weave-typescript 0.38.0 → 0.39.0

package/dist/weaveapi/retrieval/v1/retrieval.pb.js

@@ -1392,7 +1392,14 @@ exports.RetrievedThread = {
     },
 };
 function createBaseDocumentSearchFilters() {
-    return { tags: [], restrictedTags: [], scopes: [], uploadedAfter: undefined, uploadedBefore: undefined };
+    return {
+        tags: [],
+        restrictedTags: [],
+        scopes: [],
+        uploadedAfter: undefined,
+        uploadedBefore: undefined,
+        restrictedGroupIds: [],
+    };
 }
 exports.DocumentSearchFilters = {
     encode(message, writer = new wire_1.BinaryWriter()) {
@@ -1413,6 +1420,9 @@ exports.DocumentSearchFilters = {
         if (message.uploadedBefore !== undefined) {
             timestamp_pb_1.Timestamp.encode(toTimestamp(message.uploadedBefore), writer.uint32(42).fork()).join();
         }
+        for (const v of message.restrictedGroupIds) {
+            writer.uint32(50).string(v);
+        }
         return writer;
     },
     decode(input, length) {
@@ -1464,6 +1474,13 @@ exports.DocumentSearchFilters = {
                     message.uploadedBefore = fromTimestamp(timestamp_pb_1.Timestamp.decode(reader, reader.uint32()));
                     continue;
                 }
+                case 6: {
+                    if (tag !== 50) {
+                        break;
+                    }
+                    message.restrictedGroupIds.push(reader.string());
+                    continue;
+                }
             }
             if ((tag & 7) === 4 || tag === 0) {
                 break;
@@ -1491,10 +1508,15 @@ exports.DocumentSearchFilters = {
                 : isSet(object.uploaded_before)
                     ? fromJsonTimestamp(object.uploaded_before)
                     : undefined,
+            restrictedGroupIds: globalThis.Array.isArray(object === null || object === void 0 ? void 0 : object.restrictedGroupIds)
+                ? object.restrictedGroupIds.map((e) => globalThis.String(e))
+                : globalThis.Array.isArray(object === null || object === void 0 ? void 0 : object.restricted_group_ids)
+                    ? object.restricted_group_ids.map((e) => globalThis.String(e))
+                    : [],
         };
     },
     toJSON(message) {
-        var _a, _b, _c;
+        var _a, _b, _c, _d;
         const obj = {};
         if ((_a = message.tags) === null || _a === void 0 ? void 0 : _a.length) {
             obj.tags = message.tags;
@@ -1511,20 +1533,24 @@ exports.DocumentSearchFilters = {
         if (message.uploadedBefore !== undefined) {
             obj.uploadedBefore = message.uploadedBefore.toISOString();
         }
+        if ((_d = message.restrictedGroupIds) === null || _d === void 0 ? void 0 : _d.length) {
+            obj.restrictedGroupIds = message.restrictedGroupIds;
+        }
         return obj;
     },
     create(base) {
         return exports.DocumentSearchFilters.fromPartial(base !== null && base !== void 0 ? base : {});
     },
     fromPartial(object) {
-        var _a, _b, _c;
-        var _d, _e;
+        var _a, _b, _c, _d;
+        var _e, _f;
         const message = createBaseDocumentSearchFilters();
         message.tags = ((_a = object.tags) === null || _a === void 0 ? void 0 : _a.map((e) => e)) || [];
         message.restrictedTags = ((_b = object.restrictedTags) === null || _b === void 0 ? void 0 : _b.map((e) => e)) || [];
         message.scopes = ((_c = object.scopes) === null || _c === void 0 ? void 0 : _c.map((e) => e)) || [];
-        message.uploadedAfter = (_d = object.uploadedAfter) !== null && _d !== void 0 ? _d : undefined;
-        message.uploadedBefore = (_e = object.uploadedBefore) !== null && _e !== void 0 ? _e : undefined;
+        message.uploadedAfter = (_e = object.uploadedAfter) !== null && _e !== void 0 ? _e : undefined;
+        message.uploadedBefore = (_f = object.uploadedBefore) !== null && _f !== void 0 ? _f : undefined;
+        message.restrictedGroupIds = ((_d = object.restrictedGroupIds) === null || _d === void 0 ? void 0 : _d.map((e) => e)) || [];
         return message;
     },
 };
@@ -1664,6 +1690,7 @@ function createBaseRetrievedDocument() {
         matchedThreadCount: 0,
         snippets: [],
         uploadedAt: undefined,
+        restrictedGroups: [],
     };
 }
 exports.RetrievedDocument = {
@@ -1698,6 +1725,9 @@ exports.RetrievedDocument = {
         if (message.uploadedAt !== undefined) {
             timestamp_pb_1.Timestamp.encode(toTimestamp(message.uploadedAt), writer.uint32(82).fork()).join();
         }
+        for (const v of message.restrictedGroups) {
+            ingestion_pb_1.RestrictedGroup.encode(v, writer.uint32(90).fork()).join();
+        }
         return writer;
     },
     decode(input, length) {
@@ -1777,6 +1807,13 @@ exports.RetrievedDocument = {
