@bota.dev/react-native-app-sdk 2.0.0-beta.14 → 2.0.0-beta.15

package/ios/BotaUploadV2Backend.mm

@@ -16,6 +16,15 @@ RCT_EXPORT_MODULE(BotaUploadV2Backend)
   if ((self = [super init])) { _backend = [BotaUploadV2BackendBridge new]; }
   return self;
 }
+- (void)readProtectedStreamingStatus:(NSString *)requestId inputJSON:(NSString *)inputJSON resolve:(RCTPromiseResolveBlock)resolve reject:(RCTPromiseRejectBlock)reject {
+  [_backend readProtectedStreamingStatus:requestId inputJSON:inputJSON completion:^(NSString *result, NSError *error) {
+    if (error) { reject(@"BOTA_STREAM_STATUS_FAILED", @"BOTA_STREAM_STATUS_FAILED", nil); }
+    else { resolve(result); }
+  }];
+}
+- (void)cancelProtectedStreamingStatus:(NSString *)requestId resolve:(RCTPromiseResolveBlock)resolve reject:(__unused RCTPromiseRejectBlock)reject {
+  [_backend cancelProtectedStreamingStatus:requestId completion:^{ resolve(nil); }];
+}
 - (void)prepare:(NSString *)inputJSON resolve:(RCTPromiseResolveBlock)resolve reject:(RCTPromiseRejectBlock)reject {
   __weak BotaUploadV2Backend *weakSelf = self;
   [_backend prepare:inputJSON credentialsRequested:^(NSString *requestId, NSString *operationId) {
@@ -25,6 +34,18 @@ RCT_EXPORT_MODULE(BotaUploadV2Backend)
     else { resolve(result); }
   }];
 }
+- (void)syncByo:(NSString *)inputJSON resolve:(RCTPromiseResolveBlock)resolve reject:(RCTPromiseRejectBlock)reject {
+  __weak BotaUploadV2Backend *weakSelf = self;
+  [_backend syncByo:inputJSON credentialsRequested:^(NSString *requestId, NSString *operationId) {
+    [weakSelf emitOnCredentialsRequested:@{@"requestId": requestId, @"operationId": operationId}];
+  } completion:^(NSString *result, NSError *error) {
+    if (error) { reject(error.userInfo[@"byoCode"] ?: @"byo_upload_failed", error.localizedDescription, nil); }
+    else { resolve(result); }
+  }];
+}
+- (void)cancelByo:(NSString *)operationId resolve:(RCTPromiseResolveBlock)resolve reject:(__unused RCTPromiseRejectBlock)reject {
+  [_backend cancelByo:operationId completion:^{ resolve(nil); }];
+}
 - (void)cancel:(NSString *)operationId resolve:(RCTPromiseResolveBlock)resolve reject:(__unused RCTPromiseRejectBlock)reject {
   [_backend cancel:operationId completion:^{ resolve(nil); }];
 }

package/ios/UploadBackend/BotaUploadV2BackendBridge.swift

@@ -4,9 +4,28 @@ import Foundation
 @objc(BotaUploadV2BackendBridge)
 public final class BotaUploadV2BackendBridge: NSObject, @unchecked Sendable {
   @MainActor private var coordinator: UploadCoordinator?
+  @MainActor private var byo: ByoBridgeDriver?
   @MainActor private var destroyed = false
+  @MainActor private var statusJobs: [String: Task<Void, Never>] = [:]
   @MainActor private var credentialsRequested: (@Sendable (String, String) -> Void)?
 
+  @objc(readProtectedStreamingStatus:inputJSON:completion:)
+  public func readProtectedStreamingStatus(_ id: String, inputJSON: String,
+    completion: @escaping @Sendable (String?, NSError?) -> Void) {
+    Task { @MainActor in
+      guard !destroyed, statusJobs[id] == nil else { completion(nil, UploadFailure.cancelled as NSError); return }
+      statusJobs[id] = Task { @MainActor in
+        defer { statusJobs[id] = nil }
+        do { let result = try await UploadStreamingStatus().read(inputJSON); completion(result, nil) }
+        catch { completion(nil, UploadFailure.safe(error) as NSError) }
+      }
+    }
+  }
+  @objc(cancelProtectedStreamingStatus:completion:)
+  public func cancelProtectedStreamingStatus(_ id: String, completion: @escaping @Sendable () -> Void) {
+    Task { @MainActor in statusJobs[id]?.cancel(); completion() }
+  }
+
   @objc(prepare:credentialsRequested:completion:)
   public func prepare(_ json: String,
     credentialsRequested: @escaping @Sendable (String, String) -> Void,
@@ -23,6 +42,26 @@ public final class BotaUploadV2BackendBridge: NSObject, @unchecked Sendable {
     }
   }
 
