Failed to apply organization read-model response", error);
+        if (!(error instanceof OrganizationReadModelBindingError) ||
+            state.retriedBindingFailure) {
+            return localResult(input, state, { failed: true });
+        }
+        state.retriedBindingFailure = true;
+        await purgeOrganizationReadModelProjection(input.execSql, input.organizationId);
+        if (!reconciliationIsCurrent(input, state)) {
+            return { kind: "done", value: null };
+        }
+        state.projection = null;
+        resetRequestCursor(state);
+        return { kind: "continue" };
+    }
+}
+async function prepareDeniedProjectionForApply(input, state) {
+    if (state.preparedDeniedProjection) {
+        return null;
+    }
+    try {
+        // The apply that follows replaces the shared rows authoritatively, so
+        // only this requester's row is dropped: another local identity sharing
+        // the database keeps its access and reads the replacement.
+        await purgeOrganizationReadModelProjection(input.execSql, input.organizationId, { onlyRequesterUserId: input.currentUserId });
+    }
+    catch (error) {
+        input.logError?.("Failed to replace denied organization read model", error);
+        return { kind: "done", value: null };
+    }
+    if (!reconciliationIsCurrent(input, state)) {
+        return { kind: "done", value: null };
+    }
+    state.expectedLocalCursor = null;
+    state.preparedDeniedProjection = true;
+    state.projection = null;
+    return null;
+}
+async function applyReadModelPage(input, state, response) {
+    if (!responseMatchesRequest(input, state, response)) {
+        return localResult(input, state, { failed: true });
+    }
+    const accessInput = organizationPresentationAccessInput(input);
+    return runOrganizationPresentationMutation(input.execSql, async () => {
+        if (!reconciliationIsCurrent(input, state)) {
+            return { kind: "done", value: null };
+        }
+        const preparation = await prepareDeniedProjectionForApply(input, state);
+        if (preparation) {
+            return preparation;
+        }
+        const applied = await applyResponse(input, state, response);
+        if (applied.kind !== "applied") {
+            return applied;
+        }
+        state.projection = await loadRawProjection(input);
+        if (!reconciliationIsCurrent(input, state)) {
+            return { kind: "done", value: null };
+        }
+        if (applied.result === "stale") {
+            if (state.staleRetries >= MAX_STALE_RETRIES) {
+                return localResult(input, state, { failed: true });
+            }
+            state.staleRetries += 1;
+            resetRequestCursor(state);
+            return { kind: "continue" };
+        }
+        state.expectedLocalCursor = state.projection?.cursor ?? response.nextCursor;
+        if (!response.hasMore) {
+            return restoreOrganizationPresentationAccess(accessInput, state.accessAttempt)
+                ? localResult(input, state, { failed: false })
+                : { kind: "done", value: null };
+        }
+        state.requestCursor = response.nextCursor;
+        return { kind: "continue" };
+    });
+}
+export async function loadLocalOrganizationDirectoryAndGroups(input) {
+    return toDirectoryAndGroups(await loadProjection(input));
+}
+export async function loadLocalOrganizationGroupMembers(input) {
+    return runOrganizationPresentationRead(organizationPresentationAccessInput(input), "readModel", () => loadOrganizationReadModelGroupMembers(input.execSql, input.organizationId, input.groupId, input.currentUserId));
+}
+/**
+ * Resolves the reconciled projection, `null` when the pass completed
+ * authoritatively with nothing presentable (including a denial that purged
+ * the projection), or `undefined` when the feed failed and no local
+ * projection was retained — a pass that must not count as caught up.
