@tearleads/client-sdk 0.1.64 → 0.1.65

package/data/persistence/keyingCheckpoints/keyingCheckpointPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyingCheckpointPersistence.js","sourceRoot":"","sources":["keyingCheckpointPersistence.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,8CAA8C,EAAE,MAAM,2DAA2D,CAAC;AAc3H,+EAA+E;AAC/E,MAAM,UAAU,uBAAuB,CACrC,QAA0C;IAE1C,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,QAAQ,CAAC,UAAU;QACnB,QAAQ,CAAC,cAAc;QACvB,QAAQ,CAAC,QAAQ;KAClB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAA2C;IAE3C,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,MAAwB,EACxB,QAA0C;IAE1C,MAAM,IAAI,GAAG,MAAM,MAAM;SACtB,MAAM,CAAC;QACN,KAAK,EAAE,yBAAyB,CAAC,KAAK;QACtC,YAAY,EAAE,yBAAyB,CAAC,YAAY;KACrD,CAAC;SACD,IAAI,CAAC,yBAAyB,CAAC;SAC/B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,yBAAyB,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,EAC7D,EAAE,CAAC,yBAAyB,CAAC,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,EACrE,EAAE,CAAC,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAC1D,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,MAAwB,EACxB,QAA2C;IAE3C,MAAM,IAAI,GAAG,MAAM,MAAM;SACtB,MAAM,CAAC;QACN,OAAO,EAAE,0BAA0B,CAAC,OAAO;QAC3C,SAAS,EAAE,0BAA0B,CAAC,SAAS;KAChD,CAAC;SACD,IAAI,CAAC,0BAA0B,CAAC;SAChC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,0BAA0B,CAAC,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,EACpE,EAAE,CAAC,0BAA0B,CAAC,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,CACjE,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACzB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,MAAwB,EACxB,UAAoC;IAEpC,MAAM,GAAG,GAAG,MAAM,+BAA+B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,MAAwB,EACxB,QAA2C;IAE3C,MAAM,GAAG,GAAG,MAAM,gCAAgC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrE,OAAO,GAAG;QACR,CAAC,CAAC;YACE,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,GAAG,GAAG;SACP;QACH,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2CAA2C,CAC/D,EAAgC,EAChC,UAAoC,EACpC,SAAiB;IAEjB,MAAM,GAAG,GAAG,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,CAAC;IACzC,MAAM,EAAE;SACL,MAAM,CAAC,yBAAyB,CAAC;SACjC,MAAM,CAAC,GAAG,CAAC;SACX,kBAAkB,CAAC;QAClB,MAAM,EAAE;YACN,yBAAyB,CAAC,UAAU;YACpC,yBAAyB,CAAC,cAAc;YACxC,yBAAyB,CAAC,QAAQ;SACnC;QACD,GAAG,EAAE,GAAG;KACT,CAAC;SACD,GAAG,EAAE,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAChE,EAAgC,EAChC,UAAqC,EACrC,SAAiB,EACjB,cAAmC;IAEnC,MAAM,8CAA8C,CAAC,EAAE,EAAE;QACvD,cAAc;QACd,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,aAAa,EAAE,UAAU,CAAC,aAAa;KACxC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,CAAC;IACzC,MAAM,EAAE;SACL,MAAM,CAAC,0BAA0B,CAAC;SAClC,MAAM,CAAC,GAAG,CAAC;SACX,kBAAkB,CAAC;QAClB,MAAM,EAAE;YACN,0BAA0B,CAAC,aAAa;YACxC,0BAA0B,CAAC,WAAW;SACvC;QACD,GAAG,EAAE,GAAG;KACT,CAAC;SACD,GAAG,EAAE,CAAC;AACX,CAAC;AAED,6EAA6E;AAC7E,gFAAgF;AAChF,yEAAyE;AACzE,KAAK,UAAU,4BAA4B,CAAC,OAAgB;IAC1D,MAAM,eAAe,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAgB,EAChB,UAA4B,EAC5B,cAAsB,EACtB,QAAgB;IAEhB,MAAM,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,+BAA+B,CAAC,EAAE,EAAE;QACpD,UAAU;QACV,cAAc;QACd,QAAQ;KACT,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAgB,EAChB,aAAmC,EACnC,WAAmB;IAEnB,MAAM,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,gCAAgC,CAAC,EAAE,EAAE;QACrD,aAAa;QACb,WAAW;KACZ,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AACD;;;;GAIG;AACH,MAAM,UAAU,oCAAoC,CAClD,UAAqC,EACrC,IAAuC;IAEvC,IACE,UAAU,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa;QAC/C,UAAU,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,EAC3C,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;QACrC,UAAU,CAAC,OAAO,GAAG,CAAC;QACtB,UAAU,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EACjC,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,0CAA0C,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import type {\n  AccessManifestCheckpoint,\n  AccessObjectKind,\n  ManagedPrincipalKind,\n  PrincipalPolicyCheckpoint,\n} from \"@tearleads/crypto\";\nimport { KeyingVerificationError } from \"@tearleads/crypto\";\nimport { and, eq } from \"drizzle-orm\";\nimport {\n  accessManifestCheckpoints,\n  keyingCheckpointTables,\n  principalPolicyCheckpoints,\n} from \"../../sqlite/schema\";\nimport {\n  type ClientSQLiteDatabase,\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\nimport { recordPrincipalPolicyOrganizationInTransaction } from \"../principalPolicy/principalPolicyOrganizationPersistence\";\n\ntype CheckpointHandle = ClientSQLiteDatabase | ClientSQLiteTransactionScope;\n\ntype AccessManifestCheckpointIdentity = Pick<\n  AccessManifestCheckpoint,\n  \"objectKind\" | \"organizationId\" | \"objectId\"\n>;\n\ntype PrincipalPolicyCheckpointIdentity = Pick<\n  PrincipalPolicyCheckpoint,\n  \"principalType\" | \"principalId\"\n>;\n\n/** One key format per checkpoint identity, shared by every batch validator. */\nexport function accessManifestObjectKey(\n  identity: AccessManifestCheckpointIdentity,\n): string {\n  return JSON.stringify([\n    identity.objectKind,\n    identity.organizationId,\n    identity.objectId,\n  ]);\n}\n\nexport function principalPolicyKey(\n  identity: PrincipalPolicyCheckpointIdentity,\n): string {\n  return JSON.stringify([identity.principalType, identity.principalId]);\n}\n\nasync function loadAccessManifestCheckpointRow(\n  handle: CheckpointHandle,\n  identity: AccessManifestCheckpointIdentity,\n): Promise<Pick<AccessManifestCheckpoint, \"epoch\" | \"manifestHash\"> | null> {\n  const rows = await handle\n    .select({\n      epoch: accessManifestCheckpoints.epoch,\n      manifestHash: accessManifestCheckpoints.manifestHash,\n    })\n    .from(accessManifestCheckpoints)\n    .where(\n      and(\n        eq(accessManifestCheckpoints.objectKind, identity.objectKind),\n        eq(accessManifestCheckpoints.organizationId, identity.organizationId),\n        eq(accessManifestCheckpoints.objectId, identity.objectId),\n      ),\n    )\n    .limit(1);\n  return rows[0] ?? null;\n}\n\nasync function loadPrincipalPolicyCheckpointRow(\n  handle: CheckpointHandle,\n  identity: PrincipalPolicyCheckpointIdentity,\n): Promise<Pick<PrincipalPolicyCheckpoint, \"version\" | \"stateHash\"> | null> {\n  const rows = await handle\n    .select({\n      version: principalPolicyCheckpoints.version,\n      stateHash: principalPolicyCheckpoints.stateHash,\n    })\n    .from(principalPolicyCheckpoints)\n    .where(\n      and(\n        eq(principalPolicyCheckpoints.principalType, identity.principalType),\n        eq(principalPolicyCheckpoints.principalId, identity.principalId),\n      ),\n    )\n    .limit(1);\n  return rows[0] ?? null;\n}\n\n/**\n * A loaded checkpoint row merged back with the identity it was looked up by —\n * the full checkpoint shape every comparison consumes.\n */\nexport async function loadStoredAccessManifestCheckpoint(\n  handle: CheckpointHandle,\n  checkpoint: AccessManifestCheckpoint,\n): Promise<AccessManifestCheckpoint | null> {\n  const row = await loadAccessManifestCheckpointRow(handle, checkpoint);\n  return row ? { ...checkpoint, ...row } : null;\n}\n\nexport async function loadStoredPrincipalPolicyCheckpoint(\n  handle: CheckpointHandle,\n  identity: PrincipalPolicyCheckpointIdentity,\n): Promise<PrincipalPolicyCheckpoint | null> {\n  const row = await loadPrincipalPolicyCheckpointRow(handle, identity);\n  return row\n    ? {\n        principalType: identity.principalType,\n        principalId: identity.principalId,\n        ...row,\n      }\n    : null;\n}\n\nexport async function upsertAccessManifestCheckpointInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  checkpoint: AccessManifestCheckpoint,\n  updatedAt: string,\n): Promise<void> {\n  const row = { ...checkpoint, updatedAt };\n  await tx\n    .insert(accessManifestCheckpoints)\n    .values(row)\n    .onConflictDoUpdate({\n      target: [\n        accessManifestCheckpoints.objectKind,\n        accessManifestCheckpoints.organizationId,\n        accessManifestCheckpoints.objectId,\n      ],\n      set: row,\n    })\n    .run();\n}\n\nexport async function upsertPrincipalPolicyCheckpointInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  checkpoint: PrincipalPolicyCheckpoint,\n  updatedAt: string,\n  organizationId?: string | undefined,\n): Promise<void> {\n  await recordPrincipalPolicyOrganizationInTransaction(tx, {\n    organizationId,\n    principalId: checkpoint.principalId,\n    principalType: checkpoint.principalType,\n  });\n  const row = { ...checkpoint, updatedAt };\n  await tx\n    .insert(principalPolicyCheckpoints)\n    .values(row)\n    .onConflictDoUpdate({\n      target: [\n        principalPolicyCheckpoints.principalType,\n        principalPolicyCheckpoints.principalId,\n      ],\n      set: row,\n    })\n    .run();\n}\n\n// Lazily create the checkpoint tables on first access. Every load/save below\n// calls this, so the tables exist on demand; it is intentionally module-private\n// (no caller outside this file needs it, and exporting it tripped knip).\nasync function ensureKeyingCheckpointTables(execSql: ExecSql): Promise<void> {\n  await ensureSqlTables(execSql, keyingCheckpointTables);\n}\n\nexport async function loadAccessManifestCheckpoint(\n  execSql: ExecSql,\n  objectKind: AccessObjectKind,\n  organizationId: string,\n  objectId: string,\n): Promise<AccessManifestCheckpoint | null> {\n  await ensureKeyingCheckpointTables(execSql);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const row = await loadAccessManifestCheckpointRow(db, {\n    objectKind,\n    organizationId,\n    objectId,\n  });\n\n  return row ? { objectKind, objectId, organizationId, ...row } : null;\n}\n\nexport async function loadPrincipalPolicyCheckpoint(\n  execSql: ExecSql,\n  principalType: ManagedPrincipalKind,\n  principalId: string,\n): Promise<PrincipalPolicyCheckpoint | null> {\n  await ensureKeyingCheckpointTables(execSql);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const row = await loadPrincipalPolicyCheckpointRow(db, {\n    principalType,\n    principalId,\n  });\n\n  return row ? { principalType, principalId, ...row } : null;\n}\n/**\n * The shared shape/ownership guard every checkpoint comparison runs before\n * trusting a durable pin: the pin must belong to the compared principal and\n * carry a well-formed version and hash.\n */\nexport function assertPrincipalPolicyCheckpointShape(\n  checkpoint: PrincipalPolicyCheckpoint,\n  head: PrincipalPolicyCheckpointIdentity,\n): void {\n  if (\n    checkpoint.principalType !== head.principalType ||\n    checkpoint.principalId !== head.principalId\n  ) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"principal policy checkpoint belongs to another principal\",\n    );\n  }\n  if (\n    !Number.isInteger(checkpoint.version) ||\n    checkpoint.version < 1 ||\n    checkpoint.stateHash.length === 0\n  ) {\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"principal policy checkpoint is malformed\",\n    );\n  }\n}\n"]}

package/data/persistence/{locallyAcknowledgedCheckpointPersistence.d.ts → keyingCheckpoints/locallyAcknowledgedCheckpointPersistence.d.ts}

@@ -1,7 +1,7 @@
-import { type AccessManifest, type AccessManifestCheckpoint, type PrincipalPolicyCheckpoint, type VerifiedPrincipalPolicy } from "../../internal/crypto/index.js";
-import type { PrincipalPolicyBundleResponse } from "../../internal/validators/response/index.js";
-import { type ExecSql } from "../sqlite/sqlSchema.js";
-import { type AcknowledgedPrincipalGrantRetirements } from "./principalGrantRetirementPersistence.js";
+import { type AccessManifest, type AccessManifestCheckpoint, type PrincipalPolicyCheckpoint, type VerifiedPrincipalPolicy } from "../../../internal/crypto/index.js";
+import type { PrincipalPolicyBundleResponse } from "../../../internal/validators/response/index.js";
+import { type ExecSql } from "../../sqlite/sqlSchema.js";
+import { type AcknowledgedPrincipalGrantRetirements } from "../principalKeys/principalGrantRetirementPersistence.js";
 export interface LocallyAcknowledgedAccessManifestHead {
     readonly checkpoint: AccessManifestCheckpoint;
     readonly previousManifestHash: string | null;

package/data/persistence/{locallyAcknowledgedCheckpointPersistence.js → keyingCheckpoints/locallyAcknowledgedCheckpointPersistence.js}

@@ -1,11 +1,11 @@
-import { accessManifestCheckpointFromManifest, KeyingVerificationError, verifyAccessManifestLocalCheckpoint, verifyPrincipalPolicyCheckpoint, } from "../../internal/crypto/index.js";
-import { keyingCheckpointTables, principalPolicyTables, } from "../sqlite/schema.js";
-import { getClientSQLitePersistenceRuntime, } from "../sqlite/sqlitePersistenceRuntime.js";
-import { ensureSqlTables } from "../sqlite/sqlSchema.js";
+import { accessManifestCheckpointFromManifest, KeyingVerificationError, verifyAccessManifestLocalCheckpoint, verifyPrincipalPolicyCheckpoint, } from "../../../internal/crypto/index.js";
+import { keyingCheckpointTables, principalPolicyTables, } from "../../sqlite/schema/index.js";
+import { getClientSQLitePersistenceRuntime, } from "../../sqlite/sqlitePersistenceRuntime.js";
+import { ensureSqlTables } from "../../sqlite/sqlSchema.js";
+import { assertContainerNotRetired, storePrincipalGrantRetirements, } from "../principalKeys/principalGrantRetirementPersistence.js";
+import { retainPrincipalPolicyBundleInTransaction, writePrincipalPolicyBundleInTransaction, } from "../principalPolicy/principalPolicyPersistence.js";
+import { assertBundleMatchesVerifiedPolicy } from "../principalPolicy/verifiedPrincipalPolicyBundle.js";
 import { accessManifestObjectKey, loadStoredAccessManifestCheckpoint, loadStoredPrincipalPolicyCheckpoint, principalPolicyKey, upsertAccessManifestCheckpointInTransaction, upsertPrincipalPolicyCheckpointInTransaction, } from "./keyingCheckpointPersistence.js";
-import { assertContainerNotRetired, storePrincipalGrantRetirements, } from "./principalGrantRetirementPersistence.js";
-import { retainPrincipalPolicyBundleInTransaction, writePrincipalPolicyBundleInTransaction, } from "./principalPolicyPersistence.js";
-import { assertBundleMatchesVerifiedPolicy } from "./verifiedPrincipalPolicyBundle.js";
 export function locallyAuthoredAccessManifestHead(plan) {
     return {
         checkpoint: accessManifestCheckpointFromManifest({