+  @objc(syncByo:credentialsRequested:completion:)
+  public func syncByo(_ json: String, credentialsRequested: @escaping @Sendable (String, String) -> Void,
+    completion: @escaping @Sendable (String?, NSError?) -> Void) {
+    Task { @MainActor in
+      do {
+        guard !destroyed else { throw UploadFailure.cancelled }
+        self.credentialsRequested = credentialsRequested
+        completion(try await byoService().sync(json), nil)
+      } catch { completion(nil, (error is ByoStorageError ? error : UploadFailure.safe(error)) as NSError) }
+    }
+  }
+  @objc(cancelByo:completion:)
+  public func cancelByo(_ id: String, completion: @escaping @Sendable () -> Void) {
+    Task { @MainActor in await byoService().cancel(id); completion() }
+  }
+  @MainActor private func byoService() -> ByoBridgeDriver {
+    if let byo { return byo }
+    let value = ByoBridgeDriver(credentials: service().credentials); byo = value; return value
+  }
+
   @objc(cancel:completion:)
   public func cancel(_ id: String, completion: @escaping @Sendable () -> Void) {
     Task { @MainActor in coordinator?.cancel(id); completion() }
@@ -45,7 +84,11 @@ public final class BotaUploadV2BackendBridge: NSObject, @unchecked Sendable {
     Task { @MainActor in coordinator?.credentials.reject(requestId: id); completion() }
   }
   @objc public func invalidate() {
-    Task { @MainActor in destroyed = true; coordinator?.cancelAll(); credentialsRequested = nil }
+    Task { @MainActor in
+      destroyed = true; coordinator?.cancelAll(); credentialsRequested = nil
+      statusJobs.values.forEach { $0.cancel() }; statusJobs.removeAll()
+      await byo?.stop()
+    }
   }
 
   @MainActor private func service() -> UploadCoordinator {
@@ -69,6 +112,12 @@ public final class BotaUploadV2BackendBridge: NSObject, @unchecked Sendable {
       default: throw UploadFailure.invalidDocument
       }
       guard let sessionId = UUID(uuidString: prepared.session.session_id) else { throw UploadFailure.invalidDocument }
+      let submitMarkers: EncryptedUploadV2Material.MarkerSubmitter?
+      if operation.input.recording.markersRequired == true {
+        submitMarkers = { documents, evidence in
+          try await operation.submitMarkers(documents, evidence: Self.evidence(evidence))
+        }
+      } else { submitMarkers = nil }
       let material = EncryptedUploadV2Material(
         materialID: UUID().uuidString.lowercased(), recordingID: operation.input.recording.uuid,
         uploadSessionID: sessionId, ownerRevision: prepared.session.owner_revision, policy: policy,
@@ -83,7 +132,8 @@ public final class BotaUploadV2BackendBridge: NSObject, @unchecked Sendable {
           return EncryptedUploadV2ContextExchange(challenge: context.challenge, exchangeProof: context.exchangeProof)
         },
         shouldUploadCiphertext: { try await operation.shouldUpload(Self.evidence($0)) },
-        reconcileStaging: { try await operation.reconcileStaging($0, evidence: Self.evidence($1)) }
+        reconcileStaging: { try await operation.reconcileStaging($0, evidence: Self.evidence($1)) },
+        submitMarkers: submitMarkers
       )
       return BotaDeviceSDKEncryptedUploadV2Materials.register(material)
     }, unregister: { id in _ = BotaDeviceSDKEncryptedUploadV2Materials.remove(id) })

package/ios/UploadBackend/ByoBridgeDriver.swift

@@ -0,0 +1,94 @@
+import BotaAppSDK
+import Foundation
+
+/// Metadata-only RN boundary. SDK native code owns documents and recording bytes.
+@MainActor final class ByoBridgeDriver {
+    private let credentials: UploadCredentials
+    private var tasks: [String: Task<String, Error>] = [:]
+    private var cancelled: Set<String> = []
+    private var stopped = false
+    init(credentials: UploadCredentials) { self.credentials = credentials }
+    private struct Input: Decodable {
+        let operationId: String
+        let device: Device
+        let recording: Recording?
+        let mode: String
+        let scope: Scope
+        struct Recording: Decodable { let uuid: String; let generation: UInt32 }
+        struct Scope: Decodable {
+            let baseUrl, scopeKey, organizationId, projectId, environment, deviceId: String
+            let bindingGeneration: UInt32
+        }
+        struct Device: Decodable {
+            let id, serialNumber, deviceType, firmwareVersion, connectionState: String
+            let hardwareRevision: String?
+            let isProvisioned: Bool
+            let mtu: Int
+            func native() throws -> ConnectedDevice {
+                let type: DeviceType
+                switch deviceType {
+                case "bota_pin": type = .botaPin
+                case "bota_pin_4g": type = .botaPin4G
+                case "bota_note": type = .botaNote
+                default: throw UploadFailure.invalidInput
+                }
+                guard connectionState == "connected", (23...517).contains(mtu),
+                      !id.isEmpty, !serialNumber.isEmpty else { throw UploadFailure.invalidInput }
+                return ConnectedDevice(id: id, serialNumber: serialNumber, deviceType: type, firmwareVersion: firmwareVersion,
+                    hardwareRevision: hardwareRevision, isProvisioned: isProvisioned, connectionState: .connected, mtu: mtu)
+            }
+        }
+    }
+    private func check(_ id: String) throws {
+        try Task.checkCancellation()
+        guard !stopped, !cancelled.contains(id), tasks[id] != nil else { throw UploadFailure.cancelled }
+    }
+    func sync(_ json: String) async throws -> String {
+        guard json.utf8.count <= 8192 else { throw UploadFailure.invalidInput }
+        let input = try JSONDecoder().decode(Input.self, from: Data(json.utf8))
+        let id = input.operationId
+        guard id.hasPrefix("byo-"), id.utf8.count <= 64, !stopped, !cancelled.contains(id), tasks[id] == nil,
+              let url = URL(string: input.scope.baseUrl) else { throw UploadFailure.invalidInput }
+        let device = try input.device.native()
+        let task = Task {
+            try self.check(id)
+            let options = ByoStorageOptions(baseURL: url, scopeKey: input.scope.scopeKey,
+                organizationID: input.scope.organizationId, projectID: input.scope.projectId, deviceID: input.scope.deviceId,
+                environment: input.scope.environment, bindingGeneration: input.scope.bindingGeneration,
+                stateDirectory: FileManager.default.urls(for: .applicationSupportDirectory, in: .userDomainMask)[0]
+                    .appendingPathComponent("BotaSDKByo", isDirectory: true),
+                accessToken: { try await self.credentials.request(operationId: id) },
+                validateScope: { try await self.check(id) })
+            let bytes: Data
+            if input.mode == "list" {
+                let recordings = try await BotaDeviceClient.shared.recordings.listByoRecordings(device, options: options)
+                try self.check(id)
+                bytes = try JSONSerialization.data(withJSONObject: recordings.map { ["uuid": $0.uuid, "generation": $0.generation] as [String: Any] })
+            } else {
+                guard input.mode == "stream" || (input.mode == "sync" && input.recording != nil) else { throw UploadFailure.invalidInput }
+                let selected = input.recording.map { ByoRecording(uuid: $0.uuid, generation: $0.generation) }
+                let result: ByoUploadResult
+                if input.mode == "stream" { result = try await BotaDeviceClient.shared.recordings.streamByoRecording(device, recording: selected, options: options) }
+                else { result = try await BotaDeviceClient.shared.recordings.syncByoRecording(device, recording: selected!, options: options) }
+                try self.check(id)
+                bytes = try JSONSerialization.data(withJSONObject: ["recordingId": result.recordingID, "uploadSessionId": result.uploadSessionID])
+            }
+            return String(decoding: bytes, as: UTF8.self)
+        }
+        tasks[id] = task
+        defer { tasks[id] = nil; cancelled.remove(id); credentials.cancel(operationId: id) }
+        return try await task.value
+    }
+    func cancel(_ id: String) async {
+        guard id.hasPrefix("byo-"), id.utf8.count <= 64 else { return }
+        if cancelled.count >= 128 { stopped = true }
+        else { cancelled.insert(id) }
+        let task = tasks[id]; task?.cancel(); credentials.cancel(operationId: id); _ = await task?.result
+    }
+    func stop() async {
+        stopped = true
+        let current = tasks
+        for (id, task) in current { task.cancel(); credentials.cancel(operationId: id) }
+        for task in current.values { _ = await task.result }
+    }
+}