+ */
+export async function reconcileOrganizationDirectoryAndGroups(input) {
+    const accessInput = organizationPresentationAccessInput(input);
+    const accessAttempt = captureOrganizationPresentationAccessAttempt(accessInput, "readModel");
+    const state = {
+        accessAttempt,
+        expectedLocalCursor: null,
+        preparedDeniedProjection: !accessAttempt.startedDenied,
+        projection: await loadProjection(input),
+        requestCursor: undefined,
+        retriedBindingFailure: false,
+        retriedInvalidCursor: false,
+        staleRetries: 0,
+    };
+    resetRequestCursor(state);
+    for (let page = 0; page < MAX_READ_MODEL_PAGES; page += 1) {
+        const request = await requestReadModelPage(input, state);
+        if (request.kind === "done") {
+            return request.value;
+        }
+        if (request.kind === "continue") {
+            continue;
+        }
+        const applied = await applyReadModelPage(input, state, request.response);
+        if (applied.kind === "done") {
+            return applied.value;
+        }
+    }
+    input.logError?.("Organization read-model reconciliation exceeded page limit");
+    const retained = localResult(input, state, { failed: true });
+    return retained.kind === "done" ? retained.value : null;
+}
+//# sourceMappingURL=readModelProjection.js.map

package/workflows/organizations/readModel/readModelProjection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readModelProjection.js","sourceRoot":"","sources":["readModelProjection.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,mCAAmC,GAEpC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,iCAAiC,EAAE,MAAM,iFAAiF,CAAC;AACpI,OAAO,EAAE,qCAAqC,EAAE,MAAM,mFAAmF,CAAC;AAC1I,OAAO,EACL,qCAAqC,GAEtC,MAAM,yEAAyE,CAAC;AACjF,OAAO,EAAE,iCAAiC,EAAE,MAAM,oFAAoF,CAAC;AACvI,OAAO,EACL,kCAAkC,EAClC,mCAAmC,EAEnC,oCAAoC,GACrC,MAAM,0EAA0E,CAAC;AAGlF,OAAO,EACL,4CAA4C,EAC5C,kCAAkC,EAClC,8CAA8C,EAC9C,wCAAwC,EAGxC,qCAAqC,EACrC,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,6CAA6C,EAAE,MAAM,oCAAoC,CAAC;AAEnG,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAwB5B,SAAS,oBAAoB,CAC3B,UAAkD;IAElD,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,SAAS,EAAE;YACT,GAAG,UAAU,CAAC,SAAS;YACvB,WAAW,EAAE,UAAU,CAAC,SAAS;SAClC;QACD,0EAA0E;QAC1E,iDAAiD;QACjD,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC/C,GAAG,KAAK;YACR,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,aAAa;QAC9C,eAAe,EAAE,UAAU,CAAC,MAAM;KACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,KAA2C;IAE3C,OAAO,+BAA+B,CACpC,mCAAmC,CAAC,KAAK,CAAC,EAC1C,WAAW,EACX,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA2C;IAE3C,OAAO,mCAAmC,CACxC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,aAAa,CACpB,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC,CAC1C,KAA2C;IAE3C,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,eAAe,EAAE,KAAK,CAAC,aAAa;KACrC,CAAC;AACJ,CAAC;AA2BD,SAAS,WAAW,CAClB,KAAmD,EACnD,KAA0B,EAC1B,OAAqC;IAErC,MAAM,WAAW,GAAG,mCAAmC,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,QAAQ,GACZ,8CAA8C,CAC5C,WAAW,EACX,KAAK,CAAC,aAAa,CACpB,IAAI,wCAAwC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACrD,0EAA0E;IAC1E,4EAA4E;IAC5E,sCAAsC;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAA0B;IACpD,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,IAAI,CAAC;IAC7D,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,SAAS,CAAC;AAC9D,CAAC;AAED,SAAS,+BAA+B,CACtC,MAAoD;IAEpD,OAAO,CACL,CAAC,MAAM,CAAC,EAAE;QACV,MAAM,CAAC,IAAI,KAAK,MAAM;QACtB,MAAM,CAAC,MAAM,KAAK,GAAG;QACrB,MAAM,CAAC,IAAI,KAAK,mCAAmC,CAAC,aAAa,CAClE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAAmD,EACnD,KAA0B;IAE1B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,8BAA8B,CACjE,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,aAAa,EACnB,EAAE,YAAY,EAAE,KAAK,EAAE,CACxB,CAAC;IACF,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,6CAA6C,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,mCAAmC,CAAC,KAAK,CAAC,CAAC;QAC/D,kCAAkC,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,CAAC;YACH,MAAM,mCAAmC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAC5D,qCAAqC,CAAC,WAAW,EAAE;gBACjD,WAAW;gBACX,OAAO;aACR,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,QAAQ,EAAE,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,mCAAmC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAC5D,iCAAiC,CAAC;gBAChC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,eAAe,EAAE,KAAK,CAAC,aAAa;aACrC,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,QAAQ,EAAE,CAAC,4CAA4C,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,IACE,+BAA+B,CAAC,MAAM,CAAC;QACvC,KAAK,CAAC,aAAa,KAAK,SAAS;QACjC,CAAC,KAAK,CAAC,oBAAoB,EAC3B,CAAC;QACD,KAAK,CAAC,aAAa,GAAG,SAAS,CAAC;QAChC,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAmD,EACnD,KAA0B,EAC1B,QAAuC;IAEvC,IAAI,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QACrD,KAAK,CAAC,QAAQ,EAAE,CACd,yDAAyD,KAAK,CAAC,cAAc,EAAE,CAChF,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC1E,KAAK,CAAC,QAAQ,EAAE,CAAC,yDAAyD,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAmD,EACnD,KAA0B;IAE1B,OAAO,8CAA8C,CACnD,mCAAmC,CAAC,KAAK,CAAC,EAC1C,KAAK,CAAC,aAAa,CACpB,CAAC;AACJ,CAAC;AAWD,KAAK,UAAU,aAAa,CAC1B,KAAmD,EACnD,KAA0B,EAC1B,QAAuC;IAEvC,IAAI,CAAC;QACH,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,MAAM,kCAAkC,CAAC;gBAC/C,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,eAAe,EAAE,KAAK,CAAC,mBAAmB;gBAC1C,QAAQ;aACT,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,QAAQ,EAAE,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAC;QAC5E,IACE,CAAC,CAAC,KAAK,YAAY,iCAAiC,CAAC;YACrD,KAAK,CAAC,qBAAqB,EAC3B,CAAC;YACD,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC;QACnC,MAAM,oCAAoC,CACxC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,CACrB,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;QACD,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;QACxB,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,KAAmD,EACnD,KAA0B;IAE1B,IAAI,KAAK,CAAC,wBAAwB,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,sEAAsE;QACtE,uEAAuE;QACvE,2DAA2D;QAC3D,MAAM,oCAAoC,CACxC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,EACpB,EAAE,mBAAmB,EAAE,KAAK,CAAC,aAAa,EAAE,CAC7C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,QAAQ,EAAE,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;IACjC,KAAK,CAAC,wBAAwB,GAAG,IAAI,CAAC;IACtC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;IACxB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAAmD,EACnD,KAA0B,EAC1B,QAAuC;IAEvC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;QACpD,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,WAAW,GAAG,mCAAmC,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,mCAAmC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;QACnE,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,+BAA+B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACxE,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,UAAU,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,YAAY,IAAI,iBAAiB,EAAE,CAAC;gBAC5C,OAAO,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC;YACxB,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC9B,CAAC;QAED,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC;QAC5E,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,qCAAqC,CAC1C,WAAW,EACX,KAAK,CAAC,aAAa,CACpB;gBACC,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;gBAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,KAA2C;IAE3C,OAAO,oBAAoB,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,KAA0E;IAE1E,OAAO,+BAA+B,CACpC,mCAAmC,CAAC,KAAK,CAAC,EAC1C,WAAW,EACX,GAAG,EAAE,CACH,qCAAqC,CACnC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,cAAc,EACpB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,aAAa,CACpB,CACJ,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC3D,KAAmD;IAEnD,MAAM,WAAW,GAAG,mCAAmC,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,4CAA4C,CAChE,WAAW,EACX,WAAW,CACZ,CAAC;IACF,MAAM,KAAK,GAAwB;QACjC,aAAa;QACb,mBAAmB,EAAE,IAAI;QACzB,wBAAwB,EAAE,CAAC,aAAa,CAAC,aAAa;QACtD,UAAU,EAAE,MAAM,cAAc,CAAC,KAAK,CAAC;QACvC,aAAa,EAAE,SAAS;QACxB,qBAAqB,EAAE,KAAK;QAC5B,oBAAoB,EAAE,KAAK;QAC3B,YAAY,EAAE,CAAC;KAChB,CAAC;IACF,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAE1B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,oBAAoB,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,KAAK,CAAC;QACvB,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,EAAE,CACd,4DAA4D,CAC7D,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC","sourcesContent":["import type {\n  RequestResult,\n  RequestResultOptions,\n} from \"@tearleads/api-client\";\nimport {\n  ORGANIZATION_READ_MODEL_ERROR_CODES,\n  type OrganizationReadModelResponse,\n} from \"@tearleads/validators/response\";\nimport { purgeOrganizationAccessProjection } from \"../../../data/persistence/organizations/organizationAccessRevocationPersistence\";\nimport { recordOrganizationPresentationDenials } from \"../../../data/persistence/organizations/organizationPresentationDenialPersistence\";\nimport {\n  loadOrganizationReadModelGroupMembers,\n  type OrganizationReadModelGroupMembers,\n} from \"../../../data/persistence/organizations/organizationReadModelMemberLoad\";\nimport { OrganizationReadModelBindingError } from \"../../../data/persistence/organizations/organizationReadModelMembershipPersistence\";\nimport {\n  applyOrganizationReadModelResponse,\n  loadOrganizationReadModelProjection,\n  type OrganizationReadModelProjection,\n  purgeOrganizationReadModelProjection,\n} from \"../../../data/persistence/organizations/organizationReadModelPersistence\";\nimport type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\nimport