package/data/persistence/keyingCheckpoints/locallyAcknowledgedCheckpointPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"locallyAcknowledgedCheckpointPersistence.js","sourceRoot":"","sources":["locallyAcknowledgedCheckpointPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,oCAAoC,EACpC,uBAAuB,EAGvB,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAEL,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,sDAAsD,CAAC;AAC9D,OAAO,EACL,wCAAwC,EACxC,uCAAuC,GACxC,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAC;AACrG,OAAO,EACL,uBAAuB,EACvB,kCAAkC,EAClC,mCAAmC,EACnC,kBAAkB,EAClB,2CAA2C,EAC3C,4CAA4C,GAC7C,MAAM,+BAA+B,CAAC;AAOvC,MAAM,UAAU,iCAAiC,CAAC,IAGjD;IACC,OAAO;QACL,UAAU,EAAE,oCAAoC,CAAC;YAC/C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC;QACF,oBAAoB,EAAE,IAAI,CAAC,QAAQ,CAAC,oBAAoB;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,IAA2C,EAC3C,eAAgD;IAEhD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;YACtE,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,gEAAgE,CACjE,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IAED,mCAAmC,CAAC;QAClC,sBAAsB,EAAE,EAAE;QAC1B,OAAO,EAAE;YACP,GAAG,IAAI,CAAC,UAAU;YAClB,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;SAChD;QACD,eAAe;KAChB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,EAAgC,EAChC,KAAuD;IAEvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,0DAA0D,GAAG,EAAE,CAChE,CAAC;QACJ,CAAC;QACD,wBAAwB,CACtB,IAAI,EACJ,MAAM,kCAAkC,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAC9D,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,EAAgC,EAChC,OAAsD,EACtD,SAAiB;IAEjB,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,MAAM,2CAA2C,CAC/C,EAAE,EACF,UAAU,EACV,SAAS,CACV,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uDAAuD,CAAC,KAO7E;IACC,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,KAAK,EAAE,EAAgC,EAAE,EAAE;QAC7D,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,MAAM,kCAAkC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACvE,IACE,OAAO,EAAE,KAAK,KAAK,QAAQ,CAAC,KAAK;gBACjC,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,EAC9C,CAAC;gBACD,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,mEAAmE,CACpE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,kCAAkC,IAAI,EAAE,EAAE,CAAC;YACtE,MAAM,OAAO,GAAG,MAAM,mCAAmC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACxE,IACE,OAAO,EAAE,OAAO,KAAK,QAAQ,CAAC,OAAO;gBACrC,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EACxC,CAAC;gBACD,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,0EAA0E,CAC3E,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,sBAAsB,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,OAAO,CACL,MAAM,OAAO,CAAC,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE;YAChE,QAAQ,EAAE,WAAW;SACtB,CAAC,CACH,CAAC,SAAS,CAAC;IACd,CAAC;IACD,MAAM,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CACjC,MAA+B,EAC/B,UAA4C;IAE5C,+BAA+B,CAAC;QAC9B,KAAK,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC3B,YAAY,EAAE,MAAM,CAAC,KAAK;QAC1B,eAAe,EAAE,UAAU;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,IAAI,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,uFAAuF,CACxF,CAAC;IACJ,CAAC;AACH,CAAC;AAOD,SAAS,gCAAgC,CACvC,OAA4D;IAE5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,6CAA6C,GAAG,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uCAAuC,CAAC,KAUtD;IACC,gCAAgC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAC,CACvE,CAAC;IACF,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE;QACnC,GAAG,qBAAqB;QACxB,GAAG,sBAAsB;KAC1B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,KAAK,EAAE,EAAgC,EAAE,EAAE;QACvD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACvC,0BAA0B,CACxB,MAAM,EACN,MAAM,mCAAmC,CAAC,EAAE,EAAE,MAAM,CAAC,CACtD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,iBAAiB;YACzB,MAAM,8BAA8B,CAClC,EAAE,EACF,KAAK,CAAC,iBAAiB,EACvB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EACzC,KAAK,CAAC,cAAc,CACrB,CAAC;QACJ,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,uCAAuC,CAC3C,EAAE,EACF,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,CACrB,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,wCAAwC,CAC5C,EAAE,EACF,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,CACrB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,4CAA4C,CAChD,EAAE,EACF,MAAM,CAAC,UAAU,EACjB,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,CACrB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,OAAO,CAAC,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE;YAC1D,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gDAAgD,CAAC,KAMhE;IACC,OAAO,uCAAuC,CAAC;QAC7C,GAAG,KAAK;QACR,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+CAA+C,CAC7D,KAKC;IAED,OAAO,gDAAgD,CAAC;QACtD,OAAO,EAAE,CAAC,KAAK,CAAC;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,+CAA+C,CAAC,KAS/D;IACC,OAAO,uCAAuC,CAAC;QAC7C,GAAG,KAAK;QACR,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  type AccessManifest,\n  type AccessManifestCheckpoint,\n  accessManifestCheckpointFromManifest,\n  KeyingVerificationError,\n  type PrincipalPolicyCheckpoint,\n  type VerifiedPrincipalPolicy,\n  verifyAccessManifestLocalCheckpoint,\n  verifyPrincipalPolicyCheckpoint,\n} from \"@tearleads/crypto\";\nimport type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport {\n  keyingCheckpointTables,\n  principalPolicyTables,\n} from \"../../sqlite/schema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\nimport {\n  type AcknowledgedPrincipalGrantRetirements,\n  assertContainerNotRetired,\n  storePrincipalGrantRetirements,\n} from \"../principalKeys/principalGrantRetirementPersistence\";\nimport {\n  retainPrincipalPolicyBundleInTransaction,\n  writePrincipalPolicyBundleInTransaction,\n} from \"../principalPolicy/principalPolicyPersistence\";\nimport { assertBundleMatchesVerifiedPolicy } from \"../principalPolicy/verifiedPrincipalPolicyBundle\";\nimport {\n  accessManifestObjectKey,\n  loadStoredAccessManifestCheckpoint,\n  loadStoredPrincipalPolicyCheckpoint,\n  principalPolicyKey,\n  upsertAccessManifestCheckpointInTransaction,\n  upsertPrincipalPolicyCheckpointInTransaction,\n} from \"./keyingCheckpointPersistence\";\n\nexport interface LocallyAcknowledgedAccessManifestHead {\n  readonly checkpoint: AccessManifestCheckpoint;\n  readonly previousManifestHash: string | null;\n}\n\nexport function locallyAuthoredAccessManifestHead(plan: {\n  readonly manifest: AccessManifest;\n  readonly manifestHash: string;\n}): LocallyAcknowledgedAccessManifestHead {\n  return {\n    checkpoint: accessManifestCheckpointFromManifest({\n      manifest: plan.manifest,\n      manifestHash: plan.manifestHash,\n    }),\n    previousManifestHash: plan.manifest.previousManifestHash,\n  };\n}\n\nfunction validateAcknowledgedHead(\n  head: LocallyAcknowledgedAccessManifestHead,\n  localCheckpoint: AccessManifestCheckpoint | null,\n): void {\n  if (!localCheckpoint) {\n    if (head.checkpoint.epoch !== 1 || head.previousManifestHash !== null) {\n      throw new KeyingVerificationError(\n        \"stale_predecessor\",\n        \"locally acknowledged access manifest does not begin at epoch 1\",\n      );\n    }\n    return;\n  }\n\n  verifyAccessManifestLocalCheckpoint({\n    checkpointPredecessors: [],\n    current: {\n      ...head.checkpoint,\n      previousManifestHash: head.previousManifestHash,\n    },\n    localCheckpoint,\n  });\n}\n\nasync function validateAcknowledgedHeads(\n  tx: ClientSQLiteTransactionScope,\n  heads: readonly LocallyAcknowledgedAccessManifestHead[],\n): Promise<Map<string, AccessManifestCheckpoint>> {\n  const pending = new Map<string, AccessManifestCheckpoint>();\n  for (const head of heads) {\n    await assertContainerNotRetired(tx, head.checkpoint);\n    const key = accessManifestObjectKey(head.checkpoint);\n    if (pending.has(key)) {\n      throw new KeyingVerificationError(\n        \"equivocation\",\n        `locally acknowledged batch contains multiple heads for ${key}`,\n      );\n    }\n    validateAcknowledgedHead(\n      head,\n      await loadStoredAccessManifestCheckpoint(tx, head.checkpoint),\n    );\n    pending.set(key, head.checkpoint);\n  }\n  return pending;\n}\n\nasync function writeAcknowledgedHeads(\n  tx: ClientSQLiteTransactionScope,\n  pending: ReadonlyMap<string, AccessManifestCheckpoint>,\n  updatedAt: string,\n): Promise<void> {\n  for (const checkpoint of pending.values()) {\n    await upsertAccessManifestCheckpointInTransaction(\n      tx,\n      checkpoint,\n      updatedAt,\n    );\n  }\n}\n\n/**\n * Commits only heads authored and signed by this client after an exact remote\n * acknowledgement check. Every non-initial head must directly extend the\n * latest durable pin; arbitrary remote projections must use the verified\n * projection checkpoint path instead.\n */\nexport async function advanceLocallyAcknowledgedAccessManifestHeadsAtomically(input: {\n  readonly execSql: ExecSql;\n  readonly heads: readonly LocallyAcknowledgedAccessManifestHead[];\n  /** Optional optimistic read dependencies, checked inside the write transaction. */\n  readonly expectedAccessManifestCheckpoints?: readonly AccessManifestCheckpoint[];\n  readonly expectedPrincipalPolicyCheckpoints?: readonly PrincipalPolicyCheckpoint[];\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<boolean> {\n  await ensureSqlTables(input.execSql, keyingCheckpointTables);\n  const updatedAt = new Date().toISOString();\n  const runtime = getClientSQLitePersistenceRuntime(input.execSql);\n  const acknowledge = async (tx: ClientSQLiteTransactionScope) => {\n    for (const expected of input.expectedAccessManifestCheckpoints ?? []) {\n      const current = await loadStoredAccessManifestCheckpoint(tx, expected);\n      if (\n        current?.epoch !== expected.epoch ||\n        current.manifestHash !== expected.manifestHash\n      ) {\n        throw new KeyingVerificationError(\n          \"stale_predecessor\",\n          \"A re-citation container checkpoint changed before acknowledgement\",\n        );\n      }\n    }\n    for (const expected of input.expectedPrincipalPolicyCheckpoints ?? []) {\n      const current = await loadStoredPrincipalPolicyCheckpoint(tx, expected);\n      if (\n        current?.version !== expected.version ||\n        current.stateHash !== expected.stateHash\n      ) {\n        throw new KeyingVerificationError(\n          \"stale_predecessor\",\n          \"A re-citation principal policy checkpoint changed before acknowledgement\",\n        );\n      }\n    }\n    const pending = await validateAcknowledgedHeads(tx, input.heads);\n    await writeAcknowledgedHeads(tx, pending, updatedAt);\n  };\n  if (input.stillCurrent) {\n    return (\n      await runtime.guardedTransaction(acknowledge, input.stillCurrent, {\n        behavior: \"immediate\",\n      })\n    ).committed;\n  }\n  await runtime.transaction(acknowledge, { behavior: \"immediate\" });\n  return true;\n}\n\nfunction validateAcknowledgedPolicy(\n  policy: VerifiedPrincipalPolicy,\n  checkpoint: PrincipalPolicyCheckpoint | null,\n): void {\n  verifyPrincipalPolicyCheckpoint({\n    chain: policy.history ?? [],\n    currentState: policy.state,\n    localCheckpoint: checkpoint,\n  });\n  if (!checkpoint && policy.version !== 1) {\n    throw new KeyingVerificationError(\n      \"stale_predecessor\",\n      \"locally acknowledged principal policy does not begin at version 1\",\n    );\n  }\n  if (checkpoint && policy.version > checkpoint.version + 1) {\n    throw new KeyingVerificationError(\n      \"stale_predecessor\",\n      \"locally acknowledged principal policy does not directly extend the durable checkpoint\",\n    );\n  }\n}\n\ninterface LocallyAcknowledgedPrincipalPolicyBundle {\n  readonly bundle: PrincipalPolicyBundleResponse;\n  readonly policy: VerifiedPrincipalPolicy;\n}\n\nfunction assertUniqueAcknowledgedPolicies(\n  entries: readonly LocallyAcknowledgedPrincipalPolicyBundle[],\n): void {\n  const seen = new Set<string>();\n  for (const { policy } of entries) {\n    const key = principalPolicyKey(policy);\n    if (seen.has(key)) {\n      throw new KeyingVerificationError(\n        \"duplicate_entry\",\n        `locally acknowledged policy batch repeats ${key}`,\n      );\n    }\n    seen.add(key);\n  }\n}\n\nasync function storeAcknowledgedPrincipalPolicyBundles(input: {\n  readonly retiredContainers?:\n    | AcknowledgedPrincipalGrantRetirements\n    | undefined;\n  readonly entries: readonly LocallyAcknowledgedPrincipalPolicyBundle[];\n  readonly execSql: ExecSql;\n  readonly organizationId?: string | undefined;\n  readonly placement: \"current\" | \"history\";\n  readonly stillCurrent?: (() => boolean) | undefined;\n  readonly updatedAt: string;\n}): Promise<void> {\n  assertUniqueAcknowledgedPolicies(input.entries);\n  await Promise.all(\n    input.entries.map((entry) => assertBundleMatchesVerifiedPolicy(entry)),\n  );\n  await ensureSqlTables(input.execSql, [\n    ...principalPolicyTables,\n    ...keyingCheckpointTables,\n  ]);\n  const runtime = getClientSQLitePersistenceRuntime(input.execSql);\n  const store = async (tx: ClientSQLiteTransactionScope) => {\n    for (const { policy } of input.entries) {\n      validateAcknowledgedPolicy(\n        policy,\n        await loadStoredPrincipalPolicyCheckpoint(tx, policy),\n      );\n    }\n    if (input.retiredContainers)\n      await storePrincipalGrantRetirements(\n        tx,\n        input.retiredContainers,\n        input.entries.map(({ policy }) => policy),\n        input.organizationId,\n      );\n    for (const entry of input.entries) {\n      if (input.placement === \"current\") {\n        await writePrincipalPolicyBundleInTransaction(\n          tx,\n          entry.bundle,\n          input.updatedAt,\n          input.organizationId,\n        );\n      } else {\n        await retainPrincipalPolicyBundleInTransaction(\n          tx,\n          entry.bundle,\n          input.updatedAt,\n          input.organizationId,\n        );\n      }\n    }\n    for (const { policy } of input.entries) {\n      await upsertPrincipalPolicyCheckpointInTransaction(\n        tx,\n        policy.checkpoint,\n        input.updatedAt,\n        input.organizationId,\n      );\n    }\n  };\n  if (input.stillCurrent) {\n    await runtime.guardedTransaction(store, input.stillCurrent, {\n      behavior: \"immediate\",\n    });\n    return;\n  }\n  await runtime.transaction(store, { behavior: \"immediate\" });\n}\n\n/** Atomically pins and caches exact full policy bundles acknowledged by the API. */\nexport function persistLocallyAcknowledgedPrincipalPolicyBundles(input: {\n  readonly entries: readonly LocallyAcknowledgedPrincipalPolicyBundle[];\n  readonly execSql: ExecSql;\n  readonly organizationId?: string | undefined;\n  readonly stillCurrent?: (() => boolean) | undefined;\n  readonly updatedAt: string;\n}): Promise<void> {\n  return storeAcknowledgedPrincipalPolicyBundles({\n    ...input,\n    placement: \"current\",\n  });\n}\n\nexport function persistLocallyAcknowledgedPrincipalPolicyBundle(\n  input: LocallyAcknowledgedPrincipalPolicyBundle & {\n    readonly execSql: ExecSql;\n    readonly organizationId?: string | undefined;\n    readonly stillCurrent?: (() => boolean) | undefined;\n    readonly updatedAt: string;\n  },\n): Promise<void> {\n  return persistLocallyAcknowledgedPrincipalPolicyBundles({\n    entries: [input],\n    execSql: input.execSql,\n    organizationId: input.organizationId,\n    stillCurrent: input.stillCurrent,\n    updatedAt: input.updatedAt,\n  });\n}\n\nexport function retainLocallyAcknowledgedPrincipalPolicyBundles(input: {\n  readonly retiredContainers?:\n    | AcknowledgedPrincipalGrantRetirements\n    | undefined;\n  readonly entries: readonly LocallyAcknowledgedPrincipalPolicyBundle[];\n  readonly execSql: ExecSql;\n  readonly organizationId?: string | undefined;\n  readonly stillCurrent?: (() => boolean) | undefined;\n  readonly updatedAt: string;\n}): Promise<void> {\n  return storeAcknowledgedPrincipalPolicyBundles({\n    ...input,\n    placement: \"history\",\n  });\n}\n"]}

package/data/persistence/{organizationReplacementCheckpointPersistence.js → keyingCheckpoints/organizationReplacementCheckpointPersistence.js}

@@ -1,10 +1,10 @@
-import { KeyingVerificationError, } from "../../internal/crypto/index.js";
-import { keyingCheckpointTables, principalPolicyTables, } from "../sqlite/schema.js";
-import { getClientSQLitePersistenceRuntime } from "../sqlite/sqlitePersistenceRuntime.js";
-import { ensureSqlTables } from "../sqlite/sqlSchema.js";
+import { KeyingVerificationError, } from "../../../internal/crypto/index.js";
+import { keyingCheckpointTables, principalPolicyTables, } from "../../sqlite/schema/index.js";
+import { getClientSQLitePersistenceRuntime } from "../../sqlite/sqlitePersistenceRuntime.js";
+import { ensureSqlTables } from "../../sqlite/sqlSchema.js";
+import { assertContainerNotRetired } from "../principalKeys/principalGrantRetirementPersistence.js";
+import { recordPrincipalPolicyOrganizationInTransaction } from "../principalPolicy/principalPolicyOrganizationPersistence.js";
 import { loadStoredAccessManifestCheckpoint, loadStoredPrincipalPolicyCheckpoint, upsertAccessManifestCheckpointInTransaction, upsertPrincipalPolicyCheckpointInTransaction, } from "./keyingCheckpointPersistence.js";
-import { assertContainerNotRetired } from "./principalGrantRetirementPersistence.js";
-import { recordPrincipalPolicyOrganizationInTransaction } from "./principalPolicyOrganizationPersistence.js";
 /**
  * A verified authorization from this identity also authenticates the winning
  * device's genesis. Seed first-sight pins before adopting its IDs; retain any

package/data/persistence/keyingCheckpoints/organizationReplacementCheckpointPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationReplacementCheckpointPersistence.js","sourceRoot":"","sources":["organizationReplacementCheckpointPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,uBAAuB,GAGxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,sDAAsD,CAAC;AACjG,OAAO,EAAE,8CAA8C,EAAE,MAAM,2DAA2D,CAAC;AAC3H,OAAO,EACL,kCAAkC,EAClC,mCAAmC,EACnC,2CAA2C,EAC3C,4CAA4C,GAC7C,MAAM,+BAA+B,CAAC;AAEvC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAAC,KAI/D;IACC,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IAC1C,MAAM,cAAc,GAAG,aAAa,CAAC,cAAc,CAAC;IACpD,MAAM,IAAI,GAA6B;QACrC,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,aAAa,CAAC,eAAe;QACvC,cAAc;QACd,KAAK,EAAE,CAAC;QACR,YAAY,EAAE,aAAa,CAAC,gBAAgB;KAC7C,CAAC;IACF,MAAM,UAAU,GAAgC;QAC9C;YACE,aAAa,EAAE,cAAc;YAC7B,WAAW,EAAE,cAAc;YAC3B,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,aAAa,CAAC,qBAAqB;SAC/C;QACD;YACE,aAAa,EAAE,OAAO;YACtB,WAAW,EAAE,aAAa,CAAC,YAAY;YACvC,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,aAAa,CAAC,mBAAmB;SAC7C;QACD;YACE,aAAa,EAAE,OAAO;YACtB,WAAW,EAAE,aAAa,CAAC,aAAa;YACxC,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,aAAa,CAAC,oBAAoB;SAC9C;KACF,CAAC;IACF,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE;QACnC,GAAG,qBAAqB;QACxB,GAAG,sBAAsB;KAC1B,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAC7C,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,yBAAyB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,kCAAkC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACtE,IACE,UAAU,EAAE,KAAK,KAAK,CAAC;YACvB,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;YAE7C,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,8DAA8D,CAC/D,CAAC;QACJ,IAAI,CAAC,UAAU;YACb,MAAM,2CAA2C,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACzE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,8CAA8C,CAAC,EAAE,EAAE;gBACvD,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,aAAa,EAAE,SAAS,CAAC,aAAa;gBACtC,cAAc;aACf,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,mCAAmC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACxE,IAAI,MAAM,EAAE,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS;gBACnE,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,gEAAgE,CACjE,CAAC;YACJ,IAAI,CAAC,MAAM;gBACT,MAAM,4CAA4C,CAChD,EAAE,EACF,SAAS,EACT,SAAS,EACT,cAAc,CACf,CAAC;QACN,CAAC;IACH,CAAC,EACD,KAAK,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAClC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;IACF,OAAO,MAAM,CAAC,SAAS,CAAC;AAC1B,CAAC","sourcesContent":["import {\n  type AccessManifestCheckpoint,\n  KeyingVerificationError,\n  type PrincipalPolicyCheckpoint,\n  type VerifiedOrganizationReplacementAuthorization,\n} from \"@tearleads/crypto\";\nimport {\n  keyingCheckpointTables,\n  principalPolicyTables,\n} from \"../../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\nimport { assertContainerNotRetired } from \"../principalKeys/principalGrantRetirementPersistence\";\nimport { recordPrincipalPolicyOrganizationInTransaction } from \"../principalPolicy/principalPolicyOrganizationPersistence\";\nimport {\n  loadStoredAccessManifestCheckpoint,\n  loadStoredPrincipalPolicyCheckpoint,\n  upsertAccessManifestCheckpointInTransaction,\n  upsertPrincipalPolicyCheckpointInTransaction,\n} from \"./keyingCheckpointPersistence\";\n\n/**\n * A verified authorization from this identity also authenticates the winning\n * device's genesis. Seed first-sight pins before adopting its IDs; retain any\n * later observations rather than rolling them back to the provisioning epoch.\n */\nexport async function persistOrganizationReplacementCheckpoints(input: {\n  readonly authorization: VerifiedOrganizationReplacementAuthorization;\n  readonly execSql: ExecSql;\n  readonly stillCurrent?: (() => boolean) | undefined;\n}): Promise<boolean> {\n  const authorization = input.authorization;\n  const organizationId = authorization.organizationId;\n  const root: AccessManifestCheckpoint = {\n    objectKind: \"container\",\n    objectId: authorization.rootContainerId,\n    organizationId,\n    epoch: 1,\n    manifestHash: authorization.rootManifestHash,\n  };\n  const principals: PrincipalPolicyCheckpoint[] = [\n    {\n      principalType: \"organization\",\n      principalId: organizationId,\n      version: 1,\n      stateHash: authorization.organizationStateHash,\n    },\n    {\n      principalType: \"group\",\n      principalId: authorization.adminGroupId,\n      version: 1,\n      stateHash: authorization.adminGroupStateHash,\n    },\n    {\n      principalType: \"group\",\n      principalId: authorization.memberGroupId,\n      version: 1,\n      stateHash: authorization.memberGroupStateHash,\n    },\n  ];\n  await ensureSqlTables(input.execSql, [\n    ...principalPolicyTables,\n    ...keyingCheckpointTables,\n  ]);\n  const runtime = getClientSQLitePersistenceRuntime(input.execSql);\n  const result = await runtime.guardedTransaction(\n    async (tx) => {\n      const updatedAt = new Date().toISOString();\n      await assertContainerNotRetired(tx, root);\n      const storedRoot = await loadStoredAccessManifestCheckpoint(tx, root);\n      if (\n        storedRoot?.epoch === 1 &&\n        storedRoot.manifestHash !== root.manifestHash\n      )\n        throw new KeyingVerificationError(\n          \"equivocation\",\n          \"Replacement root conflicts with its local genesis checkpoint\",\n        );\n      if (!storedRoot)\n        await upsertAccessManifestCheckpointInTransaction(tx, root, updatedAt);\n      for (const principal of principals) {\n        await recordPrincipalPolicyOrganizationInTransaction(tx, {\n          principalId: principal.principalId,\n          principalType: principal.principalType,\n          organizationId,\n        });\n        const stored = await loadStoredPrincipalPolicyCheckpoint(tx, principal);\n        if (stored?.version === 1 && stored.stateHash !== principal.stateHash)\n          throw new KeyingVerificationError(\n            \"equivocation\",\n            \"Replacement policy conflicts with its local genesis checkpoint\",\n          );\n        if (!stored)\n          await upsertPrincipalPolicyCheckpointInTransaction(\n            tx,\n            principal,\n            updatedAt,\n            organizationId,\n          );\n      }\n    },\n    input.stillCurrent ?? (() => true),\n    { behavior: \"immediate\" },\n  );\n  return result.committed;\n}\n"]}

package/data/persistence/{principalAuthorizationCheckpoints.js → keyingCheckpoints/principalAuthorizationCheckpoints.js}