                     message.uploadedAt = fromTimestamp(timestamp_pb_1.Timestamp.decode(reader, reader.uint32()));
                     continue;
                 }
+                case 11: {
+                    if (tag !== 90) {
+                        break;
+                    }
+                    message.restrictedGroups.push(ingestion_pb_1.RestrictedGroup.decode(reader, reader.uint32()));
+                    continue;
+                }
             }
             if ((tag & 7) === 4 || tag === 0) {
                 break;
@@ -1823,10 +1860,15 @@ exports.RetrievedDocument = {
                 : isSet(object.uploaded_at)
                     ? fromJsonTimestamp(object.uploaded_at)
                     : undefined,
+            restrictedGroups: globalThis.Array.isArray(object === null || object === void 0 ? void 0 : object.restrictedGroups)
+                ? object.restrictedGroups.map((e) => ingestion_pb_1.RestrictedGroup.fromJSON(e))
+                : globalThis.Array.isArray(object === null || object === void 0 ? void 0 : object.restricted_groups)
+                    ? object.restricted_groups.map((e) => ingestion_pb_1.RestrictedGroup.fromJSON(e))
+                    : [],
         };
     },
     toJSON(message) {
-        var _a, _b, _c;
+        var _a, _b, _c, _d;
         const obj = {};
         if (message.documentId !== "") {
             obj.documentId = message.documentId;
@@ -1858,25 +1900,29 @@ exports.RetrievedDocument = {
         if (message.uploadedAt !== undefined) {
             obj.uploadedAt = message.uploadedAt.toISOString();
         }
+        if ((_d = message.restrictedGroups) === null || _d === void 0 ? void 0 : _d.length) {
+            obj.restrictedGroups = message.restrictedGroups.map((e) => ingestion_pb_1.RestrictedGroup.toJSON(e));
+        }
         return obj;
     },
     create(base) {
         return exports.RetrievedDocument.fromPartial(base !== null && base !== void 0 ? base : {});
     },
     fromPartial(object) {
-        var _a, _b, _c;
-        var _d, _e, _f, _g, _h, _j, _k;
+        var _a, _b, _c, _d;
+        var _e, _f, _g, _h, _j, _k, _l;
         const message = createBaseRetrievedDocument();
-        message.documentId = (_d = object.documentId) !== null && _d !== void 0 ? _d : "";
-        message.documentName = (_e = object.documentName) !== null && _e !== void 0 ? _e : "";
-        message.mimeType = (_f = object.mimeType) !== null && _f !== void 0 ? _f : "";
-        message.scope = (_g = object.scope) !== null && _g !== void 0 ? _g : 0;
+        message.documentId = (_e = object.documentId) !== null && _e !== void 0 ? _e : "";
+        message.documentName = (_f = object.documentName) !== null && _f !== void 0 ? _f : "";
+        message.mimeType = (_g = object.mimeType) !== null && _g !== void 0 ? _g : "";
+        message.scope = (_h = object.scope) !== null && _h !== void 0 ? _h : 0;
         message.tags = ((_a = object.tags) === null || _a === void 0 ? void 0 : _a.map((e) => ingestion_pb_1.DocumentTag.fromPartial(e))) || [];
         message.sensitivityTags = ((_b = object.sensitivityTags) === null || _b === void 0 ? void 0 : _b.map((e) => e)) || [];
-        message.score = (_h = object.score) !== null && _h !== void 0 ? _h : 0;
-        message.matchedThreadCount = (_j = object.matchedThreadCount) !== null && _j !== void 0 ? _j : 0;
+        message.score = (_j = object.score) !== null && _j !== void 0 ? _j : 0;
+        message.matchedThreadCount = (_k = object.matchedThreadCount) !== null && _k !== void 0 ? _k : 0;
         message.snippets = ((_c = object.snippets) === null || _c === void 0 ? void 0 : _c.map((e) => exports.DocumentSearchSnippet.fromPartial(e))) || [];
-        message.uploadedAt = (_k = object.uploadedAt) !== null && _k !== void 0 ? _k : undefined;
+        message.uploadedAt = (_l = object.uploadedAt) !== null && _l !== void 0 ? _l : undefined;
+        message.restrictedGroups = ((_d = object.restrictedGroups) === null || _d === void 0 ? void 0 : _d.map((e) => ingestion_pb_1.RestrictedGroup.fromPartial(e))) || [];
         return message;
     },
 };

package/dist/weavesql/weavedb/consolidation_sql.d.ts

@@ -180,7 +180,7 @@ export interface ListConceptClustersByParentAndRealmRow {
     updatedAt: Date;
 }
 export declare function listConceptClustersByParentAndRealm(client: Client, args: ListConceptClustersByParentAndRealmArgs): Promise<ListConceptClustersByParentAndRealmRow[]>;
