@arbidocs/react 0.5.110 → 0.5.112

package/dist/document-tools/signature-requests.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/document-tools/signature-requests.ts"],
+  "sourcesContent": ["/**\n * Signature requests: an author places fields (signature, initials, date, name) on the PDF of one\n * exact document version and assigns each to a signer: a workspace member (a guest too), or anyone\n * by email, who is invited to the workspace and signs once they join. A Word document's own\n * signature fields (Insert \u203A Signature field) come back from `suggest` placed exactly, with their\n * signer (`source: 'anchor'`). Each signer is then walked\n * through their fields, adopts a signature once and applies it at each. They sign ONCE for all of\n * their fields: the server's statement binds the PDF they were shown, every field they applied and\n * what they adopted. The last signature draws every field and seals the signed copy as the\n * document's next version (see `src/core/signature_requests.py` in ARBI).\n */\n\nimport { signMessage, unlockIdentityWithPassword, type components } from '@arbidocs/client'\nimport { useMutation, useQuery, useQueryClient } from '@tanstack/react-query'\nimport { workspaces } from '@arbidocs/sdk/browser'\nimport { useDocumentTools, type DocumentToolsClient } from './environment'\nimport { intentText, sha256Hex, SigningError } from './signing'\nimport { arbiQueryKeys } from '../query-keys'\nimport { useArbiHost } from '../host/config'\n\n/**\n * The open workspace, when the host has an `Arbi` with one, and a guard that keeps a read made for\n * it only if that workspace stayed open on the server meanwhile (these lists are the open\n * workspace's there): a read that crosses a switch is dropped, never cached as another's.\n */\nfunction useOpenWorkspaceRead() {\n  const arbi = useArbiHost().arbi\n  const workspaceId = arbi?.hasWorkspace ? arbi.getWorkspaceId() : undefined\n  const read = <T>(run: () => Promise<T>): Promise<T> =>\n    arbi && workspaceId ? arbi.readInWorkspace(workspaceId, run) : run()\n  return { workspaceId, read }\n}\n\nexport type SignatureField = components['schemas']['SignatureField']\nexport type SignatureFieldType = SignatureField['type']\nexport type SignatureRequest = components['schemas']['SignatureRequestResponse']\nexport type SignatureRequestSigner = components['schemas']['SignatureRequestSigner']\nexport type SignerProgress = components['schemas']['SignerProgress']\nexport type SuggestedSignatureField = components['schemas']['SuggestedSignatureField']\nexport type AdoptedSignature = components['schemas']['AdoptedSignature']\nexport type SignRequestSignResponse = components['schemas']['SignRequestSignResponse']\n\n/** Field types in the order the editor offers them. */\nexport const SIGNATURE_FIELD_TYPES: readonly SignatureFieldType[] = [\n  'signature',\n  'initials',\n  'date',\n  'name',\n]\n\nexport const FIELD_TYPE_LABELS: Record<SignatureFieldType, string> = {\n  signature: 'Signature',\n  initials: 'Initials',\n  date: 'Date signed',\n  name: 'Name',\n}\n\n/**\n * Default size of a new field, as fractions of the page (the backend draws to fit the box). The\n * same sizes the server's suggester places fields in (`esign_suggest._SIZE`).\n */\nexport const DEFAULT_FIELD_SIZE: Record<SignatureFieldType, { width: number; height: number }> = {\n  signature: { width: 0.28, height: 0.05 },\n  initials: { width: 0.1, height: 0.04 },\n  date: { width: 0.22, height: 0.028 },\n  name: { width: 0.28, height: 0.028 },\n}\n\n/** How far each signer has got, as the request's sender sees it. */\nexport const SIGNER_PROGRESS_LABELS: Record<SignerProgress, string> = {\n  invited: 'Invited',\n  registered: 'Not opened yet',\n  viewed: 'Viewed',\n  signed: 'Signed',\n  declined: 'Declined',\n}\n\nconst EMAIL = /^[^@\\s<>,;]{1,64}@[^@\\s<>,;]{1,255}\\.[^@\\s<>,;]{1,63}$/\n\n/** Whether a field's signer is an email (someone to invite) rather than a member or request signer. */\nexport const isEmailSigner = (signer: string) => EMAIL.test(signer.trim())\n\n/** The fields carrying a signer's mark: every signer needs at least one to be sent the request. */\nexport const MARK_FIELD_TYPES: readonly SignatureFieldType[] = ['signature', 'initials']\n\nfunction detail(error: unknown, fallback: string): string {\n  const d = (error as { detail?: unknown } | undefined)?.detail\n  if (typeof d === 'string') return d\n  if (Array.isArray(d) && d[0] && typeof d[0] === 'object' && 'msg' in d[0]) {\n    return String((d[0] as { msg: unknown }).msg)\n  }\n  return fallback\n}\n\n/** A short unique id for a new field (the server only needs it unique within the request). */\nexport function newFieldId(): string {\n  return `f${Math.random().toString(36).slice(2, 10)}`\n}\n\n/** Initials from a name: \"Olive M. Owner\" -> \"OMO\". */\nexport function initialsOf(name: string): string {\n  return name\n    .split(/\\s+/)\n    .filter(Boolean)\n    .map((part) => part[0]!.toUpperCase())\n    .join('')\n    .slice(0, 4)\n}\n\n/** The fields a signer completes, in the order they are walked through: page, then top to bottom. */\nexport function fieldsInSigningOrder(fields: SignatureField[], signer: string): SignatureField[] {\n  return fields\n    .filter((f) => f.signer === signer)\n    .sort((a, b) => a.page - b.page || a.y - b.y || a.x - b.x)\n}\n\n/** Why a draft cannot be sent yet, or null when it can. Mirrors the server's checks. */\nexport function sendBlocker(fields: SignatureField[]): string | null {\n  if (fields.length === 0) return 'Place at least one field.'\n  const signers = [...new Set(fields.map((f) => f.signer))]\n  for (const signer of signers) {\n    if (!fields.some((f) => f.signer === signer && MARK_FIELD_TYPES.includes(f.type))) {\n      return 'Every signer needs a signature or initials field.'\n    }\n  }\n  return null\n}\n\n/**\n * Suggested fields grouped by signature block; `assign` maps a block (`group`) to the signer its\n * fields go to. A field placed in the Word document that names its signer goes to them: the\n * member with that email (`members`, by lowercased email), else the email itself (an invitee).\n * Unassigned blocks are left out.\n */\nexport function fieldsFromSuggestions(\n  suggestions: SuggestedSignatureField[],\n  assign: Record<number, string | undefined>,\n  members: ReadonlyMap<string, string> = new Map()\n): SignatureField[] {\n  return suggestions.flatMap((s) => {\n    const email = s.signer_email?.toLowerCase()\n    const signer = email ? (members.get(email) ?? email) : assign[s.group]\n    if (!signer) return []\n    return [\n      {\n        id: newFieldId(),\n        type: s.type,\n        page: s.page,\n        x: s.x,\n        y: s.y,\n        width: s.width,\n        height: s.height,\n        signer,\n        required: s.required ?? true,\n      },\n    ]\n  })\n}\n\n/** The Word document's own fields (found by their anchors) and the optional layout suggestions. */\nexport function splitSuggestions(suggestions: SuggestedSignatureField[]) {\n  return {\n    placed: suggestions.filter((s) => s.source === 'anchor'),\n    extras: suggestions.filter((s) => s.source !== 'anchor'),\n  }\n}\n\n// \u2500\u2500 Reads \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport async function fetchDocumentSignatureRequests(\n  client: DocumentToolsClient,\n  documentId: string\n): Promise<SignatureRequest[]> {\n  const { data, error } = await client.GET('/v1/document/{document_ext_id}/signature-requests', {\n    params: { path: { document_ext_id: documentId } },\n  })\n  if (!data) throw new Error(detail(error, 'The signature requests could not be read'))\n  return data\n}\n\n/** A document's signature requests, newest first. */\nexport function useDocumentSignatureRequests(\n  documentId: string | null | undefined,\n  enabled = true\n) {\n  const { client } = useDocumentTools()\n  return useQuery({\n    queryKey: arbiQueryKeys.signatureRequestsForDocument(documentId ?? ''),\n    queryFn: () => fetchDocumentSignatureRequests(client, documentId!),\n    enabled: enabled && !!documentId,\n    staleTime: 15_000,\n  })\n}\n\n/** A signer the Word document's placed fields name, with the name they give. */\nexport interface NamedSigner {\n  email: string\n  name: string\n}\n\n/** What a document asks to be signed: the fields found, and the signers its Word fields name. */\nexport interface SignatureFieldSuggestions {\n  fields: SuggestedSignatureField[]\n  /**\n   * Named even when the PDF shows none of the Word fields' anchors (the fields are then placed by\n   * hand): who each email belongs to. Empty from a server that does not report them.\n   */\n  signers: NamedSigner[]\n}\n\nexport async function signatureFieldSuggestions(\n  client: DocumentToolsClient,\n  documentId: string,\n  version?: number\n): Promise<SignatureFieldSuggestions> {\n  const { data, error } = await client.GET(\n    '/v1/document/{document_ext_id}/signature-fields/suggest',\n    {\n      params: { path: { document_ext_id: documentId }, ...