package/ios/UploadBackend/UploadModels.swift

@@ -101,6 +101,7 @@ struct UploadInput: Codable, Sendable {
     var durationMs: String
     var plaintextLength: String
     var storageFormat: UInt8
+    var markersRequired: Bool? = nil
   }
   struct Capability: Codable, Sendable { var rawValueHex: String; var flags: UInt32 }
   struct Checkpoint: Codable, Sendable {
@@ -187,7 +188,9 @@ struct UploadInput: Codable, Sendable {
     encoder.outputFormatting = [.sortedKeys, .withoutEscapingSlashes]
     var identityScope = scope
     if !includeTransport { identityScope.nativeDeviceId = "" }
-    return UploadValidation.hash(try encoder.encode(Identity(scope: identityScope, recording: recording)))
+    var identityRecording = recording
+    if identityRecording.markersRequired == false { identityRecording.markersRequired = nil }
+    return UploadValidation.hash(try encoder.encode(Identity(scope: identityScope, recording: identityRecording)))
   }
 
   func validateCheckpoint(_ entry: UploadJournalEntry?) throws {
@@ -242,6 +245,8 @@ struct UploadSession: Decodable, Sendable {
   let plaintext_length: UInt64?
   let completion_receipt_base64: String?
   let completion_receipt_sha256: String?
+  let marker_completion_receipt_base64: String?
+  let marker_completion_receipt_sha256: String?
 
   func validatePointer() throws {
     guard profile == "encrypted_upload_v2", UploadValidation.uuid(session_id), owner_revision > 0,

package/ios/UploadBackend/UploadOperation.swift

@@ -178,7 +178,7 @@ struct UploadContext: Sendable {
     } else {
       let nonce = try await nonce()
       let body: [String: Any] = [
-        "device_id": input.scope.deviceId, "end_user_id": input.scope.endUserId, "binding_generation": input.scope.bindingGeneration,
+        "device_id": input.scope.deviceId, "binding_generation": input.scope.bindingGeneration,
         "recording_uuid": input.recording.uuid, "recording_generation": input.recording.generation,
         "storage_format": "bota_enc_v2", "channel": "ble",
         "capabilities_base64": try UploadValidation.bytes(input.capability.rawValueHex).base64EncodedString(),
@@ -201,7 +201,28 @@ struct UploadContext: Sendable {
     try selected.validatePointer()
     _ = try UploadValidation.date(selected.expires_at)
     guard UploadValidation.hex(selected.authorization_sha256, bytes: 32) else { throw UploadFailure.invalidDocument }
-    let authorization = try UploadValidation.document(selected.authorization_base64, hash: selected.authorization_sha256, size: 408)
+    var authorization = try UploadValidation.document(selected.authorization_base64, hash: selected.authorization_sha256, size: 408)
+    if input.recording.markersRequired == true {
+      struct Admission: Decodable {
+        let profile: String
+        let context_base64: String
+        let authorization_base64: String
+        let authorization_sha256: String
+      }
+      let path = try sessionPath() + "/markers/authorization"
+      let admitted: Data
+      do {
+        admitted = try await retry { try await request(path + "?owner_revision=\(selected.owner_revision)") }
+      } catch UploadFailure.http(404) where ["", "created", "staging", "staged"].contains(selected.state ?? "") {
+        admitted = try await retry { try await request(path, method: "POST", body: [
+          "owner_revision": selected.owner_revision, "request_uuid": selected.session_id,
+        ]) }
+      }
+      let admission: Admission = try decode(admitted)
+      guard admission.profile == "recording-markers/1" else { throw UploadFailure.invalidDocument }
+      authorization.append(try UploadValidation.document(admission.context_base64, size: 176))
+      authorization.append(try UploadValidation.document(admission.authorization_base64, hash: admission.authorization_sha256, size: 280))
+    }
     session = selected
     return UploadPrepared(session: selected, authorization: authorization, recordingId: initial.recordingId)
   }
@@ -313,6 +334,18 @@ struct UploadContext: Sendable {
     needsManifest = false
   }
 
