// screens-org-directory.jsx — the DIRECTORY view of the Org Chart screen. // // BUILD_40 §6 orders this fourth but says to ship it FIRST, because it is the // smallest piece and the only one that produces a visible win without new // tables or a ruling. It is the design's "Outline Rail + Profile" pair: a // searchable people list on the left, one person's profile on the right. // // WHAT IT IS NOT. It is not the SVG tree and it is not the Group Lens. Both // come later and both live in their own files. // // ONE ROSTER (BUILD_40 §4). VaultOrg.roster() decides WHO is in the directory. // VAULT_FIRM.PEOPLE_BY_ID supplies the FIELDS, because roster() returns // {id,name,role,active,inScope} and the profile needs supId and title as well. // That is not a second person list -- membership has exactly one owner, and it // is roster(). Do not replace the roster() call with a PEOPLE.filter(). // // POSITION HISTORY READS people_positions (sql_194-197), WITH effective_date AS // THE FALLBACK. The note below is why this was a one-line stub; that reason // expired on 2026-09-01, when position history became writable. // // probe_90d (2026-08-26): 49 people_history rows across 46 people, all between // 2026-07-01 and 2026-08-26 -- the arrivals import and the re-key, not anybody's // career. A timeline drawn from that table would show "changed 8/26" against // nearly the whole firm and read as though everyone was just promoted, so it is // NOT the source here. effective_date is, and Brian's ruling is that those dates // go in by hand for now (sql_154 exposed the column; the Org screen's edit modal // writes it). Anyone without one still gets the design's own line, "Promotion // dates not on file." -- which is true, rather than a date invented from an // audit row. // // WHAT CHANGED 2026-09-01. people_positions is now a real table with real rows: // a promotion closes one and opens the next, and the Org Chart's edit modal // writes them. So this panel draws the actual sequence rather than one line. // people_history is STILL not the source and must not become it -- the // objection above holds, it is an audit log of imports. // // A row flagged is_seed was created from the person's current title when the // table was populated and its dates were never typed by anyone, so it is // labelled rather than presented as fact. (function () { "use strict"; var useState = React.useState, useMemo = React.useMemo; function firm() { return window.VAULT_FIRM || {}; } function byId() { return firm().PEOPLE_BY_ID || {}; } function initialsOf(p) { if (!p) return "?"; if (p.initials) return p.initials; var parts = String(p.name || p.id || "").trim().split(/\s+/); if (parts.length === 1) return parts[0].slice(0, 2).toUpperCase(); return (parts[0][0] + parts[parts.length - 1][0]).toUpperCase(); } // Everyone the viewer may see, as ids. // // `module` is null today, which means every ACTIVE person firm-wide, because // the Org Chart is still admin-only (app.jsx:532). It is a PROP rather than a // hardcoded null so that narrowing it to one module later is a caller change, // not a surgery on this file -- and so the harness can mount both ways and // prove the scope actually confines the screen. function directoryIds(module) { if (!window.VaultOrg || typeof window.VaultOrg.roster !== "function") return []; return window.VaultOrg.roster(module || null).map(function (r) { return r.id; }); } // supId -> [personId]. // // THE CONFINEMENT IS THE ITERATION, not a filter inside it. This walks the // ids the roster returned and nothing else, so somebody the roster excluded // can never appear as a child -- including the cross-module case, where an // out-of-scope analyst reports to an in-scope lead. A `!allow[supId]` clause // was here and was removed on 2026-08-26: it read as a second guard but every // child is already in scope by construction, so it could never fire. The // harness proved it (its mutant would not die) rather than a review noticing. function buildChildren(ids) { var P = byId(); var kids = Object.create(null); ids.forEach(function (id) { var p = P[id]; var s = p && p.supId; if (!s || s === id) return; (kids[s] = kids[s] || []).push(id); }); Object.keys(kids).forEach(function (k) { kids[k].sort(function (a, b) { return String((P[a] || {}).name || a).localeCompare(String((P[b] || {}).name || b)); }); }); return kids; } // Everyone below a person. CYCLE GUARD IS NOT OPTIONAL: screens-org.jsx's // PersonDetail walks the chain with no guard at all, and two people pointing // at each other hangs the tab. Nothing in the schema prevents that pair. function descendantCount(rootId, kids) { var seen = Object.create(null); // Seed with the root. In a cycle the walk comes back around, and without // this a person is counted as their own descendant. seen[rootId] = true; var stack = (kids[rootId] || []).slice(); var n = 0; while (stack.length) { var id = stack.pop(); if (seen[id]) continue; seen[id] = true; n++; var next = kids[id] || []; for (var i = 0; i < next.length; i++) if (!seen[next[i]]) stack.push(next[i]); } return n; } // Manager chain, nearest first. // // TWO GUARDS, both earned: // 1. CYCLES. screens-org.jsx's PersonDetail walks this with no guard, and two // people pointing at each other hangs the tab. Nothing in the schema // forbids that pair. // 2. OUT-OF-SCOPE PARENTS. probe_90b (2026-08-26) found live rows whose // sub_team_lead_id resolved to an INACTIVE person. Walking through them // puts a departed employee in the breadcrumb and prints "Reports to // ". The walk stops at the break and REPORTS it -- // silently substituting a grandparent would hide the drift, which is the // one thing this screen exists to expose. function chainUp(id, allow) { var P = byId(); var out = []; var seen = Object.create(null); var cur = P[id] && P[id].supId; var broken = null; while (cur && !seen[cur]) { seen[cur] = true; var m = P[cur]; if (!m || !allow || !allow[cur]) { broken = cur; break; } out.push(m); cur = m.supId; } return { chain: out, broken: broken }; } // ALWAYS THROUGH VaultDate (BRANDING §5). It resolves the viewer's zone from // notification_prefs.tz and applies it LAST, so a caller cannot override it. // A bare toLocaleDateString here would disagree with every other screen by a // day at 05:00Z. A date-only column still needs it -- "2026-03-04" parsed by // the browser is UTC midnight, which is the 3rd on the US west coast. function formatSince(value) { if (!value) return null; if (typeof window.VaultDate === "function") { return window.VaultDate(value, { month: "short", day: "numeric", year: "numeric" }); } return null; } function moduleLabel(handle) { if (!handle) return null; var st = (firm().SUBTEAMS || []).find(function (s) { return s.lead === handle; }); if (st && st.label) return st.label + " Module"; var head = byId()[handle]; return head ? head.name : handle; } // ---------------------------------------------------------------- rail row function RailRow(props) { var p = props.person; var on = props.selected; return (
{initialsOf(p)} {p.name} {props.groups && props.groups.length ? ( {props.groups.map(function (g) { return ; })} ) : null} {props.reports > 0 ? ( {props.reports} ) : null}
); } // --------------------------------------------------------------- stat tile function StatTile(props) { return (
{props.label}
{props.value}
{props.sub ? (
{props.sub}
) : null}
); } // ----------------------------------------------------------------- profile function Profile(props) { var p = props.person; var kids = props.kids; var P = byId(); if (!p) { return (
); } var walk = chainUp(p.id, props.allow); var chain = walk.chain; var manager = chain.length ? chain[0] : null; var reports = (kids[p.id] || []).map(function (id) { return P[id]; }).filter(Boolean); var desc = descendantCount(p.id, kids); var mod = moduleLabel(p.team); var since = formatSince(p.effectiveDate); // The real sequence. Loaded per person; an empty or failed load falls back // to the single current title, which is what this panel showed before there // was anything else to show. var histState = useState(null); var history = histState[0], setHistory = histState[1]; React.useEffect(function () { setHistory(null); if (!p || !p.id || !window.VaultAPI || !window.VaultAPI.listPersonPositions) return; var cancelled = false; window.VaultAPI.listPersonPositions(p.id) .then(function (rows) { if (!cancelled) setHistory(rows || []); }) .catch(function () { if (!cancelled) setHistory([]); }); // Same as the Tree/Map drawer: this effect is keyed on the person id, // which does not change when their history does, so a write elsewhere // needs to say so. var onWrote = function (e) { if (!e || !e.detail || e.detail.personId === p.id) { window.VaultAPI.listPersonPositions(p.id) .then(function (rows) { if (!cancelled) setHistory(rows || []); }) .catch(function () {}); } }; window.addEventListener("vault:positions-updated", onWrote); return function () { cancelled = true; window.removeEventListener("vault:positions-updated", onWrote); }; }, [p && p.id]); return (
{/* Breadcrumbs up the chain, root first. */} {chain.length ? (
{chain.slice().reverse().map(function (m) { return ( {m.name} {"\u203A"} ); })} {p.name}
) : null}
{initialsOf(p)}
{p.name}
{p.title || p.role || "\u2014"} {manager ? ( {" \u00B7 Reports to "} {manager.name} ) : null} {(!manager && walk.broken) ? ( {" \u00B7 Manager on file is inactive or missing"} ) : null}
{props.isAdmin && props.onEditPerson ? ( ) : null}
{/* POSITION HISTORY. See the file header -- this is a stub on purpose. */}
Position History
{history && history.length ? ( history.map(function (h, i) { return (
{/* The open row is the accent; everything closed is muted, so the current position reads at a glance without a label. */}
{h.title || "\u2014"}
{h.effectiveFrom ? (formatSince(h.effectiveFrom) + (h.effectiveTo ? " \u2013 " + formatSince(h.effectiveTo) : " \u2013 now")) : "Dates not on file"} {h.isSeed ? " \u00b7 not verified" : ""}
); }) ) : (
{p.title || p.role || "\u2014"}
{since ? (
{"Since " + since}
) : (
Promotion dates not on file.
