@milaboratories/pl-middle-layer 1.64.40 → 1.64.42

package/dist/middle_layer/sharing_list.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharing_list.cjs","names":["SharingOutboxResourceType","SharedEnvelopeResourceType","treeFilter","Computable","AcceptanceFieldPrefix","SynchronizedTreeState","asShareId","SharingStateResourceType"],"sources":["../../src/middle_layer/sharing_list.ts"],"sourcesContent":["import type { PruningFunction } from \"@milaboratories/pl-tree\";\nimport { SynchronizedTreeState } from \"@milaboratories/pl-tree\";\nimport type { Filter, PlClient, SignedResourceId } from \"@milaboratories/pl-client\";\nimport {\n  isEveryoneUserLogin,\n  resourceIdToString,\n  resourceType,\n  resourceTypesEqual,\n  treeFilter,\n} from \"@milaboratories/pl-client\";\nimport { Computable } from \"@milaboratories/computable\";\nimport type { MiddleLayerEnvironment } from \"./middle_layer\";\nimport type { ProjectId } from \"@milaboratories/pl-model-common\";\nimport type {\n  EnvelopeAcceptance,\n  EnvelopeData,\n  EnvelopeMode,\n  ShareId,\n} from \"../model/sharing_model\";\nimport {\n  AcceptanceFieldPrefix,\n  asShareId,\n  SharedEnvelopeResourceType,\n  SharingOutboxResourceType,\n  SharingStateResourceType,\n} from \"../model/sharing_model\";\n\n/** Donor-facing view of one outgoing share. */\nexport interface OutgoingShare {\n  shareId: ShareId; // stable logical identity of the share, preserved across changes\n  sharedAt: number; // this instance's creation time (ms epoch)\n  expiresAt?: number; // EnvelopeData.expiresAt; null maps to undefined = never expires\n  mode: EnvelopeMode;\n  title: string; // display name shown to recipients; defaults to the first project's name\n  /** One entry per project in the pack, so the change UI can offer a per-project decision.\n   *  `projectId` is the donor's source project id; `updatedAt` is when this project's\n   *  snapshot was last (re)taken. */\n  projects: { projectId: ProjectId; label: string; updatedAt: number }[];\n  /** Full recipient logins, from `ListGrants` on the envelope; `[\"*\"]` for everyone-shares. */\n  recipients: string[];\n  /** Per recipient who has responded: their decision and when, from acceptance/{login}. */\n  responses: Record<string, { action: \"accepted\" | \"rejected\"; timestamp: number }>;\n}\n\n/** Per-project view for the donor's change UI, from {@link EnvelopeData.projects}. */\nfunction envelopeProjects(data: EnvelopeData): OutgoingShare[\"projects\"] {\n  return Object.values(data.projects).map((p) => ({\n    projectId: p.source,\n    label: p.label,\n    updatedAt: p.updatedAt,\n  }));\n}\n\n/** Acceptor-facing view of one pending share. */\nexport interface PendingShare {\n  shareId: ShareId;\n  sender: string; // EnvelopeData.sender, display only\n  title: string; // display name shown to recipients; defaults to the first project's name\n  mode: EnvelopeMode; // v1 renders only \"copy\" entries\n  grantedAt: number;\n}\n\nconst SharingOutboxPruningFunction: PruningFunction = (resource) => {\n  if (\n    !resourceTypesEqual(resource.type, SharingOutboxResourceType) &&\n    !resourceTypesEqual(resource.type, SharedEnvelopeResourceType)\n  )\n    return [];\n  return resource.fields;\n};\n\n// Server-side traversal scope (modern resourceTree path). Pruning is client-side ONLY and does\n// NOT stop the backend walk — without a fieldFilter the backend descends through the envelope's\n// project/{uuid} snapshots into the whole project graph (StreamManager etc.), whose field-driven\n// finality predicate then throws on the pruned-to-[] fields. Following fields only FROM the outbox\n// and the envelope stops the walk at the project snapshots (UserProject), which we never traverse.\nconst SharingOutboxFieldFilter: Filter = treeFilter.or(\n  treeFilter.resourceTypeEq(SharingOutboxResourceType.name),\n  treeFilter.resourceTypeEq(SharedEnvelopeResourceType.name),\n);\n\n/** Intermediate of an outgoing share before its full recipient list is fetched: everything the\n *  tree carries synchronously, plus the envelope's signed id for the async `ListGrants` enrich. */\ntype OutgoingShareDraft = Omit<OutgoingShare, \"recipients\"> & { envelopeRid: SignedResourceId };\n\n/**\n * Reactive view of the donor's own outbox. Reads each live envelope's immutable\n * {@link EnvelopeData} plus the per-recipient `acceptance/{login}` records from the tree, then\n * enriches each share's full recipient list via `ListGrants` on the envelope (`[\"*\"]` for an\n * everyone-share). `ListGrants` is gated backend-side to the envelope owner (the donor), which is\n * exactly who reads this view.\n *\n * API-level only in M1 (no UI).\n */\nexport function createOutgoingSharesComputable(\n  pl: PlClient,\n  tree: SynchronizedTreeState,\n): Computable<OutgoingShare[] | undefined> {\n  return Computable.make(\n    (ctx) => {\n      const node = ctx.accessor(tree.entry()).node();\n      if (node === undefined) return undefined;\n\n      const drafts: OutgoingShareDraft[] = [];\n      // Outbox fields are keyed by shareId; each value is a SharedEnvelope.\n      for (const fieldName of node.listDynamicFields()) {\n        const envelope = node.traverse(fieldName);\n        if (envelope === undefined) continue;\n        if (!resourceTypesEqual(envelope.resourceType, SharedEnvelopeResourceType)) continue;\n\n        const data = envelope.getDataAsJson<EnvelopeData>();\n        if (data === undefined) continue;\n\n        const responses: OutgoingShare[\"responses\"] = {};\n        for (const f of envelope.listDynamicFields()) {\n          if (!f.startsWith(AcceptanceFieldPrefix)) continue;\n          const login = f.slice(AcceptanceFieldPrefix.length);\n          const acc = envelope.traverse(f);\n          const accData = acc?.getDataAsJson<EnvelopeAcceptance>();\n          if (accData === undefined) continue;\n          responses[login] = { action: accData.action, timestamp: accData.timestamp };\n        }\n\n        drafts.push({\n          shareId: data.shareId,\n          sharedAt: data.sharedAt,\n          ...(data.expiresAt !== null ? { expiresAt: data.expiresAt } : {}),\n          mode: data.mode,\n          title: data.title,\n          projects: envelopeProjects(data),\n          responses,\n          envelopeRid: envelope.id,\n        });\n      }\n      drafts.sort((a, b) => b.sharedAt - a.sharedAt);\n      return drafts;\n    },\n    {\n      // Resolve each share's recipients via listGrants. An everyone-grant maps to \"*\"; the donor's\n      // own grant is dropped. One tx per envelope so a just-revoked rid faults only its own read,\n      // which allSettled degrades to []. Recipients aren't cached — a live share's recipient set can\n      // change. Transactional listGrants when available, else the standalone gRPC-only RPC.\n      postprocessValue: async (\n        drafts: OutgoingShareDraft[] | undefined,\n      ): Promise<OutgoingShare[] | undefined> => {\n        if (drafts === undefined) return undefined;\n        const self = pl.userResources.authUser;\n        const toRecipients = (grants: { user: string }[]): string[] =>\n          grants.some((g) => isEveryoneUserLogin(g.user))\n            ? [\"*\"]\n            : grants.map((g) => g.user).filter((u) => u !== self);\n\n        const txGrants = pl.hasCapability(\"txListGrants:v1\");\n        const settled = await Promise.allSettled(\n          drafts.map((d) =>\n            txGrants\n              ? pl.withReadTx(\"ListShareGrant\", (tx) => tx.listGrants(d.envelopeRid))\n              : pl.userResources.listGrants(d.envelopeRid),\n          ),\n        );\n\n        return drafts.map(({ envelopeRid: _envelopeRid, ...share }, i): OutgoingShare => {\n          const r = settled[i];\n          return { ...share, recipients: r.status === \"fulfilled\" ? toRecipients(r.value) : [] };\n        });\n      },\n    },\n  );\n}\n\n/**\n * Creates the donor's outbox synchronized tree (single explicit root) plus the\n * {@link OutgoingShare} computable over it.\n */\nexport async function createOutgoingShares(\n  pl: PlClient,\n  outboxRid: SignedResourceId,\n  env: MiddleLayerEnvironment,\n): Promise<{ tree: SynchronizedTreeState; computable: Computable<OutgoingShare[] | undefined> }> {\n  const tree = await SynchronizedTreeState.init(\n    pl,\n    outboxRid,\n    {\n      ...env.ops.defaultTreeOptions,\n      pruning: SharingOutboxPruningFunction,\n      fieldFilter: SharingOutboxFieldFilter,\n    },\n    env.logger,\n  );\n  return { computable: createOutgoingSharesComputable(pl, tree), tree };\n}\n\nconst DecisionFieldPrefix = \"decision/\";\n\nconst SharedEnvelopePruningFunction: PruningFunction = (resource) => {\n  if (!resourceTypesEqual(resource.type, SharedEnvelopeResourceType)) return [];\n  return resource.fields;\n};\n\n// Discovery only needs each envelope's immutable EnvelopeData (basic resource data); it must NOT\n// descend into the project snapshots. Following fields only FROM the envelope stops the walk at\n// the UserProject snapshots (their fields are never followed).\nconst PendingSharesFieldFilter: Filter = treeFilter.resourceTypeEq(SharedEnvelopeResourceType.name);\n\n/**\n * Creates the acceptor's shared-resource discovery tree (a `{kind:'shared'}` seed over\n * {@link SharedEnvelopeResourceType}) plus the {@link PendingShare} computable over it.\n *\n * An envelope surfaces only when its shareId has NO decision/{shareId} on SharingState —\n * the dedup is applied by the caller, which holds the SharingState tree.