@@ -1,4 +1,4 @@
-import { KeyingVerificationError, verifyPrincipalPolicyCheckpoint, } from "../../internal/crypto/index.js";
+import { KeyingVerificationError, verifyPrincipalPolicyCheckpoint, } from "../../../internal/crypto/index.js";
 import { loadStoredPrincipalPolicyCheckpoint } from "./keyingCheckpointPersistence.js";
 export class PrincipalAuthorizationCheckpointUnavailableError extends KeyingVerificationError {
     constructor() {

package/data/persistence/keyingCheckpoints/principalAuthorizationCheckpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalAuthorizationCheckpoints.js","sourceRoot":"","sources":["principalAuthorizationCheckpoints.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EAGvB,+BAA+B,GAChC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AAEpF,MAAM,OAAO,gDAAiD,SAAQ,uBAAuB;IAC3F;QACE,KAAK,CACH,oBAAoB,EACpB,sEAAsE,CACvE,CAAC;IACJ,CAAC;CACF;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,EAAgC,EAChC,QAGG;IAEH,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,MAAM,mCAAmC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAClC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa;YAC5C,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;YACxC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CACvC,CAAC;QACF,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACrE,IACE,UAAU,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO;YACnC,CAAC,UAAU,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO;gBAClC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,CAAC,CAAC;YAEnE,MAAM,IAAI,gDAAgD,EAAE,CAAC;QAC/D,+BAA+B,CAAC;YAC9B,KAAK;YACL,YAAY,EAAE,MAAM,CAAC,KAAK;YAC1B,eAAe,EAAE,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;AACH,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type VerifiedPrincipalPolicyCurrent,\n  type VerifiedPrincipalPolicySelection,\n  verifyPrincipalPolicyCheckpoint,\n} from \"@tearleads/crypto\";\nimport type { ClientSQLiteTransactionScope } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { loadStoredPrincipalPolicyCheckpoint } from \"./keyingCheckpointPersistence\";\n\nexport class PrincipalAuthorizationCheckpointUnavailableError extends KeyingVerificationError {\n  constructor() {\n    super(\n      \"missing_dependency\",\n      \"Public authorization cannot connect to the latest durable checkpoint\",\n    );\n  }\n}\n\n/** Validate public evidence or a verified private ancestry bridge without admitting pins. */\nexport async function validatePrincipalAuthorizationCheckpoints(\n  tx: ClientSQLiteTransactionScope,\n  policies: readonly (\n    | VerifiedPrincipalPolicySelection\n    | VerifiedPrincipalPolicyCurrent\n  )[],\n): Promise<void> {\n  for (const policy of policies) {\n    const checkpoint = await loadStoredPrincipalPolicyCheckpoint(tx, policy);\n    if (!checkpoint) continue;\n    const matchingHead = policies.filter(\n      (other) =>\n        other.principalType === policy.principalType &&\n        other.principalId === policy.principalId &&\n        other.stateHash === policy.stateHash,\n    );\n    const chain = matchingHead.flatMap((other) => other.retainedHistory);\n    if (\n      checkpoint.version > policy.version ||\n      (checkpoint.version < policy.version &&\n        !chain.some(({ state }) => state.version === checkpoint.version))\n    )\n      throw new PrincipalAuthorizationCheckpointUnavailableError();\n    verifyPrincipalPolicyCheckpoint({\n      chain,\n      currentState: policy.state,\n      localCheckpoint: checkpoint,\n    });\n  }\n}\n"]}

package/data/persistence/organizationFounderPersistence.js

@@ -1,8 +1,8 @@
 import { KeyingVerificationError, } from "../../internal/crypto/index.js";
 import { eq } from "drizzle-orm";
 import { principalPolicyEvidenceEntries } from "../principals/principalPolicyEvidence.js";
-import { organizationFounders } from "../sqlite/organizationFounderSchema.js";
-import { keyingCheckpointTables } from "../sqlite/schema.js";
+import { keyingCheckpointTables } from "../sqlite/schema/index.js";
+import { organizationFounders } from "../sqlite/schema/organizationFounderSchema.js";
 import { getClientSQLitePersistenceRuntime } from "../sqlite/sqlitePersistenceRuntime.js";
 import { ensureSqlTables } from "../sqlite/sqlSchema.js";
 function assertSameFounder(stored, founder) {

package/data/persistence/organizationFounderPersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationFounderPersistence.js","sourceRoot":"","sources":["organizationFounderPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,8BAA8B,EAAE,MAAM,uCAAuC,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAgB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEpE,SAAS,iBAAiB,CACxB,MAAgD,EAChD,OAAiD;IAEjD,IACE,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAChC,MAAM,CAAC,qBAAqB,KAAK,OAAO,CAAC,qBAAqB;QAC9D,MAAM,CAAC,gBAAgB,KAAK,OAAO,CAAC,gBAAgB;QAEpD,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,iEAAiE,CAClE,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAgB,EAChB,cAAsB;IAEtB,MAAM,eAAe,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;SAC9B,MAAM,EAAE;SACR,IAAI,CAAC,oBAAoB,CAAC;SAC1B,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;SAC9D,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,MAAM,IAAI,IAAI,CAAC;AACxB,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAGjD;IACC,MAAM,OAAO,GAAG,8BAA8B,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CACrE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CACnC,EAAE,KAAK,CAAC;IACT,IACE,OAAO,EAAE,aAAa,KAAK,cAAc;QACzC,OAAO,CAAC,aAAa,KAAK,IAAI;QAE9B,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,gDAAgD,CACjD,CAAC;IACJ,MAAM,OAAO,GAAG;QACd,cAAc,EAAE,OAAO,CAAC,WAAW;QACnC,MAAM,EAAE,OAAO,CAAC,YAAY;QAC5B,qBAAqB,EAAE,OAAO,CAAC,wBAAwB;QACvD,gBAAgB,EAAE,OAAO,CAAC,SAAS;KACpC,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,uBAAuB,CACxC,KAAK,CAAC,OAAO,EACb,OAAO,CAAC,cAAc,CACvB,CAAC;IACF,IAAI,IAAI,EAAE,CAAC;QACT,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,OAAO,CAAC,WAAW,CACvB,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;aACtB,MAAM,EAAE;aACR,IAAI,CAAC,oBAAoB,CAAC;aAC1B,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;aACtE,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,MAAM,EAAE,CAAC;YACX,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QACD,MAAM,EAAE;aACL,MAAM,CAAC,oBAAoB,CAAC;aAC5B,MAAM,CAAC,OAAO,CAAC;aACf,mBAAmB,EAAE;aACrB,GAAG,EAAE,CAAC;IACX,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;AACJ,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type PrincipalPolicyAuthorization,\n} from \"@tearleads/crypto\";\nimport { eq } from \"drizzle-orm\";\nimport { principalPolicyEvidenceEntries } from \"../principals/principalPolicyEvidence\";\nimport { organizationFounders } from \"../sqlite/organizationFounderSchema\";\nimport { keyingCheckpointTables } from \"../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../sqlite/sqlSchema\";\n\nfunction assertSameFounder(\n  stored: typeof organizationFounders.$inferSelect,\n  founder: typeof organizationFounders.$inferInsert,\n): void {\n  if (\n    stored.userId !== founder.userId ||\n    stored.signingKeyFingerprint !== founder.signingKeyFingerprint ||\n    stored.genesisStateHash !== founder.genesisStateHash\n  )\n    throw new KeyingVerificationError(\n      \"equivocation\",\n      \"Organization founder conflicts with its durable genesis binding\",\n    );\n}\n\nexport async function loadOrganizationFounder(\n  execSql: ExecSql,\n  organizationId: string,\n): Promise<typeof organizationFounders.$inferSelect | null> {\n  await ensureSqlTables(execSql, keyingCheckpointTables);\n  const runtime = getClientSQLitePersistenceRuntime(execSql);\n  const [stored] = await runtime.db\n    .select()\n    .from(organizationFounders)\n    .where(eq(organizationFounders.organizationId, organizationId))\n    .limit(1);\n  return stored ?? null;\n}\n\n/** Pin verified genesis, never a later administrator or a folder's creator. */\nexport async function rememberOrganizationFounder(input: {\n  readonly execSql: ExecSql;\n  readonly organization: PrincipalPolicyAuthorization;\n}): Promise<void> {\n  const genesis = principalPolicyEvidenceEntries(input.organization).find(\n    ({ state }) => state.version === 1,\n  )?.state;\n  if (\n    genesis?.principalType !== \"organization\" ||\n    genesis.prevStateHash !== null\n  )\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      \"Organization founder requires verified genesis\",\n    );\n  const founder = {\n    organizationId: genesis.principalId,\n    userId: genesis.signerUserId,\n    signingKeyFingerprint: genesis.signerUserKeyFingerprint,\n    genesisStateHash: genesis.stateHash,\n  };\n  const held = await loadOrganizationFounder(\n    input.execSql,\n    founder.organizationId,\n  );\n  if (held) {\n    assertSameFounder(held, founder);\n    return;\n  }\n  const runtime = getClientSQLitePersistenceRuntime(input.execSql);\n  await runtime.transaction(\n    async (tx) => {\n      const [stored] = await tx\n        .select()\n        .from(organizationFounders)\n        .where(eq(organizationFounders.organizationId, founder.organizationId))\n        .limit(1);\n      if (stored) {\n        assertSameFounder(stored, founder);\n        return;\n      }\n      await tx\n        .insert(organizationFounders)\n        .values(founder)\n        .onConflictDoNothing()\n        .run();\n    },\n    { behavior: \"immediate\" },\n  );\n}\n"]}
+{"version":3,"file":"organizationFounderPersistence.js","sourceRoot":"","sources":["organizationFounderPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAExB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,8BAA8B,EAAE,MAAM,uCAAuC,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAClF,OAAO,EAAE,iCAAiC,EAAE,MAAM,oCAAoC,CAAC;AACvF,OAAO,EAAgB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEpE,SAAS,iBAAiB,CACxB,MAAgD,EAChD,OAAiD;IAEjD,IACE,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAChC,MAAM,CAAC,qBAAqB,KAAK,OAAO,CAAC,qBAAqB;QAC9D,MAAM,CAAC,gBAAgB,KAAK,OAAO,CAAC,gBAAgB;QAEpD,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,iEAAiE,CAClE,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAgB,EAChB,cAAsB;IAEtB,MAAM,eAAe,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;SAC9B,MAAM,EAAE;SACR,IAAI,CAAC,oBAAoB,CAAC;SAC1B,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;SAC9D,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,MAAM,IAAI,IAAI,CAAC;AACxB,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAGjD;IACC,MAAM,OAAO,GAAG,8BAA8B,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CACrE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CACnC,EAAE,KAAK,CAAC;IACT,IACE,OAAO,EAAE,aAAa,KAAK,cAAc;QACzC,OAAO,CAAC,aAAa,KAAK,IAAI;QAE9B,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,gDAAgD,CACjD,CAAC;IACJ,MAAM,OAAO,GAAG;QACd,cAAc,EAAE,OAAO,CAAC,WAAW;QACnC,MAAM,EAAE,OAAO,CAAC,YAAY;QAC5B,qBAAqB,EAAE,OAAO,CAAC,wBAAwB;QACvD,gBAAgB,EAAE,OAAO,CAAC,SAAS;KACpC,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,uBAAuB,CACxC,KAAK,CAAC,OAAO,EACb,OAAO,CAAC,cAAc,CACvB,CAAC;IACF,IAAI,IAAI,EAAE,CAAC;QACT,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,OAAO,CAAC,WAAW,CACvB,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;aACtB,MAAM,EAAE;aACR,IAAI,CAAC,oBAAoB,CAAC;aAC1B,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;aACtE,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,MAAM,EAAE,CAAC;YACX,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QACD,MAAM,EAAE;aACL,MAAM,CAAC,oBAAoB,CAAC;aAC5B,MAAM,CAAC,OAAO,CAAC;aACf,mBAAmB,EAAE;aACrB,GAAG,EAAE,CAAC;IACX,CAAC,EACD,EAAE,QAAQ,EAAE,WAAW,EAAE,CAC1B,CAAC;AACJ,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  type PrincipalPolicyAuthorization,\n} from \"@tearleads/crypto\";\nimport { eq } from \"drizzle-orm\";\nimport { principalPolicyEvidenceEntries } from \"../principals/principalPolicyEvidence\";\nimport { keyingCheckpointTables } from \"../sqlite/schema\";\nimport { organizationFounders } from \"../sqlite/schema/organizationFounderSchema\";\nimport { getClientSQLitePersistenceRuntime } from \"../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../sqlite/sqlSchema\";\n\nfunction assertSameFounder(\n  stored: typeof organizationFounders.$inferSelect,\n  founder: typeof organizationFounders.$inferInsert,\n): void {\n  if (\n    stored.userId !== founder.userId ||\n    stored.signingKeyFingerprint !== founder.signingKeyFingerprint ||\n    stored.genesisStateHash !== founder.genesisStateHash\n  )\n    throw new KeyingVerificationError(\n      \"equivocation\",\n      \"Organization founder conflicts with its durable genesis binding\",\n    );\n}\n\nexport async function loadOrganizationFounder(\n  execSql: ExecSql,\n  organizationId: string,\n): Promise<typeof organizationFounders.$inferSelect | null> {\n  await ensureSqlTables(execSql, keyingCheckpointTables);\n  const runtime = getClientSQLitePersistenceRuntime(execSql);\n  const [stored] = await runtime.db\n    .select()\n    .from(organizationFounders)\n    .where(eq(organizationFounders.organizationId, organizationId))\n    .limit(1);\n  return stored ?? null;\n}\n\n/** Pin verified genesis, never a later administrator or a folder's creator. */\nexport async function rememberOrganizationFounder(input: {\n  readonly execSql: ExecSql;\n  readonly organization: PrincipalPolicyAuthorization;\n}): Promise<void> {\n  const genesis = principalPolicyEvidenceEntries(input.organization).find(\n    ({ state }) => state.version === 1,\n  )?.state;\n  if (\n    genesis?.principalType !== \"organization\" ||\n    genesis.prevStateHash !== null\n  )\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      \"Organization founder requires verified genesis\",\n    );\n  const founder = {\n    organizationId: genesis.principalId,\n    userId: genesis.signerUserId,\n    signingKeyFingerprint: genesis.signerUserKeyFingerprint,\n    genesisStateHash: genesis.stateHash,\n  };\n  const held = await loadOrganizationFounder(\n    input.execSql,\n    founder.organizationId,\n  );\n  if (held) {\n    assertSameFounder(held, founder);\n    return;\n  }\n  const runtime = getClientSQLitePersistenceRuntime(input.execSql);\n  await runtime.transaction(\n    async (tx) => {\n      const [stored] = await tx\n        .select()\n        .from(organizationFounders)\n        .where(eq(organizationFounders.organizationId, founder.organizationId))\n        .limit(1);\n      if (stored) {\n        assertSameFounder(stored, founder);\n        return;\n      }\n      await tx\n        .insert(organizationFounders)\n        .values(founder)\n        .onConflictDoNothing()\n        .run();\n    },\n    { behavior: \"immediate\" },\n  );\n}\n"]}

package/data/persistence/organizations/organizationAccessRevocationPersistence.js