(version ? { query: { version } } : {}) },\n    }\n  )\n  if (!data) throw new Error(detail(error, 'Signature blocks could not be read'))\n  return { fields: data.fields, signers: (data as { signers?: NamedSigner[] }).signers ?? [] }\n}\n\nexport async function suggestSignatureFields(\n  client: DocumentToolsClient,\n  documentId: string,\n  version?: number\n): Promise<SuggestedSignatureField[]> {\n  return (await signatureFieldSuggestions(client, documentId, version)).fields\n}\n\n// \u2500\u2500 Prepare \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface SaveSignatureRequestVars {\n  documentId: string\n  /** The version the fields were placed on (the PDF shown). Omitted = current. */\n  version?: number\n  fields: SignatureField[]\n  message?: string\n  /** Existing draft to update instead of creating a new request. */\n  requestId?: string\n  /** Send it to the signers (else it is saved as a draft). */\n  send: boolean\n}\n\nexport async function saveSignatureRequest(\n  client: DocumentToolsClient,\n  { documentId, version, fields, message, requestId, send }: SaveSignatureRequestVars\n): Promise<SignatureRequest> {\n  if (!requestId) {\n    const { data, error } = await client.POST('/v1/document/{document_ext_id}/signature-requests', {\n      params: { path: { document_ext_id: documentId } },\n      body: { fields, message: message || null, send, ...(version ? { version } : {}) },\n    })\n    if (!data) throw new Error(detail(error, 'The signature request could not be saved'))\n    return data\n  }\n  const path = { request_ext_id: requestId }\n  const updated = await client.PATCH('/v1/signature-requests/{request_ext_id}', {\n    params: { path },\n    body: { fields, message: message ?? null },\n  })\n  if (!updated.data) throw new Error(detail(updated.error, 'The draft could not be saved'))\n  if (!send) return updated.data\n  const sent = await client.POST('/v1/signature-requests/{request_ext_id}/send', {\n    params: { path },\n  })\n  if (!sent.data) throw new Error(detail(sent.error, 'The request could not be sent'))\n  return sent.data\n}\n\nfunction useInvalidateRequests() {\n  const queryClient = useQueryClient()\n  return () => queryClient.invalidateQueries({ queryKey: arbiQueryKeys.signatureRequests() })\n}\n\nexport function useSaveSignatureRequest() {\n  const { client } = useDocumentTools()\n  const invalidate = useInvalidateRequests()\n  return useMutation({\n    mutationFn: (vars: SaveSignatureRequestVars) => saveSignatureRequest(client, vars),\n    onSuccess: invalidate,\n  })\n}\n\nexport function useVoidSignatureRequest() {\n  const { client } = useDocumentTools()\n  const invalidate = useInvalidateRequests()\n  return useMutation({\n    mutationFn: async (requestId: string) => {\n      const { data, error } = await client.POST('/v1/signature-requests/{request_ext_id}/void', {\n        params: { path: { request_ext_id: requestId } },\n      })\n      if (!data) throw new Error(detail(error, 'The request could not be voided'))\n      return data\n    },\n    onSuccess: invalidate,\n  })\n}\n\nexport function useDeclineSignatureRequest() {\n  const { client } = useDocumentTools()\n  const invalidate = useInvalidateRequests()\n  return useMutation({\n    mutationFn: async ({ requestId, reason }: { requestId: string; reason?: string }) => {\n      const { data, error } = await client.POST('/v1/signature-requests/{request_ext_id}/decline', {\n        params: { path: { request_ext_id: requestId } },\n        body: { reason: reason || null },\n      })\n      if (!data) throw new Error(detail(error, 'Could not decline'))\n      return data\n    },\n    onSuccess: invalidate,\n  })\n}\n\n// \u2500\u2500 Sign \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface SignRequestVars {\n  request: SignatureRequest\n  /** The PDF the signer was walked through (`GET /view?version=` of the request's version). */\n  pdfBlob: Blob\n  email: string\n  password: string\n  adopted: AdoptedSignature\n  /** The ids of the fields the signer applied: every required one of theirs. */\n  fields: string[]\n}\n\n/**\n * Sign all of the signer's fields at once: the server prepares the statement, the browser checks\n * it covers the PDF on screen under the wording the signer read, re-derives the Ed25519 key from\n * the password and signs. Resolves with `completed` when this was the last signature.\n */\nexport async function signSignatureRequest(\n  client: DocumentToolsClient,\n  deploymentDomain: string,\n  { request, pdfBlob, email, password, adopted, fields }: SignRequestVars\n): Promise<SignRequestSignResponse> {\n  const path = { request_ext_id: request.external_id }\n  const body = { adopted, fields }\n  const prepared = await client.POST('/v1/signature-requests/{request_ext_id}/sign/prepare', {\n    params: { path },\n    body,\n  })\n  if (!prepared.data) {\n    throw new SigningError(detail(prepared.error, 'Could not prepare signing'), 'failed')\n  }\n  const { statement, intent, source_sha256, timestamp } = prepared.data\n  if (source_sha256 !== request.source_sha256 || (await sha256Hex(pdfBlob)) !== source_sha256) {\n    throw new SigningError('The document changed since it was sent. Ask for it again.', 'stale')\n  }\n  if (intent !== intentText({ name: adopted.name })) {\n    throw new Error('Signing statement mismatch; not signed.')\n  }\n  const identity = await unlockIdentityWithPassword(email, password, deploymentDomain)\n  const signed = await client.POST('/v1/signature-requests/{request_ext_id}/sign', {\n    params: { path },\n    body: { ...body, timestamp, signature: signMessage(statement, identity) },\n  })\n  if (!signed.data) throw new SigningError(detail(signed.error, 'Signing failed'), 'failed')\n  return signed.data\n}\n\nexport function useSignSignatureRequest() {\n  const env = useDocumentTools()\n  const invalidate = useInvalidateRequests()\n  const queryClient = useQueryClient()\n  return useMutation({\n    mutationFn: (vars: SignRequestVars) => {\n      if (!env.deploymentDomain) throw new Error('Signing is not set up: no deployment domain')\n      return signSignatureRequest(env.client, env.deploymentDomain, vars)\n    },\n    onSuccess: async (result) => {\n      await invalidate()\n      if (result.completed && result.request.doc_ext_id) {\n        await env.onDocumentsChanged?.([result.request.doc_ext_id], 'signed')\n        await queryClient.invalidateQueries({ queryKey: arbiQueryKeys.documentSignatures() })\n      }\n    },\n  })\n}\n\n// \u2500\u2500 Who can sign \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport interface SignerCandidate {\n  externalId: string\n  name: string\n  email: string\n  role: string\n}\n\n/**\n * The people in the active workspace who may sign: owners, collaborators and guests (an agent never\n * does). The first one listed is the current user when they are a member.\n */\nexport function useSignerCandidates(enabled = true) {\n  const { client, user } = useDocumentTools()\n  const { workspaceId, read } = useOpenWorkspaceRead()\n  return useQuery({\n    queryKey: arbiQueryKeys.signatureCandidates(workspaceId ?? ''),\n    queryFn: async (): Promise<SignerCandidate[]> => {\n      const { data, error } = await read(() => client.GET('/v1/workspace/users'))\n      if (!data) throw new Error(detail(error, 'The workspace members could not be read'))\n      const people = data\n        .filter((m) => m.user.external_id.startsWith('usr-'))\n        .map((m) => ({\n          externalId: m.user.external_id,\n          name: [m.user.given_name, m.user.family_name].filter(Boolean).join(' ') || m.user.email,\n          email: m.user.email,\n          role: String(m.role),\n        }))\n      const me = user?.email?.toLowerCase()\n      return [...people].sort(\n        (a, b) => Number(b.email.toLowerCase() === me) - Number(a.email.toLowerCase() === me)\n      )\n    },\n    enabled,\n    staleTime: 60_000,\n  })\n}\n\n// \u2500\u2500 Invite \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n/**\n * Invite signers who are not in the workspace yet, as guests, through the workspace's own invite\n * (`POST /v1/workspace/users` with `confirm_invite`): a registered person is added at once, anyone\n * else is emailed an invitation that lands on the document. Each is asked to sign when they join.\n * Only a workspace owner can invite.\n */\nexport async function inviteSigners(\n  client: DocumentToolsClient,\n  documentId: string,\n  emails: string[]\n): Promise<void> {\n  if (!emails.length) return\n  const { error, response } = await client.POST('/v1/workspace/users', {\n    body: workspaces.addWorkspaceMembersBody({\n      emails,\n      role: 'guest',\n      confirm_invite: true,\n      resource_type: 'document',\n      resource_ext_id: documentId,\n    }),\n  })\n  if (response.status === 409) {\n    throw new Error('Share the document with the workspace before asking others to sign it.')\n  }\n  // 404 \"No users found to add\": everyone is a member already (nothing to do).\n  if (error && response.status !== 404) {\n    throw new Error(detail(error, 'The signers could not be invited'))\n  }\n}\n\nexport function useInviteSigners() {\n  const { client } = useDocumentTools()\n  const invalidate = useInvalidateRequests()\n  const queryClient = useQueryClient()\n  return useMutation({\n    mutationFn: ({ documentId, emails }: { documentId: string; emails: string[] }) =>\n      inviteSigners(client, documentId, emails),\n    onSuccess: async () => {\n      await invalidate()\n      await queryClient.invalidateQueries({ queryKey: arbiQueryKeys.signatureCandidates() })\n    },\n  })\n}\n"],