-export declare const listApprovedThreadsForConsolidationQuery = "-- name: ListApprovedThreadsForConsolidation :many\nSELECT\n    t.id,\n    t.organization_id,\n    t.document_id,\n    t.ingestion_run_id,\n    t.text,\n    t.knowledge_type,\n    t.embedding::text AS embedding_text,\n    t.approved_at,\n    CASE\n        WHEN d.scope = 'DOCUMENT_SCOPE_ORG'\n            THEN 'KNOWLEDGE_REALM_KIND_ORG'::text\n        WHEN d.scope = 'DOCUMENT_SCOPE_RESTRICTED'\n            THEN 'KNOWLEDGE_REALM_KIND_TAG'::text\n        WHEN d.scope = 'DOCUMENT_SCOPE_PRIVATE'\n            THEN 'KNOWLEDGE_REALM_KIND_USER'::text\n    END AS realm_kind,\n    CASE\n        WHEN d.scope = 'DOCUMENT_SCOPE_ORG'\n            THEN ''::text\n        WHEN d.scope = 'DOCUMENT_SCOPE_RESTRICTED'\n            THEN COALESCE(d.sensitivity_tags[1], ''::text)\n        WHEN d.scope = 'DOCUMENT_SCOPE_PRIVATE'\n            THEN d.uploaded_by_user_id::text\n    END AS realm_key\nFROM weave.threads t\nJOIN weave.documents d ON d.id = t.document_id\nWHERE t.organization_id = $1\n  AND t.retrieval_status = 'THREAD_RETRIEVAL_STATUS_APPROVED'\n  AND t.embedding IS NOT NULL\nORDER BY t.approved_at DESC, t.id ASC\nLIMIT $3 OFFSET $2";
+export declare const listApprovedThreadsForConsolidationQuery = "-- name: ListApprovedThreadsForConsolidation :many\nSELECT\n    t.id,\n    t.organization_id,\n    t.document_id,\n    t.ingestion_run_id,\n    t.text,\n    t.knowledge_type,\n    t.embedding::text AS embedding_text,\n    t.approved_at,\n    CASE\n        WHEN d.scope = 'DOCUMENT_SCOPE_ORG'\n            THEN 'KNOWLEDGE_REALM_KIND_ORG'::text\n        WHEN d.scope = 'DOCUMENT_SCOPE_RESTRICTED'\n            THEN 'KNOWLEDGE_REALM_KIND_RESTRICTED_GROUP'::text\n        WHEN d.scope = 'DOCUMENT_SCOPE_PRIVATE'\n            THEN 'KNOWLEDGE_REALM_KIND_USER'::text\n    END AS realm_kind,\n    CASE\n        WHEN d.scope = 'DOCUMENT_SCOPE_ORG'\n            THEN ''::text\n        WHEN d.scope = 'DOCUMENT_SCOPE_RESTRICTED'\n            THEN drg.restricted_group_id::text\n        WHEN d.scope = 'DOCUMENT_SCOPE_PRIVATE'\n            THEN d.uploaded_by_user_id::text\n    END AS realm_key\nFROM weave.threads t\nJOIN weave.documents d ON d.id = t.document_id\nLEFT JOIN weave.document_restricted_groups drg\n  ON drg.organization_id = d.organization_id\n AND drg.document_id = d.id\n AND d.scope = 'DOCUMENT_SCOPE_RESTRICTED'\nWHERE t.organization_id = $1\n  AND t.retrieval_status = 'THREAD_RETRIEVAL_STATUS_APPROVED'\n  AND t.embedding IS NOT NULL\n  AND (d.scope <> 'DOCUMENT_SCOPE_RESTRICTED' OR drg.restricted_group_id IS NOT NULL)\nORDER BY t.approved_at DESC, t.id ASC\nLIMIT $3 OFFSET $2";
 export interface ListApprovedThreadsForConsolidationArgs {
     organizationId: string;
     pageOffset: string;
@@ -199,7 +199,7 @@ export interface ListApprovedThreadsForConsolidationRow {
     realmKey: string | null;
 }
 export declare function listApprovedThreadsForConsolidation(client: Client, args: ListApprovedThreadsForConsolidationArgs): Promise<ListApprovedThreadsForConsolidationRow[]>;
-export declare const assignThreadsToClusterQuery = "-- name: AssignThreadsToCluster :execrows\nUPDATE weave.threads AS t\nSET cluster_id = cc.id\nFROM weave.concept_clusters cc,\n     weave.documents d\nWHERE t.organization_id = $1\n  AND t.id = ANY($2::uuid[])\n  AND cc.organization_id = t.organization_id\n  AND cc.id = $3\n  AND d.id = t.document_id\n  AND (\n      (cc.realm_kind = 'KNOWLEDGE_REALM_KIND_ORG'\n          AND cc.realm_key = ''\n          AND d.scope = 'DOCUMENT_SCOPE_ORG')\n      OR (cc.realm_kind = 'KNOWLEDGE_REALM_KIND_TAG'\n          AND d.scope = 'DOCUMENT_SCOPE_RESTRICTED'\n          AND cardinality(d.sensitivity_tags) = 1\n          AND cc.realm_key = d.sensitivity_tags[1])\n      OR (cc.realm_kind = 'KNOWLEDGE_REALM_KIND_USER'\n          AND d.scope = 'DOCUMENT_SCOPE_PRIVATE'\n          AND cc.realm_key = d.uploaded_by_user_id::text)\n  )";
+export declare const assignThreadsToClusterQuery = "-- name: AssignThreadsToCluster :execrows\nUPDATE weave.threads AS t\nSET cluster_id = cc.id\nFROM weave.concept_clusters cc,\n     weave.documents d\nWHERE t.organization_id = $1\n  AND t.id = ANY($2::uuid[])\n  AND cc.organization_id = t.organization_id\n  AND cc.id = $3\n  AND d.id = t.document_id\n  AND (\n      (cc.realm_kind = 'KNOWLEDGE_REALM_KIND_ORG'\n          AND cc.realm_key = ''\n          AND d.scope = 'DOCUMENT_SCOPE_ORG')\n      OR (cc.realm_kind = 'KNOWLEDGE_REALM_KIND_RESTRICTED_GROUP'\n          AND d.scope = 'DOCUMENT_SCOPE_RESTRICTED'\n          AND EXISTS (\n              SELECT 1\n              FROM weave.document_restricted_groups drg\n              WHERE drg.organization_id = d.organization_id\n                AND drg.document_id = d.id\n                AND drg.restricted_group_id::text = cc.realm_key\n          ))\n      OR (cc.realm_kind = 'KNOWLEDGE_REALM_KIND_USER'\n          AND d.scope = 'DOCUMENT_SCOPE_PRIVATE'\n          AND cc.realm_key = d.uploaded_by_user_id::text)\n  )";
 export interface AssignThreadsToClusterArgs {
     organizationId: string;
     threadIds: string[];

package/dist/weavesql/weavedb/consolidation_sql.js

@@ -401,7 +401,7 @@ SELECT
         WHEN d.scope = 'DOCUMENT_SCOPE_ORG'
             THEN 'KNOWLEDGE_REALM_KIND_ORG'::text