@@ -1,8 +1,8 @@
 import { and, eq } from "drizzle-orm";
 import { getOrCreatePrincipalPolicyCoordinator } from "../../principals/principalPolicyCoordinator.js";
-import { organizationDataUsageTables } from "../../sqlite/organizationDataUsageSchema.js";
-import { organizationReadModelRequesters } from "../../sqlite/organizationReadModelSchema.js";
-import { organizationReadModelTables } from "../../sqlite/schema.js";
+import { organizationReadModelTables } from "../../sqlite/schema/index.js";
+import { organizationDataUsageTables } from "../../sqlite/schema/organizationDataUsageSchema.js";
+import { organizationReadModelRequesters } from "../../sqlite/schema/organizationReadModelSchema.js";
 import { getClientSQLitePersistenceRuntime } from "../../sqlite/sqlitePersistenceRuntime.js";
 import { ensureSqlTables } from "../../sqlite/sqlTableSchema.js";
 import { purgeOrganizationDataUsageProjectionInTransaction } from "./organizationDataUsagePersistence.js";

package/data/persistence/organizations/organizationAccessRevocationPersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationAccessRevocationPersistence.js","sourceRoot":"","sources":["organizationAccessRevocationPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAE1F,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,iDAAiD,EAAE,MAAM,oCAAoC,CAAC;AACvG,OAAO,EAAE,iDAAiD,EAAE,MAAM,8BAA8B,CAAC;AAEjG,MAAM,kCAAkC,GAAG;IACzC,GAAG,2BAA2B;IAC9B,GAAG,2BAA2B;CAC/B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAIvD;IACC,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,kCAAkC,CAAC,CAAC;IACzE,MAAM,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,CAChE,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,MAAM,EAAE;aACL,MAAM,CAAC,+BAA+B,CAAC;aACvC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,+BAA+B,CAAC,cAAc,EAC9C,KAAK,CAAC,cAAc,CACrB,EACD,EAAE,CAAC,+BAA+B,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,CAClE,CACF;aACA,GAAG,EAAE,CAAC;QACT,MAAM,CAAC,kBAAkB,CAAC,GAAG,MAAM,EAAE;aAClC,MAAM,CAAC,EAAE,MAAM,EAAE,+BAA+B,CAAC,MAAM,EAAE,CAAC;aAC1D,IAAI,CAAC,+BAA+B,CAAC;aACrC,KAAK,CACJ,EAAE,CACA,+BAA+B,CAAC,cAAc,EAC9C,KAAK,CAAC,cAAc,CACrB,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,iDAAiD,CAAC;gBACtD,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,EAAE;aACH,CAAC,CAAC;QACL,CAAC;QACD,MAAM,iDAAiD,CAAC;YACtD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,EAAE;SACH,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IACF,4EAA4E;IAC5E,oEAAoE;IACpE,qCAAqC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,kBAAkB,CACrE,KAAK,CAAC,cAAc,CACrB,CAAC;AACJ,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport { getOrCreatePrincipalPolicyCoordinator } from \"../../principals/principalPolicyCoordinator\";\nimport { organizationDataUsageTables } from \"../../sqlite/organizationDataUsageSchema\";\nimport { organizationReadModelRequesters } from \"../../sqlite/organizationReadModelSchema\";\nimport { organizationReadModelTables } from \"../../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport { ensureSqlTables } from \"../../sqlite/sqlTableSchema\";\nimport { purgeOrganizationDataUsageProjectionInTransaction } from \"./organizationDataUsagePersistence\";\nimport { purgeOrganizationReadModelProjectionInTransaction } from \"./organizationReadModelPurge\";\n\nconst organizationAccessProjectionTables = [\n  ...organizationReadModelTables,\n  ...organizationDataUsageTables,\n];\n\n/**\n * Purge one requester's access to an organization's presentation projections\n * after the server denied that requester. The denial is requester-scoped: the\n * shared read-model rows stay while another local identity in the same\n * database still holds a requester row, and organization-wide rows fall with\n * the last requester.\n */\nexport async function purgeOrganizationAccessProjection(input: {\n  readonly execSql: ExecSql;\n  readonly organizationId: string;\n  readonly requesterUserId: string;\n}): Promise<void> {\n  await ensureSqlTables(input.execSql, organizationAccessProjectionTables);\n  await getClientSQLitePersistenceRuntime(input.execSql).transaction(\n    async (tx) => {\n      await tx\n        .delete(organizationReadModelRequesters)\n        .where(\n          and(\n            eq(\n              organizationReadModelRequesters.organizationId,\n              input.organizationId,\n            ),\n            eq(organizationReadModelRequesters.userId, input.requesterUserId),\n          ),\n        )\n        .run();\n      const [remainingRequester] = await tx\n        .select({ userId: organizationReadModelRequesters.userId })\n        .from(organizationReadModelRequesters)\n        .where(\n          eq(\n            organizationReadModelRequesters.organizationId,\n            input.organizationId,\n          ),\n        )\n        .limit(1);\n      if (!remainingRequester) {\n        await purgeOrganizationReadModelProjectionInTransaction({\n          organizationId: input.organizationId,\n          tx,\n        });\n      }\n      await purgeOrganizationDataUsageProjectionInTransaction({\n        organizationId: input.organizationId,\n        requesterUserId: input.requesterUserId,\n        tx,\n      });\n    },\n  );\n  // A denial is a realtime-hinted access change: in-flight operations recover\n  // the organization's directory again instead of reusing their memo.\n  getOrCreatePrincipalPolicyCoordinator(input.execSql).invalidateRecovery(\n    input.organizationId,\n  );\n}\n"]}
+{"version":3,"file":"organizationAccessRevocationPersistence.js","sourceRoot":"","sources":["organizationAccessRevocationPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,qCAAqC,EAAE,MAAM,6CAA6C,CAAC;AACpG,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAC9F,OAAO,EAAE,+BAA+B,EAAE,MAAM,iDAAiD,CAAC;AAClG,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAE1F,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,iDAAiD,EAAE,MAAM,oCAAoC,CAAC;AACvG,OAAO,EAAE,iDAAiD,EAAE,MAAM,8BAA8B,CAAC;AAEjG,MAAM,kCAAkC,GAAG;IACzC,GAAG,2BAA2B;IAC9B,GAAG,2BAA2B;CAC/B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAIvD;IACC,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,kCAAkC,CAAC,CAAC;IACzE,MAAM,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,CAChE,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,MAAM,EAAE;aACL,MAAM,CAAC,+BAA+B,CAAC;aACvC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,+BAA+B,CAAC,cAAc,EAC9C,KAAK,CAAC,cAAc,CACrB,EACD,EAAE,CAAC,+BAA+B,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,CAClE,CACF;aACA,GAAG,EAAE,CAAC;QACT,MAAM,CAAC,kBAAkB,CAAC,GAAG,MAAM,EAAE;aAClC,MAAM,CAAC,EAAE,MAAM,EAAE,+BAA+B,CAAC,MAAM,EAAE,CAAC;aAC1D,IAAI,CAAC,+BAA+B,CAAC;aACrC,KAAK,CACJ,EAAE,CACA,+BAA+B,CAAC,cAAc,EAC9C,KAAK,CAAC,cAAc,CACrB,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,iDAAiD,CAAC;gBACtD,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,EAAE;aACH,CAAC,CAAC;QACL,CAAC;QACD,MAAM,iDAAiD,CAAC;YACtD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,EAAE;SACH,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IACF,4EAA4E;IAC5E,oEAAoE;IACpE,qCAAqC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,kBAAkB,CACrE,KAAK,CAAC,cAAc,CACrB,CAAC;AACJ,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport { getOrCreatePrincipalPolicyCoordinator } from \"../../principals/principalPolicyCoordinator\";\nimport { organizationReadModelTables } from \"../../sqlite/schema\";\nimport { organizationDataUsageTables } from \"../../sqlite/schema/organizationDataUsageSchema\";\nimport { organizationReadModelRequesters } from \"../../sqlite/schema/organizationReadModelSchema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport { ensureSqlTables } from \"../../sqlite/sqlTableSchema\";\nimport { purgeOrganizationDataUsageProjectionInTransaction } from \"./organizationDataUsagePersistence\";\nimport { purgeOrganizationReadModelProjectionInTransaction } from \"./organizationReadModelPurge\";\n\nconst organizationAccessProjectionTables = [\n  ...organizationReadModelTables,\n  ...organizationDataUsageTables,\n];\n\n/**\n * Purge one requester's access to an organization's presentation projections\n * after the server denied that requester. The denial is requester-scoped: the\n * shared read-model rows stay while another local identity in the same\n * database still holds a requester row, and organization-wide rows fall with\n * the last requester.\n */\nexport async function purgeOrganizationAccessProjection(input: {\n  readonly execSql: ExecSql;\n  readonly organizationId: string;\n  readonly requesterUserId: string;\n}): Promise<void> {\n  await ensureSqlTables(input.execSql, organizationAccessProjectionTables);\n  await getClientSQLitePersistenceRuntime(input.execSql).transaction(\n    async (tx) => {\n      await tx\n        .delete(organizationReadModelRequesters)\n        .where(\n          and(\n            eq(\n              organizationReadModelRequesters.organizationId,\n              input.organizationId,\n            ),\n            eq(organizationReadModelRequesters.userId, input.requesterUserId),\n          ),\n        )\n        .run();\n      const [remainingRequester] = await tx\n        .select({ userId: organizationReadModelRequesters.userId })\n        .from(organizationReadModelRequesters)\n        .where(\n          eq(\n            organizationReadModelRequesters.organizationId,\n            input.organizationId,\n          ),\n        )\n        .limit(1);\n      if (!remainingRequester) {\n        await purgeOrganizationReadModelProjectionInTransaction({\n          organizationId: input.organizationId,\n          tx,\n        });\n      }\n      await purgeOrganizationDataUsageProjectionInTransaction({\n        organizationId: input.organizationId,\n        requesterUserId: input.requesterUserId,\n        tx,\n      });\n    },\n  );\n  // A denial is a realtime-hinted access change: in-flight operations recover\n  // the organization's directory again instead of reusing their memo.\n  getOrCreatePrincipalPolicyCoordinator(input.execSql).invalidateRecovery(\n    input.organizationId,\n  );\n}\n"]}

package/data/persistence/organizations/organizationDataUsagePersistence.js

@@ -1,7 +1,7 @@
 import { ORGANIZATION_DOCUMENT_USAGE_CATEGORIES, OrganizationDataUsageResponseSchema, } from "../../../internal/validators/response/index.js";
 import { and, eq } from "drizzle-orm";
-import { ORGANIZATION_DATA_USAGE_PROJECTION_VERSION, organizationDataUsageSnapshots, organizationDataUsageTables, } from "../../sqlite/organizationDataUsageSchema.js";
-import { organizationReadModelTables } from "../../sqlite/organizationReadModelTableRegistry.js";
+import { ORGANIZATION_DATA_USAGE_PROJECTION_VERSION, organizationDataUsageSnapshots, organizationDataUsageTables, } from "../../sqlite/schema/organizationDataUsageSchema.js";
+import { organizationReadModelTables } from "../../sqlite/schema/organizationReadModelTableRegistry.js";
 import { getClientSQLitePersistenceRuntime, } from "../../sqlite/sqlitePersistenceRuntime.js";
 import { ensureSqlTables } from "../../sqlite/sqlTableSchema.js";
 import { clearOrganizationPresentationDenialInTransaction } from "./organizationPresentationDenialPersistence.js";