\n */\nexport async function createPendingSharesTree(\n  pl: PlClient,\n  env: MiddleLayerEnvironment,\n): Promise<SynchronizedTreeState> {\n  return await SynchronizedTreeState.init(\n    pl,\n    {\n      kind: \"shared\",\n      resourceType: resourceType(\n        SharedEnvelopeResourceType.name,\n        SharedEnvelopeResourceType.version,\n      ),\n    },\n    {\n      ...env.ops.defaultTreeOptions,\n      pruning: SharedEnvelopePruningFunction,\n      fieldFilter: PendingSharesFieldFilter,\n    },\n    env.logger,\n  );\n}\n\n/** A live envelope discovered in the acceptor's shared-resource tree: its signed resource id and\n *  decoded {@link EnvelopeData}. The accept/reject flow keys these by `data.shareId`. */\nexport type LiveEnvelope = { rid: SignedResourceId; data: EnvelopeData };\n\n/**\n * Builds a Computable yielding the acceptor's currently-live envelopes, read from the\n * shared-resource discovery tree the ML already maintains — the single discovery mechanism.\n * Accept/reject `.getValue()` this instead of re-streaming `ListUserResources`, so there is no\n * second discovery path. The envelope's signed `rid` (from the tree node) is what the write tx\n * needs; `copyEnvelopeProjectsIntoList` reads the project snapshots itself inside the tx.\n *\n * Returns `undefined` while the tree is still empty/unresolved (mirrors the other tree-backed\n * computables here). Yields a flat list; the caller dedups by `shareId` — at most one live\n * envelope per shareId is expected (the donor keeps one), and a replace tears the old one down.\n */\nexport function createLiveEnvelopesComputable(\n  sharedTree: SynchronizedTreeState,\n): Computable<LiveEnvelope[] | undefined> {\n  return Computable.make((ctx) => {\n    const roots = ctx.accessor(sharedTree.rootsEntry()).nodes();\n    const result: LiveEnvelope[] = [];\n    for (const envelope of roots) {\n      if (envelope === undefined) continue;\n      if (!resourceTypesEqual(envelope.resourceType, SharedEnvelopeResourceType)) continue;\n      const data = envelope.getDataAsJson<EnvelopeData>();\n      if (data === undefined) continue;\n      result.push({ rid: envelope.id, data });\n    }\n    return result;\n  });\n}\n\n/**\n * Builds the {@link PendingShare} computable over the shared-resource discovery tree, filtered\n * against the set of already-handled shareIds (those with a decision/{shareId} in the acceptor's\n * SharingState). Both trees feed one Computable so it recomputes when either changes.\n *\n * `currentUserLogin` (when known) suppresses the user's own shares: a share-with-everybody grants\n * the everyone-user, so the donor discovers their own envelope as a pending share. There is no\n * scenario where a user accepts their own share, so they are dropped from the pending view.\n */\nexport function createPendingSharesComputable(\n  sharedTree: SynchronizedTreeState,\n  sharingStateTree: SynchronizedTreeState,\n  currentUserLogin: string | null,\n): Computable<PendingShare[] | undefined> {\n  return Computable.make((ctx) => {\n    const roots = ctx.accessor(sharedTree.rootsEntry()).nodes();\n\n    // Set of shareIds already handled (accepted or rejected) — dedup discovery on the logical share.\n    const stateNode = ctx.accessor(sharingStateTree.entry()).node();\n    const handled = new Set<ShareId>();\n    if (stateNode !== undefined)\n      for (const f of stateNode.listDynamicFields())\n        if (f.startsWith(DecisionFieldPrefix))\n          handled.add(asShareId(f.slice(DecisionFieldPrefix.length)));\n\n    const result: PendingShare[] = [];\n    for (const envelope of roots) {\n      if (envelope === undefined) continue;\n      if (!resourceTypesEqual(envelope.resourceType, SharedEnvelopeResourceType)) continue;\n      const data = envelope.getDataAsJson<EnvelopeData>();\n      if (data === undefined) continue;\n      if (handled.has(data.shareId)) continue; // already accepted or rejected\n      if (currentUserLogin !== null && data.sender === currentUserLogin) continue; // own share\n      if (data.expiresAt !== null && data.expiresAt <= Date.now()) continue;\n\n      result.push({\n        shareId: data.shareId,\n        sender: data.sender,\n        title: data.title,\n        mode: data.mode,\n        grantedAt: data.sharedAt,\n      });\n    }\n    result.sort((a, b) => b.grantedAt - a.grantedAt);\n    return result;\n  });\n}\n\nconst SharingStatePruningFunction: PruningFunction = (resource) => {\n  if (!resourceTypesEqual(resource.type, SharingStateResourceType)) return [];\n  return resource.fields;\n};\n\n// decision/{shareId} values are leaf JSON resources; follow fields only from SharingState.\nconst SharingStateFieldFilter: Filter = treeFilter.resourceTypeEq(SharingStateResourceType.name);\n\n/** Creates the acceptor's SharingState synchronized tree (single explicit root). */\nexport async function createSharingStateTree(\n  pl: PlClient,\n  stateRid: SignedResourceId,\n  env: MiddleLayerEnvironment,\n): Promise<SynchronizedTreeState> {\n  return await SynchronizedTreeState.init(\n    pl,\n    stateRid,\n    {\n      ...env.ops.defaultTreeOptions,\n      pruning: SharingStatePruningFunction,\n      fieldFilter: SharingStateFieldFilter,\n    },\n    env.logger,\n  );\n}\n\n/** Maps an envelope resource id (signed) to its string form, for failure reporting. */\nexport function envelopeIdString(rid: SignedResourceId): string {\n  return resourceIdToString(rid);\n}\n"],"mappings":";;;;;;AA6CA,SAAS,iBAAiB,MAA+C;CACvE,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,OAAO;EAC9C,WAAW,EAAE;EACb,OAAO,EAAE;EACT,WAAW,EAAE;CACf,EAAE;AACJ;AAWA,MAAM,gCAAiD,aAAa;CAClE,IACE,EAAA,GAAA,0BAAA,mBAAA,CAAoB,SAAS,MAAMA,sBAAAA,yBAAyB,KAC5D,EAAA,GAAA,0BAAA,mBAAA,CAAoB,SAAS,MAAMC,sBAAAA,0BAA0B,GAE7D,OAAO,CAAC;CACV,OAAO,SAAS;AAClB;AAOA,MAAM,2BAAmCC,0BAAAA,WAAW,GAClDA,0BAAAA,WAAW,eAAeF,sBAAAA,0BAA0B,IAAI,GACxDE,0BAAAA,WAAW,eAAeD,sBAAAA,2BAA2B,IAAI,CAC3D;;;;;;;;;;AAeA,SAAgB,+BACd,IACA,MACyC;CACzC,OAAOE,2BAAAA,WAAW,MACf,QAAQ;EACP,MAAM,OAAO,IAAI,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK;EAC7C,IAAI,SAAS,KAAA,GAAW,OAAO,KAAA;EAE/B,MAAM,SAA+B,CAAC;EAEtC,KAAK,MAAM,aAAa,KAAK,kBAAkB,GAAG;GAChD,MAAM,WAAW,KAAK,SAAS,SAAS;GACxC,IAAI,aAAa,KAAA,GAAW;GAC5B,IAAI,EAAA,GAAA,0BAAA,mBAAA,CAAoB,SAAS,cAAcF,sBAAAA,0BAA0B,GAAG;GAE5E,MAAM,OAAO,SAAS,cAA4B;GAClD,IAAI,SAAS,KAAA,GAAW;GAExB,MAAM,YAAwC,CAAC;GAC/C,KAAK,MAAM,KAAK,SAAS,kBAAkB,GAAG;IAC5C,IAAI,CAAC,EAAE,WAAA,aAAgC,GAAG;IAC1C,MAAM,QAAQ,EAAE,MAAMG,sBAAAA,sBAAsB,MAAM;IAElD,MAAM,UADM,SAAS,SAAS,CACZ,CAAC,EAAE,cAAkC;IACvD,IAAI,YAAY,KAAA,GAAW;IAC3B,UAAU,SAAS;KAAE,QAAQ,QAAQ;KAAQ,WAAW,QAAQ;IAAU;GAC5E;GAEA,OAAO,KAAK;IACV,SAAS,KAAK;IACd,UAAU,KAAK;IACf,GAAI,KAAK,cAAc,OAAO,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;IAC/D,MAAM,KAAK;IACX,OAAO,KAAK;IACZ,UAAU,iBAAiB,IAAI;IAC/B;IACA,aAAa,SAAS;GACxB,CAAC;EACH;EACA,OAAO,MAAM,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;EAC7C,OAAO;CACT,GACA,EAKE,kBAAkB,OAChB,WACyC;EACzC,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;EACjC,MAAM,OAAO,GAAG,cAAc;EAC9B,MAAM,gBAAgB,WACpB,OAAO,MAAM,OAAA,GAAA,0BAAA,oBAAA,CAA0B,EAAE,IAAI,CAAC,IAC1C,CAAC,GAAG,IACJ,OAAO,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,MAAM,MAAM,IAAI;EAExD,MAAM,WAAW,GAAG,cAAc,iBAAiB;EACnD,MAAM,UAAU,MAAM,QAAQ,WAC5B,OAAO,KAAK,MACV,WACI,GAAG,WAAW,mBAAmB,OAAO,GAAG,WAAW,EAAE,WAAW,CAAC,IACpE,GAAG,cAAc,WAAW,EAAE,WAAW,CAC/C,CACF;EAEA,OAAO,OAAO,KAAK,EAAE,aAAa,cAAc,GAAG,SAAS,MAAqB;GAC/E,MAAM,IAAI,QAAQ;GAClB,OAAO;IAAE,GAAG;IAAO,YAAY,EAAE,WAAW,cAAc,aAAa,EAAE,KAAK,IAAI,CAAC;GAAE;EACvF,CAAC;CACH,EACF,CACF;AACF;;;;;AAMA,eAAsB,qBACpB,IACA,WACA,KAC+F;CAC/F,MAAM,OAAO,MAAMC,wBAAAA,sBAAsB,KACvC,IACA,WACA;EACE,GAAG,IAAI,IAAI;EACX,SAAS;EACT,aAAa;CACf,GACA,IAAI,MACN;CACA,OAAO;EAAE,YAAY,+BAA+B,IAAI,IAAI;EAAG;CAAK;AACtE;AAEA,MAAM,sBAAsB;AAE5B,MAAM,iCAAkD,aAAa;CACnE,IAAI,EAAA,GAAA,0BAAA,mBAAA,CAAoB,SAAS,MAAMJ,sBAAAA,0BAA0B,GAAG,OAAO,CAAC;CAC5E,OAAO,SAAS;AAClB;AAKA,MAAM,2BAAmCC,0BAAAA,WAAW,eAAeD,sBAAAA,2BAA2B,IAAI;;;;;;;;AASlG,eAAsB,wBACpB,IACA,KACgC;CAChC,OAAO,MAAMI,wBAAAA,sBAAsB,KACjC,IACA;EACE,MAAM;EACN,eAAA,GAAA,0BAAA,aAAA,CACEJ,sBAAAA,2BAA2B,MAC3BA,sBAAAA,2BAA2B,OAC7B;CACF,GACA;EACE,GAAG,IAAI,IAAI;EACX,SAAS;EACT,aAAa;CACf,GACA,IAAI,MACN;AACF;;;;;;;;;;;;AAiBA,SAAgB,8BACd,YACwC;CACxC,OAAOE,2BAAAA,WAAW,MAAM,QAAQ;EAC9B,MAAM,QAAQ,IAAI,SAAS,WAAW,WAAW,CAAC,CAAC,CAAC,MAAM;EAC1D,MAAM,SAAyB,CAAC;EAChC,KAAK,MAAM,YAAY,OAAO;GAC5B,IAAI,aAAa,KAAA,GAAW;GAC5B,IAAI,EAAA,GAAA,0BAAA,mBAAA,CAAoB,SAAS,cAAcF,sBAAAA,0BAA0B,GAAG;GAC5E,MAAM,OAAO,SAAS,cAA4B;GAClD,IAAI,SAAS,KAAA,GAAW;GACxB,OAAO,KAAK;IAAE,KAAK,SAAS;IAAI;GAAK,CAAC;EACxC;EACA,OAAO;CACT,CAAC;AACH;;;;;;;;;;AAWA,SAAgB,8BACd,YACA,kBACA,kBACwC;CACxC,OAAOE,2BAAAA,WAAW,MAAM,QAAQ;EAC9B,MAAM,QAAQ,IAAI,SAAS,WAAW,WAAW,CAAC,CAAC,CAAC,MAAM;EAG1D,MAAM,YAAY,IAAI,SAAS,iBAAiB,MAAM,CAAC,CAAC,CAAC,KAAK;EAC9D,MAAM,0BAAU,IAAI,IAAa;EACjC,IAAI,cAAc,KAAA;QACX,MAAM,KAAK,UAAU,kBAAkB,GAC1C,IAAI,EAAE,WAAW,mBAAmB,GAClC,QAAQ,IAAIG,sBAAAA,UAAU,EAAE,MAAM,CAA0B,CAAC,CAAC;EAAA;EAEhE,MAAM,SAAyB,CAAC;EAChC,KAAK,MAAM,YAAY,OAAO;GAC5B,IAAI,aAAa,KAAA,GAAW;GAC5B,IAAI,EAAA,GAAA,0BAAA,mBAAA,CAAoB,SAAS,cAAcL,sBAAAA,0BAA0B,GAAG;GAC5E,MAAM,OAAO,SAAS,cAA4B;GAClD,IAAI,SAAS,KAAA,GAAW;GACxB,IAAI,QAAQ,IAAI,KAAK,OAAO,GAAG;GAC/B,IAAI,qBAAqB,QAAQ,KAAK,WAAW,kBAAkB;GACnE,IAAI,KAAK,cAAc,QAAQ,KAAK,aAAa,KAAK,IAAI,GAAG;GAE7D,OAAO,KAAK;IACV,SAAS,KAAK;IACd,QAAQ,KAAK;IACb,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,WAAW,KAAK;GAClB,CAAC;EACH;EACA,OAAO,MAAM,GAAG,MAAM,EAAE,YAAY,EAAE,SAAS;EAC/C,OAAO;CACT,CAAC;AACH;AAEA,MAAM,+BAAgD,aAAa;CACjE,IAAI,EAAA,GAAA,0BAAA,mBAAA,CAAoB,SAAS,MAAMM,sBAAAA,wBAAwB,GAAG,OAAO,CAAC;CAC1E,OAAO,SAAS;AAClB;AAGA,MAAM,0BAAkCL,0BAAAA,WAAW,eAAeK,sBAAAA,yBAAyB,IAAI;;AAG/F,eAAsB,uBACpB,IACA,UACA,KACgC;CAChC,OAAO,MAAMF,wBAAAA,sBAAsB,KACjC,IACA,UACA;EACE,GAAG,IAAI,IAAI;EACX,SAAS;EACT,aAAa;CACf,GACA,IAAI,MACN;AACF"}

