@opengeni/core 0.28.0 → 1.0.0

package/dist/{chunk-NYPMQ7NO.js → chunk-GVO3N37G.js}

@@ -14,7 +14,7 @@ import {
   editableArtifactStateHash,
   editableArtifactTransactionId,
   validateEditableArtifactActor
-} from "./chunk-JJU6I5XD.js";
+} from "./chunk-LCQXNR62.js";
 
 // src/editable-artifact-live/application.ts
 import { EDITABLE_ARTIFACT_KERNEL_VERSION_MAX_BYTES } from "@opengeni/contracts/editable-artifacts";
@@ -75,16 +75,27 @@ var EditableArtifactApplication = class {
     const artifact = await this.readArtifact(input);
     await this.dependencies.compatibility.assertCompatible({
       artifact,
-      protocolVersion: positiveInteger(input.protocolVersion, "protocolVersion"),
+      modality: input.modality,
+      liveProtocolVersion: positiveInteger(input.liveProtocolVersion, "liveProtocolVersion"),
       kernelVersion: boundedVersion(input.kernelVersion, "kernelVersion"),
-      modelSchemaVersion: positiveInteger(input.modelSchemaVersion, "modelSchemaVersion")
+      modelSchemaVersion: positiveInteger(input.modelSchemaVersion, "modelSchemaVersion"),
+      snapshotVersion: positiveInteger(input.snapshotVersion, "snapshotVersion"),
+      commandProtocolVersion: positiveInteger(
+        input.commandProtocolVersion,
+        "commandProtocolVersion"
+      ),
+      committedTransactionProtocolVersion: positiveInteger(
+        input.committedTransactionProtocolVersion,
+        "committedTransactionProtocolVersion"
+      )
     });
     return await this.dependencies.live.mintTicket({
       scope: artifact.scope,
       artifactId: artifact.id,
       modality: artifact.modality,
       actor: input.actor,
-      allowEdit: input.allowEdit
+      allowEdit: input.allowEdit,
+      ...input.sourceSessionAuthority ? { sourceSessionAuthority: input.sourceSessionAuthority } : {}
     });
   }
   openLive(input) {
@@ -738,13 +749,28 @@ import {
 import { decodeCommittedTransactionSummary } from "@opengeni/contracts/editable-artifact-committed-transaction";
 import { decodeEditableArtifactSerializedCommit } from "@opengeni/contracts/editable-artifact-serialized-commit";
 
+// src/editable-artifact-live/ticket.ts
+import { AccessGrant } from "@opengeni/contracts";
+import { ExternalActorContinuation } from "@opengeni/contracts/external-identities";
+import { z } from "zod";
+import { deflateRawSync, inflateRawSync } from "zlib";
+
 // src/editable-artifact-live/types.ts
-var EDITABLE_ARTIFACT_LIVE_PROTOCOL_VERSION = 1;
+import { EDITABLE_ARTIFACT_LIVE_WIRE_VERSION } from "@opengeni/contracts/editable-artifact-live";
+var EDITABLE_ARTIFACT_LIVE_PROTOCOL_VERSION = EDITABLE_ARTIFACT_LIVE_WIRE_VERSION;
 
 // src/editable-artifact-live/ticket.ts
 var DEFAULT_TTL_MS = 3e4;
 var MAX_TTL_MS = 6e4;
 var MAX_TOKEN_BYTES = 4096;
+var SOURCE_AUTHORITY_MARKER = ".ogs1.";
+var COMPRESSED_SOURCE_AUTHORITY_MARKER = ".ogs2.";
+var MAX_SOURCE_AUTHORITY_BYTES = 16 * 1024;
+var SourceSessionAuthority = z.object({
+  sessionId: z.string().uuid(),
+  grant: AccessGrant,
+  externalContinuation: ExternalActorContinuation.optional()
+}).strict();
 var EditableArtifactLiveTicketAuthority = class {
   constructor(dependencies) {
     this.dependencies = dependencies;
@@ -752,10 +778,7 @@ var EditableArtifactLiveTicketAuthority = class {
     if (!Number.isSafeInteger(this.ttlMs) || this.ttlMs < 1e3 || this.ttlMs > MAX_TTL_MS) {
       throw new TypeError(`ticket ttl must be 1000-${MAX_TTL_MS} milliseconds`);
     }
-    this.protocolVersion = dependencies.protocolVersion ?? EDITABLE_ARTIFACT_LIVE_PROTOCOL_VERSION;
-    if (!Number.isSafeInteger(this.protocolVersion) || this.protocolVersion < 1) {
-      throw new TypeError("protocol version must be a positive safe integer");
-    }
+    this.protocolVersion = EDITABLE_ARTIFACT_LIVE_PROTOCOL_VERSION;
   }
   ttlMs;
   protocolVersion;
@@ -780,7 +803,19 @@ var EditableArtifactLiveTicketAuthority = class {