type { OrganizationDirectoryAndGroups } from \"./index\";\nimport {\n  captureOrganizationPresentationAccessAttempt,\n  denyOrganizationPresentationAccess,\n  isOrganizationPresentationAccessAttemptCurrent,\n  isOrganizationPresentationAccessReadable,\n  type OrganizationPresentationAccessAttempt,\n  type OrganizationPresentationAccessInput,\n  restoreOrganizationPresentationAccess,\n  runOrganizationPresentationMutation,\n  runOrganizationPresentationRead,\n} from \"./organizationPresentationAccessState\";\nimport { isOrganizationPresentationAccessDeniedFailure } from \"./organizationPresentationFailures\";\n\nconst MAX_READ_MODEL_PAGES = 100;\nconst MAX_STALE_RETRIES = 1;\n\ninterface OrganizationReadModelApi {\n  getOrganizationReadModelResult(\n    organizationId: string,\n    cursor?: string,\n    options?: RequestResultOptions,\n  ): Promise<RequestResult<OrganizationReadModelResponse>>;\n}\n\ninterface OrganizationReadModelProjectionInput {\n  readonly currentUserId: string;\n  readonly execSql: ExecSql;\n  readonly organizationId: string;\n}\n\nexport interface ReconcileOrganizationDirectoryAndGroupsInput\n  extends OrganizationReadModelProjectionInput {\n  readonly apiClient: OrganizationReadModelApi;\n  readonly logError?:\n    | ((message: string | Error, cause?: unknown) => void)\n    | undefined;\n}\n\nfunction toDirectoryAndGroups(\n  projection: OrganizationReadModelProjection | null,\n): OrganizationDirectoryAndGroups | null {\n  if (!projection?.requester) {\n    return null;\n  }\n\n  return {\n    directory: {\n      ...projection.directory,\n      currentUser: projection.requester,\n    },\n    // Hydration decides whether a name is unreadable; a stored blank name may\n    // only mean the group has not been hydrated yet.\n    groups: projection.groups.groups.map((group) => ({\n      ...group,\n      nameUnreadable: false,\n    })),\n    memberGroupId: projection.groups.memberGroupId,\n    readModelCursor: projection.cursor,\n  };\n}\n\nasync function loadProjection(\n  input: OrganizationReadModelProjectionInput,\n): Promise<OrganizationReadModelProjection | null> {\n  return runOrganizationPresentationRead(\n    organizationPresentationAccessInput(input),\n    \"readModel\",\n    () => loadRawProjection(input),\n  );\n}\n\nfunction loadRawProjection(\n  input: OrganizationReadModelProjectionInput,\n): Promise<OrganizationReadModelProjection | null> {\n  return loadOrganizationReadModelProjection(\n    input.execSql,\n    input.organizationId,\n    input.currentUserId,\n  );\n}\n\nfunction organizationPresentationAccessInput(\n  input: OrganizationReadModelProjectionInput,\n): OrganizationPresentationAccessInput {\n  return {\n    execSql: input.execSql,\n    organizationId: input.organizationId,\n    requesterUserId: input.currentUserId,\n  };\n}\n\ninterface ReconciliationState {\n  readonly accessAttempt: OrganizationPresentationAccessAttempt;\n  expectedLocalCursor: string | null;\n  preparedDeniedProjection: boolean;\n  projection: OrganizationReadModelProjection | null;\n  requestCursor: string | undefined;\n  retriedBindingFailure: boolean;\n  retriedInvalidCursor: boolean;\n  staleRetries: number;\n}\n\ntype ReconciliationStep =\n  | { readonly kind: \"continue\" }\n  | {\n      readonly kind: \"done\";\n      readonly value: OrganizationDirectoryAndGroups | null | undefined;\n    };\n\ntype PageRequestStep =\n  | ReconciliationStep\n  | {\n      readonly kind: \"response\";\n      readonly response: OrganizationReadModelResponse;\n    };\n\nfunction localResult(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n  outcome: { readonly failed: boolean },\n): ReconciliationStep {\n  const accessInput = organizationPresentationAccessInput(input);\n  const readable =\n    isOrganizationPresentationAccessAttemptCurrent(\n      accessInput,\n      state.accessAttempt,\n    ) && isOrganizationPresentationAccessReadable(accessInput, \"readModel\");\n  if (!readable) {\n    return { kind: \"done\", value: null };\n  }\n  const value = toDirectoryAndGroups(state.projection);\n  // A failed pass that retained nothing must not read as a completed (null)\n  // pass: consumers mark a scope caught up only on completed passes, and this\n  // scope still needs a fresh catch-up.