         WHEN d.scope = 'DOCUMENT_SCOPE_RESTRICTED'
-            THEN 'KNOWLEDGE_REALM_KIND_TAG'::text
+            THEN 'KNOWLEDGE_REALM_KIND_RESTRICTED_GROUP'::text
         WHEN d.scope = 'DOCUMENT_SCOPE_PRIVATE'
             THEN 'KNOWLEDGE_REALM_KIND_USER'::text
     END AS realm_kind,
@@ -409,15 +409,20 @@ SELECT
         WHEN d.scope = 'DOCUMENT_SCOPE_ORG'
             THEN ''::text
         WHEN d.scope = 'DOCUMENT_SCOPE_RESTRICTED'
-            THEN COALESCE(d.sensitivity_tags[1], ''::text)
+            THEN drg.restricted_group_id::text
         WHEN d.scope = 'DOCUMENT_SCOPE_PRIVATE'
             THEN d.uploaded_by_user_id::text
     END AS realm_key
 FROM weave.threads t
 JOIN weave.documents d ON d.id = t.document_id
+LEFT JOIN weave.document_restricted_groups drg
+  ON drg.organization_id = d.organization_id
+ AND drg.document_id = d.id
+ AND d.scope = 'DOCUMENT_SCOPE_RESTRICTED'
 WHERE t.organization_id = $1
   AND t.retrieval_status = 'THREAD_RETRIEVAL_STATUS_APPROVED'
   AND t.embedding IS NOT NULL
+  AND (d.scope <> 'DOCUMENT_SCOPE_RESTRICTED' OR drg.restricted_group_id IS NOT NULL)
 ORDER BY t.approved_at DESC, t.id ASC
 LIMIT $3 OFFSET $2`;
 async function listApprovedThreadsForConsolidation(client, args) {
@@ -455,10 +460,15 @@ WHERE t.organization_id = $1
       (cc.realm_kind = 'KNOWLEDGE_REALM_KIND_ORG'
           AND cc.realm_key = ''
           AND d.scope = 'DOCUMENT_SCOPE_ORG')
-      OR (cc.realm_kind = 'KNOWLEDGE_REALM_KIND_TAG'
+      OR (cc.realm_kind = 'KNOWLEDGE_REALM_KIND_RESTRICTED_GROUP'
           AND d.scope = 'DOCUMENT_SCOPE_RESTRICTED'
-          AND cardinality(d.sensitivity_tags) = 1
-          AND cc.realm_key = d.sensitivity_tags[1])
+          AND EXISTS (
+              SELECT 1
+              FROM weave.document_restricted_groups drg
+              WHERE drg.organization_id = d.organization_id
+                AND drg.document_id = d.id
+                AND drg.restricted_group_id::text = cc.realm_key
+          ))
       OR (cc.realm_kind = 'KNOWLEDGE_REALM_KIND_USER'
           AND d.scope = 'DOCUMENT_SCOPE_PRIVATE'
           AND cc.realm_key = d.uploaded_by_user_id::text)

package/dist/weavesql/weavedb/document_security_sql.d.ts

@@ -2,10 +2,9 @@ import { QueryArrayConfig, QueryArrayResult } from "pg";
 interface Client {
     query: (config: QueryArrayConfig) => Promise<QueryArrayResult>;
 }
-export declare const setDocumentSecurityQuery = "-- name: SetDocumentSecurity :one\nUPDATE weave.documents\nSET\n    scope = $1,\n    sensitivity_tags = $2,\n    updated_at = now()\nWHERE organization_id = $3\n  AND id = $4\nRETURNING\n    id,\n    organization_id,\n    filename,\n    mime_type,\n    parser_name,\n    fingerprint,\n    storage_ref,\n    status,\n    scope,\n    sensitivity_tags,\n    uploaded_by_user_id,\n    uploaded_at,\n    updated_at,\n    page_count,\n    char_count,\n    metadata";
+export declare const setDocumentSecurityQuery = "-- name: SetDocumentSecurity :one\nUPDATE weave.documents\nSET\n    scope = $1,\n    updated_at = now()\nWHERE organization_id = $2\n  AND id = $3\nRETURNING\n    id,\n    organization_id,\n    filename,\n    mime_type,\n    parser_name,\n    fingerprint,\n    storage_ref,\n    status,\n    scope,\n    uploaded_by_user_id,\n    uploaded_at,\n    updated_at,\n    page_count,\n    char_count,\n    metadata";
 export interface SetDocumentSecurityArgs {
     scope: string;
-    sensitivityTags: string[];
     organizationId: string;
     documentId: string;
 }
@@ -19,7 +18,6 @@ export interface SetDocumentSecurityRow {
     storageRef: string;
     status: string;
     scope: string;
-    sensitivityTags: string[];
     uploadedByUserId: string;
     uploadedAt: Date;
     updatedAt: Date;
@@ -28,101 +26,254 @@ export interface SetDocumentSecurityRow {
     metadata: any;
 }
 export declare function setDocumentSecurity(client: Client, args: SetDocumentSecurityArgs): Promise<SetDocumentSecurityRow | null>;
-export declare const upsertOrganizationSensitivityTagQuery = "-- name: UpsertOrganizationSensitivityTag :one\nINSERT INTO weave.org_sensitivity_tags (\n    organization_id,\n    slug,\n    label,\n    description,\n    extraction_hint,\n    active\n) VALUES (\n    $1,\n    $2,\n    $3,\n    $4,\n    $5,\n    $6\n)\nON CONFLICT (organization_id, slug) DO UPDATE\nSET\n    label = EXCLUDED.label,\n    description = EXCLUDED.description,\n    extraction_hint = EXCLUDED.extraction_hint,\n    active = EXCLUDED.active,\n    updated_at = now()\nRETURNING\n    organization_id,\n    slug,\n    label,\n    description,\n    extraction_hint,\n    active,\n    created_at,\n    updated_at";
-export interface UpsertOrganizationSensitivityTagArgs {
+export declare const listRestrictedGroupsQuery = "-- name: ListRestrictedGroups :many\nSELECT\n    id,\n    organization_id,\n    slug,\n    name,\n    description,\n    active,\n    created_at,\n    updated_at\nFROM weave.restricted_groups\nWHERE organization_id = $1\nORDER BY name ASC, slug ASC";