package/dist/middle_layer/sharing_list.d.ts

@@ -0,0 +1,41 @@
+import { EnvelopeMode, ShareId } from "../model/sharing_model.js";
+import { PlClient, SignedResourceId } from "@milaboratories/pl-client";
+import { SynchronizedTreeState } from "@milaboratories/pl-tree";
+import { Computable } from "@milaboratories/computable";
+import { ProjectId } from "@milaboratories/pl-model-common";
+
+//#region src/middle_layer/sharing_list.d.ts
+/** Donor-facing view of one outgoing share. */
+interface OutgoingShare {
+  shareId: ShareId;
+  sharedAt: number;
+  expiresAt?: number;
+  mode: EnvelopeMode;
+  title: string;
+  /** One entry per project in the pack, so the change UI can offer a per-project decision.
+   *  `projectId` is the donor's source project id; `updatedAt` is when this project's
+   *  snapshot was last (re)taken. */
+  projects: {
+    projectId: ProjectId;
+    label: string;
+    updatedAt: number;
+  }[];
+  /** Full recipient logins, from `ListGrants` on the envelope; `["*"]` for everyone-shares. */
+  recipients: string[];
+  /** Per recipient who has responded: their decision and when, from acceptance/{login}. */
+  responses: Record<string, {
+    action: "accepted" | "rejected";
+    timestamp: number;
+  }>;
+}
+/** Acceptor-facing view of one pending share. */
+interface PendingShare {
+  shareId: ShareId;
+  sender: string;
+  title: string;
+  mode: EnvelopeMode;
+  grantedAt: number;
+}
+//#endregion
+export { OutgoingShare, PendingShare };
+//# sourceMappingURL=sharing_list.d.ts.map

package/dist/middle_layer/sharing_list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharing_list.d.ts","names":[],"sources":["../../src/middle_layer/sharing_list.ts"],"mappings":";;;;;;;;UA4BiB,aAAA;EACf,OAAA,EAAS,OAAA;EACT,QAAA;EACA,SAAA;EACA,IAAA,EAAM,YAAA;EACN,KAAA;EAIuB;;;EAAvB,QAAA;IAAY,SAAA,EAAW,SAAA;IAAW,KAAA;IAAe,SAAA;EAAA;EALjD;EAOA,UAAA;EANA;EAQA,SAAA,EAAW,MAAA;IAAiB,MAAA;IAAiC,SAAA;EAAA;AAAA;;UAa9C,YAAA;EACf,OAAA,EAAS,OAAA;EACT,MAAA;EACA,KAAA;EACA,IAAA,EAAM,YAAY;EAClB,SAAA;AAAA"}

package/dist/middle_layer/sharing_list.js

@@ -0,0 +1,198 @@
+import { AcceptanceFieldPrefix, SharedEnvelopeResourceType, SharingOutboxResourceType, SharingStateResourceType, asShareId } from "../model/sharing_model.js";
+import { isEveryoneUserLogin, resourceType, resourceTypesEqual, treeFilter } from "@milaboratories/pl-client";
+import { SynchronizedTreeState } from "@milaboratories/pl-tree";
+import { Computable } from "@milaboratories/computable";
+//#region src/middle_layer/sharing_list.ts
+/** Per-project view for the donor's change UI, from {@link EnvelopeData.projects}. */
+function envelopeProjects(data) {
+	return Object.values(data.projects).map((p) => ({
+		projectId: p.source,
+		label: p.label,
+		updatedAt: p.updatedAt
+	}));
+}
+const SharingOutboxPruningFunction = (resource) => {
+	if (!resourceTypesEqual(resource.type, SharingOutboxResourceType) && !resourceTypesEqual(resource.type, SharedEnvelopeResourceType)) return [];
+	return resource.fields;
+};
+const SharingOutboxFieldFilter = treeFilter.or(treeFilter.resourceTypeEq(SharingOutboxResourceType.name), treeFilter.resourceTypeEq(SharedEnvelopeResourceType.name));
+/**
+* Reactive view of the donor's own outbox. Reads each live envelope's immutable
+* {@link EnvelopeData} plus the per-recipient `acceptance/{login}` records from the tree, then
+* enriches each share's full recipient list via `ListGrants` on the envelope (`["*"]` for an
+* everyone-share). `ListGrants` is gated backend-side to the envelope owner (the donor), which is
+* exactly who reads this view.
+*
+* API-level only in M1 (no UI).
+*/
+function createOutgoingSharesComputable(pl, tree) {
+	return Computable.make((ctx) => {
+		const node = ctx.accessor(tree.entry()).node();
+		if (node === void 0) return void 0;
+		const drafts = [];
+		for (const fieldName of node.listDynamicFields()) {
+			const envelope = node.traverse(fieldName);
+			if (envelope === void 0) continue;
+			if (!resourceTypesEqual(envelope.resourceType, SharedEnvelopeResourceType)) continue;
+			const data = envelope.getDataAsJson();
+			if (data === void 0) continue;
+			const responses = {};
+			for (const f of envelope.listDynamicFields()) {
+				if (!f.startsWith("acceptance/")) continue;
+				const login = f.slice(AcceptanceFieldPrefix.length);
+				const accData = envelope.traverse(f)?.getDataAsJson();
+				if (accData === void 0) continue;
+				responses[login] = {
+					action: accData.action,
+					timestamp: accData.timestamp
+				};
+			}
+			drafts.push({
+				shareId: data.shareId,
+				sharedAt: data.sharedAt,
+				...data.expiresAt !== null ? { expiresAt: data.expiresAt } : {},
+				mode: data.mode,
+				title: data.title,
+				projects: envelopeProjects(data),
+				responses,
+				envelopeRid: envelope.id
+			});
+		}
+		drafts.sort((a, b) => b.sharedAt - a.sharedAt);
+		return drafts;
+	}, { postprocessValue: async (drafts) => {
+		if (drafts === void 0) return void 0;
+		const self = pl.userResources.authUser;
+		const toRecipients = (grants) => grants.some((g) => isEveryoneUserLogin(g.user)) ? ["*"] : grants.map((g) => g.user).filter((u) => u !== self);
+		const txGrants = pl.hasCapability("txListGrants:v1");
+		const settled = await Promise.allSettled(drafts.map((d) => txGrants ? pl.withReadTx("ListShareGrant", (tx) => tx.listGrants(d.envelopeRid)) : pl.userResources.listGrants(d.envelopeRid)));
+		return drafts.map(({ envelopeRid: _envelopeRid, ...share }, i) => {
+			const r = settled[i];
+			return {
+				...share,
+				recipients: r.status === "fulfilled" ? toRecipients(r.value) : []
+			};
+		});
+	} });
+}
+/**
+* Creates the donor's outbox synchronized tree (single explicit root) plus the
+* {@link OutgoingShare} computable over it.
+*/
+async function createOutgoingShares(pl, outboxRid, env) {
+	const tree = await SynchronizedTreeState.init(pl, outboxRid, {
+		...env.ops.defaultTreeOptions,
+		pruning: SharingOutboxPruningFunction,
+		fieldFilter: SharingOutboxFieldFilter
+	}, env.logger);
+	return {
+		computable: createOutgoingSharesComputable(pl, tree),
+		tree
+	};
+}
+const DecisionFieldPrefix = "decision/";
+const SharedEnvelopePruningFunction = (resource) => {
+	if (!resourceTypesEqual(resource.type, SharedEnvelopeResourceType)) return [];
+	return resource.fields;
+};
+const PendingSharesFieldFilter = treeFilter.resourceTypeEq(SharedEnvelopeResourceType.name);
+/**
+* Creates the acceptor's shared-resource discovery tree (a `{kind:'shared'}` seed over
+* {@link SharedEnvelopeResourceType}) plus the {@link PendingShare} computable over it.
+*
+* An envelope surfaces only when its shareId has NO decision/{shareId} on SharingState —
+* the dedup is applied by the caller, which holds the SharingState tree.
+*/
+async function createPendingSharesTree(pl, env) {
+	return await SynchronizedTreeState.init(pl, {
+		kind: "shared",
+		resourceType: resourceType(SharedEnvelopeResourceType.name, SharedEnvelopeResourceType.version)
+	}, {
+		...env.ops.defaultTreeOptions,
+		pruning: SharedEnvelopePruningFunction,
+		fieldFilter: PendingSharesFieldFilter
+	}, env.logger);
+}
+/**
+* Builds a Computable yielding the acceptor's currently-live envelopes, read from the
+* shared-resource discovery tree the ML already maintains — the single discovery mechanism.
+* Accept/reject `.getValue()` this instead of re-streaming `ListUserResources`, so there is no
+* second discovery path. The envelope's signed `rid` (from the tree node) is what the write tx
+* needs; `copyEnvelopeProjectsIntoList` reads the project snapshots itself inside the tx.
+*
+* Returns `undefined` while the tree is still empty/unresolved (mirrors the other tree-backed
+* computables here). Yields a flat list; the caller dedups by `shareId` — at most one live
+* envelope per shareId is expected (the donor keeps one), and a replace tears the old one down.
+*/
+function createLiveEnvelopesComputable(sharedTree) {
+	return Computable.make((ctx) => {
+		const roots = ctx.accessor(sharedTree.rootsEntry()).nodes();
+		const result = [];
+		for (const envelope of roots) {
+			if (envelope === void 0) continue;
+			if (!resourceTypesEqual(envelope.resourceType, SharedEnvelopeResourceType)) continue;
+			const data = envelope.getDataAsJson();
+			if (data === void 0) continue;
+			result.push({
+				rid: envelope.id,
+				data
+			});
+		}
+		return result;
+	});
+}
+/**
+* Builds the {@link PendingShare} computable over the shared-resource discovery tree, filtered
+* against the set of already-handled shareIds (those with a decision/{shareId} in the acceptor's
+* SharingState). Both trees feed one Computable so it recomputes when either changes.
+*
+* `currentUserLogin` (when known) suppresses the user's own shares: a share-with-everybody grants
+* the everyone-user, so the donor discovers their own envelope as a pending share. There is no
+* scenario where a user accepts their own share, so they are dropped from the pending view.
+*/
+function createPendingSharesComputable(sharedTree, sharingStateTree, currentUserLogin) {
+	return Computable.make((ctx) => {
+		const roots = ctx.accessor(sharedTree.rootsEntry()).nodes();
+		const stateNode = ctx.accessor(sharingStateTree.entry()).node();
+		const handled = /* @__PURE__ */ new Set();
+		if (stateNode !== void 0) {
+			for (const f of stateNode.listDynamicFields()) if (f.startsWith(DecisionFieldPrefix)) handled.add(asShareId(f.slice(9)));
+		}
+		const result = [];
+		for (const envelope of roots) {
+			if (envelope === void 0) continue;
+			if (!resourceTypesEqual(envelope.resourceType, SharedEnvelopeResourceType)) continue;
+			const data = envelope.getDataAsJson();
+			if (data === void 0) continue;
+			if (handled.has(data.shareId)) continue;
+			if (currentUserLogin !== null && data.sender === currentUserLogin) continue;
+			if (data.expiresAt !== null && data.expiresAt <= Date.now()) continue;
+			result.push({
+				shareId: data.shareId,
+				sender: data.sender,
+				title: data.title,
+				mode: data.mode,
+				grantedAt: data.sharedAt
+			});
+		}
+		result.sort((a, b) => b.grantedAt - a.grantedAt);
+		return result;
+	});
+}
+const SharingStatePruningFunction = (resource) => {
+	if (!resourceTypesEqual(resource.type, SharingStateResourceType)) return [];
+	return resource.fields;
+};
+const SharingStateFieldFilter = treeFilter.resourceTypeEq(SharingStateResourceType.name);
+/** Creates the acceptor's SharingState synchronized tree (single explicit root). */
+async function createSharingStateTree(pl, stateRid, env) {
+	return await SynchronizedTreeState.init(pl, stateRid, {
+		...env.ops.defaultTreeOptions,
+		pruning: SharingStatePruningFunction,
+		fieldFilter: SharingStateFieldFilter
+	}, env.logger);
+}
+//#endregion
+export { createLiveEnvelopesComputable, createOutgoingShares, createOutgoingSharesComputable, createPendingSharesComputable, createPendingSharesTree, createSharingStateTree };
+
+//# sourceMappingURL=sharing_list.js.map