\n  if (value === null && outcome.failed) {\n    return { kind: \"done\", value: undefined };\n  }\n  return { kind: \"done\", value };\n}\n\nfunction resetRequestCursor(state: ReconciliationState): void {\n  state.expectedLocalCursor = state.projection?.cursor ?? null;\n  state.requestCursor = state.projection?.cursor ?? undefined;\n}\n\nfunction isInvalidReadModelCursorFailure(\n  result: RequestResult<OrganizationReadModelResponse>,\n): boolean {\n  return (\n    !result.ok &&\n    result.kind === \"http\" &&\n    result.status === 400 &&\n    result.code === ORGANIZATION_READ_MODEL_ERROR_CODES.cursorInvalid\n  );\n}\n\nasync function requestReadModelPage(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n): Promise<PageRequestStep> {\n  const result = await input.apiClient.getOrganizationReadModelResult(\n    input.organizationId,\n    state.requestCursor,\n    { reportErrors: false },\n  );\n  if (result.ok) {\n    return { kind: \"response\", response: result.data };\n  }\n  if (isOrganizationPresentationAccessDeniedFailure(result)) {\n    const accessInput = organizationPresentationAccessInput(input);\n    denyOrganizationPresentationAccess(accessInput, [\"readModel\", \"usage\"]);\n    // The durable marker lands before the purge attempt: if the purge fails,\n    // an offline restart must still refuse to serve the revoked projection.\n    try {\n      await runOrganizationPresentationMutation(input.execSql, () =>\n        recordOrganizationPresentationDenials(accessInput, [\n          \"readModel\",\n          \"usage\",\n        ]),\n      );\n    } catch (error) {\n      input.logError?.(\"Failed to record denied organization access\", error);\n    }\n    try {\n      await runOrganizationPresentationMutation(input.execSql, () =>\n        purgeOrganizationAccessProjection({\n          execSql: input.execSql,\n          organizationId: input.organizationId,\n          requesterUserId: input.currentUserId,\n        }),\n      );\n    } catch (error) {\n      input.logError?.(\"Failed to purge denied organization access\", error);\n    }\n    return { kind: \"done\", value: null };\n  }\n  if (\n    isInvalidReadModelCursorFailure(result) &&\n    state.requestCursor !== undefined &&\n    !state.retriedInvalidCursor\n  ) {\n    state.requestCursor = undefined;\n    state.retriedInvalidCursor = true;\n    return { kind: \"continue\" };\n  }\n\n  result.report();\n  return localResult(input, state, { failed: true });\n}\n\nfunction responseMatchesRequest(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n  response: OrganizationReadModelResponse,\n): boolean {\n  if (response.organizationId !== input.organizationId) {\n    input.logError?.(\n      `Organization read-model response scope does not match ${input.organizationId}`,\n    );\n    return false;\n  }\n  if (response.hasMore && response.nextCursor === state.expectedLocalCursor) {\n    input.logError?.(\"Organization read-model page did not advance its cursor\");\n    return false;\n  }\n  return true;\n}\n\nfunction reconciliationIsCurrent(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n): boolean {\n  return isOrganizationPresentationAccessAttemptCurrent(\n    organizationPresentationAccessInput(input),\n    state.accessAttempt,\n  );\n}\n\ntype ApplyResponseStep =\n  | ReconciliationStep\n  | {\n      readonly kind: \"applied\";\n      readonly result: Awaited<\n        ReturnType<typeof applyOrganizationReadModelResponse>\n      >;\n    };\n\nasync function applyResponse(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n  response: OrganizationReadModelResponse,\n): Promise<ApplyResponseStep> {\n  try {\n    return {\n      kind: \"applied\",\n      result: await applyOrganizationReadModelResponse({\n        currentUserId: input.currentUserId,\n        execSql: input.execSql,\n        requestedCursor: state.expectedLocalCursor,\n        response,\n      }),\n    };\n  } catch (error) {\n    input.logError?.(\"Failed to apply organization read-model response\", error);\n    if (\n      !(error instanceof OrganizationReadModelBindingError) ||\n      state.retriedBindingFailure\n    ) {\n      return localResult(input, state, { failed: true });\n    }\n    state.retriedBindingFailure = true;\n    await purgeOrganizationReadModelProjection(\n      input.execSql,\n      input.organizationId,\n    );\n    if (!reconciliationIsCurrent(input, state)) {\n      return { kind: \"done\", value: null };\n    }\n    state.projection = null;\n    resetRequestCursor(state);\n    return { kind: \"continue\" };\n  }\n}\n\nasync function prepareDeniedProjectionForApply(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n): Promise<ReconciliationStep | null> {\n  if (state.preparedDeniedProjection) {\n    return null;\n  }\n  try {\n    // The apply that follows replaces the shared rows authoritatively, so\n    // only this requester's row is dropped: another local identity sharing\n    // the database keeps its access and reads the replacement.\n    await purgeOrganizationReadModelProjection(\n      input.execSql,\n      input.organizationId,\n      { onlyRequesterUserId: input.currentUserId },\n    );\n  } catch (error) {\n    input.logError?.