package/data/persistence/organizations/organizationDataUsagePersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationDataUsagePersistence.js","sourceRoot":"","sources":["organizationDataUsagePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sCAAsC,EAEtC,mCAAmC,GACpC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EACL,0CAA0C,EAC1C,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAC9F,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,gDAAgD,EAAE,MAAM,6CAA6C,CAAC;AAI/G,SAAS,wBAAwB,CAAC,KAAa;IAC7C,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,cAAsB,EAAE,eAAwB;IACpE,IACE,cAAc,CAAC,MAAM,KAAK,CAAC;QAC3B,CAAC,eAAe,KAAK,SAAS,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,EAC/D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,QAAuC;IAEvC,MAAM,MAAM,GAAG,mCAAmC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iDAAiD,CAAC,KAIvE;IACC,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,KAAK,CAAC,eAAe;QAC7C,CAAC,CAAC,GAAG,CACD,EAAE,CAAC,8BAA8B,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,EACvE,EAAE,CACA,8BAA8B,CAAC,eAAe,EAC9C,KAAK,CAAC,eAAe,CACtB,CACF;QACH,CAAC,CAAC,EAAE,CAAC,8BAA8B,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5E,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,8BAA8B,CAAC;SACtC,KAAK,CAAC,iBAAiB,CAAC;SACxB,GAAG,EAAE,CAAC;AACX,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAwB,EACxB,cAAsB,EACtB,eAAuB;IAEvB,OAAO,CACL,QAAQ,CAAC,cAAc,KAAK,cAAc;QAC1C,QAAQ,CAAC,eAAe,KAAK,eAAe;QAC5C,QAAQ,CAAC,iBAAiB,KAAK,0CAA0C;QACzE,wBAAwB,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC5C,wBAAwB,CAAC,QAAQ,CAAC,cAAc,CAAC;QACjD,wBAAwB,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACrD,wBAAwB,CAAC,QAAQ,CAAC,aAAa,CAAC;QAChD,wBAAwB,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACtD,wBAAwB,CAAC,QAAQ,CAAC,eAAe,CAAC;QAClD,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,6DAA6D;AAC7D,SAAS,cAAc,CACrB,QAAwB;IAExB,MAAM,MAAM,GAAG,mCAAmC,CAAC,SAAS,CAAC;QAC3D,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,KAAK,EAAE;YACL,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,QAAQ,CAAC,cAAc;SACpC;QACD,SAAS,EAAE;YACT,SAAS,EAAE,oBAAoB,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YAC/D,UAAU,EAAE,QAAQ,CAAC,kBAAkB;YACvC,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,WAAW,EAAE,QAAQ,CAAC,mBAAmB;SAC1C;QACD,eAAe,EAAE,QAAQ,CAAC,eAAe;KAC1C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAAuC;IAEvC,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,sCAAsC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9D,QAAQ;QACR,KAAK;KACN,CAAC,CACH,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC;SAChD,IAAI,CACH,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CACrE;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC,CAAC;IACN,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,OAAgB,EAChB,cAAsB,EACtB,eAAuB;IAEvB,YAAY,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAC9C,MAAM,eAAe,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC5D,OAAO,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACzE,MAAM,KAAK,GAAG,GAAG,CACf,EAAE,CAAC,8BAA8B,CAAC,cAAc,EAAE,cAAc,CAAC,EACjE,EAAE,CAAC,8BAA8B,CAAC,eAAe,EAAE,eAAe,CAAC,CACpE,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,8BAA8B,CAAC;aACpC,KAAK,CAAC,KAAK,CAAC;aACZ,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,qBAAqB,CACpC,QAAQ,EACR,cAAc,EACd,eAAe,CAChB;YACC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC;YAC1B,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,iDAAiD,CAAC;gBACtD,cAAc;gBACd,eAAe;gBACf,EAAE;aACH,CAAC,CAAC;QACL,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,KAIzD;IACC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/C,YAAY,CAAC,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC7D,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE;QACnC,GAAG,2BAA2B;QAC9B,GAAG,2BAA2B;KAC/B,CAAC,CAAC;IACH,MAAM,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,CAChE,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,oEAAoE;QACpE,gEAAgE;QAChE,MAAM,gDAAgD,CAAC;YACrD,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,UAAU,EAAE,OAAO;YACnB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,EAAE;SACH,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG;YACf,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,iBAAiB,EAAE,0CAA0C;YAC7D,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;YACnC,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;YACzC,kBAAkB,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU;YACjD,aAAa,EAAE,QAAQ,CAAC,SAAS,CAAC,aAAa;YAC/C,mBAAmB,EAAE,QAAQ,CAAC,SAAS,CAAC,WAAW;YACnD,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,qBAAqB,EAAE,sBAAsB,CAAC,QAAQ,CAAC;YACvD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;QACF,MAAM,EAAE;aACL,MAAM,CAAC,8BAA8B,CAAC;aACtC,MAAM,CAAC,QAAQ,CAAC;aAChB,kBAAkB,CAAC;YAClB,MAAM,EAAE;gBACN,8BAA8B,CAAC,cAAc;gBAC7C,8BAA8B,CAAC,eAAe;aAC/C;YACD,GAAG,EAAE;gBACH,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;gBAC7C,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;gBAC/C,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gBACjD,eAAe,EAAE,QAAQ,CAAC,eAAe;gBACzC,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;gBACrD,WAAW,EAAE,QAAQ,CAAC,WAAW;aAClC;SACF,CAAC;aACD,GAAG,EAAE,CAAC;IACX,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,OAAgB,EAChB,cAAsB,EACtB,eAAwB;IAExB,YAAY,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAC9C,MAAM,eAAe,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC5D,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,iDAAiD,CAAC;YACtD,cAAc;YACd,eAAe;YACf,EAAE;SACH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  ORGANIZATION_DOCUMENT_USAGE_CATEGORIES,\n  type OrganizationDataUsageResponse,\n  OrganizationDataUsageResponseSchema,\n} from \"@tearleads/validators/response\";\nimport { and, eq } from \"drizzle-orm\";\nimport {\n  ORGANIZATION_DATA_USAGE_PROJECTION_VERSION,\n  organizationDataUsageSnapshots,\n  organizationDataUsageTables,\n} from \"../../sqlite/organizationDataUsageSchema\";\nimport { organizationReadModelTables } from \"../../sqlite/organizationReadModelTableRegistry\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport { ensureSqlTables } from \"../../sqlite/sqlTableSchema\";\nimport { clearOrganizationPresentationDenialInTransaction } from \"./organizationPresentationDenialPersistence\";\n\ntype StoredSnapshot = typeof organizationDataUsageSnapshots.$inferSelect;\n\nfunction isNonNegativeSafeInteger(value: number): boolean {\n  return Number.isSafeInteger(value) && value >= 0;\n}\n\nfunction isIsoTimestamp(value: string): boolean {\n  try {\n    return value.length > 0 && new Date(value).toISOString() === value;\n  } catch {\n    return false;\n  }\n}\n\nfunction requireScope(organizationId: string, requesterUserId?: string): void {\n  if (\n    organizationId.length === 0 ||\n    (requesterUserId !== undefined && requesterUserId.length === 0)\n  ) {\n    throw new Error(\"Organization data usage scope is invalid\");\n  }\n}\n\nfunction parseResponse(\n  response: OrganizationDataUsageResponse,\n): OrganizationDataUsageResponse {\n  const parsed = OrganizationDataUsageResponseSchema.safeParse(response);\n  if (!parsed.success) {\n    throw new Error(\"Organization data usage response is invalid\");\n  }\n  return parsed.data;\n}\n\nexport async function purgeOrganizationDataUsageProjectionInTransaction(input: {\n  readonly organizationId: string;\n  readonly requesterUserId?: string | undefined;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  requireScope(input.organizationId, input.requesterUserId);\n  const snapshotCondition = input.requesterUserId\n    ? and(\n        eq(organizationDataUsageSnapshots.organizationId, input.organizationId),\n        eq(\n          organizationDataUsageSnapshots.requesterUserId,\n          input.requesterUserId,\n        ),\n      )\n    : eq(organizationDataUsageSnapshots.organizationId, input.organizationId);\n  await input.tx\n    .delete(organizationDataUsageSnapshots)\n    .where(snapshotCondition)\n    .run();\n}\n\nfunction isStoredSnapshotValid(\n  snapshot: StoredSnapshot,\n  organizationId: string,\n  requesterUserId: string,\n): boolean {\n  return (\n    snapshot.organizationId === organizationId &&\n    snapshot.requesterUserId === requesterUserId &&\n    snapshot.projectionVersion === ORGANIZATION_DATA_USAGE_PROJECTION_VERSION &&\n    isNonNegativeSafeInteger(snapshot.blobCount) &&\n    isNonNegativeSafeInteger(snapshot.blobByteLength) &&\n    isNonNegativeSafeInteger(snapshot.documentByteLength) &&\n    isNonNegativeSafeInteger(snapshot.documentCount) &&\n    isNonNegativeSafeInteger(snapshot.documentUpdateCount) &&\n    isNonNegativeSafeInteger(snapshot.totalByteLength) &&\n    isIsoTimestamp(snapshot.refreshedAt)\n  );\n}\n\nfunction parseStoredBreakdown(json: string): unknown {\n  try {\n    return JSON.parse(json);\n  } catch {\n    return null;\n  }\n}\n\n// The stored breakdown is untrusted local JSON: the strict response schema\n// re-checks every entry (known category, each exactly once, safe non-negative\n// counts that sum to the stored totals) before it is served.\nfunction storedResponse(\n  snapshot: StoredSnapshot,\n): OrganizationDataUsageResponse | null {\n  const parsed = OrganizationDataUsageResponseSchema.safeParse({\n    organizationId: snapshot.organizationId,\n    blobs: {\n      blobCount: snapshot.blobCount,\n      byteLength: snapshot.blobByteLength,\n    },\n    documents: {\n      breakdown: parseStoredBreakdown(snapshot.categoryBreakdownJson),\n      byteLength: snapshot.documentByteLength,\n      documentCount: snapshot.documentCount,\n      updateCount: snapshot.documentUpdateCount,\n    },\n    totalByteLength: snapshot.totalByteLength,\n  });\n  return parsed.success ? parsed.data : null;\n}\n\nfunction canonicalBreakdownJson(\n  response: OrganizationDataUsageResponse,\n): string {\n  const order = new Map<string, number>(\n    ORGANIZATION_DOCUMENT_USAGE_CATEGORIES.map((category, index) => [\n      category,\n      index,\n    ]),\n  );\n  const breakdown = [...response.documents.breakdown]\n    .sort(\n      (left, right) =>\n        (order.get(left.category) ?? 0) - (order.get(right.category) ?? 0),\n    )\n    .map((entry) => ({\n      byteLength: entry.byteLength,\n      category: entry.category,\n      documentCount: entry.documentCount,\n      updateCount: entry.updateCount,\n    }));\n  return JSON.stringify(breakdown);\n}\n\nexport async function loadOrganizationDataUsageProjection(\n  execSql: ExecSql,\n  organizationId: string,\n  requesterUserId: string,\n): Promise<OrganizationDataUsageResponse | null> {\n  requireScope(organizationId, requesterUserId);\n  await ensureSqlTables(execSql, organizationDataUsageTables);\n  return getClientSQLitePersistenceRuntime(execSql).transaction(async (tx) => {\n    const scope = and(\n      eq(organizationDataUsageSnapshots.organizationId, organizationId),\n      eq(organizationDataUsageSnapshots.requesterUserId, requesterUserId),\n    );\n    const [snapshot] = await tx\n      .select()\n      .from(organizationDataUsageSnapshots)\n      .where(scope)\n      .limit(1);\n    if (!snapshot) {\n      return null;\n    }\n    const response = isStoredSnapshotValid(\n      snapshot,\n      organizationId,\n      requesterUserId,\n    )\n      ? storedResponse(snapshot)\n      : null;\n    if (!response) {\n      await purgeOrganizationDataUsageProjectionInTransaction({\n        organizationId,\n        requesterUserId,\n        tx,\n      });\n    }\n    return response;\n  });\n}\n\nexport async function saveOrganizationDataUsageProjection(input: {\n  readonly execSql: ExecSql;\n  readonly requesterUserId: string;\n  readonly response: OrganizationDataUsageResponse;\n}): Promise<void> {\n  const response = parseResponse(input.response);\n  requireScope(response.organizationId, input.requesterUserId);\n  await ensureSqlTables(input.execSql, [\n    ...organizationDataUsageTables,\n    ...organizationReadModelTables,\n  ]);\n  await getClientSQLitePersistenceRuntime(input.execSql).transaction(\n    async (tx) => {\n      // Storing an authoritative usage response proves access: retire any\n      // durable denial marker for this scope in the same transaction.\n      await clearOrganizationPresentationDenialInTransaction({\n        organizationId: response.organizationId,\n        projection: \"usage\",\n        requesterUserId: input.requesterUserId,\n        tx,\n      });\n      const snapshot = {\n        organizationId: response.organizationId,\n        requesterUserId: input.requesterUserId,\n        projectionVersion: ORGANIZATION_DATA_USAGE_PROJECTION_VERSION,\n        blobCount: response.blobs.blobCount,\n        blobByteLength: response.blobs.byteLength,\n        documentByteLength: response.documents.byteLength,\n        documentCount: response.documents.documentCount,\n        documentUpdateCount: response.documents.updateCount,\n        totalByteLength: response.totalByteLength,\n        categoryBreakdownJson: canonicalBreakdownJson(response),\n        refreshedAt: new Date().toISOString(),\n      };\n      await tx\n        .insert(organizationDataUsageSnapshots)\n        .values(snapshot)\n        .onConflictDoUpdate({\n          target: [\n            organizationDataUsageSnapshots.organizationId,\n            organizationDataUsageSnapshots.requesterUserId,\n          ],\n          set: {\n            projectionVersion: snapshot.projectionVersion,\n            blobCount: snapshot.blobCount,\n            blobByteLength: snapshot.blobByteLength,\n            documentByteLength: snapshot.documentByteLength,\n            documentCount: snapshot.documentCount,\n            documentUpdateCount: snapshot.documentUpdateCount,\n            totalByteLength: snapshot.totalByteLength,\n            categoryBreakdownJson: snapshot.categoryBreakdownJson,\n            refreshedAt: snapshot.refreshedAt,\n          },\n        })\n        .run();\n    },\n  );\n}\n\nexport async function purgeOrganizationDataUsageProjection(\n  execSql: ExecSql,\n  organizationId: string,\n  requesterUserId?: string,\n): Promise<void> {\n  requireScope(organizationId, requesterUserId);\n  await ensureSqlTables(execSql, organizationDataUsageTables);\n  await getClientSQLitePersistenceRuntime(execSql).transaction(async (tx) => {\n    await purgeOrganizationDataUsageProjectionInTransaction({\n      organizationId,\n      requesterUserId,\n      tx,\n    });\n  });\n}\n"]}
+{"version":3,"file":"organizationDataUsagePersistence.js","sourceRoot":"","sources":["organizationDataUsagePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sCAAsC,EAEtC,mCAAmC,GACpC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EACL,0CAA0C,EAC1C,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AACrG,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,gDAAgD,EAAE,MAAM,6CAA6C,CAAC;AAI/G,SAAS,wBAAwB,CAAC,KAAa;IAC7C,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,cAAsB,EAAE,eAAwB;IACpE,IACE,cAAc,CAAC,MAAM,KAAK,CAAC;QAC3B,CAAC,eAAe,KAAK,SAAS,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,EAC/D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,QAAuC;IAEvC,MAAM,MAAM,GAAG,mCAAmC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iDAAiD,CAAC,KAIvE;IACC,YAAY,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,KAAK,CAAC,eAAe;QAC7C,CAAC,CAAC,GAAG,CACD,EAAE,CAAC,8BAA8B,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,EACvE,EAAE,CACA,8BAA8B,CAAC,eAAe,EAC9C,KAAK,CAAC,eAAe,CACtB,CACF;QACH,CAAC,CAAC,EAAE,CAAC,8BAA8B,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5E,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,8BAA8B,CAAC;SACtC,KAAK,CAAC,iBAAiB,CAAC;SACxB,GAAG,EAAE,CAAC;AACX,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAwB,EACxB,cAAsB,EACtB,eAAuB;IAEvB,OAAO,CACL,QAAQ,CAAC,cAAc,KAAK,cAAc;QAC1C,QAAQ,CAAC,eAAe,KAAK,eAAe;QAC5C,QAAQ,CAAC,iBAAiB,KAAK,0CAA0C;QACzE,wBAAwB,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC5C,wBAAwB,CAAC,QAAQ,CAAC,cAAc,CAAC;QACjD,wBAAwB,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACrD,wBAAwB,CAAC,QAAQ,CAAC,aAAa,CAAC;QAChD,wBAAwB,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACtD,wBAAwB,CAAC,QAAQ,CAAC,eAAe,CAAC;QAClD,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,6DAA6D;AAC7D,SAAS,cAAc,CACrB,QAAwB;IAExB,MAAM,MAAM,GAAG,mCAAmC,CAAC,SAAS,CAAC;QAC3D,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,KAAK,EAAE;YACL,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,QAAQ,CAAC,cAAc;SACpC;QACD,SAAS,EAAE;YACT,SAAS,EAAE,oBAAoB,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YAC/D,UAAU,EAAE,QAAQ,CAAC,kBAAkB;YACvC,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,WAAW,EAAE,QAAQ,CAAC,mBAAmB;SAC1C;QACD,eAAe,EAAE,QAAQ,CAAC,eAAe;KAC1C,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAAuC;IAEvC,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,sCAAsC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC;QAC9D,QAAQ;QACR,KAAK;KACN,CAAC,CACH,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC;SAChD,IAAI,CACH,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CACrE;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC,CAAC;IACN,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,OAAgB,EAChB,cAAsB,EACtB,eAAuB;IAEvB,YAAY,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAC9C,MAAM,eAAe,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC5D,OAAO,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACzE,MAAM,KAAK,GAAG,GAAG,CACf,EAAE,CAAC,8BAA8B,CAAC,cAAc,EAAE,cAAc,CAAC,EACjE,EAAE,CAAC,8BAA8B,CAAC,eAAe,EAAE,eAAe,CAAC,CACpE,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE;aACxB,MAAM,EAAE;aACR,IAAI,CAAC,8BAA8B,CAAC;aACpC,KAAK,CAAC,KAAK,CAAC;aACZ,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,qBAAqB,CACpC,QAAQ,EACR,cAAc,EACd,eAAe,CAChB;YACC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC;YAC1B,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,iDAAiD,CAAC;gBACtD,cAAc;gBACd,eAAe;gBACf,EAAE;aACH,CAAC,CAAC;QACL,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,KAIzD;IACC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/C,YAAY,CAAC,QAAQ,CAAC,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC7D,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE;QACnC,GAAG,2BAA2B;QAC9B,GAAG,2BAA2B;KAC/B,CAAC,CAAC;IACH,MAAM,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,CAChE,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,oEAAoE;QACpE,gEAAgE;QAChE,MAAM,gDAAgD,CAAC;YACrD,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,UAAU,EAAE,OAAO;YACnB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,EAAE;SACH,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG;YACf,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,iBAAiB,EAAE,0CAA0C;YAC7D,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;YACnC,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;YACzC,kBAAkB,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU;YACjD,aAAa,EAAE,QAAQ,CAAC,SAAS,CAAC,aAAa;YAC/C,mBAAmB,EAAE,QAAQ,CAAC,SAAS,CAAC,WAAW;YACnD,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,qBAAqB,EAAE,sBAAsB,CAAC,QAAQ,CAAC;YACvD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;QACF,MAAM,EAAE;aACL,MAAM,CAAC,8BAA8B,CAAC;aACtC,MAAM,CAAC,QAAQ,CAAC;aAChB,kBAAkB,CAAC;YAClB,MAAM,EAAE;gBACN,8BAA8B,CAAC,cAAc;gBAC7C,8BAA8B,CAAC,eAAe;aAC/C;YACD,GAAG,EAAE;gBACH,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;gBAC7C,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;gBAC/C,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;gBACjD,eAAe,EAAE,QAAQ,CAAC,eAAe;gBACzC,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;gBACrD,WAAW,EAAE,QAAQ,CAAC,WAAW;aAClC;SACF,CAAC;aACD,GAAG,EAAE,CAAC;IACX,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,OAAgB,EAChB,cAAsB,EACtB,eAAwB;IAExB,YAAY,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAC9C,MAAM,eAAe,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC5D,MAAM,iCAAiC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,iDAAiD,CAAC;YACtD,cAAc;YACd,eAAe;YACf,EAAE;SACH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  ORGANIZATION_DOCUMENT_USAGE_CATEGORIES,\n  type OrganizationDataUsageResponse,\n  OrganizationDataUsageResponseSchema,\n} from \"@tearleads/validators/response\";\nimport { and, eq } from \"drizzle-orm\";\nimport {\n  ORGANIZATION_DATA_USAGE_PROJECTION_VERSION,\n  organizationDataUsageSnapshots,\n  organizationDataUsageTables,\n} from \"../../sqlite/schema/organizationDataUsageSchema\";\nimport { organizationReadModelTables } from \"../../sqlite/schema/organizationReadModelTableRegistry\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport { ensureSqlTables } from \"../../sqlite/sqlTableSchema\";\nimport { clearOrganizationPresentationDenialInTransaction } from \"./organizationPresentationDenialPersistence\";\n\ntype StoredSnapshot = typeof organizationDataUsageSnapshots.$inferSelect;\n\nfunction isNonNegativeSafeInteger(value: number): boolean {\n  return Number.isSafeInteger(value) && value >= 0;\n}\n\nfunction isIsoTimestamp(value: string): boolean {\n  try {\n    return value.length > 0 && new Date(value).toISOString() === value;\n  } catch {\n    return false;\n  }\n}\n\nfunction requireScope(organizationId: string, requesterUserId?: string): void {\n  if (\n    organizationId.length === 0 ||\n    (requesterUserId !== undefined && requesterUserId.length === 0)\n  ) {\n    throw new Error(\"Organization data usage scope is invalid\");\n  }\n}\n\nfunction parseResponse(\n  response: OrganizationDataUsageResponse,\n): OrganizationDataUsageResponse {\n  const parsed = OrganizationDataUsageResponseSchema.safeParse(response);\n  if (!parsed.success) {\n    throw new Error(\"Organization data usage response is invalid\");\n  }\n  return parsed.data;\n}\n\nexport async function purgeOrganizationDataUsageProjectionInTransaction(input: {\n  readonly organizationId: string;\n  readonly requesterUserId?: string | undefined;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  requireScope(input.organizationId, input.requesterUserId);\n  const snapshotCondition = input.requesterUserId\n    ? and(\n        eq(organizationDataUsageSnapshots.organizationId, input.organizationId),\n        eq(\n          organizationDataUsageSnapshots.requesterUserId,\n          input.requesterUserId,\n        ),\n      )\n    : eq(organizationDataUsageSnapshots.organizationId, input.organizationId);\n  await input.tx\n    .delete(organizationDataUsageSnapshots)\n    .where(snapshotCondition)\n    .run();\n}\n\nfunction isStoredSnapshotValid(\n  snapshot: StoredSnapshot,\n  organizationId: string,\n  requesterUserId: string,\n): boolean {\n  return (\n    snapshot.organizationId === organizationId &&\n    snapshot.requesterUserId === requesterUserId &&\n    snapshot.projectionVersion === ORGANIZATION_DATA_USAGE_PROJECTION_VERSION &&\n    isNonNegativeSafeInteger(snapshot.blobCount) &&\n    isNonNegativeSafeInteger(snapshot.blobByteLength) &&\n    isNonNegativeSafeInteger(snapshot.documentByteLength) &&\n    isNonNegativeSafeInteger(snapshot.documentCount) &&\n    isNonNegativeSafeInteger(snapshot.documentUpdateCount) &&\n    isNonNegativeSafeInteger(snapshot.totalByteLength) &&\n    isIsoTimestamp(snapshot.refreshedAt)\n  );\n}\n\nfunction parseStoredBreakdown(json: string): unknown {\n  try {\n    return JSON.parse(json);\n  } catch {\n    return null;\n  }\n}\n\n// The stored breakdown is untrusted local JSON: the strict response schema\n// re-checks every entry (known category, each exactly once, safe non-negative\n// counts that sum to the stored totals) before it is served.\nfunction storedResponse(\n  snapshot: StoredSnapshot,\n): OrganizationDataUsageResponse | null {\n  const parsed = OrganizationDataUsageResponseSchema.safeParse({\n    organizationId: snapshot.organizationId,\n    blobs: {\n      blobCount: snapshot.blobCount,\n      byteLength: snapshot.blobByteLength,\n    },\n    documents: {\n      breakdown: parseStoredBreakdown(snapshot.categoryBreakdownJson),\n      byteLength: snapshot.documentByteLength,\n      documentCount: snapshot.documentCount,\n      updateCount: snapshot.documentUpdateCount,\n    },\n    totalByteLength: snapshot.totalByteLength,\n  });\n  return parsed.success ? parsed.data : null;\n}\n\nfunction canonicalBreakdownJson(\n  response: OrganizationDataUsageResponse,\n): string {\n  const order = new Map<string, number>(\n    ORGANIZATION_DOCUMENT_USAGE_CATEGORIES.map((category, index) => [\n      category,\n      index,\n    ]),\n  );\n  const breakdown = [...response.documents.breakdown]\n    .sort(\n      (left, right) =>\n        (order.get(left.category) ?? 0) - (order.get(right.category) ?? 0),\n    )\n    .map((entry) => ({\n      byteLength: entry.byteLength,\n      category: entry.category,\n      documentCount: entry.documentCount,\n      updateCount: entry.updateCount,\n    }));\n  return JSON.stringify(breakdown);\n}\n\nexport async function loadOrganizationDataUsageProjection(\n  execSql: ExecSql,\n  organizationId: string,\n  requesterUserId: string,\n): Promise<OrganizationDataUsageResponse | null> {\n  requireScope(organizationId, requesterUserId);\n  await ensureSqlTables(execSql, organizationDataUsageTables);\n  return getClientSQLitePersistenceRuntime(execSql).transaction(async (tx) => {\n    const scope = and(\n      eq(organizationDataUsageSnapshots.organizationId, organizationId),\n      eq(organizationDataUsageSnapshots.requesterUserId, requesterUserId),\n    );\n    const [snapshot] = await tx\n      .select()\n      .from(organizationDataUsageSnapshots)\n      .where(scope)\n      .limit(1);\n    if (!snapshot) {\n      return null;\n    }\n    const response = isStoredSnapshotValid(\n      snapshot,\n      organizationId,\n      requesterUserId,\n    )\n      ? storedResponse(snapshot)\n      : null;\n    if (!response) {\n      await purgeOrganizationDataUsageProjectionInTransaction({\n        organizationId,\n        requesterUserId,\n        tx,\n      });\n    }\n    return response;\n  });\n}\n\nexport async function saveOrganizationDataUsageProjection(input: {\n  readonly execSql: ExecSql;\n  readonly requesterUserId: string;\n  readonly response: OrganizationDataUsageResponse;\n}): Promise<void> {\n  const response = parseResponse(input.response);\n  requireScope(response.organizationId, input.requesterUserId);\n  await ensureSqlTables(input.execSql, [\n    ...organizationDataUsageTables,\n    ...organizationReadModelTables,\n  ]);\n  await getClientSQLitePersistenceRuntime(input.execSql).transaction(\n    async (tx) => {\n      // Storing an authoritative usage response proves access: retire any\n      // durable denial marker for this scope in the same transaction.\n      await clearOrganizationPresentationDenialInTransaction({\n        organizationId: response.organizationId,\n        projection: \"usage\",\n        requesterUserId: input.requesterUserId,\n        tx,\n      });\n      const snapshot = {\n        organizationId: response.organizationId,\n        requesterUserId: input.requesterUserId,\n        projectionVersion: ORGANIZATION_DATA_USAGE_PROJECTION_VERSION,\n        blobCount: response.blobs.blobCount,\n        blobByteLength: response.blobs.byteLength,\n        documentByteLength: response.documents.byteLength,\n        documentCount: response.documents.documentCount,\n        documentUpdateCount: response.documents.updateCount,\n        totalByteLength: response.totalByteLength,\n        categoryBreakdownJson: canonicalBreakdownJson(response),\n        refreshedAt: new Date().toISOString(),\n      };\n      await tx\n        .insert(organizationDataUsageSnapshots)\n        .values(snapshot)\n        .onConflictDoUpdate({\n          target: [\n            organizationDataUsageSnapshots.organizationId,\n            organizationDataUsageSnapshots.requesterUserId,\n          ],\n          set: {\n            projectionVersion: snapshot.projectionVersion,\n            blobCount: snapshot.blobCount,\n            blobByteLength: snapshot.blobByteLength,\n            documentByteLength: snapshot.documentByteLength,\n            documentCount: snapshot.documentCount,\n            documentUpdateCount: snapshot.documentUpdateCount,\n            totalByteLength: snapshot.totalByteLength,\n            categoryBreakdownJson: snapshot.categoryBreakdownJson,\n            refreshedAt: snapshot.refreshedAt,\n          },\n        })\n        .run();\n    },\n  );\n}\n\nexport async function purgeOrganizationDataUsageProjection(\n  execSql: ExecSql,\n  organizationId: string,\n  requesterUserId?: string,\n): Promise<void> {\n  requireScope(organizationId, requesterUserId);\n  await ensureSqlTables(execSql, organizationDataUsageTables);\n  await getClientSQLitePersistenceRuntime(execSql).transaction(async (tx) => {\n    await purgeOrganizationDataUsageProjectionInTransaction({\n      organizationId,\n      requesterUserId,\n      tx,\n    });\n  });\n}\n"]}