package/dist/middle_layer/sharing_list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharing_list.js","names":[],"sources":["../../src/middle_layer/sharing_list.ts"],"sourcesContent":["import type { PruningFunction } from \"@milaboratories/pl-tree\";\nimport { SynchronizedTreeState } from \"@milaboratories/pl-tree\";\nimport type { Filter, PlClient, SignedResourceId } from \"@milaboratories/pl-client\";\nimport {\n  isEveryoneUserLogin,\n  resourceIdToString,\n  resourceType,\n  resourceTypesEqual,\n  treeFilter,\n} from \"@milaboratories/pl-client\";\nimport { Computable } from \"@milaboratories/computable\";\nimport type { MiddleLayerEnvironment } from \"./middle_layer\";\nimport type { ProjectId } from \"@milaboratories/pl-model-common\";\nimport type {\n  EnvelopeAcceptance,\n  EnvelopeData,\n  EnvelopeMode,\n  ShareId,\n} from \"../model/sharing_model\";\nimport {\n  AcceptanceFieldPrefix,\n  asShareId,\n  SharedEnvelopeResourceType,\n  SharingOutboxResourceType,\n  SharingStateResourceType,\n} from \"../model/sharing_model\";\n\n/** Donor-facing view of one outgoing share. */\nexport interface OutgoingShare {\n  shareId: ShareId; // stable logical identity of the share, preserved across changes\n  sharedAt: number; // this instance's creation time (ms epoch)\n  expiresAt?: number; // EnvelopeData.expiresAt; null maps to undefined = never expires\n  mode: EnvelopeMode;\n  title: string; // display name shown to recipients; defaults to the first project's name\n  /** One entry per project in the pack, so the change UI can offer a per-project decision.\n   *  `projectId` is the donor's source project id; `updatedAt` is when this project's\n   *  snapshot was last (re)taken. */\n  projects: { projectId: ProjectId; label: string; updatedAt: number }[];\n  /** Full recipient logins, from `ListGrants` on the envelope; `[\"*\"]` for everyone-shares. */\n  recipients: string[];\n  /** Per recipient who has responded: their decision and when, from acceptance/{login}. */\n  responses: Record<string, { action: \"accepted\" | \"rejected\"; timestamp: number }>;\n}\n\n/** Per-project view for the donor's change UI, from {@link EnvelopeData.projects}. */\nfunction envelopeProjects(data: EnvelopeData): OutgoingShare[\"projects\"] {\n  return Object.values(data.projects).map((p) => ({\n    projectId: p.source,\n    label: p.label,\n    updatedAt: p.updatedAt,\n  }));\n}\n\n/** Acceptor-facing view of one pending share. */\nexport interface PendingShare {\n  shareId: ShareId;\n  sender: string; // EnvelopeData.sender, display only\n  title: string; // display name shown to recipients; defaults to the first project's name\n  mode: EnvelopeMode; // v1 renders only \"copy\" entries\n  grantedAt: number;\n}\n\nconst SharingOutboxPruningFunction: PruningFunction = (resource) => {\n  if (\n    !resourceTypesEqual(resource.type, SharingOutboxResourceType) &&\n    !resourceTypesEqual(resource.type, SharedEnvelopeResourceType)\n  )\n    return [];\n  return resource.fields;\n};\n\n// Server-side traversal scope (modern resourceTree path). Pruning is client-side ONLY and does\n// NOT stop the backend walk — without a fieldFilter the backend descends through the envelope's\n// project/{uuid} snapshots into the whole project graph (StreamManager etc.), whose field-driven\n// finality predicate then throws on the pruned-to-[] fields. Following fields only FROM the outbox\n// and the envelope stops the walk at the project snapshots (UserProject), which we never traverse.\nconst SharingOutboxFieldFilter: Filter = treeFilter.or(\n  treeFilter.resourceTypeEq(SharingOutboxResourceType.name),\n  treeFilter.resourceTypeEq(SharedEnvelopeResourceType.name),\n);\n\n/** Intermediate of an outgoing share before its full recipient list is fetched: everything the\n *  tree carries synchronously, plus the envelope's signed id for the async `ListGrants` enrich. */\ntype OutgoingShareDraft = Omit<OutgoingShare, \"recipients\"> & { envelopeRid: SignedResourceId };\n\n/**\n * Reactive view of the donor's own outbox. Reads each live envelope's immutable\n * {@link EnvelopeData} plus the per-recipient `acceptance/{login}` records from the tree, then\n * enriches each share's full recipient list via `ListGrants` on the envelope (`[\"*\"]` for an\n * everyone-share). `ListGrants` is gated backend-side to the envelope owner (the donor), which is\n * exactly who reads this view.\n *\n * API-level only in M1 (no UI).\n */\nexport function createOutgoingSharesComputable(\n  pl: PlClient,\n  tree: SynchronizedTreeState,\n): Computable<OutgoingShare[] | undefined> {\n  return Computable.make(\n    (ctx) => {\n      const node = ctx.accessor(tree.entry()).node();\n      if (node === undefined) return undefined;\n\n      const drafts: OutgoingShareDraft[] = [];\n      // Outbox fields are keyed by shareId; each value is a SharedEnvelope.\n      for (const fieldName of node.listDynamicFields()) {\n        const envelope = node.traverse(fieldName);\n        if (envelope === undefined) continue;\n        if (!resourceTypesEqual(envelope.resourceType, SharedEnvelopeResourceType)) continue;\n\n        const data = envelope.getDataAsJson<EnvelopeData>();\n        if (data === undefined) continue;\n\n        const responses: OutgoingShare[\"responses\"] = {};\n        for (const f of envelope.listDynamicFields()) {\n          if (!f.startsWith(AcceptanceFieldPrefix)) continue;\n          const login = f.slice(AcceptanceFieldPrefix.length);\n          const acc = envelope.traverse(f);\n          const accData = acc?.getDataAsJson<EnvelopeAcceptance>();\n          if (accData === undefined) continue;\n          responses[login] = { action: accData.action, timestamp: accData.timestamp };\n        }\n\n        drafts.push({\n          shareId: data.shareId,\n          sharedAt: data.sharedAt,\n          ...(data.expiresAt !== null ? { expiresAt: data.expiresAt } : {}),\n          mode: data.mode,\n          title: data.title,\n          projects: envelopeProjects(data),\n          responses,\n          envelopeRid: envelope.id,\n        });\n      }\n      drafts.sort((a, b) => b.sharedAt - a.sharedAt);\n      return drafts;\n    },\n    {\n      // Resolve each share's recipients via listGrants. An everyone-grant maps to \"*\"; the donor's\n      // own grant is dropped. One tx per envelope so a just-revoked rid faults only its own read,\n      // which allSettled degrades to []. Recipients aren't cached — a live share's recipient set can\n      // change. Transactional listGrants when available, else the standalone gRPC-only RPC.\n      postprocessValue: async (\n        drafts: OutgoingShareDraft[] | undefined,\n      ): Promise<OutgoingShare[] | undefined> => {\n        if (drafts === undefined) return undefined;\n        const self = pl.userResources.authUser;\n        const toRecipients = (grants: { user: string }[]): string[] =>\n          grants.some((g) => isEveryoneUserLogin(g.user))\n            ? [\"*\"]\n            : grants.map((g) => g.user).filter((u) => u !== self);\n\n        const txGrants = pl.hasCapability(\"txListGrants:v1\");\n        const settled = await Promise.allSettled(\n          drafts.map((d) =>\n            txGrants\n              ? pl.withReadTx(\"ListShareGrant\", (tx) => tx.listGrants(d.envelopeRid))\n              : pl.userResources.listGrants(d.envelopeRid),\n          ),\n        );\n\n        return drafts.map(({ envelopeRid: _envelopeRid, ...share }, i): OutgoingShare => {\n          const r = settled[i];\n          return { ...share, recipients: r.status === \"fulfilled\" ? toRecipients(r.value) : [] };\n        });\n      },\n    },\n  );\n}\n\n/**\n * Creates the donor's outbox synchronized tree (single explicit root) plus the\n * {@link OutgoingShare} computable over it.\n */\nexport async function createOutgoingShares(\n  pl: PlClient,\n  outboxRid: SignedResourceId,\n  env: MiddleLayerEnvironment,\n): Promise<{ tree: SynchronizedTreeState; computable: Computable<OutgoingShare[] | undefined> }> {\n  const tree = await SynchronizedTreeState.init(\n    pl,\n    outboxRid,\n    {\n      ...env.ops.defaultTreeOptions,\n      pruning: SharingOutboxPruningFunction,\n      fieldFilter: SharingOutboxFieldFilter,\n    },\n    env.logger,\n  );\n  return { computable: createOutgoingSharesComputable(pl, tree), tree };\n}\n\nconst DecisionFieldPrefix = \"decision/\";\n\nconst SharedEnvelopePruningFunction: PruningFunction = (resource) => {\n  if (!resourceTypesEqual(resource.type, SharedEnvelopeResourceType)) return [];\n  return resource.fields;\n};\n\n// Discovery only needs each envelope's immutable EnvelopeData (basic resource data); it must NOT\n// descend into the project snapshots. Following fields only FROM the envelope stops the walk at\n// the UserProject snapshots (their fields are never followed).\nconst PendingSharesFieldFilter: Filter = treeFilter.resourceTypeEq(SharedEnvelopeResourceType.name);\n\n/**\n * Creates the acceptor's shared-resource discovery tree (a `{kind:'shared'}` seed over\n * {@link SharedEnvelopeResourceType}) plus the {@link PendingShare} computable over it.\n *\n * An envelope surfaces only when its shareId has NO decision/{shareId} on SharingState —\n * the dedup is applied by the caller, which holds the SharingState tree.