         "Editable artifact read permission denied"
       );
     }
-    const token = this.dependencies.tokens.randomOpaqueToken();
+    const sourceSessionAuthority = input.sourceSessionAuthority ? SourceSessionAuthority.parse(input.sourceSessionAuthority) : void 0;
+    if (sourceSessionAuthority) {
+      assertSourceSessionAuthority(sourceSessionAuthority, scope, actor);
+    }
+    const sourceBytes = sourceSessionAuthority ? Buffer.from(JSON.stringify(sourceSessionAuthority)) : null;
+    if (sourceBytes && sourceBytes.byteLength > MAX_SOURCE_AUTHORITY_BYTES) {
+      throw new EditableArtifactLiveError(
+        "invalid_ticket",
+        "Live ticket source authority is too large"
+      );
+    }
+    const nonce = this.dependencies.tokens.randomOpaqueToken();
+    const token = sourceBytes ? `${nonce}${COMPRESSED_SOURCE_AUTHORITY_MARKER}${deflateRawSync(sourceBytes).toString("base64url")}` : nonce;
     assertToken(token);
     const tokenDigest = await this.dependencies.tokens.digestOpaqueToken(token);
     assertDigest(tokenDigest);
@@ -823,6 +858,10 @@ var EditableArtifactLiveTicketAuthority = class {
       );
     }
     validateTicketRecord(record);
+    const sourceSessionAuthority = decodeSourceSessionAuthority(input.token);
+    if (sourceSessionAuthority) {
+      assertSourceSessionAuthority(sourceSessionAuthority, record.scope, record.actor);
+    }
     if (Date.parse(record.expiresAt) <= this.dependencies.clock.now().getTime()) {
       throw new EditableArtifactLiveError("ticket_expired", "Live ticket has expired", {
         retryable: true
@@ -840,7 +879,8 @@ var EditableArtifactLiveTicketAuthority = class {
     return Object.freeze({
       ...record,
       scope: editableArtifactScope(record.scope),
-      actor: Object.freeze({ ...record.actor })
+      actor: Object.freeze({ ...record.actor }),
+      ...sourceSessionAuthority ? { sourceSessionAuthority } : {}
     });
   }
 };
@@ -882,6 +922,34 @@ function validateTicketRecord(record) {
   assertIsoTimestamp(record.issuedAt, "ticket issuedAt");
   assertIsoTimestamp(record.expiresAt, "ticket expiresAt");
 }
+function decodeSourceSessionAuthority(token) {
+  const compressed = token.includes(COMPRESSED_SOURCE_AUTHORITY_MARKER);
+  const marker = compressed ? COMPRESSED_SOURCE_AUTHORITY_MARKER : SOURCE_AUTHORITY_MARKER;
+  const separator = token.lastIndexOf(marker);
+  if (separator === -1) return void 0;
+  try {
+    return SourceSessionAuthority.parse(
+      JSON.parse(
+        (compressed ? inflateRawSync(Buffer.from(token.slice(separator + marker.length), "base64url"), {
+          maxOutputLength: MAX_SOURCE_AUTHORITY_BYTES
+        }) : Buffer.from(token.slice(separator + marker.length), "base64url")).toString("utf8")
+      )
+    );
+  } catch {
+    throw new EditableArtifactLiveError(
+      "invalid_ticket",
+      "Live ticket source authority is invalid"
+    );
+  }
+}
+function assertSourceSessionAuthority(authority, scope, actor) {
+  if (authority.grant.accountId !== scope.accountId || authority.grant.workspaceId !== scope.workspaceId || authority.grant.subjectId !== actor.subjectId) {
+    throw new EditableArtifactLiveError(
+      "invalid_ticket",
+      "Live ticket source scope does not match"
+    );
+  }
+}
 function assertModality(value) {
   if (value !== "document" && value !== "spreadsheet" && value !== "presentation") {
     throw new TypeError("ticket modality is invalid");
@@ -900,6 +968,7 @@ function assertDigest(value) {
 
 // src/editable-artifact-live/server.ts
 var textEncoder2 = new TextEncoder();
+var SOURCE_SESSION_LIVE_LEASE_MS = 15e3;
 var strictDecoder = new TextDecoder("utf-8", { fatal: true });
 var DEFAULT_MAX_CLIENT_FRAME_BYTES = 5 * 1024 * 1024 + 64 * 1024;
 var DEFAULT_MAX_OUTBOUND_FRAME_BYTES = 8 * 1024 * 1024 + 64 * 1024;
@@ -927,7 +996,6 @@ var EditableArtifactLiveServer = class {
       tickets: dependencies.tickets,