+  func submitMarkers(_ documents: [Data], evidence: UploadEvidence) async throws {
+    try verify(evidence)
+    guard input.recording.markersRequired == true, (2...4097).contains(documents.count),
+          documents.first?.count == 200, documents.dropFirst().allSatisfy({ (216...402).contains($0.count) }),
+          let revision = entry?.ownerRevision else { throw UploadFailure.invalidDocument }
+    let path = try sessionPath() + "/markers/batch"
+    _ = try await retry { try await request(path, method: "POST", body: [
+      "owner_revision": revision, "seal_base64": documents[0].base64EncodedString(),
+      "pages_base64": documents.dropFirst().map { $0.base64EncodedString() },
+    ]) }
+  }
+
   func finalize(_ evidence: UploadEvidence) async throws {
     try verify(evidence)
     guard let entry else { throw UploadFailure.state }
@@ -325,7 +358,12 @@ struct UploadContext: Sendable {
               let hash = status.completion_receipt_sha256, UploadValidation.hex(hash, bytes: 32) else {
           throw UploadFailure.invalidDocument
         }
-        receipt = try UploadValidation.document(status.completion_receipt_base64, hash: hash, size: 336)
+        var completed = try UploadValidation.document(status.completion_receipt_base64, hash: hash, size: 336)
+        if input.recording.markersRequired == true {
+          guard let markerHash = status.marker_completion_receipt_sha256 else { throw UploadFailure.invalidDocument }
+          completed.append(try UploadValidation.document(status.marker_completion_receipt_base64, hash: markerHash, size: 296))
+        }
+        receipt = completed
         return
       }
       try await wait(2000)

package/ios/UploadBackend/UploadStreamingStatus.swift

@@ -0,0 +1,43 @@
+import Foundation
+import CoreFoundation
+
+/** Scalar-only read boundary; all HTTP runs through the no-redirect native client. */
+@MainActor final class UploadStreamingStatus {
+  private let http: any UploadHTTP
+  init(http: any UploadHTTP = UploadURLSessionHTTP()) { self.http = http }
+  func read(_ input: String) async throws -> String {
+    guard let object = try JSONSerialization.jsonObject(with: Data(input.utf8)) as? [String: Any],
+      let address = object["url"] as? String, let token = object["token"] as? String,
+      let org = object["organizationId"] as? String,
+      UploadValidation.matches(address, "https://[A-Za-z0-9.-]+(?::[0-9]+)?(?:/[A-Za-z0-9_-]+)+/recordings/rec_[A-Za-z0-9_-]+/streaming-status\\?session_id=[0-9a-f-]{36}"),
+      let url = URL(string: address), (1...16384).contains(token.utf8.count),
+      token.utf8.allSatisfy({ (33...126).contains($0) }),
+      org.isEmpty || UploadValidation.matches(org, "[A-Za-z0-9_-]{1,128}") else { throw UploadFailure.invalidInput }
+    try Task.checkCancellation()
+    var request = URLRequest(url: url); request.httpMethod = "GET"
+    request.setValue("Bearer \(token)", forHTTPHeaderField: "Authorization")
+    request.setValue("application/json", forHTTPHeaderField: "Accept")
+    if !org.isEmpty { request.setValue(org, forHTTPHeaderField: "X-Organization-Id") }
+    let response = try await http.send(request)
+    try Task.checkCancellation()
+    guard response.status == 200 else { throw UploadFailure.http(response.status) }
+    guard response.body.count <= 16384 else { throw UploadFailure.invalidDocument }
+    return try Self.scalarStatus(response.body)
+  }
+  static func scalarStatus(_ body: Data) throws -> String {
+    let strings: Set<String> = ["profile", "recording_id", "session_id", "writer_epoch", "revision", "state"]
+    let numbers: Set<String> = ["recording_generation", "received_count", "contiguous_sequence"]
+    guard let object = try JSONSerialization.jsonObject(with: body) as? [String: Any],
+      Set(object.keys) == strings.union(numbers).union(["expected_count", "authorization_expired"]),
+      strings.allSatisfy({ (object[$0] as? String).map { $0.utf8.count <= 160 } == true }),
+      numbers.allSatisfy({ isNumber(object[$0]) }),
+      object["expected_count"] is NSNull || isNumber(object["expected_count"]),
+      let expired = object["authorization_expired"] as? NSNumber,
+      CFGetTypeID(expired) == CFBooleanGetTypeID() else { throw UploadFailure.invalidDocument }
+    return String(decoding: try JSONSerialization.data(withJSONObject: object), as: UTF8.self)
+  }
+  private static func isNumber(_ value: Any?) -> Bool {
+    guard let number = value as? NSNumber else { return false }
+    return CFGetTypeID(number) != CFBooleanGetTypeID()
+  }
+}