\n */\nexport async function createPendingSharesTree(\n  pl: PlClient,\n  env: MiddleLayerEnvironment,\n): Promise<SynchronizedTreeState> {\n  return await SynchronizedTreeState.init(\n    pl,\n    {\n      kind: \"shared\",\n      resourceType: resourceType(\n        SharedEnvelopeResourceType.name,\n        SharedEnvelopeResourceType.version,\n      ),\n    },\n    {\n      ...env.ops.defaultTreeOptions,\n      pruning: SharedEnvelopePruningFunction,\n      fieldFilter: PendingSharesFieldFilter,\n    },\n    env.logger,\n  );\n}\n\n/** A live envelope discovered in the acceptor's shared-resource tree: its signed resource id and\n *  decoded {@link EnvelopeData}. The accept/reject flow keys these by `data.shareId`. */\nexport type LiveEnvelope = { rid: SignedResourceId; data: EnvelopeData };\n\n/**\n * Builds a Computable yielding the acceptor's currently-live envelopes, read from the\n * shared-resource discovery tree the ML already maintains — the single discovery mechanism.\n * Accept/reject `.getValue()` this instead of re-streaming `ListUserResources`, so there is no\n * second discovery path. The envelope's signed `rid` (from the tree node) is what the write tx\n * needs; `copyEnvelopeProjectsIntoList` reads the project snapshots itself inside the tx.\n *\n * Returns `undefined` while the tree is still empty/unresolved (mirrors the other tree-backed\n * computables here). Yields a flat list; the caller dedups by `shareId` — at most one live\n * envelope per shareId is expected (the donor keeps one), and a replace tears the old one down.\n */\nexport function createLiveEnvelopesComputable(\n  sharedTree: SynchronizedTreeState,\n): Computable<LiveEnvelope[] | undefined> {\n  return Computable.make((ctx) => {\n    const roots = ctx.accessor(sharedTree.rootsEntry()).nodes();\n    const result: LiveEnvelope[] = [];\n    for (const envelope of roots) {\n      if (envelope === undefined) continue;\n      if (!resourceTypesEqual(envelope.resourceType, SharedEnvelopeResourceType)) continue;\n      const data = envelope.getDataAsJson<EnvelopeData>();\n      if (data === undefined) continue;\n      result.push({ rid: envelope.id, data });\n    }\n    return result;\n  });\n}\n\n/**\n * Builds the {@link PendingShare} computable over the shared-resource discovery tree, filtered\n * against the set of already-handled shareIds (those with a decision/{shareId} in the acceptor's\n * SharingState). Both trees feed one Computable so it recomputes when either changes.\n *\n * `currentUserLogin` (when known) suppresses the user's own shares: a share-with-everybody grants\n * the everyone-user, so the donor discovers their own envelope as a pending share. There is no\n * scenario where a user accepts their own share, so they are dropped from the pending view.\n */\nexport function createPendingSharesComputable(\n  sharedTree: SynchronizedTreeState,\n  sharingStateTree: SynchronizedTreeState,\n  currentUserLogin: string | null,\n): Computable<PendingShare[] | undefined> {\n  return Computable.make((ctx) => {\n    const roots = ctx.accessor(sharedTree.rootsEntry()).nodes();\n\n    // Set of shareIds already handled (accepted or rejected) — dedup discovery on the logical share.\n    const stateNode = ctx.accessor(sharingStateTree.entry()).node();\n    const handled = new Set<ShareId>();\n    if (stateNode !== undefined)\n      for (const f of stateNode.listDynamicFields())\n        if (f.startsWith(DecisionFieldPrefix))\n          handled.add(asShareId(f.slice(DecisionFieldPrefix.length)));\n\n    const result: PendingShare[] = [];\n    for (const envelope of roots) {\n      if (envelope === undefined) continue;\n      if (!resourceTypesEqual(envelope.resourceType, SharedEnvelopeResourceType)) continue;\n      const data = envelope.getDataAsJson<EnvelopeData>();\n      if (data === undefined) continue;\n      if (handled.has(data.shareId)) continue; // already accepted or rejected\n      if (currentUserLogin !== null && data.sender === currentUserLogin) continue; // own share\n      if (data.expiresAt !== null && data.expiresAt <= Date.now()) continue;\n\n      result.push({\n        shareId: data.shareId,\n        sender: data.sender,\n        title: data.title,\n        mode: data.mode,\n        grantedAt: data.sharedAt,\n      });\n    }\n    result.sort((a, b) => b.grantedAt - a.grantedAt);\n    return result;\n  });\n}\n\nconst SharingStatePruningFunction: PruningFunction = (resource) => {\n  if (!resourceTypesEqual(resource.type, SharingStateResourceType)) return [];\n  return resource.fields;\n};\n\n// decision/{shareId} values are leaf JSON resources; follow fields only from SharingState.\nconst SharingStateFieldFilter: Filter = treeFilter.resourceTypeEq(SharingStateResourceType.name);\n\n/** Creates the acceptor's SharingState synchronized tree (single explicit root). */\nexport async function createSharingStateTree(\n  pl: PlClient,\n  stateRid: SignedResourceId,\n  env: MiddleLayerEnvironment,\n): Promise<SynchronizedTreeState> {\n  return await SynchronizedTreeState.init(\n    pl,\n    stateRid,\n    {\n      ...env.ops.defaultTreeOptions,\n      pruning: SharingStatePruningFunction,\n      fieldFilter: SharingStateFieldFilter,\n    },\n    env.logger,\n  );\n}\n\n/** Maps an envelope resource id (signed) to its string form, for failure reporting. */\nexport function envelopeIdString(rid: SignedResourceId): string {\n  return resourceIdToString(rid);\n}\n"],"mappings":";;;;;;AA6CA,SAAS,iBAAiB,MAA+C;CACvE,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAK,OAAO;EAC9C,WAAW,EAAE;EACb,OAAO,EAAE;EACT,WAAW,EAAE;CACf,EAAE;AACJ;AAWA,MAAM,gCAAiD,aAAa;CAClE,IACE,CAAC,mBAAmB,SAAS,MAAM,yBAAyB,KAC5D,CAAC,mBAAmB,SAAS,MAAM,0BAA0B,GAE7D,OAAO,CAAC;CACV,OAAO,SAAS;AAClB;AAOA,MAAM,2BAAmC,WAAW,GAClD,WAAW,eAAe,0BAA0B,IAAI,GACxD,WAAW,eAAe,2BAA2B,IAAI,CAC3D;;;;;;;;;;AAeA,SAAgB,+BACd,IACA,MACyC;CACzC,OAAO,WAAW,MACf,QAAQ;EACP,MAAM,OAAO,IAAI,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK;EAC7C,IAAI,SAAS,KAAA,GAAW,OAAO,KAAA;EAE/B,MAAM,SAA+B,CAAC;EAEtC,KAAK,MAAM,aAAa,KAAK,kBAAkB,GAAG;GAChD,MAAM,WAAW,KAAK,SAAS,SAAS;GACxC,IAAI,aAAa,KAAA,GAAW;GAC5B,IAAI,CAAC,mBAAmB,SAAS,cAAc,0BAA0B,GAAG;GAE5E,MAAM,OAAO,SAAS,cAA4B;GAClD,IAAI,SAAS,KAAA,GAAW;GAExB,MAAM,YAAwC,CAAC;GAC/C,KAAK,MAAM,KAAK,SAAS,kBAAkB,GAAG;IAC5C,IAAI,CAAC,EAAE,WAAA,aAAgC,GAAG;IAC1C,MAAM,QAAQ,EAAE,MAAM,sBAAsB,MAAM;IAElD,MAAM,UADM,SAAS,SAAS,CACZ,CAAC,EAAE,cAAkC;IACvD,IAAI,YAAY,KAAA,GAAW;IAC3B,UAAU,SAAS;KAAE,QAAQ,QAAQ;KAAQ,WAAW,QAAQ;IAAU;GAC5E;GAEA,OAAO,KAAK;IACV,SAAS,KAAK;IACd,UAAU,KAAK;IACf,GAAI,KAAK,cAAc,OAAO,EAAE,WAAW,KAAK,UAAU,IAAI,CAAC;IAC/D,MAAM,KAAK;IACX,OAAO,KAAK;IACZ,UAAU,iBAAiB,IAAI;IAC/B;IACA,aAAa,SAAS;GACxB,CAAC;EACH;EACA,OAAO,MAAM,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;EAC7C,OAAO;CACT,GACA,EAKE,kBAAkB,OAChB,WACyC;EACzC,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;EACjC,MAAM,OAAO,GAAG,cAAc;EAC9B,MAAM,gBAAgB,WACpB,OAAO,MAAM,MAAM,oBAAoB,EAAE,IAAI,CAAC,IAC1C,CAAC,GAAG,IACJ,OAAO,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,MAAM,MAAM,IAAI;EAExD,MAAM,WAAW,GAAG,cAAc,iBAAiB;EACnD,MAAM,UAAU,MAAM,QAAQ,WAC5B,OAAO,KAAK,MACV,WACI,GAAG,WAAW,mBAAmB,OAAO,GAAG,WAAW,EAAE,WAAW,CAAC,IACpE,GAAG,cAAc,WAAW,EAAE,WAAW,CAC/C,CACF;EAEA,OAAO,OAAO,KAAK,EAAE,aAAa,cAAc,GAAG,SAAS,MAAqB;GAC/E,MAAM,IAAI,QAAQ;GAClB,OAAO;IAAE,GAAG;IAAO,YAAY,EAAE,WAAW,cAAc,aAAa,EAAE,KAAK,IAAI,CAAC;GAAE;EACvF,CAAC;CACH,EACF,CACF;AACF;;;;;AAMA,eAAsB,qBACpB,IACA,WACA,KAC+F;CAC/F,MAAM,OAAO,MAAM,sBAAsB,KACvC,IACA,WACA;EACE,GAAG,IAAI,IAAI;EACX,SAAS;EACT,aAAa;CACf,GACA,IAAI,MACN;CACA,OAAO;EAAE,YAAY,+BAA+B,IAAI,IAAI;EAAG;CAAK;AACtE;AAEA,MAAM,sBAAsB;AAE5B,MAAM,iCAAkD,aAAa;CACnE,IAAI,CAAC,mBAAmB,SAAS,MAAM,0BAA0B,GAAG,OAAO,CAAC;CAC5E,OAAO,SAAS;AAClB;AAKA,MAAM,2BAAmC,WAAW,eAAe,2BAA2B,IAAI;;;;;;;;AASlG,eAAsB,wBACpB,IACA,KACgC;CAChC,OAAO,MAAM,sBAAsB,KACjC,IACA;EACE,MAAM;EACN,cAAc,aACZ,2BAA2B,MAC3B,2BAA2B,OAC7B;CACF,GACA;EACE,GAAG,IAAI,IAAI;EACX,SAAS;EACT,aAAa;CACf,GACA,IAAI,MACN;AACF;;;;;;;;;;;;AAiBA,SAAgB,8BACd,YACwC;CACxC,OAAO,WAAW,MAAM,QAAQ;EAC9B,MAAM,QAAQ,IAAI,SAAS,WAAW,WAAW,CAAC,CAAC,CAAC,MAAM;EAC1D,MAAM,SAAyB,CAAC;EAChC,KAAK,MAAM,YAAY,OAAO;GAC5B,IAAI,aAAa,KAAA,GAAW;GAC5B,IAAI,CAAC,mBAAmB,SAAS,cAAc,0BAA0B,GAAG;GAC5E,MAAM,OAAO,SAAS,cAA4B;GAClD,IAAI,SAAS,KAAA,GAAW;GACxB,OAAO,KAAK;IAAE,KAAK,SAAS;IAAI;GAAK,CAAC;EACxC;EACA,OAAO;CACT,CAAC;AACH;;;;;;;;;;AAWA,SAAgB,8BACd,YACA,kBACA,kBACwC;CACxC,OAAO,WAAW,MAAM,QAAQ;EAC9B,MAAM,QAAQ,IAAI,SAAS,WAAW,WAAW,CAAC,CAAC,CAAC,MAAM;EAG1D,MAAM,YAAY,IAAI,SAAS,iBAAiB,MAAM,CAAC,CAAC,CAAC,KAAK;EAC9D,MAAM,0BAAU,IAAI,IAAa;EACjC,IAAI,cAAc,KAAA;QACX,MAAM,KAAK,UAAU,kBAAkB,GAC1C,IAAI,EAAE,WAAW,mBAAmB,GAClC,QAAQ,IAAI,UAAU,EAAE,MAAM,CAA0B,CAAC,CAAC;EAAA;EAEhE,MAAM,SAAyB,CAAC;EAChC,KAAK,MAAM,YAAY,OAAO;GAC5B,IAAI,aAAa,KAAA,GAAW;GAC5B,IAAI,CAAC,mBAAmB,SAAS,cAAc,0BAA0B,GAAG;GAC5E,MAAM,OAAO,SAAS,cAA4B;GAClD,IAAI,SAAS,KAAA,GAAW;GACxB,IAAI,QAAQ,IAAI,KAAK,OAAO,GAAG;GAC/B,IAAI,qBAAqB,QAAQ,KAAK,WAAW,kBAAkB;GACnE,IAAI,KAAK,cAAc,QAAQ,KAAK,aAAa,KAAK,IAAI,GAAG;GAE7D,OAAO,KAAK;IACV,SAAS,KAAK;IACd,QAAQ,KAAK;IACb,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,WAAW,KAAK;GAClB,CAAC;EACH;EACA,OAAO,MAAM,GAAG,MAAM,EAAE,YAAY,EAAE,SAAS;EAC/C,OAAO;CACT,CAAC;AACH;AAEA,MAAM,+BAAgD,aAAa;CACjE,IAAI,CAAC,mBAAmB,SAAS,MAAM,wBAAwB,GAAG,OAAO,CAAC;CAC1E,OAAO,SAAS;AAClB;AAGA,MAAM,0BAAkC,WAAW,eAAe,yBAAyB,IAAI;;AAG/F,eAAsB,uBACpB,IACA,UACA,KACgC;CAChC,OAAO,MAAM,sBAAsB,KACjC,IACA,UACA;EACE,GAAG,IAAI,IAAI;EACX,SAAS;EACT,aAAa;CACf,GACA,IAAI,MACN;AACF"}