+export interface ListRestrictedGroupsArgs {
+    organizationId: string;
+}
+export interface ListRestrictedGroupsRow {
+    id: string;
     organizationId: string;
     slug: string;
-    label: string;
+    name: string;
     description: string;
-    extractionHint: string;
     active: boolean;
+    createdAt: Date;
+    updatedAt: Date;
 }
-export interface UpsertOrganizationSensitivityTagRow {
+export declare function listRestrictedGroups(client: Client, args: ListRestrictedGroupsArgs): Promise<ListRestrictedGroupsRow[]>;
+export declare const getRestrictedGroupQuery = "-- name: GetRestrictedGroup :one\nSELECT\n    id,\n    organization_id,\n    slug,\n    name,\n    description,\n    active,\n    created_at,\n    updated_at\nFROM weave.restricted_groups\nWHERE organization_id = $1\n  AND id = $2";
+export interface GetRestrictedGroupArgs {
+    organizationId: string;
+    restrictedGroupId: string;
+}
+export interface GetRestrictedGroupRow {
+    id: string;
     organizationId: string;
     slug: string;
-    label: string;
+    name: string;
     description: string;
-    extractionHint: string;
     active: boolean;
     createdAt: Date;
     updatedAt: Date;
 }
-export declare function upsertOrganizationSensitivityTag(client: Client, args: UpsertOrganizationSensitivityTagArgs): Promise<UpsertOrganizationSensitivityTagRow | null>;
-export declare const listOrganizationSensitivityTagsQuery = "-- name: ListOrganizationSensitivityTags :many\nSELECT\n    organization_id,\n    slug,\n    label,\n    description,\n    extraction_hint,\n    active,\n    created_at,\n    updated_at\nFROM weave.org_sensitivity_tags\nWHERE organization_id = $1\nORDER BY slug ASC";
-export interface ListOrganizationSensitivityTagsArgs {
+export declare function getRestrictedGroup(client: Client, args: GetRestrictedGroupArgs): Promise<GetRestrictedGroupRow | null>;
+export declare const getRestrictedGroupBySlugQuery = "-- name: GetRestrictedGroupBySlug :one\nSELECT\n    id,\n    organization_id,\n    slug,\n    name,\n    description,\n    active,\n    created_at,\n    updated_at\nFROM weave.restricted_groups\nWHERE organization_id = $1\n  AND slug = $2";
+export interface GetRestrictedGroupBySlugArgs {
     organizationId: string;
+    slug: string;
 }
-export interface ListOrganizationSensitivityTagsRow {
+export interface GetRestrictedGroupBySlugRow {
+    id: string;
     organizationId: string;
     slug: string;
-    label: string;
+    name: string;
     description: string;
-    extractionHint: string;
     active: boolean;
     createdAt: Date;
     updatedAt: Date;
 }
-export declare function listOrganizationSensitivityTags(client: Client, args: ListOrganizationSensitivityTagsArgs): Promise<ListOrganizationSensitivityTagsRow[]>;
-export declare const listActiveOrganizationSensitivityTagsQuery = "-- name: ListActiveOrganizationSensitivityTags :many\nSELECT\n    organization_id,\n    slug,\n    label,\n    description,\n    extraction_hint,\n    active,\n    created_at,\n    updated_at\nFROM weave.org_sensitivity_tags\nWHERE organization_id = $1\n  AND active = TRUE\nORDER BY slug ASC";
-export interface ListActiveOrganizationSensitivityTagsArgs {
+export declare function getRestrictedGroupBySlug(client: Client, args: GetRestrictedGroupBySlugArgs): Promise<GetRestrictedGroupBySlugRow | null>;
+export declare const upsertRestrictedGroupQuery = "-- name: UpsertRestrictedGroup :one\nINSERT INTO weave.restricted_groups (\n    id,\n    organization_id,\n    slug,\n    name,\n    description,\n    active\n) VALUES (\n    $1,\n    $2,\n    $3,\n    $4,\n    $5,\n    $6\n)\nON CONFLICT (organization_id, slug) DO UPDATE\nSET\n    name = EXCLUDED.name,\n    description = EXCLUDED.description,\n    active = EXCLUDED.active,\n    updated_at = now()\nRETURNING\n    id,\n    organization_id,\n    slug,\n    name,\n    description,\n    active,\n    created_at,\n    updated_at";
+export interface UpsertRestrictedGroupArgs {
+    id: string;
     organizationId: string;
+    slug: string;
+    name: string;
+    description: string;
+    active: boolean;
 }
-export interface ListActiveOrganizationSensitivityTagsRow {
+export interface UpsertRestrictedGroupRow {
+    id: string;
     organizationId: string;
     slug: string;
-    label: string;
+    name: string;
     description: string;
-    extractionHint: string;
     active: boolean;
     createdAt: Date;
     updatedAt: Date;
 }
-export declare function listActiveOrganizationSensitivityTags(client: Client, args: ListActiveOrganizationSensitivityTagsArgs): Promise<ListActiveOrganizationSensitivityTagsRow[]>;