package/data/persistence/organizations/organizationGroupNamePersistence.js

@@ -1,6 +1,6 @@
 import { and, eq } from "drizzle-orm";
-import { organizationReadModelGroups } from "../../sqlite/organizationReadModelSchema.js";
-import { organizationReadModelTables } from "../../sqlite/schema.js";
+import { organizationReadModelTables } from "../../sqlite/schema/index.js";
+import { organizationReadModelGroups } from "../../sqlite/schema/organizationReadModelSchema.js";
 import { getClientSQLitePersistenceRuntime } from "../../sqlite/sqlitePersistenceRuntime.js";
 import { ensureSqlTables } from "../../sqlite/sqlSchema.js";
 export async function loadOrganizationGroupDisplayNames(execSql, organizationId) {

package/data/persistence/organizations/organizationGroupNamePersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationGroupNamePersistence.js","sourceRoot":"","sources":["organizationGroupNamePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEvE,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,OAAgB,EAChB,cAAsB;IAEtB,MAAM,eAAe,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC5D,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,OAAO,EAAE,2BAA2B,CAAC,OAAO;QAC5C,IAAI,EAAE,2BAA2B,CAAC,IAAI;KACvC,CAAC;SACD,IAAI,CAAC,2BAA2B,CAAC;SACjC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IACzE,OAAO,IAAI,GAAG,CACZ,IAAI;SACD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAKvD;IACC,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAClE,MAAM,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,kBAAkB,CACvE,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,EAAE;iBACL,MAAM,CAAC,2BAA2B,CAAC;iBACnC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;iBACzB,KAAK,CACJ,GAAG,CACD,EAAE,CACA,2BAA2B,CAAC,cAAc,EAC1C,KAAK,CAAC,cAAc,CACrB,EACD,EAAE,CAAC,2BAA2B,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACtD,EAAE,CAAC,2BAA2B,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAC3D,CACF;iBACA,GAAG,EAAE,CAAC;QACX,CAAC;IACH,CAAC,EACD,KAAK,CAAC,YAAY,CACnB,CAAC;AACJ,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport { organizationReadModelGroups } from \"../../sqlite/organizationReadModelSchema\";\nimport { organizationReadModelTables } from \"../../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\n\nexport async function loadOrganizationGroupDisplayNames(\n  execSql: ExecSql,\n  organizationId: string,\n): Promise<ReadonlyMap<string, string>> {\n  await ensureSqlTables(execSql, organizationReadModelTables);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({\n      groupId: organizationReadModelGroups.groupId,\n      name: organizationReadModelGroups.name,\n    })\n    .from(organizationReadModelGroups)\n    .where(eq(organizationReadModelGroups.organizationId, organizationId));\n  return new Map(\n    rows\n      .filter((row) => row.name.length > 0)\n      .map((row) => [row.groupId, row.name]),\n  );\n}\n\n/** Local display cache only: these labels never enter a server request. */\nexport async function saveOrganizationGroupDisplayNames(input: {\n  execSql: ExecSql;\n  organizationId: string;\n  names: readonly { groupId: string; name: string; stateHash: string }[];\n  stillCurrent: () => boolean;\n}): Promise<void> {\n  await ensureSqlTables(input.execSql, organizationReadModelTables);\n  await getClientSQLitePersistenceRuntime(input.execSql).guardedTransaction(\n    async (tx) => {\n      for (const group of input.names) {\n        await tx\n          .update(organizationReadModelGroups)\n          .set({ name: group.name })\n          .where(\n            and(\n              eq(\n                organizationReadModelGroups.organizationId,\n                input.organizationId,\n              ),\n              eq(organizationReadModelGroups.groupId, group.groupId),\n              eq(organizationReadModelGroups.stateHash, group.stateHash),\n            ),\n          )\n          .run();\n      }\n    },\n    input.stillCurrent,\n  );\n}\n"]}
+{"version":3,"file":"organizationGroupNamePersistence.js","sourceRoot":"","sources":["organizationGroupNamePersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAC9F,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEvE,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,OAAgB,EAChB,cAAsB;IAEtB,MAAM,eAAe,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC5D,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,OAAO,EAAE,2BAA2B,CAAC,OAAO;QAC5C,IAAI,EAAE,2BAA2B,CAAC,IAAI;KACvC,CAAC;SACD,IAAI,CAAC,2BAA2B,CAAC;SACjC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IACzE,OAAO,IAAI,GAAG,CACZ,IAAI;SACD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,KAKvD;IACC,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAClE,MAAM,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,kBAAkB,CACvE,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,EAAE;iBACL,MAAM,CAAC,2BAA2B,CAAC;iBACnC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;iBACzB,KAAK,CACJ,GAAG,CACD,EAAE,CACA,2BAA2B,CAAC,cAAc,EAC1C,KAAK,CAAC,cAAc,CACrB,EACD,EAAE,CAAC,2BAA2B,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,EACtD,EAAE,CAAC,2BAA2B,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAC3D,CACF;iBACA,GAAG,EAAE,CAAC;QACX,CAAC;IACH,CAAC,EACD,KAAK,CAAC,YAAY,CACnB,CAAC;AACJ,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport { organizationReadModelTables } from \"../../sqlite/schema\";\nimport { organizationReadModelGroups } from \"../../sqlite/schema/organizationReadModelSchema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\n\nexport async function loadOrganizationGroupDisplayNames(\n  execSql: ExecSql,\n  organizationId: string,\n): Promise<ReadonlyMap<string, string>> {\n  await ensureSqlTables(execSql, organizationReadModelTables);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({\n      groupId: organizationReadModelGroups.groupId,\n      name: organizationReadModelGroups.name,\n    })\n    .from(organizationReadModelGroups)\n    .where(eq(organizationReadModelGroups.organizationId, organizationId));\n  return new Map(\n    rows\n      .filter((row) => row.name.length > 0)\n      .map((row) => [row.groupId, row.name]),\n  );\n}\n\n/** Local display cache only: these labels never enter a server request. */\nexport async function saveOrganizationGroupDisplayNames(input: {\n  execSql: ExecSql;\n  organizationId: string;\n  names: readonly { groupId: string; name: string; stateHash: string }[];\n  stillCurrent: () => boolean;\n}): Promise<void> {\n  await ensureSqlTables(input.execSql, organizationReadModelTables);\n  await getClientSQLitePersistenceRuntime(input.execSql).guardedTransaction(\n    async (tx) => {\n      for (const group of input.names) {\n        await tx\n          .update(organizationReadModelGroups)\n          .set({ name: group.name })\n          .where(\n            and(\n              eq(\n                organizationReadModelGroups.organizationId,\n                input.organizationId,\n              ),\n              eq(organizationReadModelGroups.groupId, group.groupId),\n              eq(organizationReadModelGroups.stateHash, group.stateHash),\n            ),\n          )\n          .run();\n      }\n    },\n    input.stillCurrent,\n  );\n}\n"]}

package/data/persistence/organizations/organizationPresentationDenialPersistence.js

@@ -1,6 +1,6 @@
 import { and, eq } from "drizzle-orm";
-import { organizationPresentationDenials } from "../../sqlite/organizationReadModelSchema.js";
-import { organizationReadModelTables } from "../../sqlite/organizationReadModelTableRegistry.js";
+import { organizationPresentationDenials } from "../../sqlite/schema/organizationReadModelSchema.js";
+import { organizationReadModelTables } from "../../sqlite/schema/organizationReadModelTableRegistry.js";
 import { getClientSQLitePersistenceRuntime, } from "../../sqlite/sqlitePersistenceRuntime.js";
 import { ensureSqlTables } from "../../sqlite/sqlTableSchema.js";
 /**

package/data/persistence/organizations/organizationPresentationDenialPersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationPresentationDenialPersistence.js","sourceRoot":"","sources":["organizationPresentationDenialPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAC9F,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAU9D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,KAA0C,EAC1C,WAAgE;IAEhE,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,CAChE,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,KAAK,MAAM,UAAU,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,MAAM,EAAE;iBACL,MAAM,CAAC,+BAA+B,CAAC;iBACvC,MAAM,CAAC;gBACN,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,UAAU;gBACV,QAAQ;aACT,CAAC;iBACD,kBAAkB,CAAC;gBAClB,MAAM,EAAE;oBACN,+BAA+B,CAAC,cAAc;oBAC9C,+BAA+B,CAAC,eAAe;oBAC/C,+BAA+B,CAAC,UAAU;iBAC3C;gBACD,GAAG,EAAE,EAAE,QAAQ,EAAE;aAClB,CAAC;iBACD,GAAG,EAAE,CAAC;QACX,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,KAA0C,EAC1C,UAAoD;IAEpD,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC;SAChE,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,+BAA+B,CAAC,UAAU,EAAE,CAAC;SACrE,IAAI,CAAC,+BAA+B,CAAC;SACrC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,+BAA+B,CAAC,cAAc,EAC9C,KAAK,CAAC,cAAc,CACrB,EACD,EAAE,CACA,+BAA+B,CAAC,eAAe,EAC/C,KAAK,CAAC,eAAe,CACtB,EACD,EAAE,CAAC,+BAA+B,CAAC,UAAU,EAAE,UAAU,CAAC,CAC3D,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gDAAgD,CAAC,KAKtE;IACC,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,+BAA+B,CAAC;SACvC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,+BAA+B,CAAC,cAAc,EAC9C,KAAK,CAAC,cAAc,CACrB,EACD,EAAE,CACA,+BAA+B,CAAC,eAAe,EAC/C,KAAK,CAAC,eAAe,CACtB,EACD,EAAE,CAAC,+BAA+B,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CACjE,CACF;SACA,GAAG,EAAE,CAAC;AACX,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport { organizationPresentationDenials } from \"../../sqlite/organizationReadModelSchema\";\nimport { organizationReadModelTables } from \"../../sqlite/organizationReadModelTableRegistry\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport { ensureSqlTables } from \"../../sqlite/sqlTableSchema\";\n\ntype OrganizationPresentationDenialProjection = \"readModel\" | \"usage\";\n\ninterface OrganizationPresentationDenialScope {\n  readonly execSql: ExecSql;\n  readonly organizationId: string;\n  readonly requesterUserId: string;\n}\n\n/**\n * Durably record a server denial before the revoked projection rows are\n * purged. The marker is what keeps a failed purge plus an offline restart\n * from serving the revoked projection; it is cleared only when an\n * authoritative reconcile stores fresh server state for the same scope.\n */\nexport async function recordOrganizationPresentationDenials(\n  scope: OrganizationPresentationDenialScope,\n  projections: readonly OrganizationPresentationDenialProjection[],\n): Promise<void> {\n  await ensureSqlTables(scope.execSql, organizationReadModelTables);\n  const deniedAt = new Date().toISOString();\n  await getClientSQLitePersistenceRuntime(scope.execSql).transaction(\n    async (tx) => {\n      for (const projection of new Set(projections)) {\n        await tx\n          .insert(organizationPresentationDenials)\n          .values({\n            organizationId: scope.organizationId,\n            requesterUserId: scope.requesterUserId,\n            projection,\n            deniedAt,\n          })\n          .onConflictDoUpdate({\n            target: [\n              organizationPresentationDenials.organizationId,\n              organizationPresentationDenials.requesterUserId,\n              organizationPresentationDenials.projection,\n            ],\n            set: { deniedAt },\n          })\n          .run();\n      }\n    },\n  );\n}\n\nexport async function hasOrganizationPresentationDenial(\n  scope: OrganizationPresentationDenialScope,\n  projection: OrganizationPresentationDenialProjection,\n): Promise<boolean> {\n  await ensureSqlTables(scope.execSql, organizationReadModelTables);\n  const rows = await getClientSQLitePersistenceRuntime(scope.execSql)\n    .db.select({ projection: organizationPresentationDenials.projection })\n    .from(organizationPresentationDenials)\n    .where(\n      and(\n        eq(\n          organizationPresentationDenials.organizationId,\n          scope.organizationId,\n        ),\n        eq(\n          organizationPresentationDenials.requesterUserId,\n          scope.requesterUserId,\n        ),\n        eq(organizationPresentationDenials.projection, projection),\n      ),\n    )\n    .limit(1);\n  return rows.length > 0;\n}\n\nexport async function clearOrganizationPresentationDenialInTransaction(input: {\n  readonly organizationId: string;\n  readonly projection: OrganizationPresentationDenialProjection;\n  readonly requesterUserId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  await input.tx\n    .delete(organizationPresentationDenials)\n    .where(\n      and(\n        eq(\n          organizationPresentationDenials.organizationId,\n          input.organizationId,\n        ),\n        eq(\n          organizationPresentationDenials.requesterUserId,\n          input.requesterUserId,\n        ),\n        eq(organizationPresentationDenials.projection, input.projection),\n      ),\n    )\n    .run();\n}\n"]}
+{"version":3,"file":"organizationPresentationDenialPersistence.js","sourceRoot":"","sources":["organizationPresentationDenialPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,+BAA+B,EAAE,MAAM,iDAAiD,CAAC;AAClG,OAAO,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AACrG,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAU9D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,KAA0C,EAC1C,WAAgE;IAEhE,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,CAChE,KAAK,EAAE,EAAE,EAAE,EAAE;QACX,KAAK,MAAM,UAAU,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,MAAM,EAAE;iBACL,MAAM,CAAC,+BAA+B,CAAC;iBACvC,MAAM,CAAC;gBACN,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,UAAU;gBACV,QAAQ;aACT,CAAC;iBACD,kBAAkB,CAAC;gBAClB,MAAM,EAAE;oBACN,+BAA+B,CAAC,cAAc;oBAC9C,+BAA+B,CAAC,eAAe;oBAC/C,+BAA+B,CAAC,UAAU;iBAC3C;gBACD,GAAG,EAAE,EAAE,QAAQ,EAAE;aAClB,CAAC;iBACD,GAAG,EAAE,CAAC;QACX,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,KAA0C,EAC1C,UAAoD;IAEpD,MAAM,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC;SAChE,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,+BAA+B,CAAC,UAAU,EAAE,CAAC;SACrE,IAAI,CAAC,+BAA+B,CAAC;SACrC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,+BAA+B,CAAC,cAAc,EAC9C,KAAK,CAAC,cAAc,CACrB,EACD,EAAE,CACA,+BAA+B,CAAC,eAAe,EAC/C,KAAK,CAAC,eAAe,CACtB,EACD,EAAE,CAAC,+BAA+B,CAAC,UAAU,EAAE,UAAU,CAAC,CAC3D,CACF;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gDAAgD,CAAC,KAKtE;IACC,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,+BAA+B,CAAC;SACvC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,+BAA+B,CAAC,cAAc,EAC9C,KAAK,CAAC,cAAc,CACrB,EACD,EAAE,CACA,+BAA+B,CAAC,eAAe,EAC/C,KAAK,CAAC,eAAe,CACtB,EACD,EAAE,CAAC,+BAA+B,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CACjE,CACF;SACA,GAAG,EAAE,CAAC;AACX,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport { organizationPresentationDenials } from \"../../sqlite/schema/organizationReadModelSchema\";\nimport { organizationReadModelTables } from \"../../sqlite/schema/organizationReadModelTableRegistry\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport type { ExecSql } from \"../../sqlite/sqlSchema\";\nimport { ensureSqlTables } from \"../../sqlite/sqlTableSchema\";\n\ntype OrganizationPresentationDenialProjection = \"readModel\" | \"usage\";\n\ninterface OrganizationPresentationDenialScope {\n  readonly execSql: ExecSql;\n  readonly organizationId: string;\n  readonly requesterUserId: string;\n}\n\n/**\n * Durably record a server denial before the revoked projection rows are\n * purged. The marker is what keeps a failed purge plus an offline restart\n * from serving the revoked projection; it is cleared only when an\n * authoritative reconcile stores fresh server state for the same scope.\n */\nexport async function recordOrganizationPresentationDenials(\n  scope: OrganizationPresentationDenialScope,\n  projections: readonly OrganizationPresentationDenialProjection[],\n): Promise<void> {\n  await ensureSqlTables(scope.execSql, organizationReadModelTables);\n  const deniedAt = new Date().toISOString();\n  await getClientSQLitePersistenceRuntime(scope.execSql).transaction(\n    async (tx) => {\n      for (const projection of new Set(projections)) {\n        await tx\n          .insert(organizationPresentationDenials)\n          .values({\n            organizationId: scope.organizationId,\n            requesterUserId: scope.requesterUserId,\n            projection,\n            deniedAt,\n          })\n          .onConflictDoUpdate({\n            target: [\n              organizationPresentationDenials.organizationId,\n              organizationPresentationDenials.requesterUserId,\n              organizationPresentationDenials.projection,\n            ],\n            set: { deniedAt },\n          })\n          .run();\n      }\n    },\n  );\n}\n\nexport async function hasOrganizationPresentationDenial(\n  scope: OrganizationPresentationDenialScope,\n  projection: OrganizationPresentationDenialProjection,\n): Promise<boolean> {\n  await ensureSqlTables(scope.execSql, organizationReadModelTables);\n  const rows = await getClientSQLitePersistenceRuntime(scope.execSql)\n    .db.select({ projection: organizationPresentationDenials.projection })\n    .from(organizationPresentationDenials)\n    .where(\n      and(\n        eq(\n          organizationPresentationDenials.organizationId,\n          scope.organizationId,\n        ),\n        eq(\n          organizationPresentationDenials.requesterUserId,\n          scope.requesterUserId,\n        ),\n        eq(organizationPresentationDenials.projection, projection),\n      ),\n    )\n    .limit(1);\n  return rows.length > 0;\n}\n\nexport async function clearOrganizationPresentationDenialInTransaction(input: {\n  readonly organizationId: string;\n  readonly projection: OrganizationPresentationDenialProjection;\n  readonly requesterUserId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  await input.tx\n    .delete(organizationPresentationDenials)\n    .where(\n      and(\n        eq(\n          organizationPresentationDenials.organizationId,\n          input.organizationId,\n        ),\n        eq(\n          organizationPresentationDenials.requesterUserId,\n          input.requesterUserId,\n        ),\n        eq(organizationPresentationDenials.projection, input.projection),\n      ),\n    )\n    .run();\n}\n"]}

package/data/persistence/organizations/organizationProfileDocumentPointers.js

@@ -1,5 +1,5 @@
-import { organizationReadModelState } from "../../sqlite/organizationReadModelSchema.js";
-import { organizationReadModelTables } from "../../sqlite/schema.js";
+import { organizationReadModelTables } from "../../sqlite/schema/index.js";
+import { organizationReadModelState } from "../../sqlite/schema/organizationReadModelSchema.js";
 import { getClientSQLitePersistenceRuntime } from "../../sqlite/sqlitePersistenceRuntime.js";
 import { ensureSqlTables } from "../../sqlite/sqlSchema.js";
 /**