       tokens: dependencies.tokens,
       clock: dependencies.clock,
-      protocolVersion: this.options.protocolVersion,
       ...this.options.ticketTtlMs === void 0 ? {} : { ttlMs: this.options.ticketTtlMs }
     });
   }
@@ -953,7 +1021,8 @@ var EditableArtifactLiveServer = class {
       streamEpoch,
       resume: input.resume,
       sink: input.sink,
-      ...input.signal === void 0 ? {} : { parentSignal: input.signal }
+      ...input.signal === void 0 ? {} : { parentSignal: input.signal },
+      ...input.authorizeSourceSession ? { authorizeSourceSession: input.authorizeSourceSession } : {}
     });
     await session.start();
     return session;
@@ -967,6 +1036,8 @@ var EditableArtifactLiveSessionImpl = class {
   dependencies;
   options;
   ticket;
+  authorizeSourceSession;
+  sourceSessionLeaseExpiresAt;
   resume;
   sink;
   abort = new AbortController();
@@ -999,6 +1070,8 @@ var EditableArtifactLiveSessionImpl = class {
     this.dependencies = input.dependencies;
     this.options = input.options;
     this.ticket = input.ticket;
+    this.authorizeSourceSession = input.authorizeSourceSession;
+    this.sourceSessionLeaseExpiresAt = input.ticket.sourceSessionAuthority ? Date.parse(input.ticket.issuedAt) + SOURCE_SESSION_LIVE_LEASE_MS : null;
     this.artifactId = input.ticket.artifactId;
     this.modality = input.ticket.modality;
     this.streamEpoch = input.streamEpoch;
@@ -1019,6 +1092,11 @@ var EditableArtifactLiveSessionImpl = class {
   async start() {
     try {
       this.assertOpen();
+      if (this.sourceSessionLeaseExpiresAt !== null) {
+        void this.runSourceSessionLease().catch((error) => {
+          if (!this.abort.signal.aborted) void this.fail(error);
+        });
+      }
       this.authorizationRevision = await this.requireRead();
       this.assertOpen();
       const releaseHints = await this.dependencies.hints.subscribe({
@@ -1057,8 +1135,7 @@ var EditableArtifactLiveSessionImpl = class {
       const bootstrap = await this.dependencies.read.readBootstrap({
         scope: this.ticket.scope,
         artifactId: this.artifactId,
-        resume: this.resume,
-        protocolVersion: this.options.protocolVersion
+        resume: this.resume
       });
       this.assertOpen();
       validateBootstrap(bootstrap, this.artifactId, this.modality, this.resume, this.options);
@@ -1243,6 +1320,7 @@ var EditableArtifactLiveSessionImpl = class {
     this.resolveClosed(close);
   }
   assertOpen() {
+    this.assertSourceSessionLease();
     if (this.closedValue) {
       throw new EditableArtifactLiveError("closed", "Live session is closed");
     }
@@ -1397,7 +1475,13 @@ var EditableArtifactLiveSessionImpl = class {
         bytes
       };
       await this.send(
-        snapshot.modality === "spreadsheet" ? { ...common, modality: snapshot.modality, causalFrontier } : {
+        snapshot.modality === "spreadsheet" ? {
+          ...common,
+          modality: snapshot.modality,
+          causalFrontier,
+          operationProtocolVersion: snapshot.operationProtocolVersion,
+          snapshotVersion: snapshot.snapshotVersion
+        } : {
           ...common,
           modality: snapshot.modality,
           nativeRevision: snapshot.nativeRevision
@@ -1585,6 +1669,20 @@ var EditableArtifactLiveSessionImpl = class {
         scope: this.ticket.scope,
         artifactId: this.artifactId,
         actor: this.ticket.actor,
+        ...this.ticket.sourceSessionAuthority ? {
+          authorizeCommit: async (transaction2) => {
+            this.assertOpen();
+            if (!this.authorizeSourceSession || !await this.withBoundedAuthorization(
+              (signal) => this.authorizeSourceSession(this.ticket, "edit", transaction2, signal)
+            )) {
+              throw new EditableArtifactLiveError(
+                "permission_changed",
+                "Editable artifact source session permission changed"