-export declare const deactivateOrganizationSensitivityTagQuery = "-- name: DeactivateOrganizationSensitivityTag :one\nUPDATE weave.org_sensitivity_tags\nSET\n    active = FALSE,\n    updated_at = now()\nWHERE organization_id = $1\n  AND slug = $2\nRETURNING\n    organization_id,\n    slug,\n    label,\n    description,\n    extraction_hint,\n    active,\n    created_at,\n    updated_at";
-export interface DeactivateOrganizationSensitivityTagArgs {
-    organizationId: string;
+export declare function upsertRestrictedGroup(client: Client, args: UpsertRestrictedGroupArgs): Promise<UpsertRestrictedGroupRow | null>;
+export declare const updateRestrictedGroupQuery = "-- name: UpdateRestrictedGroup :one\nUPDATE weave.restricted_groups\nSET\n    slug = $1,\n    name = $2,\n    description = $3,\n    active = $4,\n    updated_at = now()\nWHERE organization_id = $5\n  AND id = $6\nRETURNING\n    id,\n    organization_id,\n    slug,\n    name,\n    description,\n    active,\n    created_at,\n    updated_at";
+export interface UpdateRestrictedGroupArgs {
     slug: string;
+    name: string;
+    description: string;
+    active: boolean;
+    organizationId: string;
+    restrictedGroupId: string;
 }
-export interface DeactivateOrganizationSensitivityTagRow {
+export interface UpdateRestrictedGroupRow {
+    id: string;
     organizationId: string;
     slug: string;
-    label: string;
+    name: string;
     description: string;
-    extractionHint: string;
     active: boolean;
     createdAt: Date;
     updatedAt: Date;
 }
-export declare function deactivateOrganizationSensitivityTag(client: Client, args: DeactivateOrganizationSensitivityTagArgs): Promise<DeactivateOrganizationSensitivityTagRow | null>;
-export declare const grantUserSensitivityClearanceQuery = "-- name: GrantUserSensitivityClearance :one\nINSERT INTO weave.user_sensitivity_clearances (\n    organization_id,\n    user_id,\n    sensitivity_tag_slug\n) VALUES (\n    $1,\n    $2,\n    $3\n)\nON CONFLICT (organization_id, user_id, sensitivity_tag_slug) DO UPDATE\nSET\n    sensitivity_tag_slug = EXCLUDED.sensitivity_tag_slug\nRETURNING\n    organization_id,\n    user_id,\n    sensitivity_tag_slug,\n    created_at";
-export interface GrantUserSensitivityClearanceArgs {
+export declare function updateRestrictedGroup(client: Client, args: UpdateRestrictedGroupArgs): Promise<UpdateRestrictedGroupRow | null>;
+export declare const deleteRestrictedGroupQuery = "-- name: DeleteRestrictedGroup :execrows\nDELETE FROM weave.restricted_groups\nWHERE organization_id = $1\n  AND id = $2";
+export interface DeleteRestrictedGroupArgs {
     organizationId: string;
-    userId: string;
-    sensitivityTagSlug: string;
+    restrictedGroupId: string;
 }
-export interface GrantUserSensitivityClearanceRow {
+export declare const countRestrictedGroupDocumentsQuery = "-- name: CountRestrictedGroupDocuments :one\nSELECT COUNT(DISTINCT document_id)::int AS document_count\nFROM weave.document_restricted_groups\nWHERE organization_id = $1\n  AND restricted_group_id = $2";
+export interface CountRestrictedGroupDocumentsArgs {
     organizationId: string;
+    restrictedGroupId: string;
+}
+export interface CountRestrictedGroupDocumentsRow {
+    documentCount: number;
+}
+export declare function countRestrictedGroupDocuments(client: Client, args: CountRestrictedGroupDocumentsArgs): Promise<CountRestrictedGroupDocumentsRow | null>;
+export declare const countRestrictedGroupUsersQuery = "-- name: CountRestrictedGroupUsers :one\nSELECT COUNT(*)::int AS user_count\nFROM weave.restricted_group_user_memberships\nWHERE organization_id = $1\n  AND restricted_group_id = $2";
+export interface CountRestrictedGroupUsersArgs {
+    organizationId: string;
+    restrictedGroupId: string;
+}
+export interface CountRestrictedGroupUsersRow {
+    userCount: number;
+}
+export declare function countRestrictedGroupUsers(client: Client, args: CountRestrictedGroupUsersArgs): Promise<CountRestrictedGroupUsersRow | null>;
+export declare const countRestrictedGroupTeamsQuery = "-- name: CountRestrictedGroupTeams :one\nSELECT COUNT(*)::int AS team_count\nFROM weave.restricted_group_team_memberships\nWHERE organization_id = $1\n  AND restricted_group_id = $2";
+export interface CountRestrictedGroupTeamsArgs {
+    organizationId: string;
+    restrictedGroupId: string;
+}
+export interface CountRestrictedGroupTeamsRow {
+    teamCount: number;
+}
+export declare function countRestrictedGroupTeams(client: Client, args: CountRestrictedGroupTeamsArgs): Promise<CountRestrictedGroupTeamsRow | null>;
+export declare const listRestrictedGroupUserMembershipsQuery = "-- name: ListRestrictedGroupUserMemberships :many\nSELECT\n    organization_id,\n    restricted_group_id,\n    user_id,\n    created_at\nFROM weave.restricted_group_user_memberships\nWHERE organization_id = $1\n  AND restricted_group_id = $2\nORDER BY created_at ASC, user_id ASC";
+export interface ListRestrictedGroupUserMembershipsArgs {