package/dist/model/index.cjs

@@ -0,0 +1,29 @@
+const require_project_model = require("./project_model.cjs");
+const require_block_pack_spec = require("./block_pack_spec.cjs");
+const require_sharing_model = require("./sharing_model.cjs");
+exports.AcceptanceFieldPrefix = require_sharing_model.AcceptanceFieldPrefix;
+exports.BlockArgsAuthorKeyPrefix = require_project_model.BlockArgsAuthorKeyPrefix;
+exports.FrontendFromFolderResourceType = require_block_pack_spec.FrontendFromFolderResourceType;
+exports.FrontendFromLocalTgzResourceType = require_block_pack_spec.FrontendFromLocalTgzResourceType;
+exports.FrontendFromUrlResourceType = require_block_pack_spec.FrontendFromUrlResourceType;
+exports.ProjectCreatedTimestamp = require_project_model.ProjectCreatedTimestamp;
+exports.ProjectLastModifiedTimestamp = require_project_model.ProjectLastModifiedTimestamp;
+exports.ProjectMetaKey = require_project_model.ProjectMetaKey;
+exports.ProjectResourceType = require_project_model.ProjectResourceType;
+exports.ProjectStructureAuthorKey = require_project_model.ProjectStructureAuthorKey;
+exports.ProjectStructureKey = require_project_model.ProjectStructureKey;
+exports.SchemaVersionCurrent = require_project_model.SchemaVersionCurrent;
+exports.SchemaVersionKey = require_project_model.SchemaVersionKey;
+exports.SharedEnvelopeResourceType = require_sharing_model.SharedEnvelopeResourceType;
+exports.SharingOutboxField = require_sharing_model.SharingOutboxField;
+exports.SharingOutboxResourceType = require_sharing_model.SharingOutboxResourceType;
+exports.SharingStateField = require_sharing_model.SharingStateField;
+exports.SharingStateResourceType = require_sharing_model.SharingStateResourceType;
+exports.acceptanceField = require_sharing_model.acceptanceField;
+exports.acceptanceFieldLogin = require_sharing_model.acceptanceFieldLogin;
+exports.asShareId = require_sharing_model.asShareId;
+exports.canGrantToEveryone = require_sharing_model.canGrantToEveryone;
+exports.decisionField = require_sharing_model.decisionField;
+exports.decodeEnvelopeData = require_sharing_model.decodeEnvelopeData;
+exports.isAcceptanceField = require_sharing_model.isAcceptanceField;
+exports.newShareId = require_sharing_model.newShareId;

package/dist/model/index.d.ts

@@ -1,3 +1,4 @@
 import { BlockArgsAuthorKeyPrefix, ProjectCreatedTimestamp, ProjectField, ProjectId, ProjectLastModifiedTimestamp, ProjectListEntry, ProjectMetaKey, ProjectResourceType, ProjectStructureAuthorKey, ProjectStructureKey, SchemaVersionCurrent, SchemaVersionKey } from "./project_model.js";
+import { AcceptanceFieldPrefix, EnvelopeAcceptance, EnvelopeData, EnvelopeMode, EnvelopeProject, ProjectChangeAction, ProjectFieldUuid, ShareId, ShareProjectsOptions, SharedEnvelopeResourceType, SharingDecision, SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, acceptanceField, acceptanceFieldLogin, asShareId, canGrantToEveryone, decisionField, decodeEnvelopeData, isAcceptanceField, newShareId } from "./sharing_model.js";
 import { BlockPackExplicit, BlockPackSpecAny, BlockPackSpecPrepared, FrontendFromFolder, FrontendFromFolderData, FrontendFromFolderResourceType, FrontendFromLocalTgz, FrontendFromLocalTgzData, FrontendFromLocalTgzResourceType, FrontendFromUrl, FrontendFromUrlData, FrontendFromUrlResourceType, FrontendSpec } from "./block_pack_spec.js";
-export { BlockArgsAuthorKeyPrefix, BlockPackExplicit, BlockPackSpecAny, BlockPackSpecPrepared, FrontendFromFolder, FrontendFromFolderData, FrontendFromFolderResourceType, FrontendFromLocalTgz, FrontendFromLocalTgzData, FrontendFromLocalTgzResourceType, FrontendFromUrl, FrontendFromUrlData, FrontendFromUrlResourceType, FrontendSpec, ProjectCreatedTimestamp, type ProjectField, ProjectLastModifiedTimestamp, type ProjectListEntry, ProjectMetaKey, ProjectResourceType, ProjectStructureAuthorKey, ProjectStructureKey, SchemaVersionCurrent, SchemaVersionKey };
+export { AcceptanceFieldPrefix, BlockArgsAuthorKeyPrefix, BlockPackExplicit, BlockPackSpecAny, BlockPackSpecPrepared, EnvelopeAcceptance, EnvelopeData, EnvelopeMode, EnvelopeProject, FrontendFromFolder, FrontendFromFolderData, FrontendFromFolderResourceType, FrontendFromLocalTgz, FrontendFromLocalTgzData, FrontendFromLocalTgzResourceType, FrontendFromUrl, FrontendFromUrlData, FrontendFromUrlResourceType, FrontendSpec, ProjectChangeAction, ProjectCreatedTimestamp, type ProjectField, ProjectFieldUuid, ProjectLastModifiedTimestamp, type ProjectListEntry, ProjectMetaKey, ProjectResourceType, ProjectStructureAuthorKey, ProjectStructureKey, SchemaVersionCurrent, SchemaVersionKey, ShareId, ShareProjectsOptions, SharedEnvelopeResourceType, SharingDecision, SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, acceptanceField, acceptanceFieldLogin, asShareId, canGrantToEveryone, decisionField, decodeEnvelopeData, isAcceptanceField, newShareId };

package/dist/model/index.js

@@ -0,0 +1,4 @@
+import { BlockArgsAuthorKeyPrefix, ProjectCreatedTimestamp, ProjectLastModifiedTimestamp, ProjectMetaKey, ProjectResourceType, ProjectStructureAuthorKey, ProjectStructureKey, SchemaVersionCurrent, SchemaVersionKey } from "./project_model.js";
+import { FrontendFromFolderResourceType, FrontendFromLocalTgzResourceType, FrontendFromUrlResourceType } from "./block_pack_spec.js";
+import { AcceptanceFieldPrefix, SharedEnvelopeResourceType, SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, acceptanceField, acceptanceFieldLogin, asShareId, canGrantToEveryone, decisionField, decodeEnvelopeData, isAcceptanceField, newShareId } from "./sharing_model.js";
+export { AcceptanceFieldPrefix, BlockArgsAuthorKeyPrefix, FrontendFromFolderResourceType, FrontendFromLocalTgzResourceType, FrontendFromUrlResourceType, ProjectCreatedTimestamp, ProjectLastModifiedTimestamp, ProjectMetaKey, ProjectResourceType, ProjectStructureAuthorKey, ProjectStructureKey, SchemaVersionCurrent, SchemaVersionKey, SharedEnvelopeResourceType, SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, acceptanceField, acceptanceFieldLogin, asShareId, canGrantToEveryone, decisionField, decodeEnvelopeData, isAcceptanceField, newShareId };

package/dist/model/project_model.d.ts

@@ -1,11 +1,11 @@
 import { ProjectListEntry, ProjectMeta } from "@milaboratories/pl-model-middle-layer";
 import { ResourceType } from "@milaboratories/pl-client";
-import { ProjectId } from "@milaboratories/pl-model-common";
+import { ProjectId as ProjectId$1 } from "@milaboratories/pl-model-common";
 
 //#region src/model/project_model.d.ts
 interface ProjectListEntry$1 extends Omit<ProjectListEntry, "id"> {
   /** Unique project identifier in middle layer. Use to operate with given project. */
-  id: ProjectId;
+  id: ProjectId$1;
 }
 declare const ProjectResourceType: ResourceType;
 declare const SchemaVersionKey = "SchemaVersion";
@@ -21,5 +21,5 @@ interface ProjectField {
   fieldName: "blockPack" | "blockSettings" | "blockStorage" | "prodArgs" | "currentArgs" | "currentPrerunArgs" | "prodChainCtx" | "prodCtx" | "prodUiCtx" | "prodOutput" | "prodCtxPrevious" | "prodUiCtxPrevious" | "prodOutputPrevious" | "stagingCtx" | "stagingUiCtx" | "stagingOutput" | "stagingCtxPrevious" | "stagingUiCtxPrevious" | "stagingOutputPrevious";
 }
 //#endregion
-export { BlockArgsAuthorKeyPrefix, ProjectCreatedTimestamp, ProjectField, type ProjectId, ProjectLastModifiedTimestamp, ProjectListEntry$1 as ProjectListEntry, ProjectMetaKey, ProjectResourceType, ProjectStructureAuthorKey, ProjectStructureKey, SchemaVersionCurrent, SchemaVersionKey };
+export { BlockArgsAuthorKeyPrefix, ProjectCreatedTimestamp, ProjectField, type ProjectId$1 as ProjectId, ProjectLastModifiedTimestamp, ProjectListEntry$1 as ProjectListEntry, ProjectMetaKey, ProjectResourceType, ProjectStructureAuthorKey, ProjectStructureKey, SchemaVersionCurrent, SchemaVersionKey };
 //# sourceMappingURL=project_model.d.ts.map