package/lib/commonjs/byoStorageBackend.js

@@ -0,0 +1,144 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createManagedByoStorageBackend = createManagedByoStorageBackend;
+/** @internal Shared implementation for the production factory and host tests. */
+function createManagedByoStorageBackend(native, options) {
+  const config = {
+    ...options
+  };
+  const url = new URL(config.baseUrl);
+  if (url.protocol !== 'https:' || url.username || url.password || url.search || url.hash || !config.scopeKey || !config.organizationId || !config.projectId || !config.signal || !['development', 'gamma', 'production'].includes(config.environment)) throw new Error('Invalid BYO configuration');
+  let disposed = false;
+  const attempts = new Set();
+  const perform = async (device, recording, target, live = false) => {
+    if (!native?.syncByo || !native.cancelByo) throw new Error('BYO requires the matching native SDK binary');
+    device = {
+      ...device
+    };
+    recording = recording && {
+      ...recording
+    };
+    target = {
+      ...target
+    };
+    if (recording !== null && (!/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/.test(recording.uuid) || !Number.isSafeInteger(recording.generation) || recording.generation < 0 || recording.generation > 0xffffffff) || !Number.isSafeInteger(target.bindingGeneration) || target.bindingGeneration < 1 || target.bindingGeneration > 0xffffffff) {
+      throw new Error('Invalid BYO recording identity');
+    }
+    const operationId = 'byo-' + 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, key => {
+      const value = Math.floor(Math.random() * 16);
+      return (key === 'x' ? value : value & 3 | 8).toString(16);
+    });
+    const controller = new AbortController();
+    let cancelTask;
+    let settle;
+    const settled = new Promise(resolve => {
+      settle = resolve;
+    });
+    const check = () => {
+      if (disposed || controller.signal.aborted || config.signal.aborted || target.signal?.aborted) throw new Error('BYO upload cancelled');
+    };
+    const cancel = () => {
+      controller.abort();
+      return cancelTask ??= Promise.resolve().then(() => native.cancelByo(operationId));
+    };
+    const abort = () => {
+      void cancel().catch(() => {});
+    };
+    const attempt = {
+      cancel,
+      settled
+    };
+    attempts.add(attempt);
+    let subscription;
+    let completed = false;
+    try {
+      config.signal.addEventListener('abort', abort, {
+        once: true
+      });
+      target.signal?.addEventListener('abort', abort, {
+        once: true
+      });
+      check();
+      subscription = native.onCredentialsRequested(event => {
+        if (event.operationId !== operationId) return;
+        void (async () => {
+          try {
+            check();
+            const token = await config.getAccessToken(controller.signal);
+            check();
+            await native.resolveCredentials(event.requestId, token);
+          } catch {
+            await native.rejectCredentials(event.requestId).catch(() => {});
+          }
+        })();
+      });
+      const value = JSON.parse(await native.syncByo(JSON.stringify({
+        operationId,
+        mode: live ? 'stream' : recording === null ? 'list' : 'sync',
+        device,
+        recording,
+        scope: {
+          baseUrl: url.href,
+          scopeKey: config.scopeKey,
+          organizationId: config.organizationId,
+          projectId: config.projectId,
+          environment: config.environment,
+          deviceId: target.deviceId,
+          bindingGeneration: target.bindingGeneration
+        }
+      })));
+      check();
+      if (recording === null && !live) {
+        if (!Array.isArray(value) || value.length > 4096 || value.some(item => !item || !/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/.test(item.uuid) || !Number.isSafeInteger(item.generation) || item.generation < 0 || item.generation > 0xffffffff)) throw new Error('Invalid BYO native catalog');
+        completed = true;
+        return value.map(item => ({
+          uuid: item.uuid,
+          generation: item.generation
+        }));
+      }
+      const result = value;
+      if (!result || !/^rec_[A-Za-z0-9_-]+$/.test(result.recordingId) || !/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/.test(result.uploadSessionId)) throw new Error('Invalid BYO native result');
+      completed = true;
+      return {
+        recordingId: result.recordingId,
+        uploadSessionId: result.uploadSessionId
+      };
+    } finally {
+      try {
+        if (!completed) await cancel();
+      } finally {
+        attempts.delete(attempt);
+        config.signal.removeEventListener('abort', abort);
+        target.signal?.removeEventListener('abort', abort);
+        subscription?.remove();
+        settle();
+      }
+    }
+  };
+  return {
+    async sync(device, recording, target) {
+      return await perform(device, recording, target);
+    },
+    async stream(device, recording, target) {
+      return await perform(device, recording, target, true);
+    },
+    async list(device, target) {
+      return await perform(device, null, target);
+    },
+    async dispose() {
+      disposed = true;
+      const results = await Promise.allSettled([...attempts].map(async attempt => {
+        try {
+          await attempt.cancel();
+        } finally {
+          await attempt.settled;
+        }
+      }));
+      if (results.some(result => result.status === 'rejected')) throw new Error('BYO cancellation failed');
+    }
+  };
+}
+//# sourceMappingURL=byoStorageBackend.js.map