(\"Failed to replace denied organization read model\", error);\n    return { kind: \"done\", value: null };\n  }\n  if (!reconciliationIsCurrent(input, state)) {\n    return { kind: \"done\", value: null };\n  }\n  state.expectedLocalCursor = null;\n  state.preparedDeniedProjection = true;\n  state.projection = null;\n  return null;\n}\n\nasync function applyReadModelPage(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n  state: ReconciliationState,\n  response: OrganizationReadModelResponse,\n): Promise<ReconciliationStep> {\n  if (!responseMatchesRequest(input, state, response)) {\n    return localResult(input, state, { failed: true });\n  }\n\n  const accessInput = organizationPresentationAccessInput(input);\n  return runOrganizationPresentationMutation(input.execSql, async () => {\n    if (!reconciliationIsCurrent(input, state)) {\n      return { kind: \"done\", value: null };\n    }\n    const preparation = await prepareDeniedProjectionForApply(input, state);\n    if (preparation) {\n      return preparation;\n    }\n\n    const applied = await applyResponse(input, state, response);\n    if (applied.kind !== \"applied\") {\n      return applied;\n    }\n\n    state.projection = await loadRawProjection(input);\n    if (!reconciliationIsCurrent(input, state)) {\n      return { kind: \"done\", value: null };\n    }\n    if (applied.result === \"stale\") {\n      if (state.staleRetries >= MAX_STALE_RETRIES) {\n        return localResult(input, state, { failed: true });\n      }\n      state.staleRetries += 1;\n      resetRequestCursor(state);\n      return { kind: \"continue\" };\n    }\n\n    state.expectedLocalCursor = state.projection?.cursor ?? response.nextCursor;\n    if (!response.hasMore) {\n      return restoreOrganizationPresentationAccess(\n        accessInput,\n        state.accessAttempt,\n      )\n        ? localResult(input, state, { failed: false })\n        : { kind: \"done\", value: null };\n    }\n    state.requestCursor = response.nextCursor;\n    return { kind: \"continue\" };\n  });\n}\n\nexport async function loadLocalOrganizationDirectoryAndGroups(\n  input: OrganizationReadModelProjectionInput,\n): Promise<OrganizationDirectoryAndGroups | null> {\n  return toDirectoryAndGroups(await loadProjection(input));\n}\n\nexport async function loadLocalOrganizationGroupMembers(\n  input: OrganizationReadModelProjectionInput & { readonly groupId: string },\n): Promise<OrganizationReadModelGroupMembers | null> {\n  return runOrganizationPresentationRead(\n    organizationPresentationAccessInput(input),\n    \"readModel\",\n    () =>\n      loadOrganizationReadModelGroupMembers(\n        input.execSql,\n        input.organizationId,\n        input.groupId,\n        input.currentUserId,\n      ),\n  );\n}\n\n/**\n * Resolves the reconciled projection, `null` when the pass completed\n * authoritatively with nothing presentable (including a denial that purged\n * the projection), or `undefined` when the feed failed and no local\n * projection was retained — a pass that must not count as caught up.\n */\nexport async function reconcileOrganizationDirectoryAndGroups(\n  input: ReconcileOrganizationDirectoryAndGroupsInput,\n): Promise<OrganizationDirectoryAndGroups | null | undefined> {\n  const accessInput = organizationPresentationAccessInput(input);\n  const accessAttempt = captureOrganizationPresentationAccessAttempt(\n    accessInput,\n    \"readModel\",\n  );\n  const state: ReconciliationState = {\n    accessAttempt,\n    expectedLocalCursor: null,\n    preparedDeniedProjection: !accessAttempt.startedDenied,\n    projection: await loadProjection(input),\n    requestCursor: undefined,\n    retriedBindingFailure: false,\n    retriedInvalidCursor: false,\n    staleRetries: 0,\n  };\n  resetRequestCursor(state);\n\n  for (let page = 0; page < MAX_READ_MODEL_PAGES; page += 1) {\n    const request = await requestReadModelPage(input, state);\n    if (request.kind === \"done\") {\n      return request.value;\n    }\n    if (request.kind === \"continue\") {\n      continue;\n    }\n    const applied = await applyReadModelPage(input, state, request.response);\n    if (applied.kind === \"done\") {\n      return applied.value;\n    }\n  }\n\n  input.logError?.(\n    \"Organization read-model reconciliation exceeded page limit\",\n  );\n  const retained = localResult(input, state, { failed: true });\n  return retained.kind === \"done\" ? retained.value : null;\n}\n"]}

package/workflows/organizations/rematerialization/authoredPrincipalPolicyWarmer.js

@@ -0,0 +1,25 @@
+import { assertProjectionVerificationCurrent, } from "../../../data/keyingProjectionVerification/types.js";
+import { principalStateMatchesReference } from "../../../data/principals/principalPolicyStates.js";
+/** Only exact, locally authored successors may resolve before their transaction commits. */
+export function withAuthoredPrincipalPolicies(warmer, authored) {
+    if (!warmer?.resolveReference || authored.length === 0)