)}
)}
Supervised Individuals
{reports.length === 0 ? (
Nobody reports to this person.
) : (
{reports.map(function (r) { return (
{initialsOf(r)} {r.name} {r.title || r.role || ""}
); })}
)}
); } // ------------------------------------------------------------------- view function OrgDirectoryView(props) { var isAdmin = !!props.isAdmin; var onEditPerson = props.onEditPerson; var tick = props.orgTick; var [query, setQuery] = useState(""); // OPENS ON SOMEBODY, NOT ON AN EMPTY PANE. A directory whose right half is // blank until you click looks broken. The default is the ROOT OF THE SCOPE, // derived -- firm-wide that is David Harvey; scoped to one module it is that // module's lead. Never a hardcoded handle, for the same reason the tree's // root is derived: under a module-scoped roster a literal "dharvey" is not // in the set at all. var [picked, setPicked] = useState(null); var ids = useMemo(function () { return directoryIds(props.module); }, [tick, props.module]); var kids = useMemo(function () { return buildChildren(ids); }, [ids]); // The membership set as a lookup. Every walk -- up or down -- is confined // to it, so nobody the roster excluded can appear anywhere on the screen. var allow = useMemo(function () { var m = Object.create(null); ids.forEach(function (id) { m[id] = true; }); return m; }, [ids]); var P = byId(); // TWO FILTERS THAT INTERSECT: the search box and the group selected on the // Org Chart's chip row. `memberSet` arrives as a prop rather than being // fetched here, so the Tree, the Map and this list are all reading ONE // selection -- a second groups fetch in this file would be the same fact // in two places with nothing reconciling them. var memberSet = props.memberSet || null; var rows = useMemo(function () { var q = query.trim().toLowerCase(); return ids .map(function (id) { return P[id]; }) .filter(Boolean) .filter(function (p) { return !memberSet || memberSet[p.id]; }) .filter(function (p) { if (!q) return true; return (String(p.name || "") + " " + String(p.title || "") + " " + String(p.id || "")) .toLowerCase().indexOf(q) !== -1; }) .sort(function (a, b) { return String(a.name).localeCompare(String(b.name)); }); }, [ids, query, tick, memberSet]); var defaultId = useMemo(function () { if (!ids.length) return null; // Under a group lens the root is usually NOT a member, and defaulting to // somebody the rail no longer lists reads as a stuck pane. if (memberSet) { var m = ids.filter(function (id) { return memberSet[id]; }); if (!m.length) return null; m.sort(function (a, b) { return String((P[a] || {}).name || a).localeCompare(String((P[b] || {}).name || b)); }); return m[0]; } var allow = Object.create(null); ids.forEach(function (id) { allow[id] = true; }); var roots = ids.filter(function (id) { var sup = P[id] && P[id].supId; return !sup || !allow[sup] || sup === id; }); if (!roots.length) return ids[0]; // Ties break on descendant count so a stray unparented row cannot take // the pane from the actual head of the tree. roots.sort(function (a, b) { return descendantCount(b, kids) - descendantCount(a, kids); }); return roots[0]; }, [ids, kids, memberSet]); // The selection must survive a filter that no longer contains it -- clearing // it on every keystroke makes the profile flash empty while typing. var selectedId = (picked && P[picked]) ? picked : defaultId; return (
{props.groupLabel ? rows.length + " in " + props.groupLabel : (rows.length + (rows.length === ids.length ? " people" : " of " + ids.length))}
{rows.length === 0 ? (
{props.groupLabel && !query.trim() ? "Nobody is in this group yet." : "Nobody matches that search."}
) : rows.map(function (p) { return ( ); })}
); } window.OrgDirectoryView = OrgDirectoryView; })();