+              );
+            }
+            this.assertOpen();
+          }
+        } : {},
         request: {
           intentBytes: frame.intentBytes.slice(),
           requestHash: frame.requestHash
@@ -1675,17 +1773,66 @@ var EditableArtifactLiveSessionImpl = class {
     return decision.revision;
   }
   async checkPermission(permission) {
-    const decision = await this.dependencies.authorization.authorize({
-      scope: this.ticket.scope,
-      artifactId: this.artifactId,
-      actor: this.ticket.actor,
-      permission
+    const decision = await this.withBoundedAuthorization(async (signal) => {
+      if (this.ticket.sourceSessionAuthority) {
+        if (!this.authorizeSourceSession || !await this.authorizeSourceSession(this.ticket, permission, void 0, signal)) {
+          return Object.freeze({ allowed: false, revision: this.authorizationRevision });
+        }
+      }
+      signal.throwIfAborted();
+      return await this.dependencies.authorization.authorize({
+        scope: this.ticket.scope,
+        artifactId: this.artifactId,
+        actor: this.ticket.actor,
+        permission
+      });
     });
     if (permission === "edit" && !this.ticket.allowEdit) {
       return Object.freeze({ ...decision, allowed: false });
     }
     return decision;
   }
+  async withBoundedAuthorization(operation) {
+    this.assertSourceSessionLease();
+    const timeout = new AbortController();
+    const signal = AbortSignal.any([this.abort.signal, timeout.signal]);
+    if (this.sourceSessionLeaseExpiresAt !== null) {
+      const budget = this.sourceSessionLeaseExpiresAt - this.dependencies.clock.now().getTime();
+      void this.dependencies.scheduler.sleep(budget, signal).then(
+        () => timeout.abort(
+          new EditableArtifactLiveError("ticket_expired", "Live authorization lease expired", {
+            retryable: true
+          })
+        ),
+        () => void 0
+      );
+    }
+    try {
+      const result = await awaitLiveAuthorization(operation(signal), signal);
+      this.assertOpen();
+      return result;
+    } finally {
+      timeout.abort();
+    }
+  }
+  async runSourceSessionLease() {
+    while (!this.abort.signal.aborted && this.sourceSessionLeaseExpiresAt !== null) {
+      const remaining = this.sourceSessionLeaseExpiresAt - this.dependencies.clock.now().getTime();
+      if (remaining <= 0) {
+        await this.close("ticket_expired");
+        return;
+      }
+      await this.dependencies.scheduler.sleep(remaining, this.abort.signal);
+    }
+  }
+  assertSourceSessionLease() {
+    if (this.sourceSessionLeaseExpiresAt !== null && this.dependencies.clock.now().getTime() >= this.sourceSessionLeaseExpiresAt) {
+      void this.close("ticket_expired");
+      throw new EditableArtifactLiveError("ticket_expired", "Source session lease expired", {
+        retryable: true
+      });
+    }
+  }
   async sendBarrier() {
     if (!this.sentStateHash)
       throw new EditableArtifactLiveError("durable_gap", "Bootstrap has no state boundary");
@@ -1700,6 +1847,7 @@ var EditableArtifactLiveSessionImpl = class {
   }
   async send(frame) {
     if (this.closedValue) return;
+    this.assertSourceSessionLease();
     const bytes = estimateFrameBytes(frame);
     if (bytes > this.options.maxOutboundFrameBytes) {
       throw new EditableArtifactLiveError(
@@ -1757,9 +1905,18 @@ var EditableArtifactLiveSessionImpl = class {
       )
     );
     while (!this.abort.signal.aborted) {
-      await this.dependencies.scheduler.sleep(tick, this.abort.signal);
+      const leaseRemaining = this.sourceSessionLeaseExpiresAt === null ? tick : this.sourceSessionLeaseExpiresAt - this.dependencies.clock.now().getTime();
+      if (leaseRemaining <= 0) {
+        await this.close("ticket_expired");
+        return;
+      }
+      await this.dependencies.scheduler.sleep(Math.min(tick, leaseRemaining), this.abort.signal);