+  "mappings": "AAYA,SAAS,aAAa,kCAAmD;AACzE,SAAS,aAAa,UAAU,sBAAsB;AACtD,SAAS,kBAAkB;AAC3B,SAAS,wBAAkD;AAC3D,SAAS,YAAY,WAAW,oBAAoB;AACpD,SAAS,qBAAqB;AAC9B,SAAS,mBAAmB;AAO5B,SAAS,uBAAuB;AAC9B,QAAM,OAAO,YAAY,EAAE;AAC3B,QAAM,cAAc,MAAM,eAAe,KAAK,eAAe,IAAI;AACjE,QAAM,OAAO,CAAI,QACf,QAAQ,cAAc,KAAK,gBAAgB,aAAa,GAAG,IAAI,IAAI;AACrE,SAAO,EAAE,aAAa,KAAK;AAC7B;AAYO,MAAM,wBAAuD;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,MAAM,oBAAwD;AAAA,EACnE,WAAW;AAAA,EACX,UAAU;AAAA,EACV,MAAM;AAAA,EACN,MAAM;AACR;AAMO,MAAM,qBAAoF;AAAA,EAC/F,WAAW,EAAE,OAAO,MAAM,QAAQ,KAAK;AAAA,EACvC,UAAU,EAAE,OAAO,KAAK,QAAQ,KAAK;AAAA,EACrC,MAAM,EAAE,OAAO,MAAM,QAAQ,MAAM;AAAA,EACnC,MAAM,EAAE,OAAO,MAAM,QAAQ,MAAM;AACrC;AAGO,MAAM,yBAAyD;AAAA,EACpE,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,UAAU;AACZ;AAEA,MAAM,QAAQ;AAGP,MAAM,gBAAgB,CAAC,WAAmB,MAAM,KAAK,OAAO,KAAK,CAAC;AAGlE,MAAM,mBAAkD,CAAC,aAAa,UAAU;AAEvF,SAAS,OAAO,OAAgB,UAA0B;AACxD,QAAM,IAAK,OAA4C;AACvD,MAAI,OAAO,MAAM,SAAU,QAAO;AAClC,MAAI,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC,MAAM,YAAY,SAAS,EAAE,CAAC,GAAG;AACzE,WAAO,OAAQ,EAAE,CAAC,EAAuB,GAAG;AAAA,EAC9C;AACA,SAAO;AACT;AAGO,SAAS,aAAqB;AACnC,SAAO,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AACpD;AAGO,SAAS,WAAW,MAAsB;AAC/C,SAAO,KACJ,MAAM,KAAK,EACX,OAAO,OAAO,EACd,IAAI,CAAC,SAAS,KAAK,CAAC,EAAG,YAAY,CAAC,EACpC,KAAK,EAAE,EACP,MAAM,GAAG,CAAC;AACf;AAGO,SAAS,qBAAqB,QAA0B,QAAkC;AAC/F,SAAO,OACJ,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,EACjC,KAAK,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC7D;AAGO,SAAS,YAAY,QAAyC;AACnE,MAAI,OAAO,WAAW,EAAG,QAAO;AAChC,QAAM,UAAU,CAAC,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACxD,aAAW,UAAU,SAAS;AAC5B,QAAI,CAAC,OAAO,KAAK,CAAC,MAAM,EAAE,WAAW,UAAU,iBAAiB,SAAS,EAAE,IAAI,CAAC,GAAG;AACjF,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAQO,SAAS,sBACd,aACA,QACA,UAAuC,oBAAI,IAAI,GAC7B;AAClB,SAAO,YAAY,QAAQ,CAAC,MAAM;AAChC,UAAM,QAAQ,EAAE,cAAc,YAAY;AAC1C,UAAM,SAAS,QAAS,QAAQ,IAAI,KAAK,KAAK,QAAS,OAAO,EAAE,KAAK;AACrE,QAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,WAAO;AAAA,MACL;AAAA,QACE,IAAI,WAAW;AAAA,QACf,MAAM,EAAE;AAAA,QACR,MAAM,EAAE;AAAA,QACR,GAAG,EAAE;AAAA,QACL,GAAG,EAAE;AAAA,QACL,OAAO,EAAE;AAAA,QACT,QAAQ,EAAE;AAAA,QACV;AAAA,QACA,UAAU,EAAE,YAAY;AAAA,MAC1B;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAGO,SAAS,iBAAiB,aAAwC;AACvE,SAAO;AAAA,IACL,QAAQ,YAAY,OAAO,CAAC,MAAM,EAAE,WAAW,QAAQ;AAAA,IACvD,QAAQ,YAAY,OAAO,CAAC,MAAM,EAAE,WAAW,QAAQ;AAAA,EACzD;AACF;AAIA,eAAsB,+BACpB,QACA,YAC6B;AAC7B,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,IAAI,qDAAqD;AAAA,IAC5F,QAAQ,EAAE,MAAM,EAAE,iBAAiB,WAAW,EAAE;AAAA,EAClD,CAAC;AACD,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,OAAO,OAAO,0CAA0C,CAAC;AACpF,SAAO;AACT;AAGO,SAAS,6BACd,YACA,UAAU,MACV;AACA,QAAM,EAAE,OAAO,IAAI,iBAAiB;AACpC,SAAO,SAAS;AAAA,IACd,UAAU,cAAc,6BAA6B,cAAc,EAAE;AAAA,IACrE,SAAS,MAAM,+BAA+B,QAAQ,UAAW;AAAA,IACjE,SAAS,WAAW,CAAC,CAAC;AAAA,IACtB,WAAW;AAAA,EACb,CAAC;AACH;AAkBA,eAAsB,0BACpB,QACA,YACA,SACoC;AACpC,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO;AAAA,IACnC;AAAA,IACA;AAAA,MACE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,WAAW,GAAG,GAAI,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAG;AAAA,IAC9F;AAAA,EACF;AACA,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,OAAO,OAAO,oCAAoC,CAAC;AAC9E,SAAO,EAAE,QAAQ,KAAK,QAAQ,SAAU,KAAqC,WAAW,CAAC,EAAE;AAC7F;AAEA,eAAsB,uBACpB,QACA,YACA,SACoC;AACpC,UAAQ,MAAM,0BAA0B,QAAQ,YAAY,OAAO,GAAG;AACxE;AAgBA,eAAsB,qBACpB,QACA,EAAE,YAAY,SAAS,QAAQ,SAAS,WAAW,KAAK,GAC7B;AAC3B,MAAI,CAAC,WAAW;AACd,UAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK,qDAAqD;AAAA,MAC7F,QAAQ,EAAE,MAAM,EAAE,iBAAiB,WAAW,EAAE;AAAA,MAChD,MAAM,EAAE,QAAQ,SAAS,WAAW,MAAM,MAAM,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,EAAG;AAAA,IAClF,CAAC;AACD,QAAI,CAAC,KAAM,OAAM,IAAI,MAAM,OAAO,OAAO,0CAA0C,CAAC;AACpF,WAAO;AAAA,EACT;AACA,QAAM,OAAO,EAAE,gBAAgB,UAAU;AACzC,QAAM,UAAU,MAAM,OAAO,MAAM,2CAA2C;AAAA,IAC5E,QAAQ,EAAE,KAAK;AAAA,IACf,MAAM,EAAE,QAAQ,SAAS,WAAW,KAAK;AAAA,EAC3C,CAAC;AACD,MAAI,CAAC,QAAQ,KAAM,OAAM,IAAI,MAAM,OAAO,QAAQ,OAAO,8BAA8B,CAAC;AACxF,MAAI,CAAC,KAAM,QAAO,QAAQ;AAC1B,QAAM,OAAO,MAAM,OAAO,KAAK,gDAAgD;AAAA,IAC7E,QAAQ,EAAE,KAAK;AAAA,EACjB,CAAC;AACD,MAAI,CAAC,KAAK,KAAM,OAAM,IAAI,MAAM,OAAO,KAAK,OAAO,+BAA+B,CAAC;AACnF,SAAO,KAAK;AACd;AAEA,SAAS,wBAAwB;AAC/B,QAAM,cAAc,eAAe;AACnC,SAAO,MAAM,YAAY,kBAAkB,EAAE,UAAU,cAAc,kBAAkB,EAAE,CAAC;AAC5F;AAEO,SAAS,0BAA0B;AACxC,QAAM,EAAE,OAAO,IAAI,iBAAiB;AACpC,QAAM,aAAa,sBAAsB;AACzC,SAAO,YAAY;AAAA,IACjB,YAAY,CAAC,SAAmC,qBAAqB,QAAQ,IAAI;AAAA,IACjF,WAAW;AAAA,EACb,CAAC;AACH;AAEO,SAAS,0BAA0B;AACxC,QAAM,EAAE,OAAO,IAAI,iBAAiB;AACpC,QAAM,aAAa,sBAAsB;AACzC,SAAO,YAAY;AAAA,IACjB,YAAY,OAAO,cAAsB;AACvC,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK,gDAAgD;AAAA,QACxF,QAAQ,EAAE,MAAM,EAAE,gBAAgB,UAAU,EAAE;AAAA,MAChD,CAAC;AACD,UAAI,CAAC,KAAM,OAAM,IAAI,MAAM,OAAO,OAAO,iCAAiC,CAAC;AAC3E,aAAO;AAAA,IACT;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACH;AAEO,SAAS,6BAA6B;AAC3C,QAAM,EAAE,OAAO,IAAI,iBAAiB;AACpC,QAAM,aAAa,sBAAsB;AACzC,SAAO,YAAY;AAAA,IACjB,YAAY,OAAO,EAAE,WAAW,OAAO,MAA8C;AACnF,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK,mDAAmD;AAAA,QAC3F,QAAQ,EAAE,MAAM,EAAE,gBAAgB,UAAU,EAAE;AAAA,QAC9C,MAAM,EAAE,QAAQ,UAAU,KAAK;AAAA,MACjC,CAAC;AACD,UAAI,CAAC,KAAM,OAAM,IAAI,MAAM,OAAO,OAAO,mBAAmB,CAAC;AAC7D,aAAO;AAAA,IACT;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACH;AAoBA,eAAsB,qBACpB,QACA,kBACA,EAAE,SAAS,SAAS,OAAO,UAAU,SAAS,OAAO,GACnB;AAClC,QAAM,OAAO,EAAE,gBAAgB,QAAQ,YAAY;AACnD,QAAM,OAAO,EAAE,SAAS,OAAO;AAC/B,QAAM,WAAW,MAAM,OAAO,KAAK,wDAAwD;AAAA,IACzF,QAAQ,EAAE,KAAK;AAAA,IACf;AAAA,EACF,CAAC;AACD,MAAI,CAAC,SAAS,MAAM;AAClB,UAAM,IAAI,aAAa,OAAO,SAAS,OAAO,2BAA2B,GAAG,QAAQ;AAAA,EACtF;AACA,QAAM,EAAE,WAAW,QAAQ,eAAe,UAAU,IAAI,SAAS;AACjE,MAAI,kBAAkB,QAAQ,iBAAkB,MAAM,UAAU,OAAO,MAAO,eAAe;AAC3F,UAAM,IAAI,aAAa,6DAA6D,OAAO;AAAA,EAC7F;AACA,MAAI,WAAW,WAAW,EAAE,MAAM,QAAQ,KAAK,CAAC,GAAG;AACjD,UAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AACA,QAAM,WAAW,MAAM,2BAA2B,OAAO,UAAU,gBAAgB;AACnF,QAAM,SAAS,MAAM,OAAO,KAAK,gDAAgD;AAAA,IAC/E,QAAQ,EAAE,KAAK;AAAA,IACf,MAAM,EAAE,GAAG,MAAM,WAAW,WAAW,YAAY,WAAW,QAAQ,EAAE;AAAA,EAC1E,CAAC;AACD,MAAI,CAAC,OAAO,KAAM,OAAM,IAAI,aAAa,OAAO,OAAO,OAAO,gBAAgB,GAAG,QAAQ;AACzF,SAAO,OAAO;AAChB;AAEO,SAAS,0BAA0B;AACxC,QAAM,MAAM,iBAAiB;AAC7B,QAAM,aAAa,sBAAsB;AACzC,QAAM,cAAc,eAAe;AACnC,SAAO,YAAY;AAAA,IACjB,YAAY,CAAC,SAA0B;AACrC,UAAI,CAAC,IAAI,iBAAkB,OAAM,IAAI,MAAM,6CAA6C;AACxF,aAAO,qBAAqB,IAAI,QAAQ,IAAI,kBAAkB,IAAI;AAAA,IACpE;AAAA,IACA,WAAW,OAAO,WAAW;AAC3B,YAAM,WAAW;AACjB,UAAI,OAAO,aAAa,OAAO,QAAQ,YAAY;AACjD,cAAM,IAAI,qBAAqB,CAAC,OAAO,QAAQ,UAAU,GAAG,QAAQ;AACpE,cAAM,YAAY,kBAAkB,EAAE,UAAU,cAAc,mBAAmB,EAAE,CAAC;AAAA,MACtF;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAeO,SAAS,oBAAoB,UAAU,MAAM;AAClD,QAAM,EAAE,QAAQ,KAAK,IAAI,iBAAiB;AAC1C,QAAM,EAAE,aAAa,KAAK,IAAI,qBAAqB;AACnD,SAAO,SAAS;AAAA,IACd,UAAU,cAAc,oBAAoB,eAAe,EAAE;AAAA,IAC7D,SAAS,YAAwC;AAC/C,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,KAAK,MAAM,OAAO,IAAI,qBAAqB,CAAC;AAC1E,UAAI,CAAC,KAAM,OAAM,IAAI,MAAM,OAAO,OAAO,yCAAyC,CAAC;AACnF,YAAM,SAAS,KACZ,OAAO,CAAC,MAAM,EAAE,KAAK,YAAY,WAAW,MAAM,CAAC,EACnD,IAAI,CAAC,OAAO;AAAA,QACX,YAAY,EAAE,KAAK;AAAA,QACnB,MAAM,CAAC,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,OAAO,OAAO,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK;AAAA,QAClF,OAAO,EAAE,KAAK;AAAA,QACd,MAAM,OAAO,EAAE,IAAI;AAAA,MACrB,EAAE;AACJ,YAAM,KAAK,MAAM,OAAO,YAAY;AACpC,aAAO,CAAC,GAAG,MAAM,EAAE;AAAA,QACjB,CAAC,GAAG,MAAM,OAAO,EAAE,MAAM,YAAY,MAAM,EAAE,IAAI,OAAO,EAAE,MAAM,YAAY,MAAM,EAAE;AAAA,MACtF;AAAA,IACF;AAAA,IACA;AAAA,IACA,WAAW;AAAA,EACb,CAAC;AACH;AAUA,eAAsB,cACpB,QACA,YACA,QACe;AACf,MAAI,CAAC,OAAO,OAAQ;AACpB,QAAM,EAAE,OAAO,SAAS,IAAI,MAAM,OAAO,KAAK,uBAAuB;AAAA,IACnE,MAAM,WAAW,wBAAwB;AAAA,MACvC;AAAA,MACA,MAAM;AAAA,MACN,gBAAgB;AAAA,MAChB,eAAe;AAAA,MACf,iBAAiB;AAAA,IACnB,CAAC;AAAA,EACH,CAAC;AACD,MAAI,SAAS,WAAW,KAAK;AAC3B,UAAM,IAAI,MAAM,wEAAwE;AAAA,EAC1F;AAEA,MAAI,SAAS,SAAS,WAAW,KAAK;AACpC,UAAM,IAAI,MAAM,OAAO,OAAO,kCAAkC,CAAC;AAAA,EACnE;AACF;AAEO,SAAS,mBAAmB;AACjC,QAAM,EAAE,OAAO,IAAI,iBAAiB;AACpC,QAAM,aAAa,sBAAsB;AACzC,QAAM,cAAc,eAAe;AACnC,SAAO,YAAY;AAAA,IACjB,YAAY,CAAC,EAAE,YAAY,OAAO,MAChC,cAAc,QAAQ,YAAY,MAAM;AAAA,IAC1C,WAAW,YAAY;AACrB,YAAM,WAAW;AACjB,YAAM,YAAY,kBAAkB,EAAE,UAAU,cAAc,oBAAoB,EAAE,CAAC;AAAA,IACvF;AAAA,EACF,CAAC;AACH;",
+  "names": []
+}