package/lib/commonjs/byoStorageBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["createManagedByoStorageBackend","native","options","config","url","URL","baseUrl","protocol","username","password","search","hash","scopeKey","organizationId","projectId","signal","includes","environment","Error","disposed","attempts","Set","perform","device","recording","target","live","syncByo","cancelByo","test","uuid","Number","isSafeInteger","generation","bindingGeneration","operationId","replace","key","value","Math","floor","random","toString","controller","AbortController","cancelTask","settle","settled","Promise","resolve","check","aborted","cancel","abort","then","catch","attempt","add","subscription","completed","addEventListener","once","onCredentialsRequested","event","token","getAccessToken","resolveCredentials","requestId","rejectCredentials","JSON","parse","stringify","mode","scope","href","deviceId","Array","isArray","length","some","item","map","result","recordingId","uploadSessionId","delete","removeEventListener","remove","sync","stream","list","dispose","results","allSettled","status"],"sourceRoot":"../../src","sources":["byoStorageBackend.ts"],"mappings":";;;;;;AAwBA;AACO,SAASA,8BAA8BA,CAACC,MAAmB,EAAEC,OAAiC,EAAqB;EACxH,MAAMC,MAAM,GAAG;IAAE,GAAGD;EAAQ,CAAC;EAC7B,MAAME,GAAG,GAAG,IAAIC,GAAG,CAACF,MAAM,CAACG,OAAO,CAAC;EACnC,IAAIF,GAAG,CAACG,QAAQ,KAAK,QAAQ,IAAIH,GAAG,CAACI,QAAQ,IAAIJ,GAAG,CAACK,QAAQ,IAAIL,GAAG,CAACM,MAAM,IAAIN,GAAG,CAACO,IAAI,IACrF,CAACR,MAAM,CAACS,QAAQ,IAAI,CAACT,MAAM,CAACU,cAAc,IAAI,CAACV,MAAM,CAACW,SAAS,IAAI,CAACX,MAAM,CAACY,MAAM,IACjF,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,YAAY,CAAC,CAACC,QAAQ,CAACb,MAAM,CAACc,WAAW,CAAC,EAAE,MAAM,IAAIC,KAAK,CAAC,2BAA2B,CAAC;EACpH,IAAIC,QAAQ,GAAG,KAAK;EACpB,MAAMC,QAAQ,GAAG,IAAIC,GAAG,CAAsD,CAAC;EAC/E,MAAMC,OAAO,GAAG,MAAAA,CAAOC,MAAuB,EAAEC,SAA8B,EAAEC,MAAqB,EAAEC,IAAI,GAAG,KAAK,KAAgD;IAC/J,IAAI,CAACzB,MAAM,EAAE0B,OAAO,IAAI,CAAC1B,MAAM,CAAC2B,SAAS,EAAE,MAAM,IAAIV,KAAK,CAAC,6CAA6C,CAAC;IACzGK,MAAM,GAAG;MAAE,GAAGA;IAAO,CAAC;IAAEC,SAAS,GAAGA,SAAS,IAAI;MAAE,GAAGA;IAAU,CAAC;IAAEC,MAAM,GAAG;MAAE,GAAGA;IAAO,CAAC;IACzF,IAAKD,SAAS,KAAK,IAAI,KAAK,CAAC,+CAA+C,CAACK,IAAI,CAACL,SAAS,CAACM,IAAI,CAAC,IAC/F,CAACC,MAAM,CAACC,aAAa,CAACR,SAAS,CAACS,UAAU,CAAC,IAAIT,SAAS,CAACS,UAAU,GAAG,CAAC,IAAIT,SAAS,CAACS,UAAU,GAAG,UAAU,CAAC,IAC7G,CAACF,MAAM,CAACC,aAAa,CAACP,MAAM,CAACS,iBAAiB,CAAC,IAAIT,MAAM,CAACS,iBAAiB,GAAG,CAAC,IAAIT,MAAM,CAACS,iBAAiB,GAAG,UAAU,EAAE;MAC1H,MAAM,IAAIhB,KAAK,CAAC,gCAAgC,CAAC;IACnD;IACA,MAAMiB,WAAW,GAAG,MAAM,GAAG,sCAAsC,CAACC,OAAO,CAAC,OAAO,EAAEC,GAAG,IAAI;MAC1F,MAAMC,KAAK,GAAGC,IAAI,CAACC,KAAK,CAACD,IAAI,CAACE,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC;MAAE,OAAO,CAACJ,GAAG,KAAK,GAAG,GAAGC,KAAK,GAAIA,KAAK,GAAG,CAAC,GAAI,CAAC,EAAEI,QAAQ,CAAC,EAAE,CAAC;IAC3G,CAAC,CAAC;IACF,MAAMC,UAAU,GAAG,IAAIC,eAAe,CAAC,CAAC;IACxC,IAAIC,UAAqC;IACzC,IAAIC,MAAmB;IACvB,MAAMC,OAAO,GAAG,IAAIC,OAAO,CAAOC,OAAO,IAAI;MAAEH,MAAM,GAAGG,OAAO;IAAE,CAAC,CAAC;IACnE,MAAMC,KAAK,GAAGA,CAAA,KAAM;MAClB,IAAI/B,QAAQ,IAAIwB,UAAU,CAAC5B,MAAM,CAACoC,OAAO,IAAIhD,MAAM,CAACY,MAAM,CAACoC,OAAO,IAAI1B,MAAM,CAACV,MAAM,EAAEoC,OAAO,EAAE,MAAM,IAAIjC,KAAK,CAAC,sBAAsB,CAAC;IACvI,CAAC;IACD,MAAMkC,MAAM,GAAGA,CAAA,KAAM;MACnBT,UAAU,CAACU,KAAK,CAAC,CAAC;MAClB,OAAOR,UAAU,KAAKG,OAAO,CAACC,OAAO,CAAC,CAAC,CAACK,IAAI,CAAC,MAAMrD,MAAM,CAAC2B,SAAS,CAACO,WAAW,CAAC,CAAC;IACnF,CAAC;IACD,MAAMkB,KAAK,GAAGA,CAAA,KAAM;MAAE,KAAKD,MAAM,CAAC,CAAC,CAACG