+    organizationId: string;
+    restrictedGroupId: string;
+}
+export interface ListRestrictedGroupUserMembershipsRow {
+    organizationId: string;
+    restrictedGroupId: string;
     userId: string;
-    sensitivityTagSlug: string;
     createdAt: Date;
 }
-export declare function grantUserSensitivityClearance(client: Client, args: GrantUserSensitivityClearanceArgs): Promise<GrantUserSensitivityClearanceRow | null>;
-export declare const revokeUserSensitivityClearanceQuery = "-- name: RevokeUserSensitivityClearance :execrows\nDELETE FROM weave.user_sensitivity_clearances\nWHERE organization_id = $1\n  AND user_id = $2\n  AND sensitivity_tag_slug = $3";
-export interface RevokeUserSensitivityClearanceArgs {
+export declare function listRestrictedGroupUserMemberships(client: Client, args: ListRestrictedGroupUserMembershipsArgs): Promise<ListRestrictedGroupUserMembershipsRow[]>;
+export declare const deleteRestrictedGroupUserMembershipsQuery = "-- name: DeleteRestrictedGroupUserMemberships :execrows\nDELETE FROM weave.restricted_group_user_memberships\nWHERE organization_id = $1\n  AND restricted_group_id = $2";
+export interface DeleteRestrictedGroupUserMembershipsArgs {
     organizationId: string;
-    userId: string;
-    sensitivityTagSlug: string;
+    restrictedGroupId: string;
 }
-export declare const listUserSensitivityClearancesQuery = "-- name: ListUserSensitivityClearances :many\nSELECT\n    organization_id,\n    user_id,\n    sensitivity_tag_slug,\n    created_at\nFROM weave.user_sensitivity_clearances\nWHERE organization_id = $1\n  AND user_id = $2\nORDER BY sensitivity_tag_slug ASC";
-export interface ListUserSensitivityClearancesArgs {
+export declare const addRestrictedGroupUserMembershipQuery = "-- name: AddRestrictedGroupUserMembership :one\nINSERT INTO weave.restricted_group_user_memberships (\n    organization_id,\n    restricted_group_id,\n    user_id\n) VALUES (\n    $1,\n    $2,\n    $3\n)\nON CONFLICT DO NOTHING\nRETURNING organization_id, restricted_group_id, user_id, created_at";
+export interface AddRestrictedGroupUserMembershipArgs {
     organizationId: string;
+    restrictedGroupId: string;
     userId: string;
 }
-export interface ListUserSensitivityClearancesRow {
+export interface AddRestrictedGroupUserMembershipRow {
     organizationId: string;
+    restrictedGroupId: string;
     userId: string;
-    sensitivityTagSlug: string;
     createdAt: Date;
 }
-export declare function listUserSensitivityClearances(client: Client, args: ListUserSensitivityClearancesArgs): Promise<ListUserSensitivityClearancesRow[]>;
+export declare function addRestrictedGroupUserMembership(client: Client, args: AddRestrictedGroupUserMembershipArgs): Promise<AddRestrictedGroupUserMembershipRow | null>;
+export declare const listRestrictedGroupTeamMembershipsQuery = "-- name: ListRestrictedGroupTeamMemberships :many\nSELECT\n    organization_id,\n    restricted_group_id,\n    org_team_id,\n    created_at\nFROM weave.restricted_group_team_memberships\nWHERE organization_id = $1\n  AND restricted_group_id = $2\nORDER BY created_at ASC, org_team_id ASC";
+export interface ListRestrictedGroupTeamMembershipsArgs {
+    organizationId: string;
+    restrictedGroupId: string;
+}
+export interface ListRestrictedGroupTeamMembershipsRow {
+    organizationId: string;
+    restrictedGroupId: string;
+    orgTeamId: string;
+    createdAt: Date;
+}
+export declare function listRestrictedGroupTeamMemberships(client: Client, args: ListRestrictedGroupTeamMembershipsArgs): Promise<ListRestrictedGroupTeamMembershipsRow[]>;
+export declare const deleteRestrictedGroupTeamMembershipsQuery = "-- name: DeleteRestrictedGroupTeamMemberships :execrows\nDELETE FROM weave.restricted_group_team_memberships\nWHERE organization_id = $1\n  AND restricted_group_id = $2";
+export interface DeleteRestrictedGroupTeamMembershipsArgs {
+    organizationId: string;
+    restrictedGroupId: string;
+}
+export declare const addRestrictedGroupTeamMembershipQuery = "-- name: AddRestrictedGroupTeamMembership :one\nINSERT INTO weave.restricted_group_team_memberships (\n    organization_id,\n    restricted_group_id,\n    org_team_id\n) VALUES (\n    $1,\n    $2,\n    $3\n)\nON CONFLICT DO NOTHING\nRETURNING organization_id, restricted_group_id, org_team_id, created_at";
+export interface AddRestrictedGroupTeamMembershipArgs {
+    organizationId: string;
+    restrictedGroupId: string;
+    orgTeamId: string;
+}
+export interface AddRestrictedGroupTeamMembershipRow {
+    organizationId: string;
+    restrictedGroupId: string;
+    orgTeamId: string;
+    createdAt: Date;
+}
+export declare function addRestrictedGroupTeamMembership(client: Client, args: AddRestrictedGroupTeamMembershipArgs): Promise<AddRestrictedGroupTeamMembershipRow | null>;