package/dist/document-tools/signing.js

@@ -0,0 +1,127 @@
+import { signMessage, unlockIdentityWithPassword } from "@arbidocs/client";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { parseVersionRef } from "../artifacts/versions.js";
+import { useDocumentTools } from "./environment.js";
+import { arbiQueryKeys } from "../query-keys.js";
+function intentText(signer) {
+  return `I, ${signer.name.trim()}, sign this document electronically. I intend this electronic signature to have the same effect as my handwritten signature.`;
+}
+async function sha256Hex(blob) {
+  const digest = await crypto.subtle.digest("SHA-256", new Uint8Array(await blob.arrayBuffer()));
+  return Array.from(new Uint8Array(digest), (b) => b.toString(16).padStart(2, "0")).join("");
+}
+function toAppearance(box) {
+  return { page: box.page - 1, x: box.rect.x, y: box.rect.y, width: box.rect.w, height: box.rect.h };
+}
+const MIN_SIGNATURE_BOX = { width: 0.3, height: 0.07 };
+function isLegibleSignatureBox(rect) {
+  return rect.w >= MIN_SIGNATURE_BOX.width && rect.h >= MIN_SIGNATURE_BOX.height;
+}
+const SIGNATURES_PATH = "/v1/document/{document_ext_id}/signatures";
+function errorDetail(error, fallback) {
+  const detail = error?.detail;
+  return typeof detail === "string" ? detail : fallback;
+}
+async function fetchDocumentSignatures(client, documentRef) {
+  const { docId, version } = parseVersionRef(documentRef);
+  const { data, error } = await client.GET(SIGNATURES_PATH, {
+    params: { path: { document_ext_id: docId }, ...version ? { query: { version } } : {} }
+  });
+  if (!data) throw new Error(errorDetail(error, "The signatures could not be read"));
+  return data;
+}
+function useDocumentSignatures(documentId, enabled = true) {
+  const { client } = useDocumentTools();
+  const { docId, version } = parseVersionRef(documentId);
+  return useQuery({
+    queryKey: arbiQueryKeys.documentSignatures(docId ?? "", version),
+    queryFn: () => fetchDocumentSignatures(client, documentId),
+    enabled: enabled && !!docId,
+    staleTime: 6e4
+  });
+}
+class SigningError extends Error {
+  reason;
+  constructor(message, reason) {
+    super(message);
+    this.name = "SigningError";
+    this.reason = reason;
+  }
+}
+function signingErrorReason(detail) {
+  if (/still being prepared/i.test(detail)) return "preparing";
+  if (/no longer the current version/i.test(detail)) return "stale";
+  return "failed";
+}
+function signingError(error, fallback) {
+  const detail = errorDetail(error, fallback);
+  return new SigningError(detail, signingErrorReason(detail));
+}
+const PREPARE_RETRIES = 3;
+const PREPARE_RETRY_DELAY_MS = 1500;
+const wait = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+async function signDocument(client, deploymentDomain, {
+  documentId,
+  pdfBlob,
+  email,
+  password,
+  signer,
+  appearance,
+  includeDate = false,
+  version
+}) {
+  const path = { document_ext_id: documentId };
+  const body = {
+    signer: { name: signer.name },
+    ...appearance ? { appearance } : {},
+    include_date: includeDate,
+    ...version ? { version } : {}
+  };
+  const prepare = () => client.POST("/v1/document/{document_ext_id}/sign/prepare", { params: { path }, body });
+  let prepared = await prepare();
+  for (let attempt = 0; !prepared.data && attempt < PREPARE_RETRIES; attempt++) {
+    if (signingError(prepared.error, "").reason !== "preparing") break;
+    await wait(PREPARE_RETRY_DELAY_MS);
+    prepared = await prepare();
+  }
+  if (!prepared.data) throw signingError(prepared.error, "Could not prepare signing");
+  const { statement, intent, source_sha256, timestamp } = prepared.data;
+  if (await sha256Hex(pdfBlob) !== source_sha256) {
+    throw new Error("The document changed since it was opened. Reopen it and sign again.");
+  }
+  if (intent !== intentText(signer)) throw new Error("Signing statement mismatch; not signed.");
+  const identity = await unlockIdentityWithPassword(email, password, deploymentDomain);
+  const signed = await client.POST("/v1/document/{document_ext_id}/sign", {
+    params: { path },
+    body: { ...body, timestamp, signature: signMessage(statement, identity) }
+  });
+  if (!signed.data) throw signingError(signed.error, "Signing failed");
+  return signed.data;
+}
+function useSignDocument() {
+  const env = useDocumentTools();
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: (vars) => {
+      if (!env.deploymentDomain) throw new Error("Signing is not set up: no deployment domain");
+      return signDocument(env.client, env.deploymentDomain, vars);
+    },
+    onSuccess: async (result) => {
+      await env.onDocumentsChanged?.([result.doc_ext_id], "signed");
+      await queryClient.invalidateQueries({ queryKey: arbiQueryKeys.documentSignatures() });
+    }
+  });
+}
+export {
+  PREPARE_RETRIES,
+  SigningError,
+  fetchDocumentSignatures,
+  intentText,
+  isLegibleSignatureBox,
+  sha256Hex,
+  signDocument,
+  toAppearance,
+  useDocumentSignatures,
+  useSignDocument
+};
+//# sourceMappingURL=signing.js.map