       if (this.abort.signal.aborted || this.closedValue) return;
       const now = this.dependencies.clock.now().getTime();
+      if (this.sourceSessionLeaseExpiresAt !== null && now >= this.sourceSessionLeaseExpiresAt) {
+        await this.close("ticket_expired");
+        return;
+      }
       if (this.oldestInFlightAt !== 0 && now - this.oldestInFlightAt >= this.options.ackTimeoutMs) {
         await this.enqueue(() => this.requireResync("slow_client", this.targetHead));
         return;
@@ -1793,6 +1950,27 @@ var EditableArtifactLiveSessionImpl = class {
     await this.close("transport_error");
   }
 };
+function awaitLiveAuthorization(operation, signal) {
+  return new Promise((resolve, reject) => {
+    const abort = () => {
+      signal.removeEventListener("abort", abort);
+      reject(signal.reason);
+    };
+    operation.then(
+      (value) => {
+        signal.removeEventListener("abort", abort);
+        if (signal.aborted) reject(signal.reason);
+        else resolve(value);
+      },
+      (error) => {
+        signal.removeEventListener("abort", abort);
+        reject(error);
+      }
+    );
+    if (signal.aborted) abort();
+    else signal.addEventListener("abort", abort, { once: true });
+  });
+}
 function decodeClientFrame(bytes, artifactId, streamEpoch, protocolVersion) {
   let value;
   try {
@@ -1871,7 +2049,7 @@ function validateAppliedFrame(frame, artifactId, streamEpoch, protocolVersion) {
   });
 }
 function validateResume(resume, durableModality) {
-  const resumeModality = resume.modality ?? "spreadsheet";
+  const resumeModality = resume.modality;
   if (resumeModality !== durableModality) {
     throw new EditableArtifactLiveError(
       "invalid_frame",
@@ -2123,7 +2301,7 @@ function boundedString(value, label, maxBytes) {
 }
 function normalizeOptions2(options) {
   const normalized = {
-    protocolVersion: options.protocolVersion ?? EDITABLE_ARTIFACT_LIVE_PROTOCOL_VERSION,
+    protocolVersion: EDITABLE_ARTIFACT_LIVE_PROTOCOL_VERSION,
     maxClientFrameBytes: options.maxClientFrameBytes ?? DEFAULT_MAX_CLIENT_FRAME_BYTES,
     maxOutboundFrameBytes: options.maxOutboundFrameBytes ?? DEFAULT_MAX_OUTBOUND_FRAME_BYTES,
     maxSnapshotBytes: options.maxSnapshotBytes ?? DEFAULT_MAX_SNAPSHOT_BYTES,
@@ -2204,7 +2382,7 @@ var SystemEditableArtifactLiveScheduler = class {
 
 // src/editable-artifact-live/wire.ts
 import {
-  EDITABLE_ARTIFACT_LIVE_WIRE_VERSION,
+  EDITABLE_ARTIFACT_LIVE_WIRE_VERSION as EDITABLE_ARTIFACT_LIVE_WIRE_VERSION2,
   decodeEditableArtifactLiveClientWireFrame as decodeContractClientFrame,
   decodeEditableArtifactLiveServerWireFrame,
   encodeEditableArtifactLiveAppliedWireFrame as encodeContractAppliedFrame,
@@ -2226,16 +2404,6 @@ function encodeEditableArtifactLiveMutationWireFrame(frame) {
   return encodeContractMutationFrame(frame);
 }
 function encodeEditableArtifactLiveServerWireFrame(frame) {
-  if (frame.type === "transaction" && frame.transaction.modality === "spreadsheet") {
-    const { operationProtocolVersion, modality: _modality, ...transaction } = frame.transaction;
-    return encodeContractServerFrame({
-      ...frame,
-      transaction: {
-        ...transaction,
-        protocolVersion: operationProtocolVersion
-      }
-    });
-  }
   return encodeContractServerFrame(frame);
 }
 
@@ -2258,7 +2426,7 @@ export {
   EditableArtifactLiveServer,
   SystemEditableArtifactLiveClock,
   SystemEditableArtifactLiveScheduler,
-  EDITABLE_ARTIFACT_LIVE_WIRE_VERSION,
+  EDITABLE_ARTIFACT_LIVE_WIRE_VERSION2 as EDITABLE_ARTIFACT_LIVE_WIRE_VERSION,
   decodeEditableArtifactLiveServerWireFrame,
   inspectEditableArtifactLiveWireEnvelope,
   decodeEditableArtifactLiveClientWireFrame,
@@ -2267,4 +2435,4 @@ export {
   encodeEditableArtifactLiveMutationWireFrame,
   encodeEditableArtifactLiveServerWireFrame
 };
-//# sourceMappingURL=chunk-NYPMQ7NO.js.map
+//# sourceMappingURL=chunk-GVO3N37G.js.map