+export declare const listDocumentRestrictedGroupsQuery = "-- name: ListDocumentRestrictedGroups :many\nSELECT\n    rg.id,\n    rg.organization_id,\n    rg.slug,\n    rg.name,\n    rg.description,\n    rg.active,\n    rg.created_at,\n    rg.updated_at\nFROM weave.document_restricted_groups drg\nJOIN weave.restricted_groups rg\n  ON rg.organization_id = drg.organization_id\n AND rg.id = drg.restricted_group_id\nWHERE drg.organization_id = $1\n  AND drg.document_id = $2\nORDER BY rg.name ASC, rg.slug ASC";
+export interface ListDocumentRestrictedGroupsArgs {
+    organizationId: string;
+    documentId: string;
+}
+export interface ListDocumentRestrictedGroupsRow {
+    id: string;
+    organizationId: string;
+    slug: string;
+    name: string;
+    description: string;
+    active: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export declare function listDocumentRestrictedGroups(client: Client, args: ListDocumentRestrictedGroupsArgs): Promise<ListDocumentRestrictedGroupsRow[]>;
+export declare const listDocumentRestrictedGroupsByDocumentIDsQuery = "-- name: ListDocumentRestrictedGroupsByDocumentIDs :many\nSELECT\n    drg.document_id,\n    rg.id,\n    rg.organization_id,\n    rg.slug,\n    rg.name,\n    rg.description,\n    rg.active,\n    rg.created_at,\n    rg.updated_at\nFROM weave.document_restricted_groups drg\nJOIN weave.restricted_groups rg\n  ON rg.organization_id = drg.organization_id\n AND rg.id = drg.restricted_group_id\nWHERE drg.organization_id = $1\n  AND drg.document_id = ANY($2::uuid[])\nORDER BY drg.document_id ASC, rg.name ASC, rg.slug ASC";
+export interface ListDocumentRestrictedGroupsByDocumentIDsArgs {
+    organizationId: string;
+    documentIds: string[];
+}
+export interface ListDocumentRestrictedGroupsByDocumentIDsRow {
+    documentId: string;
+    id: string;
+    organizationId: string;
+    slug: string;
+    name: string;
+    description: string;
+    active: boolean;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export declare function listDocumentRestrictedGroupsByDocumentIDs(client: Client, args: ListDocumentRestrictedGroupsByDocumentIDsArgs): Promise<ListDocumentRestrictedGroupsByDocumentIDsRow[]>;
+export declare const deleteDocumentRestrictedGroupsQuery = "-- name: DeleteDocumentRestrictedGroups :execrows\nDELETE FROM weave.document_restricted_groups\nWHERE organization_id = $1\n  AND document_id = $2";
+export interface DeleteDocumentRestrictedGroupsArgs {
+    organizationId: string;
+    documentId: string;
+}
+export declare const deleteDocumentRestrictedGroupsByGroupQuery = "-- name: DeleteDocumentRestrictedGroupsByGroup :execrows\nDELETE FROM weave.document_restricted_groups\nWHERE organization_id = $1\n  AND restricted_group_id = $2";
+export interface DeleteDocumentRestrictedGroupsByGroupArgs {
+    organizationId: string;
+    restrictedGroupId: string;
+}
+export declare const addDocumentRestrictedGroupQuery = "-- name: AddDocumentRestrictedGroup :one\nINSERT INTO weave.document_restricted_groups (\n    organization_id,\n    document_id,\n    restricted_group_id\n) VALUES (\n    $1,\n    $2,\n    $3\n)\nON CONFLICT DO NOTHING\nRETURNING organization_id, document_id, restricted_group_id, created_at";
+export interface AddDocumentRestrictedGroupArgs {
+    organizationId: string;
+    documentId: string;
+    restrictedGroupId: string;
+}
+export interface AddDocumentRestrictedGroupRow {
+    organizationId: string;
+    documentId: string;
+    restrictedGroupId: string;
+    createdAt: Date;
+}
+export declare function addDocumentRestrictedGroup(client: Client, args: AddDocumentRestrictedGroupArgs): Promise<AddDocumentRestrictedGroupRow | null>;
+export declare const addDocumentRestrictedGroupsForDocumentsQuery = "-- name: AddDocumentRestrictedGroupsForDocuments :execrows\nINSERT INTO weave.document_restricted_groups (\n    organization_id,\n    document_id,\n    restricted_group_id\n)\nSELECT\n    $1,\n    document_id,\n    restricted_group_id\nFROM unnest($2::uuid[]) AS document_id\nCROSS JOIN unnest($3::uuid[]) AS restricted_group_id\nON CONFLICT DO NOTHING";
+export interface AddDocumentRestrictedGroupsForDocumentsArgs {
+    organizationId: string;
+    documentIds: string[];
+    restrictedGroupIds: string[];
+}
+export declare const listDocumentIDsByRestrictedGroupQuery = "-- name: ListDocumentIDsByRestrictedGroup :many\nSELECT DISTINCT document_id\nFROM weave.document_restricted_groups\nWHERE organization_id = $1\n  AND restricted_group_id = $2\nORDER BY document_id ASC";
+export interface ListDocumentIDsByRestrictedGroupArgs {
+    organizationId: string;
+    restrictedGroupId: string;
+}
+export interface ListDocumentIDsByRestrictedGroupRow {
+    documentId: string;
+}
+export declare function listDocumentIDsByRestrictedGroup(client: Client, args: ListDocumentIDsByRestrictedGroupArgs): Promise<ListDocumentIDsByRestrictedGroupRow[]>;
 export {};