package/dist/document-tools/signing.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/document-tools/signing.ts"],
+  "sourcesContent": ["/**\n * Electronic signing. The backend (`src/core/esign.py` in ARBI) defines what a signature binds;\n * the helpers mirror the two pieces the browser must reproduce exactly: the statement of intent\n * shown to the signer, and the SHA-256 of the PDF the viewer displayed.\n */\n\nimport { signMessage, unlockIdentityWithPassword, type components } from '@arbidocs/client'\nimport { useMutation, useQuery, useQueryClient } from '@tanstack/react-query'\nimport { parseVersionRef } from '../artifacts/versions'\nimport { useDocumentTools, type DocumentToolsClient } from './environment'\nimport { arbiQueryKeys } from '../query-keys'\n\n/**\n * Who signs: the name only. A role, a firm or a place go on the page as ordinary annotation text,\n * which is not part of the signature.\n */\nexport type SignerDetails = components['schemas']['SignerDetails']\n\n/** Same sentence as `esign.intent_text`; the dialog refuses to sign if the server's differs. */\nexport function intentText(signer: SignerDetails): string {\n  return `I, ${signer.name.trim()}, sign this document electronically. I intend this electronic signature to have the same effect as my handwritten signature.`\n}\n\nexport async function sha256Hex(blob: Blob): Promise<string> {\n  const digest = await crypto.subtle.digest('SHA-256', new Uint8Array(await blob.arrayBuffer()))\n  return Array.from(new Uint8Array(digest), (b) => b.toString(16).padStart(2, '0')).join('')\n}\n\n/** A signature box drawn on the annotation overlay, as the signing API's placement. */\nexport function toAppearance(box: {\n  page: number\n  rect: { x: number; y: number; w: number; h: number }\n}): { page: number; x: number; y: number; width: number; height: number } {\n  // The layer counts pages from 1, the signing API from 0. Both use fractions of the page as\n  // displayed, origin top-left.\n  return { page: box.page - 1, x: box.rect.x, y: box.rect.y, width: box.rect.w, height: box.rect.h }\n}\n\n/**\n * The smallest box the backend can draw a legible signature in: the signer's name and the\n * details line shrink to fit, so a box under these fractions of the page is shrunk to near\n * unreadable size. The backend's own default box is 0.40 x 0.10.\n */\nconst MIN_SIGNATURE_BOX = { width: 0.3, height: 0.07 }\n\nexport function isLegibleSignatureBox(rect: { w: number; h: number }): boolean {\n  return rect.w >= MIN_SIGNATURE_BOX.width && rect.h >= MIN_SIGNATURE_BOX.height\n}\n\n// \u2500\u2500 Signing through the API \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport type SignatureAppearance = components['schemas']['SignatureAppearance']\nexport type SignatureStatusResponse = components['schemas']['SignatureStatusResponse']\nexport type SignatureRecord = components['schemas']['SignatureRecord']\nexport type SignDocumentResponse = components['schemas']['SignDocumentResponse']\n\nconst SIGNATURES_PATH = '/v1/document/{document_ext_id}/signatures'\n/**\n * The same key openapi-react-query gives this request (`['get', path, init]`), so a host that\n * reads or persists the API cache by path treats it like its own queries.\n */\n\nfunction errorDetail(error: unknown, fallback: string): string {\n  const detail = (error as { detail?: unknown } | undefined)?.detail\n  return typeof detail === 'string' ? detail : fallback\n}\n\n/** Whether a document version is a signed copy, and its signatures. */\nexport async function fetchDocumentSignatures(\n  client: DocumentToolsClient,\n  documentRef: string\n): Promise<SignatureStatusResponse> {\n  const { docId, version } = parseVersionRef(documentRef)\n  const { data, error } = await client.GET(SIGNATURES_PATH, {\n    params: { path: { document_ext_id: docId }, ...(version ? { query: { version } } : {}) },\n  })\n  if (!data) throw new Error(errorDetail(error, 'The signatures could not be read'))\n  return data\n}\n\n/**\n * Is a document version a signed copy? `documentId` is a document id (its current version) or a\n * version reference `doc-\u2026@v{n}`. Needs a React Query `QueryClientProvider`.\n */\nexport function useDocumentSignatures(documentId: string | null | undefined, enabled = true) {\n  const { client } = useDocumentTools()\n  const { docId, version } = parseVersionRef(documentId)\n  return useQuery({\n    queryKey: arbiQueryKeys.documentSignatures(docId ?? '', version),\n    queryFn: () => fetchDocumentSignatures(client, documentId!),\n    enabled: enabled && !!docId,\n    staleTime: 60_000,\n  })\n}\n\n/**\n * Why the server would not sign: the PDF of a Word or text document is still being rendered\n * (`preparing`, worth another try in a moment), or the version on screen is no longer the current\n * one (`stale`: only the current version can be signed, so the signer reopens it).\n */\nexport type SigningErrorReason = 'preparing' | 'stale' | 'failed'\n\nexport class SigningError extends Error {\n  readonly reason: SigningErrorReason\n  constructor(message: string, reason: SigningErrorReason) {\n    super(message)\n    this.name = 'SigningError'\n    this.reason = reason\n  }\n}\n\n/** The 409s the backend's signing router raises, told apart by their wording. */\nfunction signingErrorReason(detail: string): SigningErrorReason {\n  if (/still being prepared/i.test(detail)) return 'preparing'\n  if (/no longer the current version/i.test(detail)) return 'stale'\n  return 'failed'\n}\n\nfunction signingError(error: unknown, fallback: string): SigningError {\n  const detail = errorDetail(error, fallback)\n  return new SigningError(detail, signingErrorReason(detail))\n}\n\n/** How often, and how long apart, a prepare is retried while the PDF is still being rendered. */\nexport const PREPARE_RETRIES = 3\nconst PREPARE_RETRY_DELAY_MS = 1500\n\nconst wait = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms))\n\nexport interface SignDocumentVars {\n  documentId: string\n  /**\n   * The PDF bytes the viewer is showing (`GET /view?version=`, never the original's download): the\n   * signer signs exactly these.\n   */\n  pdfBlob: Blob\n  /**\n   * The version `pdfBlob` is of. The server signs only the current version and refuses\n   * (`SigningError` `stale`) when this one has been superseded. Omitted = the current version.\n   */\n  version?: number\n  email: string\n  password: string\n  signer: SignerDetails\n  /** Where the signature goes; omitted = the backend default (bottom of the last page). */\n  appearance?: SignatureAppearance\n  /** Draw the signing date under the signature. Default off: only the signature is drawn. */\n  includeDate?: boolean\n}\n\n/**\n * Sign a document: the server prepares the statement, the browser checks that it covers the PDF\n * on screen under the wording the signer read, re-derives the user's Ed25519 key from their\n * password and signs it, and the server seals the signed copy as a new version.\n *\n * What is drawn on the page is only the signature (the signer's name as the signature mark) and,\n * with `includeDate`, the date; anyone can click it to open its certificate. A role, a firm or a\n * place go on the page as ordinary annotation text, which is not part of the signature.\n */\nexport async function signDocument(\n  client: DocumentToolsClient,\n  deploymentDomain: string,\n  {\n    documentId,\n    pdfBlob,\n    email,\n    password,\n    signer,\n    appearance,\n    includeDate = false,\n    version,\n  }: SignDocumentVars\n): Promise<SignDocumentResponse> {\n  const path = { document_ext_id: documentId }\n  // One body for both calls: the server refuses a /sign whose include_date (or placement) differs\n  // from what was prepared, since what the signature shows is part of what is signed.\n  const body = {\n    signer: { name: signer.name },\n    ...(appearance ? { appearance } : {}),\n    include_date: includeDate,\n    ...(version ? { version } : {}),\n  }\n\n  // A Word or text document's PDF is rendered after upload: while it is, prepare says so, and a\n  // short wait usually sees it ready.\n  const prepare = () =>\n    client.POST('/v1/document/{document_ext_id}/sign/prepare', { params: { path }, body })\n  let prepared = await prepare()\n  for (let attempt = 0; !prepared.data && attempt < PREPARE_RETRIES; attempt++) {\n    if (signingError(prepared.error, '').reason !== 'preparing') break\n    await wait(PREPARE_RETRY_DELAY_MS)\n    prepared = await prepare()\n  }\n  if (!prepared.data) throw signingError(prepared.error, 'Could not prepare signing')\n  const { statement, intent, source_sha256, timestamp } = prepared.data\n  // Sign only what was on screen, under the wording the signer read.\n  if ((await sha256Hex(pdfBlob)) !== source_sha256) {\n    throw new Error('The document changed since it was opened. Reopen it and sign again.')\n  }\n  if (intent !== intentText(signer)) throw new Error('Signing statement mismatch; not signed.')\n\n  // The re-typed password must open the session's identity, which is the key the server verifies.\n  const identity = await unlockIdentityWithPassword(email, password, deploymentDomain)\n  const signed = await client.POST('/v1/document/{document_ext_id}/sign', {\n    params: { path },\n    body: { ...body, timestamp, signature: signMessage(statement, identity) },\n  })\n  if (!signed.data) throw signingError(signed.error, 'Signing failed')\n  return signed.data\n}\n\n/** The signing mutation. On success the host hears the document changed (`'signed'`). */\nexport function useSignDocument() {\n  const env = useDocumentTools()\n  const queryClient = useQueryClient()\n  return useMutation({\n    mutationFn: (vars: SignDocumentVars) => {\n      if (!env.deploymentDomain) throw new Error('Signing is not set up: no deployment domain')\n      return signDocument(env.client, env.deploymentDomain, vars)\n    },\n    onSuccess: async (result) => {\n      // The signed copy is the document's new current version: the host refreshes its row,\n      // versions and rendered PDF, and the signature badge reads again.\n      await env.onDocumentsChanged?.([result.doc_ext_id], 'signed')\n      await queryClient.invalidateQueries({ queryKey: arbiQueryKeys.documentSignatures() })\n    },\n  })\n}\n"],
+  "mappings": "AAMA,SAAS,aAAa,kCAAmD;AACzE,SAAS,aAAa,UAAU,sBAAsB;AACtD,SAAS,uBAAuB;AAChC,SAAS,wBAAkD;AAC3D,SAAS,qBAAqB;AASvB,SAAS,WAAW,QAA+B;AACxD,SAAO,MAAM,OAAO,KAAK,KAAK,CAAC;AACjC;AAEA,eAAsB,UAAU,MAA6B;AAC3D,QAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,WAAW,MAAM,KAAK,YAAY,CAAC,CAAC;AAC7F,SAAO,MAAM,KAAK,IAAI,WAAW,MAAM,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC3F;AAGO,SAAS,aAAa,KAG6C;AAGxE,SAAO,EAAE,MAAM,IAAI,OAAO,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,OAAO,IAAI,KAAK,GAAG,QAAQ,IAAI,KAAK,EAAE;AACnG;AAOA,MAAM,oBAAoB,EAAE,OAAO,KAAK,QAAQ,KAAK;AAE9C,SAAS,sBAAsB,MAAyC;AAC7E,SAAO,KAAK,KAAK,kBAAkB,SAAS,KAAK,KAAK,kBAAkB;AAC1E;AASA,MAAM,kBAAkB;AAMxB,SAAS,YAAY,OAAgB,UAA0B;AAC7D,QAAM,SAAU,OAA4C;AAC5D,SAAO,OAAO,WAAW,WAAW,SAAS;AAC/C;AAGA,eAAsB,wBACpB,QACA,aACkC;AAClC,QAAM,EAAE,OAAO,QAAQ,IAAI,gBAAgB,WAAW;AACtD,QAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,IAAI,iBAAiB;AAAA,IACxD,QAAQ,EAAE,MAAM,EAAE,iBAAiB,MAAM,GAAG,GAAI,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAG;AAAA,EACzF,CAAC;AACD,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,YAAY,OAAO,kCAAkC,CAAC;AACjF,SAAO;AACT;AAMO,SAAS,sBAAsB,YAAuC,UAAU,MAAM;AAC3F,QAAM,EAAE,OAAO,IAAI,iBAAiB;AACpC,QAAM,EAAE,OAAO,QAAQ,IAAI,gBAAgB,UAAU;AACrD,SAAO,SAAS;AAAA,IACd,UAAU,cAAc,mBAAmB,SAAS,IAAI,OAAO;AAAA,IAC/D,SAAS,MAAM,wBAAwB,QAAQ,UAAW;AAAA,IAC1D,SAAS,WAAW,CAAC,CAAC;AAAA,IACtB,WAAW;AAAA,EACb,CAAC;AACH;AASO,MAAM,qBAAqB,MAAM;AAAA,EAC7B;AAAA,EACT,YAAY,SAAiB,QAA4B;AACvD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AAAA,EAChB;AACF;AAGA,SAAS,mBAAmB,QAAoC;AAC9D,MAAI,wBAAwB,KAAK,MAAM,EAAG,QAAO;AACjD,MAAI,iCAAiC,KAAK,MAAM,EAAG,QAAO;AAC1D,SAAO;AACT;AAEA,SAAS,aAAa,OAAgB,UAAgC;AACpE,QAAM,SAAS,YAAY,OAAO,QAAQ;AAC1C,SAAO,IAAI,aAAa,QAAQ,mBAAmB,MAAM,CAAC;AAC5D;AAGO,MAAM,kBAAkB;AAC/B,MAAM,yBAAyB;AAE/B,MAAM,OAAO,CAAC,OAAe,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAgC7E,eAAsB,aACpB,QACA,kBACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EACd;AACF,GAC+B;AAC/B,QAAM,OAAO,EAAE,iBAAiB,WAAW;AAG3C,QAAM,OAAO;AAAA,IACX,QAAQ,EAAE,MAAM,OAAO,KAAK;AAAA,IAC5B,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,IACnC,cAAc;AAAA,IACd,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/B;AAIA,QAAM,UAAU,MACd,OAAO,KAAK,+CAA+C,EAAE,QAAQ,EAAE,KAAK,GAAG,KAAK,CAAC;AACvF,MAAI,WAAW,MAAM,QAAQ;AAC7B,WAAS,UAAU,GAAG,CAAC,SAAS,QAAQ,UAAU,iBAAiB,WAAW;AAC5E,QAAI,aAAa,SAAS,OAAO,EAAE,EAAE,WAAW,YAAa;AAC7D,UAAM,KAAK,sBAAsB;AACjC,eAAW,MAAM,QAAQ;AAAA,EAC3B;AACA,MAAI,CAAC,SAAS,KAAM,OAAM,aAAa,SAAS,OAAO,2BAA2B;AAClF,QAAM,EAAE,WAAW,QAAQ,eAAe,UAAU,IAAI,SAAS;AAEjE,MAAK,MAAM,UAAU,OAAO,MAAO,eAAe;AAChD,UAAM,IAAI,MAAM,qEAAqE;AAAA,EACvF;AACA,MAAI,WAAW,WAAW,MAAM,EAAG,OAAM,IAAI,MAAM,yCAAyC;AAG5F,QAAM,WAAW,MAAM,2BAA2B,OAAO,UAAU,gBAAgB;AACnF,QAAM,SAAS,MAAM,OAAO,KAAK,uCAAuC;AAAA,IACtE,QAAQ,EAAE,KAAK;AAAA,IACf,MAAM,EAAE,GAAG,MAAM,WAAW,WAAW,YAAY,WAAW,QAAQ,EAAE;AAAA,EAC1E,CAAC;AACD,MAAI,CAAC,OAAO,KAAM,OAAM,aAAa,OAAO,OAAO,gBAAgB;AACnE,SAAO,OAAO;AAChB;AAGO,SAAS,kBAAkB;AAChC,QAAM,MAAM,iBAAiB;AAC7B,QAAM,cAAc,eAAe;AACnC,SAAO,YAAY;AAAA,IACjB,YAAY,CAAC,SAA2B;AACtC,UAAI,CAAC,IAAI,iBAAkB,OAAM,IAAI,MAAM,6CAA6C;AACxF,aAAO,aAAa,IAAI,QAAQ,IAAI,kBAAkB,IAAI;AAAA,IAC5D;AAAA,IACA,WAAW,OAAO,WAAW;AAG3B,YAAM,IAAI,qBAAqB,CAAC,OAAO,UAAU,GAAG,QAAQ;AAC5D,YAAM,YAAY,kBAAkB,EAAE,UAAU,cAAc,mBAAmB,EAAE,CAAC;AAAA,IACtF;AAAA,EACF,CAAC;AACH;",
+  "names": []
+}

package/dist/document-tools/useDocumentBytes.js

@@ -0,0 +1,38 @@
+import { useQuery } from "@tanstack/react-query";
+import { useDocumentTools } from "./environment.js";
+import { fetchDocumentFile, fetchDocumentPdf } from "./document-pdf.js";
+import { documentBytesKey } from "../query-keys.js";
+import { documentBytesKey as documentBytesKey2 } from "../query-keys.js";
+function useDocumentBytes(documentRef, options) {
+  const { client } = useDocumentTools();
+  const { version, kind, enabled = true, fallback } = options;
+  return useQuery({
+    queryKey: documentBytesKey2(documentRef, version ?? null, kind),
+    queryFn: async ({ signal }) => {
+      if (fallback && typeof navigator !== "undefined" && navigator.onLine === false) {
+        const offline = await fallback();
+        if (offline) return offline;
+      }
+      try {
+        return await (kind === "original" ? fetchDocumentFile : fetchDocumentPdf)(
+          client,
+          documentRef,
+          { signal }
+        );
+      } catch (error) {
+        const offline = await fallback?.();
+        if (offline) return offline;
+        throw error;
+      }
+    },
+    enabled: enabled && !!documentRef,
+    // 'always' so it still runs offline: the fallback serves a copy kept on this device.
+    networkMode: "always",
+    staleTime: Infinity
+  });
+}
+export {
+  documentBytesKey,
+  useDocumentBytes
+};
+//# sourceMappingURL=useDocumentBytes.js.map