+        return warmer;
+    const resolve = warmer.resolveReference;
+    const find = (organizationId, reference) => authored.find((entry) => entry.organizationId === organizationId &&
+        principalStateMatchesReference(entry.policy.state, reference));
+    return Object.assign((input) => warmer({
+        ...input,
+        references: input.references.filter((reference) => !find(input.organizationId, reference)),
+    }), {
+        ...warmer,
+        resolveReference: async (input) => {
+            const evidence = find(input.organizationId, input.reference);
+            if (!evidence)
+                return resolve(input);
+            assertProjectionVerificationCurrent(input.stillCurrent);
+            assertProjectionVerificationCurrent(evidence.stillCurrent);
+            return evidence;
+        },
+    });
+}
+//# sourceMappingURL=authoredPrincipalPolicyWarmer.js.map

package/workflows/organizations/rematerialization/authoredPrincipalPolicyWarmer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authoredPrincipalPolicyWarmer.js","sourceRoot":"","sources":["authoredPrincipalPolicyWarmer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mCAAmC,GAGpC,MAAM,kDAAkD,CAAC;AAC1D,OAAO,EAAE,8BAA8B,EAAE,MAAM,gDAAgD,CAAC;AAEhG,4FAA4F;AAC5F,MAAM,UAAU,6BAA6B,CAC3C,MAAmD,EACnD,QAAoD;IAEpD,IAAI,CAAC,MAAM,EAAE,gBAAgB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACtE,MAAM,OAAO,GAAG,MAAM,CAAC,gBAAgB,CAAC;IACxC,MAAM,IAAI,GAAG,CACX,cAAsB,EACtB,SAAqD,EACrD,EAAE,CACF,QAAQ,CAAC,IAAI,CACX,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,cAAc,KAAK,cAAc;QACvC,8BAA8B,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAChE,CAAC;IACJ,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,KAAqD,EAAE,EAAE,CACxD,MAAM,CAAC;QACL,GAAG,KAAK;QACR,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CACjC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,CACtD;KACF,CAAC,EACJ;QACE,GAAG,MAAM;QACT,gBAAgB,EAAE,KAAK,EAAE,KAAoC,EAAE,EAAE;YAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7D,IAAI,CAAC,QAAQ;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;YACrC,mCAAmC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxD,mCAAmC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC3D,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CACF,CAAC;AACJ,CAAC","sourcesContent":["import {\n  assertProjectionVerificationCurrent,\n  type ReferencedPrincipalPolicyWarmer,\n  type ResolvedPrincipalPolicyEvidence,\n} from \"../../../data/keyingProjectionVerification/types\";\nimport { principalStateMatchesReference } from \"../../../data/principals/principalPolicyStates\";\n\n/** Only exact, locally authored successors may resolve before their transaction commits. */\nexport function withAuthoredPrincipalPolicies(\n  warmer: ReferencedPrincipalPolicyWarmer | undefined,\n  authored: readonly ResolvedPrincipalPolicyEvidence[],\n): ReferencedPrincipalPolicyWarmer | undefined {\n  if (!warmer?.resolveReference || authored.length === 0) return warmer;\n  const resolve = warmer.resolveReference;\n  const find = (\n    organizationId: string,\n    reference: Parameters<typeof resolve>[0][\"reference\"],\n  ) =>\n    authored.find(\n      (entry) =>\n        entry.organizationId === organizationId &&\n        principalStateMatchesReference(entry.policy.state, reference),\n    );\n  return Object.assign(\n    (input: Parameters<ReferencedPrincipalPolicyWarmer>[0]) =>\n      warmer({\n        ...input,\n        references: input.references.filter(\n          (reference) => !find(input.organizationId, reference),\n        ),\n      }),\n    {\n      ...warmer,\n      resolveReference: async (input: Parameters<typeof resolve>[0]) => {\n        const evidence = find(input.organizationId, input.reference);\n        if (!evidence) return resolve(input);\n        assertProjectionVerificationCurrent(input.stillCurrent);\n        assertProjectionVerificationCurrent(evidence.stillCurrent);\n        return evidence;\n      },\n    },\n  );\n}\n"]}

package/workflows/organizations/rematerialization/precedingPrincipalRematerialization.js

@@ -0,0 +1,31 @@
+import { rebaseOnDeepestAncestor } from "../../containers/child/rekey/carriedDescendantRekeys.js";
+import { withAuthoredPrincipalPolicies } from "./authoredPrincipalPolicyWarmer.js";
+/** Plan the next group against container heads authored earlier in the same transaction. */
+export function withPrecedingRematerialization(input) {
+    const preceding = input.preceding;
+    if (!preceding)
+        return input;
+    const rebase = (served) => {
+        const own = preceding.projections.findLast((projection) => projection.containerId === served.containerId);
+        const projection = own ?? served;
+        return (rebaseOnDeepestAncestor(projection, preceding.projections)?.projection ??