package/data/persistence/organizations/organizationProfileDocumentPointers.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationProfileDocumentPointers.js","sourceRoot":"","sources":["organizationProfileDocumentPointers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,0CAA0C,CAAC;AACtF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,OAAgB;IAEhB,MAAM,eAAe,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC5D,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,cAAc,EAAE,0BAA0B,CAAC,cAAc;QACzD,iBAAiB,EAAE,0BAA0B,CAAC,iBAAiB;KAChE,CAAC;SACD,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAEpC,OAAO,IAAI,GAAG,CACZ,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACnB,GAAG,CAAC,iBAAiB;QACnB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/C,CAAC,CAAC,EAAE,CACP,CACF,CAAC;AACJ,CAAC","sourcesContent":["import { organizationReadModelState } from \"../../sqlite/organizationReadModelSchema\";\nimport { organizationReadModelTables } from \"../../sqlite/schema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\n\n/**\n * Every locally projected organization's pointer to its organization_profile\n * document, keyed by organization id.\n *\n * This is the only container-independent handle on that document. Callers that\n * need an org's display name from local state cannot rely on where the document\n * is linked: the provisioner writes it under a deterministic local alias into\n * the organization-metadata container, while a device that only *synced* it\n * (identity recovery, another member) keys it under the server documentId in\n * whichever container the grant arrived through.\n *\n * The local schema stores only the current read-model contract, so every state\n * row is eligible to provide its profile-document pointer.\n */\nexport async function loadOrganizationProfileDocumentIds(\n  execSql: ExecSql,\n): Promise<Map<string, string>> {\n  await ensureSqlTables(execSql, organizationReadModelTables);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({\n      organizationId: organizationReadModelState.organizationId,\n      profileDocumentId: organizationReadModelState.profileDocumentId,\n    })\n    .from(organizationReadModelState);\n\n  return new Map(\n    rows.flatMap((row) =>\n      row.profileDocumentId\n        ? [[row.organizationId, row.profileDocumentId]]\n        : [],\n    ),\n  );\n}\n"]}
+{"version":3,"file":"organizationProfileDocumentPointers.js","sourceRoot":"","sources":["organizationProfileDocumentPointers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,iDAAiD,CAAC;AAC7F,OAAO,EAAE,iCAAiC,EAAE,MAAM,uCAAuC,CAAC;AAC1F,OAAO,EAAgB,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEvE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,OAAgB;IAEhB,MAAM,eAAe,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC5D,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC;QACN,cAAc,EAAE,0BAA0B,CAAC,cAAc;QACzD,iBAAiB,EAAE,0BAA0B,CAAC,iBAAiB;KAChE,CAAC;SACD,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAEpC,OAAO,IAAI,GAAG,CACZ,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACnB,GAAG,CAAC,iBAAiB;QACnB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/C,CAAC,CAAC,EAAE,CACP,CACF,CAAC;AACJ,CAAC","sourcesContent":["import { organizationReadModelTables } from \"../../sqlite/schema\";\nimport { organizationReadModelState } from \"../../sqlite/schema/organizationReadModelSchema\";\nimport { getClientSQLitePersistenceRuntime } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../../sqlite/sqlSchema\";\n\n/**\n * Every locally projected organization's pointer to its organization_profile\n * document, keyed by organization id.\n *\n * This is the only container-independent handle on that document. Callers that\n * need an org's display name from local state cannot rely on where the document\n * is linked: the provisioner writes it under a deterministic local alias into\n * the organization-metadata container, while a device that only *synced* it\n * (identity recovery, another member) keys it under the server documentId in\n * whichever container the grant arrived through.\n *\n * The local schema stores only the current read-model contract, so every state\n * row is eligible to provide its profile-document pointer.\n */\nexport async function loadOrganizationProfileDocumentIds(\n  execSql: ExecSql,\n): Promise<Map<string, string>> {\n  await ensureSqlTables(execSql, organizationReadModelTables);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const rows = await db\n    .select({\n      organizationId: organizationReadModelState.organizationId,\n      profileDocumentId: organizationReadModelState.profileDocumentId,\n    })\n    .from(organizationReadModelState);\n\n  return new Map(\n    rows.flatMap((row) =>\n      row.profileDocumentId\n        ? [[row.organizationId, row.profileDocumentId]]\n        : [],\n    ),\n  );\n}\n"]}

package/data/persistence/organizations/organizationProvisioningAttemptPersistence.js

@@ -1,5 +1,5 @@
 import { and, eq } from "drizzle-orm";
-import { organizationProvisioningAttempts, organizationProvisioningAttemptTables, } from "../../sqlite/organizationProvisioningAttemptSchema.js";
+import { organizationProvisioningAttempts, organizationProvisioningAttemptTables, } from "../../sqlite/schema/organizationProvisioningAttemptSchema.js";
 import { getClientSQLitePersistenceRuntime, } from "../../sqlite/sqlitePersistenceRuntime.js";
 import { ensureSqlTables, runSerializedSqlMutation, } from "../../sqlite/sqlSchema.js";
 export const sqlOrganizationProvisioningAttemptPersistence = {

package/data/persistence/organizations/organizationProvisioningAttemptPersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationProvisioningAttemptPersistence.js","sourceRoot":"","sources":["organizationProvisioningAttemptPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EACL,gCAAgC,EAChC,qCAAqC,GACtC,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAEL,eAAe,EACf,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAUhC,MAAM,CAAC,MAAM,6CAA6C,GAAG;IAC3D,KAAK,CAAC,IAAI,CACR,OAAgB,EAChB,sBAA8B;QAE9B,MAAM,eAAe,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,iCAAiC,CAAC,OAAO,CAAC;aAC9D,EAAE,CAAC,MAAM,CAAC;YACT,sBAAsB,EACpB,gCAAgC,CAAC,sBAAsB;YACzD,MAAM,EAAE,gCAAgC,CAAC,MAAM;YAC/C,cAAc,EAAE,gCAAgC,CAAC,cAAc;YAC/D,eAAe,EAAE,gCAAgC,CAAC,eAAe;YACjE,mBAAmB,EACjB,gCAAgC,CAAC,mBAAmB;SACvD,CAAC;aACD,IAAI,CAAC,gCAAgC,CAAC;aACtC,KAAK,CACJ,EAAE,CACA,gCAAgC,CAAC,sBAAsB,EACvD,sBAAsB,CACvB,CACF,CAAC;QACJ,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,UAAU,CACd,OAAgB,EAChB,SAAgD,EAChD,OAAqC;QAErC,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YAC/D,MAAM,eAAe,CACnB,aAAa,EACb,qCAAqC,CACtC,CAAC;YACF,IAAI,OAAO,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO,IAAI,CAAC;YACvC,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,aAAa,CAAC,CAAC;YAChE,MAAM,EAAE;iBACL,MAAM,CAAC,gCAAgC,CAAC;iBACxC,MAAM,CAAC,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;iBAC7D,mBAAmB,EAAE;iBACrB,GAAG,EAAE,CAAC;YACT,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;iBACtB,MAAM,CAAC;gBACN,sBAAsB,EACpB,gCAAgC,CAAC,sBAAsB;gBACzD,MAAM,EAAE,gCAAgC,CAAC,MAAM;gBAC/C,cAAc,EAAE,gCAAgC,CAAC,cAAc;gBAC/D,eAAe,EAAE,gCAAgC,CAAC,eAAe;gBACjE,mBAAmB,EACjB,gCAAgC,CAAC,mBAAmB;aACvD,CAAC;iBACD,IAAI,CAAC,gCAAgC,CAAC;iBACtC,KAAK,CACJ,EAAE,CACA,gCAAgC,CAAC,sBAAsB,EACvD,SAAS,CAAC,sBAAsB,CACjC,CACF,CAAC;YACJ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAgB,EAChB,KAIC,EACD,SAAuC;QAEvC,MAAM,eAAe,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;QACtE,IAAI,SAAS,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,KAAK,CAAC;QAC5C,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,KAAK,EAAE,EAAgC,EAAE,EAAE;YACxD,MAAM,EAAE;iBACL,MAAM,CAAC,gCAAgC,CAAC;iBACxC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,gCAAgC,CAAC,sBAAsB,EACvD,KAAK,CAAC,sBAAsB,CAC7B,EACD,EAAE,CAAC,gCAAgC,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACzD,GAAG,CAAC,KAAK,CAAC,cAAc;gBACtB,CAAC,CAAC;oBACE,EAAE,CACA,gCAAgC,CAAC,cAAc,EAC/C,KAAK,CAAC,cAAc,CACrB;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC,CACR,CACF;iBACA,GAAG,EAAE,CAAC;QACX,CAAC,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,CAAC;CACF,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport {\n  organizationProvisioningAttempts,\n  organizationProvisioningAttemptTables,\n} from \"../../sqlite/organizationProvisioningAttemptSchema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport {\n  type ExecSql,\n  ensureSqlTables,\n  runSerializedSqlMutation,\n} from \"../../sqlite/sqlSchema\";\n\ninterface OrganizationProvisioningAttemptRecord {\n  readonly replacedOrganizationId: string;\n  readonly userId: string;\n  readonly organizationId: string;\n  readonly rootContainerId: string;\n  readonly serializedArtifacts: string;\n}\n\nexport const sqlOrganizationProvisioningAttemptPersistence = {\n  async load(\n    execSql: ExecSql,\n    replacedOrganizationId: string,\n  ): Promise<OrganizationProvisioningAttemptRecord | null> {\n    await ensureSqlTables(execSql, organizationProvisioningAttemptTables);\n    const [stored] = await getClientSQLitePersistenceRuntime(execSql)\n      .db.select({\n        replacedOrganizationId:\n          organizationProvisioningAttempts.replacedOrganizationId,\n        userId: organizationProvisioningAttempts.userId,\n        organizationId: organizationProvisioningAttempts.organizationId,\n        rootContainerId: organizationProvisioningAttempts.rootContainerId,\n        serializedArtifacts:\n          organizationProvisioningAttempts.serializedArtifacts,\n      })\n      .from(organizationProvisioningAttempts)\n      .where(\n        eq(\n          organizationProvisioningAttempts.replacedOrganizationId,\n          replacedOrganizationId,\n        ),\n      );\n    return stored ?? null;\n  },\n\n  async loadOrSave(\n    execSql: ExecSql,\n    candidate: OrganizationProvisioningAttemptRecord,\n    canSave?: (() => boolean) | undefined,\n  ): Promise<OrganizationProvisioningAttemptRecord | null> {\n    return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n      await ensureSqlTables(\n        lockedExecSql,\n        organizationProvisioningAttemptTables,\n      );\n      if (canSave && !canSave()) return null;\n      const { db } = getClientSQLitePersistenceRuntime(lockedExecSql);\n      await db\n        .insert(organizationProvisioningAttempts)\n        .values({ ...candidate, createdAt: new Date().toISOString() })\n        .onConflictDoNothing()\n        .run();\n      const [stored] = await db\n        .select({\n          replacedOrganizationId:\n            organizationProvisioningAttempts.replacedOrganizationId,\n          userId: organizationProvisioningAttempts.userId,\n          organizationId: organizationProvisioningAttempts.organizationId,\n          rootContainerId: organizationProvisioningAttempts.rootContainerId,\n          serializedArtifacts:\n            organizationProvisioningAttempts.serializedArtifacts,\n        })\n        .from(organizationProvisioningAttempts)\n        .where(\n          eq(\n            organizationProvisioningAttempts.replacedOrganizationId,\n            candidate.replacedOrganizationId,\n          ),\n        );\n      if (!stored) {\n        throw new Error(\"Organization provisioning attempt was not persisted\");\n      }\n      return stored;\n    });\n  },\n\n  async remove(\n    execSql: ExecSql,\n    input: {\n      organizationId?: string | undefined;\n      replacedOrganizationId: string;\n      userId: string;\n    },\n    canCommit?: (() => boolean) | undefined,\n  ): Promise<boolean> {\n    await ensureSqlTables(execSql, organizationProvisioningAttemptTables);\n    if (canCommit && !canCommit()) return false;\n    const runtime = getClientSQLitePersistenceRuntime(execSql);\n    const remove = async (tx: ClientSQLiteTransactionScope) => {\n      await tx\n        .delete(organizationProvisioningAttempts)\n        .where(\n          and(\n            eq(\n              organizationProvisioningAttempts.replacedOrganizationId,\n              input.replacedOrganizationId,\n            ),\n            eq(organizationProvisioningAttempts.userId, input.userId),\n            ...(input.organizationId\n              ? [\n                  eq(\n                    organizationProvisioningAttempts.organizationId,\n                    input.organizationId,\n                  ),\n                ]\n              : []),\n          ),\n        )\n        .run();\n    };\n    if (!canCommit) {\n      await runtime.transaction(remove);\n      return true;\n    }\n    return (await runtime.guardedTransaction(remove, canCommit)).committed;\n  },\n};\n"]}
+{"version":3,"file":"organizationProvisioningAttemptPersistence.js","sourceRoot":"","sources":["organizationProvisioningAttemptPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EACL,gCAAgC,EAChC,qCAAqC,GACtC,MAAM,2DAA2D,CAAC;AACnE,OAAO,EAEL,iCAAiC,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAEL,eAAe,EACf,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAUhC,MAAM,CAAC,MAAM,6CAA6C,GAAG;IAC3D,KAAK,CAAC,IAAI,CACR,OAAgB,EAChB,sBAA8B;QAE9B,MAAM,eAAe,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,iCAAiC,CAAC,OAAO,CAAC;aAC9D,EAAE,CAAC,MAAM,CAAC;YACT,sBAAsB,EACpB,gCAAgC,CAAC,sBAAsB;YACzD,MAAM,EAAE,gCAAgC,CAAC,MAAM;YAC/C,cAAc,EAAE,gCAAgC,CAAC,cAAc;YAC/D,eAAe,EAAE,gCAAgC,CAAC,eAAe;YACjE,mBAAmB,EACjB,gCAAgC,CAAC,mBAAmB;SACvD,CAAC;aACD,IAAI,CAAC,gCAAgC,CAAC;aACtC,KAAK,CACJ,EAAE,CACA,gCAAgC,CAAC,sBAAsB,EACvD,sBAAsB,CACvB,CACF,CAAC;QACJ,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,UAAU,CACd,OAAgB,EAChB,SAAgD,EAChD,OAAqC;QAErC,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YAC/D,MAAM,eAAe,CACnB,aAAa,EACb,qCAAqC,CACtC,CAAC;YACF,IAAI,OAAO,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO,IAAI,CAAC;YACvC,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,aAAa,CAAC,CAAC;YAChE,MAAM,EAAE;iBACL,MAAM,CAAC,gCAAgC,CAAC;iBACxC,MAAM,CAAC,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;iBAC7D,mBAAmB,EAAE;iBACrB,GAAG,EAAE,CAAC;YACT,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;iBACtB,MAAM,CAAC;gBACN,sBAAsB,EACpB,gCAAgC,CAAC,sBAAsB;gBACzD,MAAM,EAAE,gCAAgC,CAAC,MAAM;gBAC/C,cAAc,EAAE,gCAAgC,CAAC,cAAc;gBAC/D,eAAe,EAAE,gCAAgC,CAAC,eAAe;gBACjE,mBAAmB,EACjB,gCAAgC,CAAC,mBAAmB;aACvD,CAAC;iBACD,IAAI,CAAC,gCAAgC,CAAC;iBACtC,KAAK,CACJ,EAAE,CACA,gCAAgC,CAAC,sBAAsB,EACvD,SAAS,CAAC,sBAAsB,CACjC,CACF,CAAC;YACJ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAgB,EAChB,KAIC,EACD,SAAuC;QAEvC,MAAM,eAAe,CAAC,OAAO,EAAE,qCAAqC,CAAC,CAAC;QACtE,IAAI,SAAS,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,KAAK,CAAC;QAC5C,MAAM,OAAO,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,KAAK,EAAE,EAAgC,EAAE,EAAE;YACxD,MAAM,EAAE;iBACL,MAAM,CAAC,gCAAgC,CAAC;iBACxC,KAAK,CACJ,GAAG,CACD,EAAE,CACA,gCAAgC,CAAC,sBAAsB,EACvD,KAAK,CAAC,sBAAsB,CAC7B,EACD,EAAE,CAAC,gCAAgC,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EACzD,GAAG,CAAC,KAAK,CAAC,cAAc;gBACtB,CAAC,CAAC;oBACE,EAAE,CACA,gCAAgC,CAAC,cAAc,EAC/C,KAAK,CAAC,cAAc,CACrB;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC,CACR,CACF;iBACA,GAAG,EAAE,CAAC;QACX,CAAC,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,CAAC;CACF,CAAC","sourcesContent":["import { and, eq } from \"drizzle-orm\";\nimport {\n  organizationProvisioningAttempts,\n  organizationProvisioningAttemptTables,\n} from \"../../sqlite/schema/organizationProvisioningAttemptSchema\";\nimport {\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../../sqlite/sqlitePersistenceRuntime\";\nimport {\n  type ExecSql,\n  ensureSqlTables,\n  runSerializedSqlMutation,\n} from \"../../sqlite/sqlSchema\";\n\ninterface OrganizationProvisioningAttemptRecord {\n  readonly replacedOrganizationId: string;\n  readonly userId: string;\n  readonly organizationId: string;\n  readonly rootContainerId: string;\n  readonly serializedArtifacts: string;\n}\n\nexport const sqlOrganizationProvisioningAttemptPersistence = {\n  async load(\n    execSql: ExecSql,\n    replacedOrganizationId: string,\n  ): Promise<OrganizationProvisioningAttemptRecord | null> {\n    await ensureSqlTables(execSql, organizationProvisioningAttemptTables);\n    const [stored] = await getClientSQLitePersistenceRuntime(execSql)\n      .db.select({\n        replacedOrganizationId:\n          organizationProvisioningAttempts.replacedOrganizationId,\n        userId: organizationProvisioningAttempts.userId,\n        organizationId: organizationProvisioningAttempts.organizationId,\n        rootContainerId: organizationProvisioningAttempts.rootContainerId,\n        serializedArtifacts:\n          organizationProvisioningAttempts.serializedArtifacts,\n      })\n      .from(organizationProvisioningAttempts)\n      .where(\n        eq(\n          organizationProvisioningAttempts.replacedOrganizationId,\n          replacedOrganizationId,\n        ),\n      );\n    return stored ?? null;\n  },\n\n  async loadOrSave(\n    execSql: ExecSql,\n    candidate: OrganizationProvisioningAttemptRecord,\n    canSave?: (() => boolean) | undefined,\n  ): Promise<OrganizationProvisioningAttemptRecord | null> {\n    return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n      await ensureSqlTables(\n        lockedExecSql,\n        organizationProvisioningAttemptTables,\n      );\n      if (canSave && !canSave()) return null;\n      const { db } = getClientSQLitePersistenceRuntime(lockedExecSql);\n      await db\n        .insert(organizationProvisioningAttempts)\n        .values({ ...candidate, createdAt: new Date().toISOString() })\n        .onConflictDoNothing()\n        .run();\n      const [stored] = await db\n        .select({\n          replacedOrganizationId:\n            organizationProvisioningAttempts.replacedOrganizationId,\n          userId: organizationProvisioningAttempts.userId,\n          organizationId: organizationProvisioningAttempts.organizationId,\n          rootContainerId: organizationProvisioningAttempts.rootContainerId,\n          serializedArtifacts:\n            organizationProvisioningAttempts.serializedArtifacts,\n        })\n        .from(organizationProvisioningAttempts)\n        .where(\n          eq(\n            organizationProvisioningAttempts.replacedOrganizationId,\n            candidate.replacedOrganizationId,\n          ),\n        );\n      if (!stored) {\n        throw new Error(\"Organization provisioning attempt was not persisted\");\n      }\n      return stored;\n    });\n  },\n\n  async remove(\n    execSql: ExecSql,\n    input: {\n      organizationId?: string | undefined;\n      replacedOrganizationId: string;\n      userId: string;\n    },\n    canCommit?: (() => boolean) | undefined,\n  ): Promise<boolean> {\n    await ensureSqlTables(execSql, organizationProvisioningAttemptTables);\n    if (canCommit && !canCommit()) return false;\n    const runtime = getClientSQLitePersistenceRuntime(execSql);\n    const remove = async (tx: ClientSQLiteTransactionScope) => {\n      await tx\n        .delete(organizationProvisioningAttempts)\n        .where(\n          and(\n            eq(\n              organizationProvisioningAttempts.replacedOrganizationId,\n              input.replacedOrganizationId,\n            ),\n            eq(organizationProvisioningAttempts.userId, input.userId),\n            ...(input.organizationId\n              ? [\n                  eq(\n                    organizationProvisioningAttempts.organizationId,\n                    input.organizationId,\n                  ),\n                ]\n              : []),\n          ),\n        )\n        .run();\n    };\n    if (!canCommit) {\n      await runtime.transaction(remove);\n      return true;\n    }\n    return (await runtime.guardedTransaction(remove, canCommit)).committed;\n  },\n};\n"]}