package/dist/document-tools/useDocumentBytes.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/document-tools/useDocumentBytes.ts"],
+  "sourcesContent": ["/**\n * The bytes a document viewer shows: the PDF of a document version (`/view`), or for media the\n * stored file itself (`/download`), through the host's API client. Keyed on the version, since a\n * document keeps its id across versions: a new version (a save, a signed copy) must never show the\n * previous one's file.\n */\nimport { useQuery } from '@tanstack/react-query'\nimport { useDocumentTools } from './environment'\nimport { fetchDocumentFile, fetchDocumentPdf } from './document-pdf'\n\nimport type { DocumentBytesKind } from '../query-keys'\nexport type { DocumentBytesKind }\n\nexport { documentBytesKey } from '../query-keys'\nimport { documentBytesKey } from '../query-keys'\n\nexport interface UseDocumentBytesOptions {\n  /** The document's current version, so a new one reads afresh. */\n  version: number | null | undefined\n  kind: DocumentBytesKind\n  enabled?: boolean\n  /**\n   * Bytes to use when the network cannot give them (a copy kept on this device): asked first when\n   * offline, and again when the request fails.\n   */\n  fallback?: () => Promise<Blob | undefined>\n}\n\n/** A document's (or version reference's) bytes; see {@link UseDocumentBytesOptions}. */\nexport function useDocumentBytes(documentRef: string, options: UseDocumentBytesOptions) {\n  const { client } = useDocumentTools()\n  const { version, kind, enabled = true, fallback } = options\n  return useQuery({\n    queryKey: documentBytesKey(documentRef, version ?? null, kind),\n    queryFn: async ({ signal }) => {\n      if (fallback && typeof navigator !== 'undefined' && navigator.onLine === false) {\n        const offline = await fallback()\n        if (offline) return offline\n      }\n      try {\n        return await (kind === 'original' ? fetchDocumentFile : fetchDocumentPdf)(\n          client,\n          documentRef,\n          { signal }\n        )\n      } catch (error) {\n        const offline = await fallback?.()\n        if (offline) return offline\n        throw error\n      }\n    },\n    enabled: enabled && !!documentRef,\n    // 'always' so it still runs offline: the fallback serves a copy kept on this device.\n    networkMode: 'always',\n    staleTime: Infinity,\n  })\n}\n"],
+  "mappings": "AAMA,SAAS,gBAAgB;AACzB,SAAS,wBAAwB;AACjC,SAAS,mBAAmB,wBAAwB;AAKpD,SAAS,wBAAwB;AACjC,SAAS,oBAAAA,yBAAwB;AAe1B,SAAS,iBAAiB,aAAqB,SAAkC;AACtF,QAAM,EAAE,OAAO,IAAI,iBAAiB;AACpC,QAAM,EAAE,SAAS,MAAM,UAAU,MAAM,SAAS,IAAI;AACpD,SAAO,SAAS;AAAA,IACd,UAAUA,kBAAiB,aAAa,WAAW,MAAM,IAAI;AAAA,IAC7D,SAAS,OAAO,EAAE,OAAO,MAAM;AAC7B,UAAI,YAAY,OAAO,cAAc,eAAe,UAAU,WAAW,OAAO;AAC9E,cAAM,UAAU,MAAM,SAAS;AAC/B,YAAI,QAAS,QAAO;AAAA,MACtB;AACA,UAAI;AACF,eAAO,OAAO,SAAS,aAAa,oBAAoB;AAAA,UACtD;AAAA,UACA;AAAA,UACA,EAAE,OAAO;AAAA,QACX;AAAA,MACF,SAAS,OAAO;AACd,cAAM,UAAU,MAAM,WAAW;AACjC,YAAI,QAAS,QAAO;AACpB,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,SAAS,WAAW,CAAC,CAAC;AAAA;AAAA,IAEtB,aAAa;AAAA,IACb,WAAW;AAAA,EACb,CAAC;AACH;",
+  "names": ["documentBytesKey"]
+}

package/dist/document-tools/useDocumentMarkup.js

@@ -0,0 +1,154 @@
+import { useCallback, useEffect, useMemo, useState } from "react";
+import { useDocumentTools } from "./environment.js";
+import { SIGNED_LOCKED_REASON, fetchMarkupPdf } from "./markup-download.js";
+import {
+  copyOpenThreads,
+  forgetLegacyLayer,
+  migrateLegacyLayer,
+  readLegacyLayer,
+  versionsWithMarkup
+} from "./markup-transfer.js";
+const SIGNED_UNCHANGED = "The signed PDF is unchanged: the comments are kept beside it as markup.";
+function useDocumentMarkup(documentData, snapshotVersion, currentSigned = false) {
+  const { client, notify, saveFile, onDocumentsChanged } = useDocumentTools();
+  const documentId = documentData?.external_id;
+  const currentVersion = documentData?.current_version ?? 1;
+  const shownVersion = snapshotVersion ?? currentVersion;
+  const versions = useMemo(() => documentData?.versions ?? [], [documentData?.versions]);
+  const [localCounts, setLocalCounts] = useState({});
+  const countOf = useCallback(
+    (n) => localCounts[`${documentId}@${n}`] ?? versions.find((v) => v.n === n)?.markup_count ?? 0,
+    [localCounts, documentId, versions]
+  );
+  const hasMarkup = countOf(shownVersion) > 0;
+  const [showOriginal, setShowOriginal] = useState(false);
+  useEffect(() => setShowOriginal(false), [documentId, snapshotVersion]);
+  const refresh = useCallback(() => {
+    if (!documentId || !onDocumentsChanged) return;
+    Promise.resolve(onDocumentsChanged([documentId], "markup")).catch(
+      (e) => console.warn("Could not refresh the document after a markup change", e)
+    );
+  }, [documentId, onDocumentsChanged]);
+  const onMarkupChange = useCallback(
+    (snapshot) => {
+      if (!documentId) return;
+      const key = `${documentId}@${shownVersion}`;
+      if (countOf(shownVersion) > 0 !== snapshot.count > 0) refresh();
+      setLocalCounts((counts) => ({ ...counts, [key]: snapshot.count }));
+    },
+    [documentId, shownVersion, countOf, refresh]
+  );
+  const downloadMarkup = useCallback(async () => {
+    if (!documentId) return;
+    if (currentSigned) {
+      notify(SIGNED_LOCKED_REASON, "info");
+      return;
+    }
+    try {
+      const { blob, fileName } = await fetchMarkupPdf(
+        client,
+        documentId,
+        snapshotVersion ? snapshotVersion : void 0
+      );
+      saveFile(blob, fileName);
+    } catch (e) {
+      notify(e instanceof Error ? e.message : "The markup could not be downloaded", "error");
+    }
+  }, [client, documentId, snapshotVersion, saveFile, notify, currentSigned]);
+  const [legacyCount, setLegacyCount] = useState(0);
+  const [migrating, setMigrating] = useState(false);
+  const shared = documentData?.shared;
+  const loaded = !!documentData;
+  const migrate = useCallback(async () => {
+    if (!documentId) return;
+    const layer = readLegacyLayer(documentId);
+    if (!layer) return;
+    setMigrating(true);
+    try {
+      const added = await migrateLegacyLayer(documentId, layer, versions, currentVersion, client);
+      setLegacyCount(0);
+      setLocalCounts({});
+      refresh();
+      if (added > 0) {
+        notify(
+          `${added} annotation${added === 1 ? "" : "s"} from this browser saved to the document`,
+          "success",
+          {
+            description: shared ? "They are now part of the shared markup." : "They are saved with the document, visible only to you."
+          }
+        );
+      }
+    } catch (e) {
+      notify(
+        e instanceof Error ? e.message : "The annotations from this browser could not be saved",
+        "error",
+        { description: "They are still kept in this browser; open the document again to retry." }
+      );
+    } finally {
+      setMigrating(false);
+    }
+  }, [client, documentId, versions, currentVersion, refresh, shared, notify]);
+  useEffect(() => {
+    if (!documentId || !loaded) return;
+    const layer = readLegacyLayer(documentId);
+    if (!layer) {
+      setLegacyCount(0);
+      return;
+    }
+    if (layer.annotations.length === 0) {
+      forgetLegacyLayer(documentId);
+      setLegacyCount(0);
+      return;
+    }
+    if (shared) setLegacyCount(layer.annotations.length);
+    else void migrate();
+  }, [documentId, loaded, shared]);
+  const legacyPrompt = legacyCount > 0 && !snapshotVersion ? {
+    count: legacyCount,
+    busy: migrating,
+    add: () => void migrate(),
+    discard: () => {
+      if (documentId) forgetLegacyLayer(documentId);
+      setLegacyCount(0);
+    }
+  } : null;
+  const [copying, setCopying] = useState(false);
+  const olderWithMarkup = versionsWithMarkup(versions).filter((v) => v.n !== currentVersion).sort((a, b) => b.n - a.n)[0];
+  const olderNote = !snapshotVersion && !hasMarkup && olderWithMarkup ? {
+    version: olderWithMarkup.n,
+    busy: copying,
+    signed: currentSigned,
+    copy: () => {
+      if (!documentId) return;
+      setCopying(true);
+      copyOpenThreads(documentId, olderWithMarkup.n, client).then((n) => {
+        if (n > 0) {
+          setLocalCounts((c) => ({ ...c, [`${documentId}@${currentVersion}`]: n }));
+          refresh();
+        }
+        notify(
+          n > 0 ? `${n} open comment thread${n === 1 ? "" : "s"} copied to version ${currentVersion}` : `Version ${olderWithMarkup.n} has no open comments`,
+          n > 0 ? "success" : "info",
+          // The markup is stored beside the version, so the sealed bytes do not change.
+          n > 0 && currentSigned ? { description: SIGNED_UNCHANGED } : void 0
+        );
+      }).catch(
+        (e) => notify(e instanceof Error ? e.message : "The comments could not be copied", "error")
+      ).finally(() => setCopying(false));
+    }
+  } : null;
+  return {
+    hasMarkup,
+    showOriginal,
+    setShowOriginal,
+    onMarkupChange,
+    downloadMarkup,
+    legacyPrompt,
+    olderNote
+  };
+}
+export {
+  SIGNED_UNCHANGED,
+  useDocumentMarkup
+};
+//# sourceMappingURL=useDocumentMarkup.js.map