+            projection);
+    };
+    return {
+        ...input,
+        warmReferencedPrincipalPolicies: withAuthoredPrincipalPolicies(input.warmReferencedPrincipalPolicies, preceding.authored ?? []),
+        apiClient: {
+            ...input.apiClient,
+            reciteContainer: input.apiClient.reciteContainer.bind(input.apiClient),
+            getContainerWriterProjection: async (containerId) => {
+                const projection = await input.apiClient.getContainerWriterProjection(containerId);
+                return projection ? rebase(projection) : null;
+            },
+            getContainerWriterProjectionResult: async (containerId, options) => {
+                const result = await input.apiClient.getContainerWriterProjectionResult(containerId, options);
+                return result.ok ? { ...result, data: rebase(result.data) } : result;
+            },
+        },
+    };
+}
+//# sourceMappingURL=precedingPrincipalRematerialization.js.map

package/workflows/organizations/rematerialization/precedingPrincipalRematerialization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"precedingPrincipalRematerialization.js","sourceRoot":"","sources":["precedingPrincipalRematerialization.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sDAAsD,CAAC;AAC/F,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAGhF,4FAA4F;AAC5F,MAAM,UAAU,8BAA8B,CAC5C,KAA+C;IAE/C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,MAAM,GAAG,CAAC,MAAyC,EAAE,EAAE;QAC3D,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,CAAC,QAAQ,CACxC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAC9D,CAAC;QACF,MAAM,UAAU,GAAG,GAAG,IAAI,MAAM,CAAC;QACjC,OAAO,CACL,uBAAuB,CAAC,UAAU,EAAE,SAAS,CAAC,WAAW,CAAC,EAAE,UAAU;YACtE,UAAU,CACX,CAAC;IACJ,CAAC,CAAC;IACF,OAAO;QACL,GAAG,KAAK;QACR,+BAA+B,EAAE,6BAA6B,CAC5D,KAAK,CAAC,+BAA+B,EACrC,SAAS,CAAC,QAAQ,IAAI,EAAE,CACzB;QACD,SAAS,EAAE;YACT,GAAG,KAAK,CAAC,SAAS;YAClB,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YACtE,4BAA4B,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;gBAClD,MAAM,UAAU,GACd,MAAM,KAAK,CAAC,SAAS,CAAC,4BAA4B,CAAC,WAAW,CAAC,CAAC;gBAClE,OAAO,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAChD,CAAC;YACD,kCAAkC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE;gBACjE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,kCAAkC,CACrE,WAAW,EACX,OAAO,CACR,CAAC;gBACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YACvE,CAAC;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { ContainerWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { rebaseOnDeepestAncestor } from \"../../containers/child/rekey/carriedDescendantRekeys\";\nimport { withAuthoredPrincipalPolicies } from \"./authoredPrincipalPolicyWarmer\";\nimport type { PrincipalContainerRematerializationInput } from \"./principalContainerRematerializationPlanning\";\n\n/** Plan the next group against container heads authored earlier in the same transaction. */\nexport function withPrecedingRematerialization(\n  input: PrincipalContainerRematerializationInput,\n): PrincipalContainerRematerializationInput {\n  const preceding = input.preceding;\n  if (!preceding) return input;\n  const rebase = (served: ContainerWriterProjectionResponse) => {\n    const own = preceding.projections.findLast(\n      (projection) => projection.containerId === served.containerId,\n    );\n    const projection = own ?? served;\n    return (\n      rebaseOnDeepestAncestor(projection, preceding.projections)?.projection ??\n      projection\n    );\n  };\n  return {\n    ...input,\n    warmReferencedPrincipalPolicies: withAuthoredPrincipalPolicies(\n      input.warmReferencedPrincipalPolicies,\n      preceding.authored ?? [],\n    ),\n    apiClient: {\n      ...input.apiClient,\n      reciteContainer: input.apiClient.reciteContainer.bind(input.apiClient),\n      getContainerWriterProjection: async (containerId) => {\n        const projection =\n          await input.apiClient.getContainerWriterProjection(containerId);\n        return projection ? rebase(projection) : null;\n      },\n      getContainerWriterProjectionResult: async (containerId, options) => {\n        const result = await input.apiClient.getContainerWriterProjectionResult(\n          containerId,\n          options,\n        );\n        return result.ok ? { ...result, data: rebase(result.data) } : result;\n      },\n    },\n  };\n}\n"]}