package/data/persistence/organizations/organizationReadModelGrantPersistence.js

@@ -1,6 +1,6 @@
 import { isOrganizationContainerGrantSubjectType, isOrganizationGroupContainerAccessLevel, } from "../../../internal/validators/response/index.js";
 import { asc, eq } from "drizzle-orm";
-import { organizationReadModelContainerGrants } from "../../sqlite/organizationReadModelSchema.js";
+import { organizationReadModelContainerGrants } from "../../sqlite/schema/organizationReadModelSchema.js";
 import { sqliteInsertBatchSize } from "../../sqlite/sqliteBindBudget.js";
 import { OrganizationReadModelIntegrityError } from "./organizationReadModelProtocol.js";
 const GRANT_INSERT_BATCH_SIZE = sqliteInsertBatchSize(organizationReadModelContainerGrants);

package/data/persistence/organizations/organizationReadModelGrantPersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizationReadModelGrantPersistence.js","sourceRoot":"","sources":["organizationReadModelGrantPersistence.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,uCAAuC,EACvC,uCAAuC,GACxC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,oCAAoC,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,OAAO,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AAEtF,MAAM,uBAAuB,GAAG,qBAAqB,CACnD,oCAAoC,CACrC,CAAC;AAIF,SAAS,aAAa,CACpB,KAGC;IAED,OAAO,GAAG,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAyC;IAEzC,MAAM,SAAS,GACb,KAAK,CAAC,WAAW,KAAK,MAAM;QAC5B,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS;QAChC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;IACzB,MAAM,UAAU,GACd,KAAK,CAAC,WAAW,KAAK,OAAO;QAC7B,KAAK,CAAC,MAAM,KAAK,IAAI;QACrB,KAAK,CAAC,qBAAqB,KAAK,IAAI;QACpC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,CAAC;IACpC,OAAO,SAAS,IAAI,UAAU,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAGzB;IACC,IAAI,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,0DAA0D,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,KAI1D;IACC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,oCAAoC,CAAC;SAC5C,KAAK,CACJ,EAAE,CACA,oCAAoC,CAAC,cAAc,EACnD,KAAK,CAAC,cAAc,CACrB,CACF;SACA,GAAG,EAAE,CAAC;IAET,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACxD,GAAG,KAAK;QACR,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS;KACV,CAAC,CAAC,CAAC;IACJ,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,uBAAuB,EAAE,CAAC;QAC1E,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,oCAAoC,CAAC;aAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,uBAAuB,CAAC,CAAC;aAC1D,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAkB;IACjC,IAAI,CAAC,uCAAuC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,mCAAmC,CAC3C,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,uCAAuC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,mCAAmC,CAC3C,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAuC;QAChD,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,uBAAuB,EAAE,GAAG,CAAC,uBAAuB;QACpD,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;QAChD,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;IACF,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,mCAAmC,CAC3C,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAAC,KAGlE;IACC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,EAAE;SACxB,MAAM,EAAE;SACR,IAAI,CAAC,oCAAoC,CAAC;SAC1C,KAAK,CACJ,EAAE,CACA,oCAAoC,CAAC,cAAc,EACnD,KAAK,CAAC,cAAc,CACrB,CACF;SACA,OAAO,CACN,GAAG,CAAC,oCAAoC,CAAC,SAAS,CAAC,EACnD,GAAG,CAAC,oCAAoC,CAAC,WAAW,CAAC,EACrD,GAAG,CAAC,oCAAoC,CAAC,WAAW,CAAC,EACrD,GAAG,CAAC,oCAAoC,CAAC,SAAS,CAAC,CACpD,CAAC;IACJ,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;KAC1B,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  OrganizationContainerGrantResponse,\n  OrganizationContainerGrantsResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  isOrganizationContainerGrantSubjectType,\n  isOrganizationGroupContainerAccessLevel,\n} from \"@tearleads/validators/response\";\nimport { asc, eq } from \"drizzle-orm\";\nimport { organizationReadModelContainerGrants } from \"../../sqlite/organizationReadModelSchema\";\nimport { sqliteInsertBatchSize } from \"../../sqlite/sqliteBindBudget\";\nimport type { ClientSQLiteTransactionScope } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { OrganizationReadModelIntegrityError } from \"./organizationReadModelProtocol\";\n\nconst GRANT_INSERT_BATCH_SIZE = sqliteInsertBatchSize(\n  organizationReadModelContainerGrants,\n);\n\ntype SelectedGrant = typeof organizationReadModelContainerGrants.$inferSelect;\n\nfunction grantIdentity(\n  grant: Pick<\n    OrganizationContainerGrantResponse,\n    \"containerId\" | \"subjectId\" | \"subjectType\"\n  >,\n): string {\n  return `${grant.containerId}\\0${grant.subjectType}\\0${grant.subjectId}`;\n}\n\nfunction hasValidGrantSubjectBinding(\n  grant: OrganizationContainerGrantResponse,\n): boolean {\n  const validUser =\n    grant.subjectType === \"user\" &&\n    grant.userId === grant.subjectId &&\n    grant.groupId === null;\n  const validGroup =\n    grant.subjectType === \"group\" &&\n    grant.userId === null &&\n    grant.signingKeyFingerprint === null &&\n    grant.groupId === grant.subjectId;\n  return validUser || validGroup;\n}\n\nfunction assertGrantsLane(input: {\n  readonly lane: OrganizationContainerGrantsResponse;\n  readonly organizationId: string;\n}): void {\n  if (input.lane.organizationId !== input.organizationId) {\n    throw new Error(\"Organization read-model grants scope does not match\");\n  }\n  const identities = input.lane.grants.map(grantIdentity);\n  if (new Set(identities).size !== identities.length) {\n    throw new Error(\"Organization read-model grants contain duplicates\");\n  }\n  for (const grant of input.lane.grants) {\n    if (!hasValidGrantSubjectBinding(grant)) {\n      throw new Error(\n        \"Organization read-model grant subject binding is invalid\",\n      );\n    }\n  }\n}\n\nexport async function applyOrganizationReadModelGrantsLane(input: {\n  readonly lane: OrganizationContainerGrantsResponse;\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  assertGrantsLane(input);\n  await input.tx\n    .delete(organizationReadModelContainerGrants)\n    .where(\n      eq(\n        organizationReadModelContainerGrants.organizationId,\n        input.organizationId,\n      ),\n    )\n    .run();\n\n  const rows = input.lane.grants.map((grant, sortOrder) => ({\n    ...grant,\n    organizationId: input.organizationId,\n    sortOrder,\n  }));\n  for (let index = 0; index < rows.length; index += GRANT_INSERT_BATCH_SIZE) {\n    await input.tx\n      .insert(organizationReadModelContainerGrants)\n      .values(rows.slice(index, index + GRANT_INSERT_BATCH_SIZE))\n      .run();\n  }\n}\n\nfunction toGrant(row: SelectedGrant): OrganizationContainerGrantResponse {\n  if (!isOrganizationGroupContainerAccessLevel(row.accessLevel)) {\n    throw new OrganizationReadModelIntegrityError(\n      \"Stored organization grant access level is invalid\",\n    );\n  }\n  if (!isOrganizationContainerGrantSubjectType(row.subjectType)) {\n    throw new OrganizationReadModelIntegrityError(\n      \"Stored organization grant subject type is invalid\",\n    );\n  }\n  const grant: OrganizationContainerGrantResponse = {\n    accessLevel: row.accessLevel,\n    containerId: row.containerId,\n    createdAt: row.createdAt,\n    depth: row.depth,\n    isBuiltin: row.isBuiltin,\n    metadataAccessEpoch: row.metadataAccessEpoch,\n    metadataAccessStateHash: row.metadataAccessStateHash,\n    metadataDocumentId: row.metadataDocumentId,\n    parentId: row.parentId,\n    updatedAt: row.updatedAt,\n    subjectType: row.subjectType,\n    subjectId: row.subjectId,\n    userId: row.userId,\n    signingKeyFingerprint: row.signingKeyFingerprint,\n    groupId: row.groupId,\n  };\n  if (!hasValidGrantSubjectBinding(grant)) {\n    throw new OrganizationReadModelIntegrityError(\n      \"Stored organization grant subject binding is invalid\",\n    );\n  }\n  return grant;\n}\n\nexport async function loadOrganizationReadModelGrantsInTransaction(input: {\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<OrganizationContainerGrantsResponse> {\n  const rows = await input.tx\n    .select()\n    .from(organizationReadModelContainerGrants)\n    .where(\n      eq(\n        organizationReadModelContainerGrants.organizationId,\n        input.organizationId,\n      ),\n    )\n    .orderBy(\n      asc(organizationReadModelContainerGrants.sortOrder),\n      asc(organizationReadModelContainerGrants.containerId),\n      asc(organizationReadModelContainerGrants.subjectType),\n      asc(organizationReadModelContainerGrants.subjectId),\n    );\n  return {\n    organizationId: input.organizationId,\n    grants: rows.map(toGrant),\n  };\n}\n"]}
+{"version":3,"file":"organizationReadModelGrantPersistence.js","sourceRoot":"","sources":["organizationReadModelGrantPersistence.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,uCAAuC,EACvC,uCAAuC,GACxC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,oCAAoC,EAAE,MAAM,iDAAiD,CAAC;AACvG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,OAAO,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AAEtF,MAAM,uBAAuB,GAAG,qBAAqB,CACnD,oCAAoC,CACrC,CAAC;AAIF,SAAS,aAAa,CACpB,KAGC;IAED,OAAO,GAAG,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAyC;IAEzC,MAAM,SAAS,GACb,KAAK,CAAC,WAAW,KAAK,MAAM;QAC5B,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS;QAChC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC;IACzB,MAAM,UAAU,GACd,KAAK,CAAC,WAAW,KAAK,OAAO;QAC7B,KAAK,CAAC,MAAM,KAAK,IAAI;QACrB,KAAK,CAAC,qBAAqB,KAAK,IAAI;QACpC,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,CAAC;IACpC,OAAO,SAAS,IAAI,UAAU,CAAC;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAGzB;IACC,IAAI,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,0DAA0D,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,KAI1D;IACC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,KAAK,CAAC,EAAE;SACX,MAAM,CAAC,oCAAoC,CAAC;SAC5C,KAAK,CACJ,EAAE,CACA,oCAAoC,CAAC,cAAc,EACnD,KAAK,CAAC,cAAc,CACrB,CACF;SACA,GAAG,EAAE,CAAC;IAET,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACxD,GAAG,KAAK;QACR,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS;KACV,CAAC,CAAC,CAAC;IACJ,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,uBAAuB,EAAE,CAAC;QAC1E,MAAM,KAAK,CAAC,EAAE;aACX,MAAM,CAAC,oCAAoC,CAAC;aAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,uBAAuB,CAAC,CAAC;aAC1D,GAAG,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAkB;IACjC,IAAI,CAAC,uCAAuC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,mCAAmC,CAC3C,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,uCAAuC,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,mCAAmC,CAC3C,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAuC;QAChD,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,uBAAuB,EAAE,GAAG,CAAC,uBAAuB;QACpD,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,qBAAqB,EAAE,GAAG,CAAC,qBAAqB;QAChD,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;IACF,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,mCAAmC,CAC3C,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4CAA4C,CAAC,KAGlE;IACC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,EAAE;SACxB,MAAM,EAAE;SACR,IAAI,CAAC,oCAAoC,CAAC;SAC1C,KAAK,CACJ,EAAE,CACA,oCAAoC,CAAC,cAAc,EACnD,KAAK,CAAC,cAAc,CACrB,CACF;SACA,OAAO,CACN,GAAG,CAAC,oCAAoC,CAAC,SAAS,CAAC,EACnD,GAAG,CAAC,oCAAoC,CAAC,WAAW,CAAC,EACrD,GAAG,CAAC,oCAAoC,CAAC,WAAW,CAAC,EACrD,GAAG,CAAC,oCAAoC,CAAC,SAAS,CAAC,CACpD,CAAC;IACJ,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;KAC1B,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  OrganizationContainerGrantResponse,\n  OrganizationContainerGrantsResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  isOrganizationContainerGrantSubjectType,\n  isOrganizationGroupContainerAccessLevel,\n} from \"@tearleads/validators/response\";\nimport { asc, eq } from \"drizzle-orm\";\nimport { organizationReadModelContainerGrants } from \"../../sqlite/schema/organizationReadModelSchema\";\nimport { sqliteInsertBatchSize } from \"../../sqlite/sqliteBindBudget\";\nimport type { ClientSQLiteTransactionScope } from \"../../sqlite/sqlitePersistenceRuntime\";\nimport { OrganizationReadModelIntegrityError } from \"./organizationReadModelProtocol\";\n\nconst GRANT_INSERT_BATCH_SIZE = sqliteInsertBatchSize(\n  organizationReadModelContainerGrants,\n);\n\ntype SelectedGrant = typeof organizationReadModelContainerGrants.$inferSelect;\n\nfunction grantIdentity(\n  grant: Pick<\n    OrganizationContainerGrantResponse,\n    \"containerId\" | \"subjectId\" | \"subjectType\"\n  >,\n): string {\n  return `${grant.containerId}\\0${grant.subjectType}\\0${grant.subjectId}`;\n}\n\nfunction hasValidGrantSubjectBinding(\n  grant: OrganizationContainerGrantResponse,\n): boolean {\n  const validUser =\n    grant.subjectType === \"user\" &&\n    grant.userId === grant.subjectId &&\n    grant.groupId === null;\n  const validGroup =\n    grant.subjectType === \"group\" &&\n    grant.userId === null &&\n    grant.signingKeyFingerprint === null &&\n    grant.groupId === grant.subjectId;\n  return validUser || validGroup;\n}\n\nfunction assertGrantsLane(input: {\n  readonly lane: OrganizationContainerGrantsResponse;\n  readonly organizationId: string;\n}): void {\n  if (input.lane.organizationId !== input.organizationId) {\n    throw new Error(\"Organization read-model grants scope does not match\");\n  }\n  const identities = input.lane.grants.map(grantIdentity);\n  if (new Set(identities).size !== identities.length) {\n    throw new Error(\"Organization read-model grants contain duplicates\");\n  }\n  for (const grant of input.lane.grants) {\n    if (!hasValidGrantSubjectBinding(grant)) {\n      throw new Error(\n        \"Organization read-model grant subject binding is invalid\",\n      );\n    }\n  }\n}\n\nexport async function applyOrganizationReadModelGrantsLane(input: {\n  readonly lane: OrganizationContainerGrantsResponse;\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<void> {\n  assertGrantsLane(input);\n  await input.tx\n    .delete(organizationReadModelContainerGrants)\n    .where(\n      eq(\n        organizationReadModelContainerGrants.organizationId,\n        input.organizationId,\n      ),\n    )\n    .run();\n\n  const rows = input.lane.grants.map((grant, sortOrder) => ({\n    ...grant,\n    organizationId: input.organizationId,\n    sortOrder,\n  }));\n  for (let index = 0; index < rows.length; index += GRANT_INSERT_BATCH_SIZE) {\n    await input.tx\n      .insert(organizationReadModelContainerGrants)\n      .values(rows.slice(index, index + GRANT_INSERT_BATCH_SIZE))\n      .run();\n  }\n}\n\nfunction toGrant(row: SelectedGrant): OrganizationContainerGrantResponse {\n  if (!isOrganizationGroupContainerAccessLevel(row.accessLevel)) {\n    throw new OrganizationReadModelIntegrityError(\n      \"Stored organization grant access level is invalid\",\n    );\n  }\n  if (!isOrganizationContainerGrantSubjectType(row.subjectType)) {\n    throw new OrganizationReadModelIntegrityError(\n      \"Stored organization grant subject type is invalid\",\n    );\n  }\n  const grant: OrganizationContainerGrantResponse = {\n    accessLevel: row.accessLevel,\n    containerId: row.containerId,\n    createdAt: row.createdAt,\n    depth: row.depth,\n    isBuiltin: row.isBuiltin,\n    metadataAccessEpoch: row.metadataAccessEpoch,\n    metadataAccessStateHash: row.metadataAccessStateHash,\n    metadataDocumentId: row.metadataDocumentId,\n    parentId: row.parentId,\n    updatedAt: row.updatedAt,\n    subjectType: row.subjectType,\n    subjectId: row.subjectId,\n    userId: row.userId,\n    signingKeyFingerprint: row.signingKeyFingerprint,\n    groupId: row.groupId,\n  };\n  if (!hasValidGrantSubjectBinding(grant)) {\n    throw new OrganizationReadModelIntegrityError(\n      \"Stored organization grant subject binding is invalid\",\n    );\n  }\n  return grant;\n}\n\nexport async function loadOrganizationReadModelGrantsInTransaction(input: {\n  readonly organizationId: string;\n  readonly tx: ClientSQLiteTransactionScope;\n}): Promise<OrganizationContainerGrantsResponse> {\n  const rows = await input.tx\n    .select()\n    .from(organizationReadModelContainerGrants)\n    .where(\n      eq(\n        organizationReadModelContainerGrants.organizationId,\n        input.organizationId,\n      ),\n    )\n    .orderBy(\n      asc(organizationReadModelContainerGrants.sortOrder),\n      asc(organizationReadModelContainerGrants.containerId),\n      asc(organizationReadModelContainerGrants.subjectType),\n      asc(organizationReadModelContainerGrants.subjectId),\n    );\n  return {\n    organizationId: input.organizationId,\n    grants: rows.map(toGrant),\n  };\n}\n"]}

package/data/persistence/organizations/organizationReadModelMemberLoad.js

@@ -1,5 +1,5 @@
 import { and, asc, eq } from "drizzle-orm";
-import { organizationReadModelGroupMembers, organizationReadModelGroups, organizationReadModelRequesters, organizationReadModelState, } from "../../sqlite/organizationReadModelSchema.js";
+import { organizationReadModelGroupMembers, organizationReadModelGroups, organizationReadModelRequesters, organizationReadModelState, } from "../../sqlite/schema/organizationReadModelSchema.js";
 import { OrganizationReadModelIntegrityError } from "./organizationReadModelProtocol.js";
 import { loadWithOrganizationReadModelIntegrityPurge } from "./organizationReadModelPurge.js";
 function requireOrganizationRole(value) {