package/dist/document-tools/useDocumentMarkup.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/document-tools/useDocumentMarkup.ts"],
+  "sourcesContent": ["/**\n * Markup state for the document page: whether the version on screen has markup (so the viewer\n * opens on it, the default view), the \"Show original\" toggle, \"Download with markup\", the one-time\n * migration of this browser's old annotation layer, and the note shown when the markup is on an\n * older version (with \"copy open comments\").\n *\n * Whether a version has markup comes from the document's version entries (`markup_count`), kept\n * current by the viewer's own saves (`onMarkupChange`) until the document is refetched.\n */\n\nimport { useCallback, useEffect, useMemo, useState } from 'react'\nimport { useDocumentTools } from './environment'\nimport type { MarkupSnapshot } from './markup-store'\nimport { SIGNED_LOCKED_REASON, fetchMarkupPdf } from './markup-download'\nimport {\n  copyOpenThreads,\n  forgetLegacyLayer,\n  migrateLegacyLayer,\n  readLegacyLayer,\n  versionsWithMarkup,\n  type VersionInfo,\n} from './markup-transfer'\n\nexport const SIGNED_UNCHANGED =\n  'The signed PDF is unchanged: the comments are kept beside it as markup.'\n\nexport interface MarkupDocument {\n  external_id: string\n  shared?: boolean | null\n  current_version?: number | null\n  versions?: VersionInfo[] | null\n}\n\nexport interface LegacyPrompt {\n  count: number\n  busy: boolean\n  add: () => void\n  discard: () => void\n}\n\nexport interface OlderMarkupNote {\n  version: number\n  busy: boolean\n  /** The current version is a signed copy: say that copying leaves its signed PDF as it is. */\n  signed: boolean\n  copy: () => void\n}\n\nexport function useDocumentMarkup(\n  documentData: MarkupDocument | null | undefined,\n  /** The version on screen when it is an older one (a read-only snapshot). */\n  snapshotVersion: number | undefined,\n  /**\n   * Whether the version on screen is a signed, sealed copy: locked, so no \"Download with markup\"\n   * (and, for the current version, copied comments leave its signed PDF as it is).\n   */\n  currentSigned = false\n) {\n  const { client, notify, saveFile, onDocumentsChanged } = useDocumentTools()\n  const documentId = documentData?.external_id\n  const currentVersion = documentData?.current_version ?? 1\n  const shownVersion = snapshotVersion ?? currentVersion\n  const versions = useMemo(() => documentData?.versions ?? [], [documentData?.versions])\n\n  // Counts from this session's saves win over the (possibly stale) document record.\n  const [localCounts, setLocalCounts] = useState<Record<string, number>>({})\n  const countOf = useCallback(\n    (n: number) =>\n      localCounts[`${documentId}@${n}`] ?? versions.find((v) => v.n === n)?.markup_count ?? 0,\n    [localCounts, documentId, versions]\n  )\n  const hasMarkup = countOf(shownVersion) > 0\n\n  const [showOriginal, setShowOriginal] = useState(false)\n  useEffect(() => setShowOriginal(false), [documentId, snapshotVersion])\n\n  const refresh = useCallback(() => {\n    if (!documentId || !onDocumentsChanged) return\n    Promise.resolve(onDocumentsChanged([documentId], 'markup')).catch((e: unknown) =>\n      console.warn('Could not refresh the document after a markup change', e)\n    )\n  }, [documentId, onDocumentsChanged])\n\n  const onMarkupChange = useCallback(\n    (snapshot: MarkupSnapshot) => {\n      if (!documentId) return\n      const key = `${documentId}@${shownVersion}`\n      // The list's \"Download with markup\" and the version entries follow the first/last mark.\n      if (countOf(shownVersion) > 0 !== snapshot.count > 0) refresh()\n      setLocalCounts((counts) => ({ ...counts, [key]: snapshot.count }))\n    },\n    [documentId, shownVersion, countOf, refresh]\n  )\n\n  const downloadMarkup = useCallback(async () => {\n    if (!documentId) return\n    // A signed version is locked: its markup is never written into its PDF.\n    if (currentSigned) {\n      notify(SIGNED_LOCKED_REASON, 'info')\n      return\n    }\n    try {\n      const { blob, fileName } = await fetchMarkupPdf(\n        client,\n        documentId,\n        snapshotVersion ? snapshotVersion : undefined\n      )\n      saveFile(blob, fileName)\n    } catch (e) {\n      notify(e instanceof Error ? e.message : 'The markup could not be downloaded', 'error')\n    }\n  }, [client, documentId, snapshotVersion, saveFile, notify, currentSigned])\n\n  // --- Migration of this browser's layer (arbi:annotations:<docId>) ---\n  const [legacyCount, setLegacyCount] = useState(0)\n  const [migrating, setMigrating] = useState(false)\n  const shared = documentData?.shared\n  const loaded = !!documentData\n\n  const migrate = useCallback(async () => {\n    if (!documentId) return\n    const layer = readLegacyLayer(documentId)\n    if (!layer) return\n    setMigrating(true)\n    try {\n      const added = await migrateLegacyLayer(documentId, layer, versions, currentVersion, client)\n      setLegacyCount(0)\n      setLocalCounts({})\n      refresh()\n      if (added > 0) {\n        notify(\n          `${added} annotation${added === 1 ? '' : 's'} from this browser saved to the document`,\n          'success',\n          {\n            description: shared\n              ? 'They are now part of the shared markup.'\n              : 'They are saved with the document, visible only to you.',\n          }\n        )\n      }\n    } catch (e) {\n      notify(\n        e instanceof Error ? e.message : 'The annotations from this browser could not be saved',\n        'error',\n        { description: 'They are still kept in this browser; open the document again to retry.' }\n      )\n    } finally {\n      setMigrating(false)\n    }\n  }, [client, documentId, versions, currentVersion, refresh, shared, notify])\n\n  useEffect(() => {\n    if (!documentId || !loaded) return\n    const layer = readLegacyLayer(documentId)\n    if (!layer) {\n      setLegacyCount(0)\n      return\n    }\n    if (layer.annotations.length === 0) {\n      forgetLegacyLayer(documentId)\n      setLegacyCount(0)\n      return\n    }\n    // A private document is the user's own: its old layer simply becomes its markup. A shared one\n    // would show the marks to everyone, so the user decides.\n    if (shared) setLegacyCount(layer.annotations.length)\n    else void migrate()\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [documentId, loaded, shared])\n\n  const legacyPrompt: LegacyPrompt | null =\n    legacyCount > 0 && !snapshotVersion\n      ? {\n          count: legacyCount,\n          busy: migrating,\n          add: () => void migrate(),\n          discard: () => {\n            if (documentId) forgetLegacyLayer(documentId)\n            setLegacyCount(0)\n          },\n        }\n      : null\n\n  // --- Markup on an older version (a newer version starts with none) ---\n  const [copying, setCopying] = useState(false)\n  const olderWithMarkup = versionsWithMarkup(versions)\n    .filter((v) => v.n !== currentVersion)\n    .sort((a, b) => b.n - a.n)[0]\n  const olderNote: OlderMarkupNote | null =\n    !snapshotVersion && !hasMarkup && olderWithMarkup\n      ? {\n          version: olderWithMarkup.n,\n          busy: copying,\n          signed: currentSigned,\n          copy: () => {\n            if (!documentId) return\n            setCopying(true)\n            copyOpenThreads(documentId, olderWithMarkup.n, client)\n              .then((n) => {\n                if (n > 0) {\n                  setLocalCounts((c) => ({ ...c, [`${documentId}@${currentVersion}`]: n }))\n                  refresh()\n                }\n                notify(\n                  n > 0\n                    ? `${n} open comment thread${n === 1 ? '' : 's'} copied to version ${currentVersion}`\n                    : `Version ${olderWithMarkup.n} has no open comments`,\n                  n > 0 ? 'success' : 'info',\n                  // The markup is stored beside the version, so the sealed bytes do not change.\n                  n > 0 && currentSigned ? { description: SIGNED_UNCHANGED } : undefined\n                )\n              })\n              .catch((e: unknown) =>\n                notify(e instanceof Error ? e.message : 'The comments could not be copied', 'error')\n              )\n              .finally(() => setCopying(false))\n          },\n        }\n      : null\n\n  return {\n    hasMarkup,\n    showOriginal,\n    setShowOriginal,\n    onMarkupChange,\n    downloadMarkup,\n    legacyPrompt,\n    olderNote,\n  }\n}\n"],
+  "mappings": "AAUA,SAAS,aAAa,WAAW,SAAS,gBAAgB;AAC1D,SAAS,wBAAwB;AAEjC,SAAS,sBAAsB,sBAAsB;AACrD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAEA,MAAM,mBACX;AAwBK,SAAS,kBACd,cAEA,iBAKA,gBAAgB,OAChB;AACA,QAAM,EAAE,QAAQ,QAAQ,UAAU,mBAAmB,IAAI,iBAAiB;AAC1E,QAAM,aAAa,cAAc;AACjC,QAAM,iBAAiB,cAAc,mBAAmB;AACxD,QAAM,eAAe,mBAAmB;AACxC,QAAM,WAAW,QAAQ,MAAM,cAAc,YAAY,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC;AAGrF,QAAM,CAAC,aAAa,cAAc,IAAI,SAAiC,CAAC,CAAC;AACzE,QAAM,UAAU;AAAA,IACd,CAAC,MACC,YAAY,GAAG,UAAU,IAAI,CAAC,EAAE,KAAK,SAAS,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,gBAAgB;AAAA,IACxF,CAAC,aAAa,YAAY,QAAQ;AAAA,EACpC;AACA,QAAM,YAAY,QAAQ,YAAY,IAAI;AAE1C,QAAM,CAAC,cAAc,eAAe,IAAI,SAAS,KAAK;AACtD,YAAU,MAAM,gBAAgB,KAAK,GAAG,CAAC,YAAY,eAAe,CAAC;AAErE,QAAM,UAAU,YAAY,MAAM;AAChC,QAAI,CAAC,cAAc,CAAC,mBAAoB;AACxC,YAAQ,QAAQ,mBAAmB,CAAC,UAAU,GAAG,QAAQ,CAAC,EAAE;AAAA,MAAM,CAAC,MACjE,QAAQ,KAAK,wDAAwD,CAAC;AAAA,IACxE;AAAA,EACF,GAAG,CAAC,YAAY,kBAAkB,CAAC;AAEnC,QAAM,iBAAiB;AAAA,IACrB,CAAC,aAA6B;AAC5B,UAAI,CAAC,WAAY;AACjB,YAAM,MAAM,GAAG,UAAU,IAAI,YAAY;AAEzC,UAAI,QAAQ,YAAY,IAAI,MAAM,SAAS,QAAQ,EAAG,SAAQ;AAC9D,qBAAe,CAAC,YAAY,EAAE,GAAG,QAAQ,CAAC,GAAG,GAAG,SAAS,MAAM,EAAE;AAAA,IACnE;AAAA,IACA,CAAC,YAAY,cAAc,SAAS,OAAO;AAAA,EAC7C;AAEA,QAAM,iBAAiB,YAAY,YAAY;AAC7C,QAAI,CAAC,WAAY;AAEjB,QAAI,eAAe;AACjB,aAAO,sBAAsB,MAAM;AACnC;AAAA,IACF;AACA,QAAI;AACF,YAAM,EAAE,MAAM,SAAS,IAAI,MAAM;AAAA,QAC/B;AAAA,QACA;AAAA,QACA,kBAAkB,kBAAkB;AAAA,MACtC;AACA,eAAS,MAAM,QAAQ;AAAA,IACzB,SAAS,GAAG;AACV,aAAO,aAAa,QAAQ,EAAE,UAAU,sCAAsC,OAAO;AAAA,IACvF;AAAA,EACF,GAAG,CAAC,QAAQ,YAAY,iBAAiB,UAAU,QAAQ,aAAa,CAAC;AAGzE,QAAM,CAAC,aAAa,cAAc,IAAI,SAAS,CAAC;AAChD,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,KAAK;AAChD,QAAM,SAAS,cAAc;AAC7B,QAAM,SAAS,CAAC,CAAC;AAEjB,QAAM,UAAU,YAAY,YAAY;AACtC,QAAI,CAAC,WAAY;AACjB,UAAM,QAAQ,gBAAgB,UAAU;AACxC,QAAI,CAAC,MAAO;AACZ,iBAAa,IAAI;AACjB,QAAI;AACF,YAAM,QAAQ,MAAM,mBAAmB,YAAY,OAAO,UAAU,gBAAgB,MAAM;AAC1F,qBAAe,CAAC;AAChB,qBAAe,CAAC,CAAC;AACjB,cAAQ;AACR,UAAI,QAAQ,GAAG;AACb;AAAA,UACE,GAAG,KAAK,cAAc,UAAU,IAAI,KAAK,GAAG;AAAA,UAC5C;AAAA,UACA;AAAA,YACE,aAAa,SACT,4CACA;AAAA,UACN;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,GAAG;AACV;AAAA,QACE,aAAa,QAAQ,EAAE,UAAU;AAAA,QACjC;AAAA,QACA,EAAE,aAAa,yEAAyE;AAAA,MAC1F;AAAA,IACF,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAAA,EACF,GAAG,CAAC,QAAQ,YAAY,UAAU,gBAAgB,SAAS,QAAQ,MAAM,CAAC;AAE1E,YAAU,MAAM;AACd,QAAI,CAAC,cAAc,CAAC,OAAQ;AAC5B,UAAM,QAAQ,gBAAgB,UAAU;AACxC,QAAI,CAAC,OAAO;AACV,qBAAe,CAAC;AAChB;AAAA,IACF;AACA,QAAI,MAAM,YAAY,WAAW,GAAG;AAClC,wBAAkB,UAAU;AAC5B,qBAAe,CAAC;AAChB;AAAA,IACF;AAGA,QAAI,OAAQ,gBAAe,MAAM,YAAY,MAAM;AAAA,QAC9C,MAAK,QAAQ;AAAA,EAEpB,GAAG,CAAC,YAAY,QAAQ,MAAM,CAAC;AAE/B,QAAM,eACJ,cAAc,KAAK,CAAC,kBAChB;AAAA,IACE,OAAO;AAAA,IACP,MAAM;AAAA,IACN,KAAK,MAAM,KAAK,QAAQ;AAAA,IACxB,SAAS,MAAM;AACb,UAAI,WAAY,mBAAkB,UAAU;AAC5C,qBAAe,CAAC;AAAA,IAClB;AAAA,EACF,IACA;AAGN,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,kBAAkB,mBAAmB,QAAQ,EAChD,OAAO,CAAC,MAAM,EAAE,MAAM,cAAc,EACpC,KAAK,CAAC,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC9B,QAAM,YACJ,CAAC,mBAAmB,CAAC,aAAa,kBAC9B;AAAA,IACE,SAAS,gBAAgB;AAAA,IACzB,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,MAAM,MAAM;AACV,UAAI,CAAC,WAAY;AACjB,iBAAW,IAAI;AACf,sBAAgB,YAAY,gBAAgB,GAAG,MAAM,EAClD,KAAK,CAAC,MAAM;AACX,YAAI,IAAI,GAAG;AACT,yBAAe,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,GAAG,UAAU,IAAI,cAAc,EAAE,GAAG,EAAE,EAAE;AACxE,kBAAQ;AAAA,QACV;AACA;AAAA,UACE,IAAI,IACA,GAAG,CAAC,uBAAuB,MAAM,IAAI,KAAK,GAAG,sBAAsB,cAAc,KACjF,WAAW,gBAAgB,CAAC;AAAA,UAChC,IAAI,IAAI,YAAY;AAAA;AAAA,UAEpB,IAAI,KAAK,gBAAgB,EAAE,aAAa,iBAAiB,IAAI;AAAA,QAC/D;AAAA,MACF,CAAC,EACA;AAAA,QAAM,CAAC,MACN,OAAO,aAAa,QAAQ,EAAE,UAAU,oCAAoC,OAAO;AAAA,MACrF,EACC,QAAQ,MAAM,WAAW,KAAK,CAAC;AAAA,IACpC;AAAA,EACF,IACA;AAEN,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/document-tools/useIsOnline.js