package/dist/model/project_model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project_model.d.ts","names":[],"sources":["../../src/model/project_model.ts"],"mappings":";;;;;UAUiB,kBAAA,SAAyB,IAAA,CAAK,gBAAA;EAA9B;EAEf,EAAA,EAAI,SAAA;AAAA;AAAA,cA+DO,mBAAA,EAAqB,YAAoD;AAAA,cAEzE,gBAAA;AAAA,cAGA,oBAAA;AAAA,cAEA,uBAAA;AAAA,cACA,4BAAA;AAAA,cACA,cAAA;AAAA,cACA,mBAAA;AAAA,cAGA,wBAAA;AAAA,cAOA,yBAAA;AAAA,UAQI,YAAA;EACf,OAAA;EACA,SAAS;AAAA"}
+{"version":3,"file":"project_model.d.ts","names":[],"sources":["../../src/model/project_model.ts"],"mappings":";;;;;UAUiB,kBAAA,SAAyB,IAAA,CAAK,gBAAA;EAA9B;EAEf,EAAA,EAAI,WAAA;AAAA;AAAA,cA+DO,mBAAA,EAAqB,YAAoD;AAAA,cAEzE,gBAAA;AAAA,cAGA,oBAAA;AAAA,cAEA,uBAAA;AAAA,cACA,4BAAA;AAAA,cACA,cAAA;AAAA,cACA,mBAAA;AAAA,cAGA,wBAAA;AAAA,cAOA,yBAAA;AAAA,UAQI,YAAA;EACf,OAAA;EACA,SAAS;AAAA"}

package/dist/model/sharing_model.cjs

@@ -0,0 +1,81 @@
+let _milaboratories_pl_client = require("@milaboratories/pl-client");
+let node_crypto = require("node:crypto");
+//#region src/model/sharing_model.ts
+/** Mints a fresh {@link ShareId}. The single place a share's logical identity is created. */
+function newShareId() {
+	return (0, node_crypto.randomUUID)();
+}
+/** Brands a string already known to be a share id (e.g. parsed from a `decision/{shareId}`
+*  field name) as a {@link ShareId}, without minting a new one. */
+function asShareId(id) {
+	return id;
+}
+/** Field on the donor's clientRoot holding the {@link SharingOutboxResourceType} resource. */
+const SharingOutboxField = "sharingOutbox";
+/** Field on the acceptor's clientRoot holding the {@link SharingStateResourceType} resource. */
+const SharingStateField = "sharingState";
+const SharingOutboxResourceType = {
+	name: "SharingOutbox",
+	version: "1"
+};
+const SharedEnvelopeResourceType = {
+	name: "SharedEnvelope",
+	version: "1"
+};
+const SharingStateResourceType = {
+	name: "SharingState",
+	version: "1"
+};
+/**
+* Whether a role may make a resource public (grant to everyone): true for controller,
+* admin, and user; false for workflow and unspecified. The middle layer carries no policy
+* of its own here — a crafted call still hits the backend's role + permission-ceiling gate.
+* `null` (no-auth mode) returns false.
+*/
+function canGrantToEveryone(role) {
+	switch (role) {
+		case _milaboratories_pl_client.Role.CONTROLLER:
+		case _milaboratories_pl_client.Role.ADMIN:
+		case _milaboratories_pl_client.Role.USER: return true;
+		default: return false;
+	}
+}
+/** Dynamic field on SharingState, one per handled share, keyed by shareId. */
+const decisionField = (shareId) => `decision/${shareId}`;
+/** Dynamic field on SharedEnvelope, one per recipient who accepted or rejected, keyed
+*  by recipient login. Written by the acceptor in read-write shares only (Copy & Share,
+*  Live collaboration) — the acceptor's writable envelope grant is what permits the
+*  write; read-only shares omit it. The donor reads these from its own outbox to see
+*  who responded and when. Informational, not authoritative (a writable grant holder
+*  could write under another login — same trust assumption as the sender field).
+*  Copied forward when a share is changed. */
+const AcceptanceFieldPrefix = "acceptance/";
+const acceptanceField = (login) => `${AcceptanceFieldPrefix}${login}`;
+const isAcceptanceField = (name) => name.startsWith(AcceptanceFieldPrefix);
+const acceptanceFieldLogin = (name) => name.slice(11);
+/**
+* Single owner of the raw-data → {@link EnvelopeData} decode. The envelope's immutable `data`
+* blob is UTF-8 JSON set once at createEphemeral; every site that reads it from a raw resource
+* `data` byte buffer (the basic-resource read path) goes through here. The reactive tree-node
+* path uses `node.getDataAsJson<EnvelopeData>()`, which decodes the same JSON.
+*/
+function decodeEnvelopeData(data) {
+	return JSON.parse(Buffer.from(data).toString("utf-8"));
+}
+//#endregion
+exports.AcceptanceFieldPrefix = AcceptanceFieldPrefix;
+exports.SharedEnvelopeResourceType = SharedEnvelopeResourceType;
+exports.SharingOutboxField = SharingOutboxField;
+exports.SharingOutboxResourceType = SharingOutboxResourceType;
+exports.SharingStateField = SharingStateField;
+exports.SharingStateResourceType = SharingStateResourceType;
+exports.acceptanceField = acceptanceField;
+exports.acceptanceFieldLogin = acceptanceFieldLogin;
+exports.asShareId = asShareId;
+exports.canGrantToEveryone = canGrantToEveryone;
+exports.decisionField = decisionField;
+exports.decodeEnvelopeData = decodeEnvelopeData;
+exports.isAcceptanceField = isAcceptanceField;
+exports.newShareId = newShareId;
+
+//# sourceMappingURL=sharing_model.cjs.map

package/dist/model/sharing_model.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharing_model.cjs","names":["RoleEnum"],"sources":["../../src/model/sharing_model.ts"],"sourcesContent":["import type { ResourceType, Role } from \"@milaboratories/pl-client\";\nimport { Role as RoleEnum } from \"@milaboratories/pl-client\";\nimport type { Branded, ProjectId } from \"@milaboratories/pl-model-common\";\nimport { randomUUID } from \"node:crypto\";\n\n/**\n * Logical identity of a share, stable across replaces. A donor-generated UUID string,\n * branded so it cannot be silently confused with a project id, a login, or a raw field\n * name. Minted once with {@link newShareId}; every other site receives it (from decoded\n * {@link EnvelopeData} or by parsing a `decision/{shareId}` field name) and threads it\n * through unchanged.\n */\nexport type ShareId = Branded<string, \"ShareId\">;\n\n/** Mints a fresh {@link ShareId}. The single place a share's logical identity is created. */\nexport function newShareId(): ShareId {\n  return randomUUID() as ShareId;\n}\n\n/** Brands a string already known to be a share id (e.g. parsed from a `decision/{shareId}`\n *  field name) as a {@link ShareId}, without minting a new one. */\nexport function asShareId(id: string): ShareId {\n  return id as ShareId;\n}\n\n//\n// Pl Model — Project Sharing\n//\n// All sharing structures are defined and managed by the middle layer; the\n// backend knows nothing about envelopes.\n//\n\n/** Field on the donor's clientRoot holding the {@link SharingOutboxResourceType} resource. */\nexport const SharingOutboxField = \"sharingOutbox\";\n/** Field on the acceptor's clientRoot holding the {@link SharingStateResourceType} resource. */\nexport const SharingStateField = \"sharingState\";\n\nexport const SharingOutboxResourceType: ResourceType = { name: \"SharingOutbox\", version: \"1\" };\nexport const SharedEnvelopeResourceType: ResourceType = { name: \"SharedEnvelope\", version: \"1\" };\nexport const SharingStateResourceType: ResourceType = { name: \"SharingState\", version: \"1\" };\n\nexport type EnvelopeMode = \"copy\" | \"read-only\" | \"collaboration\";\n\n/** Per-project decision on change, matching the UI labels: re-snapshot the live source (\"update\"),\n *  carry the existing snapshot (\"keep\"), or drop the project from the pack (\"remove\"). */\nexport type ProjectChangeAction = \"keep\" | \"update\" | \"remove\";\n\n/** Key of the per-project envelope maps: a uuid minted per snapshot to name the `project/{uuid}`\n *  field. Distinct from {@link ProjectId} — re-snapshotting one source yields a new uuid each time. */\nexport type ProjectFieldUuid = Branded<string, \"ProjectFieldUuid\">;\n\n/**\n * Whether a role may make a resource public (grant to everyone): true for controller,\n * admin, and user; false for workflow and unspecified. The middle layer carries no policy\n * of its own here — a crafted call still hits the backend's role + permission-ceiling gate.\n * `null` (no-auth mode) returns false.\n */\nexport function canGrantToEveryone(role: Role | null): boolean {\n  switch (role) {\n    case RoleEnum.CONTROLLER:\n    case RoleEnum.ADMIN:\n    case RoleEnum.USER:\n      return true;\n    default:\n      return false;\n  }\n}\n\n/** One project's snapshot inside an envelope, keyed by {@link ProjectFieldUuid} in {@link EnvelopeData.projects}. */\nexport interface EnvelopeProject {\n  label: string; // carried so the pending-share UI renders without traversing into the project\n  source: ProjectId; // donor's source projectId; supersedes a prior share and matches the snapshot to its live source on change\n  updatedAt: number; // ms epoch of the last (re)snapshot\n}\n\n/** Immutable `data` on a SharedEnvelope, set at createEphemeral, never mutated. */\nexport interface EnvelopeData {\n  schemaVersion: 1;\n  shareId: ShareId; // donor-generated UUID; logical share identity, stable across changes\n  sharedAt: number; // ms epoch; this instance's creation time — distinguishes instances of one shareId\n  expiresAt: number | null; // ms epoch; sharedAt + ttl (default 14 days) for a targeted share; null for share-with-everybody (never expires)\n  mode: EnvelopeMode; // what the acceptor's app should do with the contents\n  sender: string; // donor login (informational; backend granted_by is authoritative)\n  title: string; // display name shown to recipients; defaults to the first project's name\n  projects: Record<ProjectFieldUuid, EnvelopeProject>; // contained projects, keyed by project field uuid\n}\n\n/** Dynamic field on SharingState, one per handled share, keyed by shareId. */\nexport const decisionField = (shareId: ShareId) => `decision/${shareId}`;\n\nexport interface SharingDecision {\n  decision: \"accepted\" | \"rejected\";\n  timestamp: number; // ms epoch — when the acceptor acted\n  envelopeSharedAt: number; // the acted-on envelope instance's sharedAt — pins which instance was handled (paired with the shareId key; the resource id is never stored)\n  acceptedProjects: string[]; // ids of the projects created in the acceptor's list ([] for a rejected share)\n}\n\n/** Dynamic field on SharedEnvelope, one per recipient who accepted or rejected, keyed\n *  by recipient login. Written by the acceptor in read-write shares only (Copy & Share,\n *  Live collaboration) — the acceptor's writable envelope grant is what permits the\n *  write; read-only shares omit it. The donor reads these from its own outbox to see\n *  who responded and when. Informational, not authoritative (a writable grant holder\n *  could write under another login — same trust assumption as the sender field).\n *  Copied forward when a share is changed. */\nexport const AcceptanceFieldPrefix = \"acceptance/\";\nexport const acceptanceField = (login: string) => `${AcceptanceFieldPrefix}${login}`;\nexport const isAcceptanceField = (name: string) => name.startsWith(AcceptanceFieldPrefix);\nexport const acceptanceFieldLogin = (name: string) => name.slice(AcceptanceFieldPrefix.length);\n\nexport interface EnvelopeAcceptance {\n  action: \"accepted\" | \"rejected\";\n  timestamp: number; // ms since epoch\n}\n\n/**\n * Single owner of the raw-data → {@link EnvelopeData} decode. The envelope's immutable `data`\n * blob is UTF-8 JSON set once at createEphemeral; every site that reads it from a raw resource\n * `data` byte buffer (the basic-resource read path) goes through here. The reactive tree-node\n * path uses `node.getDataAsJson<EnvelopeData>()`, which decodes the same JSON.\n */\nexport function decodeEnvelopeData(data: Uint8Array): EnvelopeData {\n  return JSON.parse(Buffer.from(data).toString(\"utf-8\")) as EnvelopeData;\n}\n\n/**\n * Options for {@link MiddleLayer.shareProjects}.\n *\n * Recipients XOR everyone — two clean variants, not one struct with mutually exclusive\n * optional fields. The everyone variant issues a single make-public grant (the envelope's\n * `expiresAt` is set to `null`, so it never expires); the recipients variant grants each\n * named recipient and the envelope expires after the default TTL.\n */\nexport type ShareProjectsOptions =\n  | {\n      recipients: string[]; // recipient logins\n      title: string; // display name shown to recipients; defaults to the first project's name\n      mode: EnvelopeMode; // v1 UI always sends \"copy\"\n    }\n  | {\n      everyone: true; // share with all users on the server\n      /**\n       * When true and an everyone-share of the same project already exists, refresh it under its\n       * stable shareId (recipients who already accepted or rejected are not re-prompted) instead of\n       * minting a new share. No-op when no prior everyone-share of the project exists. Callers that\n       * don't care pass `false`.\n       */\n      replace: boolean;\n      title: string;\n      mode: EnvelopeMode;\n    };\n"],"mappings":";;;;AAeA,SAAgB,aAAsB;CACpC,QAAA,GAAA,YAAA,WAAA,CAAkB;AACpB;;;AAIA,SAAgB,UAAU,IAAqB;CAC7C,OAAO;AACT;;AAUA,MAAa,qBAAqB;;AAElC,MAAa,oBAAoB;AAEjC,MAAa,4BAA0C;CAAE,MAAM;CAAiB,SAAS;AAAI;AAC7F,MAAa,6BAA2C;CAAE,MAAM;CAAkB,SAAS;AAAI;AAC/F,MAAa,2BAAyC;CAAE,MAAM;CAAgB,SAAS;AAAI;;;;;;;AAkB3F,SAAgB,mBAAmB,MAA4B;CAC7D,QAAQ,MAAR;EACE,KAAKA,0BAAAA,KAAS;EACd,KAAKA,0BAAAA,KAAS;EACd,KAAKA,0BAAAA,KAAS,MACZ,OAAO;EACT,SACE,OAAO;CACX;AACF;;AAsBA,MAAa,iBAAiB,YAAqB,YAAY;;;;;;;;AAgB/D,MAAa,wBAAwB;AACrC,MAAa,mBAAmB,UAAkB,GAAG,wBAAwB;AAC7E,MAAa,qBAAqB,SAAiB,KAAK,WAAW,qBAAqB;AACxF,MAAa,wBAAwB,SAAiB,KAAK,MAAM,EAA4B;;;;;;;AAa7F,SAAgB,mBAAmB,MAAgC;CACjE,OAAO,KAAK,MAAM,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,OAAO,CAAC;AACvD"}