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAAE,CAAC;IACtD,MAAMC,OAAO,GAAG;MAAEJ,MAAM;MAAEL;IAAQ,CAAC;IAAE3B,QAAQ,CAACqC,GAAG,CAACD,OAAO,CAAC;IAC1D,IAAIE,YAA4C;IAChD,IAAIC,SAAS,GAAG,KAAK;IACrB,IAAI;MACFxD,MAAM,CAACY,MAAM,CAAC6C,gBAAgB,CAAC,OAAO,EAAEP,KAAK,EAAE;QAAEQ,IAAI,EAAE;MAAK,CAAC,CAAC;MAAEpC,MAAM,CAACV,MAAM,EAAE6C,gBAAgB,CAAC,OAAO,EAAEP,KAAK,EAAE;QAAEQ,IAAI,EAAE;MAAK,CAAC,CAAC;MAC/HX,KAAK,CAAC,CAAC;MACPQ,YAAY,GAAGzD,MAAM,CAAC6D,sBAAsB,CAACC,KAAK,IAAI;QACpD,IAAIA,KAAK,CAAC5B,WAAW,KAAKA,WAAW,EAAE;QACvC,KAAK,CAAC,YAAY;UAChB,IAAI;YAAEe,KAAK,CAAC,CAAC;YAAE,MAAMc,KAAK,GAAG,MAAM7D,MAAM,CAAC8D,cAAc,CAACtB,UAAU,CAAC5B,MAAM,CAAC;YAAEmC,KAAK,CAAC,CAAC;YAAE,MAAMjD,MAAM,CAACiE,kBAAkB,CAACH,KAAK,CAACI,SAAS,EAAEH,KAAK,CAAC;UAAE,CAAC,CAChJ,MAAM;YAAE,MAAM/D,MAAM,CAACmE,iBAAiB,CAACL,KAAK,CAACI,SAAS,CAAC,CAACZ,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;UAAE;QAC3E,CAAC,EAAE,CAAC;MACN,CAAC,CAAC;MACF,MAAMjB,KAAc,GAAG+B,IAAI,CAACC,KAAK,CAAC,MAAMrE,MAAM,CAAC0B,OAAO,CAAC0C,IAAI,CAACE,SAAS,CAAC;QAACpC,WAAW;QAAEqC,IAAI,EAAE9C,IAAI,GAAG,QAAQ,GAAGF,SAAS,KAAK,IAAI,GAAG,MAAM,GAAG,MAAM;QAAED,MAAM;QAAEC,SAAS;QACjKiD,KAAK,EAAE;UAAEnE,OAAO,EAAEF,GAAG,CAACsE,IAAI;UAAE9D,QAAQ,EAAET,MAAM,CAACS,QAAQ;UAAEC,cAAc,EAAEV,MAAM,CAACU,cAAc;UAC1FC,SAAS,EAAEX,MAAM,CAACW,SAAS;UAAEG,WAAW,EAAEd,MAAM,CAACc,WAAW;UAAE0D,QAAQ,EAAElD,MAAM,CAACkD,QAAQ;UAAEzC,iBAAiB,EAAET,MAAM,CAACS;QAAkB;MAAE,CAAC,CAAC,CAAC,CAAC;MAC/IgB,KAAK,CAAC,CAAC;MACP,IAAI1B,SAAS,KAAK,IAAI,IAAI,CAACE,IAAI,EAAE;QAC/B,IAAI,CAACkD,KAAK,CAACC,OAAO,CAACvC,KAAK,CAAC,IAAIA,KAAK,CAACwC,MAAM,GAAG,IAAI,IAAIxC,KAAK,CAACyC,IAAI,CAACC,IAAI,IAAI,CAACA,IAAI,IAC1E,CAAC,+CAA+C,CAACnD,IAAI,CAACmD,IAAI,CAAClD,IAAI,CAAC,IAChE,CAACC,MAAM,CAACC,aAAa,CAACgD,IAAI,CAAC/C,UAAU,CAAC,IAAI+C,IAAI,CAAC/C,UAAU,GAAG,CAAC,IAAI+C,IAAI,CAAC/C,UAAU,GAAG,UAAU,CAAC,EAAE,MAAM,IAAIf,KAAK,CAAC,4BAA4B,CAAC;QAC/IyC,SAAS,GAAG,IAAI;QAAE,OAAOrB,KAAK,CAAC2C,GAAG,CAACD,IAAI,KAAK;UAAElD,IAAI,EAAEkD,IAAI,CAAClD,IAAc;UAAEG,UAAU,EAAE+C,IAAI,CAAC/C;QAAqB,CAAC,CAAC,CAAC;MACpH;MACA,MAAMiD,MAAM,GAAG5C,KAAwB;MACvC,IAAI,CAAC4C,MAAM,IAAI,CAAC,sBAAsB,CAACrD,IAAI,CAACqD,MAAM,CAACC,WAAW,CAAC,IAC7D,CAAC,+CAA+C,CAACtD,IAAI,CAACqD,MAAM,CAACE,eAAe,CAAC,EAAE,MAAM,IAAIlE,KAAK,CAAC,2BAA2B,CAAC;MAC7HyC,SAAS,GAAG,IAAI;MAAE,OAAO;QAAEwB,WAAW,EAAED,MAAM,CAACC,WAAW;QAAEC,eAAe,EAAEF,MAAM,CAACE;MAAgB,CAAC;IACvG,CAAC,SAAS;MACR,IAAI;QAAE,IAAI,CAACzB,SAAS,EAAE,MAAMP,MAAM,CAAC,CAAC;MAAE,CAAC,SAC/B;QACNhC,QAAQ,CAACiE,MAAM,CAAC7B,OAAO,CAAC;QAAErD,MAAM,CAACY,MAAM,CAACuE,mBAAmB,CAAC,OAAO,EAAEjC,KAAK,CAAC;QAAE5B,MAAM,CAACV,MAAM,EAAEuE,mBAAmB,CAAC,OAAO,EAAEjC,KAAK,CAAC;QAC/HK,YAAY,EAAE6B,MAAM,CAAC,CAAC;QAAEzC,MAAM,CAAC,CAAC;MAClC;IACF;EACJ,CAAC;EACD,OAAO;IACL,MAAM0C,IAAIA,CAACjE,MAAM,EAAEC,SAAS,EAAEC,MAAM,EAAE;MAAE,OAAO,MAAMH,OAAO,CAACC,MAAM,EAAEC,SAAS,EAAEC,MAAM,CAAC;IAAqB,CAAC;IAC7G,MAAMgE,MAAMA,CAAClE,MAAM,EAAEC,SAAS,EAAEC,MAAM,EAAE;MAAE,OAAO,MAAMH,OAAO,CAACC,MAAM,EAAEC,SAAS,EAAEC,MAAM,EAAE,IAAI,CAAC;IAAqB,CAAC;IACrH,MAAMiE,IAAIA,CAACnE,MAAM,EAAEE,MAAM,EAAE;MAAE,OAAO,MAAMH,OAAO,CAACC,MAAM,EAAE,IAAI,EAAEE,MAAM,CAAC;IAAoB,CAAC;IAC5F,MAAMkE,OAAOA,CAAA,EAAG;MACdxE,QAAQ,GAAG,IAAI;MACf,MAAMyE,OAAO,GAAG,MAAM5C,OAAO,CAAC6C,UAAU,CAAC,CAAC,GAAGzE,QAAQ,CAAC,CAAC6D,GAAG,CAAC,MAAMzB,OAAO,IAAI;QAC1E,IAAI;UAAE,MAAMA,OAAO,CAACJ,MAAM,CAAC,CAAC;QAAE,CAAC,SAAS;UAAE,MAAMI,OAAO,CAACT,OAAO;QAAE;MACnE,CAAC,CAAC,CAAC;MACH,IAAI6C,OAAO,CAACb,IAAI,CAACG,MAAM,IAAIA,MAAM,CAACY,MAAM,KAAK,UAAU,CAAC,EAAE,MAAM,IAAI5E,KAAK,CAAC,yBAAyB,CAAC;IACtG;EACF,CAAC;AACH","ignoreList":[]}