@@ -0,0 +1,13 @@
+import { useSyncExternalStore } from "react";
+import { onlineManager } from "@tanstack/react-query";
+function useIsOnline() {
+  return useSyncExternalStore(
+    (onChange) => onlineManager.subscribe(onChange),
+    () => onlineManager.isOnline(),
+    () => true
+  );
+}
+export {
+  useIsOnline
+};
+//# sourceMappingURL=useIsOnline.js.map

package/dist/document-tools/useIsOnline.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/document-tools/useIsOnline.ts"],
+  "sourcesContent": ["/**\n * Reactive connectivity from React Query's `onlineManager` (the browser's online events, plus\n * whatever the host feeds it, e.g. a WebSocket). The markup autosave waits while it is false.\n */\n\nimport { useSyncExternalStore } from 'react'\nimport { onlineManager } from '@tanstack/react-query'\n\nexport function useIsOnline(): boolean {\n  return useSyncExternalStore(\n    (onChange) => onlineManager.subscribe(onChange),\n    () => onlineManager.isOnline(),\n    () => true\n  )\n}\n"],
+  "mappings": "AAKA,SAAS,4BAA4B;AACrC,SAAS,qBAAqB;AAEvB,SAAS,cAAuB;AACrC,SAAO;AAAA,IACL,CAAC,aAAa,cAAc,UAAU,QAAQ;AAAA,IAC9C,MAAM,cAAc,SAAS;AAAA,IAC7B,MAAM;AAAA,EACR;AACF;",
+  "names": []
+}

package/dist/document-tools/verification.js

@@ -0,0 +1,60 @@
+import { useQuery } from "@tanstack/react-query";
+import { useDocumentTools } from "./environment.js";
+import { sha256Hex } from "./signing.js";
+import { arbiQueryKeys } from "../query-keys.js";
+const VERIFY_PATH = "/v1/sign/verify/{reference}";
+const REFERENCE = /^sig-[0-9a-f]{32}$/;
+function isSignatureReference(reference) {
+  return !!reference && REFERENCE.test(reference);
+}
+class SignatureVerificationError extends Error {
+  constructor(message, status) {
+    super(message);
+    this.status = status;
+    this.name = "SignatureVerificationError";
+  }
+  status;
+}
+const VERIFY_ERRORS = {
+  404: "No signature has this reference.",
+  429: "Too many checks, try again in a minute."
+};
+async function fetchSignatureVerification(client, reference) {
+  if (!isSignatureReference(reference)) {
+    throw new SignatureVerificationError("This is not a signature reference.");
+  }
+  const { data, response } = await client.GET(VERIFY_PATH, {
+    params: { path: { reference } }
+  });
+  if (!response.ok || !data) {
+    throw new SignatureVerificationError(
+      VERIFY_ERRORS[response.status] ?? "The signature could not be checked right now.",
+      response.status
+    );
+  }
+  return data;
+}
+function useSignatureVerification(reference) {
+  const { client } = useDocumentTools();
+  return useQuery({
+    queryKey: arbiQueryKeys.signatureVerification(reference ?? ""),
+    queryFn: () => fetchSignatureVerification(client, reference),
+    enabled: !!reference,
+    retry: false
+  });
+}
+async function matchSignedCopy(file, verification) {
+  const hash = await sha256Hex(file);
+  if (hash === verification.document_sha256.toLowerCase()) return { kind: "current" };
+  const signature = verification.signatures.find((s) => s.sha256.toLowerCase() === hash);
+  return signature ? { kind: "earlier", signature } : { kind: "none" };
+}
+export {
+  SignatureVerificationError,
+  VERIFY_PATH,
+  fetchSignatureVerification,
+  isSignatureReference,
+  matchSignedCopy,
+  useSignatureVerification
+};
+//# sourceMappingURL=verification.js.map

package/dist/document-tools/verification.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/document-tools/verification.ts"],
+  "sourcesContent": ["/**\n * Checking a signature from its reference, without signing in: the public certificate behind the\n * link on a signed PDF's signature (`GET /v1/sign/verify/{reference}`). It names who signed and\n * when, says whether the signed document is unchanged since, and carries the SHA-256 of the signed\n * PDF and of each signed revision, so anyone can check their own copy in the browser (the file is\n * never uploaded). No email addresses and no document content.\n */\n\nimport type { components } from '@arbidocs/client'\nimport { useQuery } from '@tanstack/react-query'\nimport { useDocumentTools, type DocumentToolsClient } from './environment'\nimport { sha256Hex } from './signing'\nimport { arbiQueryKeys } from '../query-keys'\n\nexport const VERIFY_PATH = '/v1/sign/verify/{reference}'\n\nexport type SignatureVerification = components['schemas']['SignatureVerification']\nexport type VerifiedSignature = components['schemas']['VerifiedSignature']\n\n/** A signature reference as the backend issues them: `sig-` and 128 random bits in hex. */\nconst REFERENCE = /^sig-[0-9a-f]{32}$/\n\nexport function isSignatureReference(reference: string | null | undefined): boolean {\n  return !!reference && REFERENCE.test(reference)\n}\n\nexport class SignatureVerificationError extends Error {\n  constructor(\n    message: string,\n    readonly status?: number\n  ) {\n    super(message)\n    this.name = 'SignatureVerificationError'\n  }\n}\n\nconst VERIFY_ERRORS: Record<number, string> = {\n  404: 'No signature has this reference.',\n  429: 'Too many checks, try again in a minute.',\n}\n\nexport async function fetchSignatureVerification(\n  client: DocumentToolsClient,\n  reference: string\n): Promise<SignatureVerification> {\n  if (!isSignatureReference(reference)) {\n    throw new SignatureVerificationError('This is not a signature reference.')\n  }\n  const { data, response } = await client.GET(VERIFY_PATH, {\n    params: { path: { reference } },\n  })\n  if (!response.ok || !data) {\n    throw new SignatureVerificationError(\n      VERIFY_ERRORS[response.status] ?? 'The signature could not be checked right now.',\n      response.status\n    )\n  }\n  return data\n}\n\n/** The certificate of a signature reference. Needs a `<DocumentToolsProvider>` (no user). */\nexport function useSignatureVerification(reference: string | null | undefined) {\n  const { client } = useDocumentTools()\n  return useQuery({\n    queryKey: arbiQueryKeys.signatureVerification(reference ?? ''),\n    queryFn: () => fetchSignatureVerification(client, reference!),\n    enabled: !!reference,\n    retry: false,\n  })\n}\n\n/**\n * What a copy is: the signed document as it stands (`current`), the document as it was when an\n * earlier signer signed it (`earlier`, a counter-signed PDF's earlier revision), or neither.\n */\nexport type CopyMatch =\n  { kind: 'current' } | { kind: 'earlier'; signature: VerifiedSignature } | { kind: 'none' }\n\n/** Compare a file with the signed PDF and its signed revisions. Hashed here; nothing is uploaded. */\nexport async function matchSignedCopy(\n  file: Blob,\n  verification: Pick<SignatureVerification, 'document_sha256' | 'signatures'>\n): Promise<CopyMatch> {\n  const hash = await sha256Hex(file)\n  if (hash === verification.document_sha256.toLowerCase()) return { kind: 'current' }\n  const signature = verification.signatures.find((s) => s.sha256.toLowerCase() === hash)\n  return signature ? { kind: 'earlier', signature } : { kind: 'none' }\n}\n"],
+  "mappings": "AASA,SAAS,gBAAgB;AACzB,SAAS,wBAAkD;AAC3D,SAAS,iBAAiB;AAC1B,SAAS,qBAAqB;AAEvB,MAAM,cAAc;AAM3B,MAAM,YAAY;AAEX,SAAS,qBAAqB,WAA+C;AAClF,SAAO,CAAC,CAAC,aAAa,UAAU,KAAK,SAAS;AAChD;AAEO,MAAM,mCAAmC,MAAM;AAAA,EACpD,YACE,SACS,QACT;AACA,UAAM,OAAO;AAFJ;AAGT,SAAK,OAAO;AAAA,EACd;AAAA,EAJW;AAKb;AAEA,MAAM,gBAAwC;AAAA,EAC5C,KAAK;AAAA,EACL,KAAK;AACP;AAEA,eAAsB,2BACpB,QACA,WACgC;AAChC,MAAI,CAAC,qBAAqB,SAAS,GAAG;AACpC,UAAM,IAAI,2BAA2B,oCAAoC;AAAA,EAC3E;AACA,QAAM,EAAE,MAAM,SAAS,IAAI,MAAM,OAAO,IAAI,aAAa;AAAA,IACvD,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE;AAAA,EAChC,CAAC;AACD,MAAI,CAAC,SAAS,MAAM,CAAC,MAAM;AACzB,UAAM,IAAI;AAAA,MACR,cAAc,SAAS,MAAM,KAAK;AAAA,MAClC,SAAS;AAAA,IACX;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,yBAAyB,WAAsC;AAC7E,QAAM,EAAE,OAAO,IAAI,iBAAiB;AACpC,SAAO,SAAS;AAAA,IACd,UAAU,cAAc,sBAAsB,aAAa,EAAE;AAAA,IAC7D,SAAS,MAAM,2BAA2B,QAAQ,SAAU;AAAA,IAC5D,SAAS,CAAC,CAAC;AAAA,IACX,OAAO;AAAA,EACT,CAAC;AACH;AAUA,eAAsB,gBACpB,MACA,cACoB;AACpB,QAAM,OAAO,MAAM,UAAU,IAAI;AACjC,MAAI,SAAS,aAAa,gBAAgB,YAAY,EAAG,QAAO,EAAE,MAAM,UAAU;AAClF,QAAM,YAAY,aAAa,WAAW,KAAK,CAAC,MAAM,EAAE,OAAO,YAAY,MAAM,IAAI;AACrF,SAAO,YAAY,EAAE,MAAM,WAAW,UAAU,IAAI,EAAE,MAAM,OAAO;AACrE;",
+  "names": []
+}