package/dist/model/sharing_model.d.ts

@@ -0,0 +1,112 @@
+import { ResourceType, Role } from "@milaboratories/pl-client";
+import { Branded, ProjectId } from "@milaboratories/pl-model-common";
+
+//#region src/model/sharing_model.d.ts
+/**
+ * Logical identity of a share, stable across replaces. A donor-generated UUID string,
+ * branded so it cannot be silently confused with a project id, a login, or a raw field
+ * name. Minted once with {@link newShareId}; every other site receives it (from decoded
+ * {@link EnvelopeData} or by parsing a `decision/{shareId}` field name) and threads it
+ * through unchanged.
+ */
+type ShareId = Branded<string, "ShareId">;
+/** Mints a fresh {@link ShareId}. The single place a share's logical identity is created. */
+declare function newShareId(): ShareId;
+/** Brands a string already known to be a share id (e.g. parsed from a `decision/{shareId}`
+ *  field name) as a {@link ShareId}, without minting a new one. */
+declare function asShareId(id: string): ShareId;
+/** Field on the donor's clientRoot holding the {@link SharingOutboxResourceType} resource. */
+declare const SharingOutboxField = "sharingOutbox";
+/** Field on the acceptor's clientRoot holding the {@link SharingStateResourceType} resource. */
+declare const SharingStateField = "sharingState";
+declare const SharingOutboxResourceType: ResourceType;
+declare const SharedEnvelopeResourceType: ResourceType;
+declare const SharingStateResourceType: ResourceType;
+type EnvelopeMode = "copy" | "read-only" | "collaboration";
+/** Per-project decision on change, matching the UI labels: re-snapshot the live source ("update"),
+ *  carry the existing snapshot ("keep"), or drop the project from the pack ("remove"). */
+type ProjectChangeAction = "keep" | "update" | "remove";
+/** Key of the per-project envelope maps: a uuid minted per snapshot to name the `project/{uuid}`
+ *  field. Distinct from {@link ProjectId} — re-snapshotting one source yields a new uuid each time. */
+type ProjectFieldUuid = Branded<string, "ProjectFieldUuid">;
+/**
+ * Whether a role may make a resource public (grant to everyone): true for controller,
+ * admin, and user; false for workflow and unspecified. The middle layer carries no policy
+ * of its own here — a crafted call still hits the backend's role + permission-ceiling gate.
+ * `null` (no-auth mode) returns false.
+ */
+declare function canGrantToEveryone(role: Role | null): boolean;
+/** One project's snapshot inside an envelope, keyed by {@link ProjectFieldUuid} in {@link EnvelopeData.projects}. */
+interface EnvelopeProject {
+  label: string;
+  source: ProjectId;
+  updatedAt: number;
+}
+/** Immutable `data` on a SharedEnvelope, set at createEphemeral, never mutated. */
+interface EnvelopeData {
+  schemaVersion: 1;
+  shareId: ShareId;
+  sharedAt: number;
+  expiresAt: number | null;
+  mode: EnvelopeMode;
+  sender: string;
+  title: string;
+  projects: Record<ProjectFieldUuid, EnvelopeProject>;
+}
+/** Dynamic field on SharingState, one per handled share, keyed by shareId. */
+declare const decisionField: (shareId: ShareId) => string;
+interface SharingDecision {
+  decision: "accepted" | "rejected";
+  timestamp: number;
+  envelopeSharedAt: number;
+  acceptedProjects: string[];
+}
+/** Dynamic field on SharedEnvelope, one per recipient who accepted or rejected, keyed
+ *  by recipient login. Written by the acceptor in read-write shares only (Copy & Share,
+ *  Live collaboration) — the acceptor's writable envelope grant is what permits the
+ *  write; read-only shares omit it. The donor reads these from its own outbox to see
+ *  who responded and when. Informational, not authoritative (a writable grant holder
+ *  could write under another login — same trust assumption as the sender field).
+ *  Copied forward when a share is changed. */
+declare const AcceptanceFieldPrefix = "acceptance/";
+declare const acceptanceField: (login: string) => string;
+declare const isAcceptanceField: (name: string) => boolean;
+declare const acceptanceFieldLogin: (name: string) => string;
+interface EnvelopeAcceptance {
+  action: "accepted" | "rejected";
+  timestamp: number;
+}
+/**
+ * Single owner of the raw-data → {@link EnvelopeData} decode. The envelope's immutable `data`
+ * blob is UTF-8 JSON set once at createEphemeral; every site that reads it from a raw resource
+ * `data` byte buffer (the basic-resource read path) goes through here. The reactive tree-node
+ * path uses `node.getDataAsJson<EnvelopeData>()`, which decodes the same JSON.
+ */
+declare function decodeEnvelopeData(data: Uint8Array): EnvelopeData;
+/**
+ * Options for {@link MiddleLayer.shareProjects}.
+ *
+ * Recipients XOR everyone — two clean variants, not one struct with mutually exclusive
+ * optional fields. The everyone variant issues a single make-public grant (the envelope's
+ * `expiresAt` is set to `null`, so it never expires); the recipients variant grants each
+ * named recipient and the envelope expires after the default TTL.
+ */
+type ShareProjectsOptions = {
+  recipients: string[];
+  title: string;
+  mode: EnvelopeMode;
+} | {
+  everyone: true;
+  /**
+   * When true and an everyone-share of the same project already exists, refresh it under its
+   * stable shareId (recipients who already accepted or rejected are not re-prompted) instead of
+   * minting a new share. No-op when no prior everyone-share of the project exists. Callers that
+   * don't care pass `false`.
+   */
+  replace: boolean;
+  title: string;
+  mode: EnvelopeMode;
+};
+//#endregion
+export { AcceptanceFieldPrefix, EnvelopeAcceptance, EnvelopeData, EnvelopeMode, EnvelopeProject, ProjectChangeAction, ProjectFieldUuid, ShareId, ShareProjectsOptions, SharedEnvelopeResourceType, SharingDecision, SharingOutboxField, SharingOutboxResourceType, SharingStateField, SharingStateResourceType, acceptanceField, acceptanceFieldLogin, asShareId, canGrantToEveryone, decisionField, decodeEnvelopeData, isAcceptanceField, newShareId };
+//# sourceMappingURL=sharing_model.d.ts.map

package/dist/model/sharing_model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sharing_model.d.ts","names":[],"sources":["../../src/model/sharing_model.ts"],"mappings":";;;;;;AAYA;;;;AAA6B;KAAjB,OAAA,GAAU,OAAO;;iBAGb,UAAA,IAAc,OAAO;;AAAA;iBAMrB,SAAA,CAAU,EAAA,WAAa,OAAO;;cAYjC,kBAAA;;cAEA,iBAAA;AAAA,cAEA,yBAAA,EAA2B,YAAsD;AAAA,cACjF,0BAAA,EAA4B,YAAuD;AAAA,cACnF,wBAAA,EAA0B,YAAqD;AAAA,KAEhF,YAAA;AARmB;AAE/B;AAF+B,KAYnB,mBAAA;;;KAIA,gBAAA,GAAmB,OAAO;AAZtC;;;;AAA8F;AAC9F;AADA,iBAoBgB,kBAAA,CAAmB,IAAiB,EAAX,IAAI;;UAY5B,eAAA;EACf,KAAA;EACA,MAAA,EAAQ,SAAS;EACjB,SAAA;AAAA;;UAIe,YAAA;EACf,aAAA;EACA,OAAA,EAAS,OAAA;EACT,QAAA;EACA,SAAA;EACA,IAAA,EAAM,YAAA;EACN,MAAA;EACA,KAAA;EACA,QAAA,EAAU,MAAA,CAAO,gBAAA,EAAkB,eAAA;AAAA;AAvCN;AAAA,cA2ClB,aAAA,GAAiB,OAAgB,EAAP,OAAO;AAAA,UAE7B,eAAA;EACf,QAAA;EACA,SAAA;EACA,gBAAA;EACA,gBAAA;AAAA;;;AArCkD;AAYpD;;;;cAmCa,qBAAA;AAAA,cACA,eAAA,GAAmB,KAAa;AAAA,cAChC,iBAAA,GAAqB,IAAY;AAAA,cACjC,oBAAA,GAAwB,IAAY;AAAA,UAEhC,kBAAA;EACf,MAAA;EACA,SAAS;AAAA;;;;;;;iBASK,kBAAA,CAAmB,IAAA,EAAM,UAAA,GAAa,YAAY;;;;;;;;;KAYtD,oBAAA;EAEN,UAAA;EACA,KAAA;EACA,IAAA,EAAM,YAAA;AAAA;EAGN,QAAA;EAvD8C;AAAA;AAIpD;;;;EA0DM,OAAA;EACA,KAAA;EACA,IAAA,EAAM,YAAY;AAAA"}