package/lib/commonjs/client.js

@@ -86,7 +86,7 @@ const mapPendingRecording = value => {
   }
   const recording = value.encrypted;
   const plaintextLength = recording.plaintextLength;
-  if (typeof recording.uuid !== 'string' || !uuidPattern.test(recording.uuid) || recording.storageFormat !== 3 || typeof plaintextLength !== 'string' || !/^(0|[1-9][0-9]{0,19})$/.test(plaintextLength) || BigInt(plaintextLength) > 0xffffffffffffffffn || typeof recording.ciphertextLength !== 'string' || !/^[1-9][0-9]{0,19}$/.test(recording.ciphertextLength) || BigInt(recording.ciphertextLength) > 0xffffffffffffffffn || typeof recording.ciphertextSha256 !== 'string' || !/^[0-9a-f]{64}$/.test(recording.ciphertextSha256) || !Number.isInteger(recording.generation) || recording.generation < 0 || recording.generation > 0xffffffff) {
+  if (typeof recording.uuid !== 'string' || !uuidPattern.test(recording.uuid) || recording.storageFormat !== 3 || typeof plaintextLength !== 'string' || recording.markersRequired !== undefined && typeof recording.markersRequired !== 'boolean' || !/^(0|[1-9][0-9]{0,19})$/.test(plaintextLength) || BigInt(plaintextLength) > 0xffffffffffffffffn || typeof recording.ciphertextLength !== 'string' || !/^[1-9][0-9]{0,19}$/.test(recording.ciphertextLength) || BigInt(recording.ciphertextLength) > 0xffffffffffffffffn || typeof recording.ciphertextSha256 !== 'string' || !/^[0-9a-f]{64}$/.test(recording.ciphertextSha256) || !Number.isInteger(recording.generation) || recording.generation < 0 || recording.generation > 0xffffffff) {
     throw new Error('invalid native recording catalog identity');
   }
   return {
@@ -97,6 +97,7 @@ const mapPendingRecording = value => {
     storageFormat: 3,
     plaintextLength,
     startedAtMs: recording.startedAtMs,
+    markersRequired: recording.markersRequired ?? false,
     startedAt: new Date(catalogInteger(recording.startedAtMs, 8640000000000000n)),
     durationMs: catalogInteger(recording.durationMs)
   };