@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/internal/validators/billing.d.ts

@@ -0,0 +1,42 @@
+import { z } from "zod";
+export declare const BILLING_ERROR_CODES: {
+    readonly checkoutNoActiveMembers: "billing_checkout_no_active_members";
+    readonly rosterOverCapacity: "billing_roster_over_capacity";
+};
+export type BillingErrorCode = (typeof BILLING_ERROR_CODES)[keyof typeof BILLING_ERROR_CODES];
+/** Native subscription stores supported by the RevenueCat ownership flow. */
+export declare const NATIVE_SUBSCRIPTION_STORES: readonly ["app_store", "play_store", "test_store"];
+export declare const NativeSubscriptionStoreSchema: z.ZodLiteral<"app_store" | "play_store" | "test_store">;
+export type NativeSubscriptionStore = z.infer<typeof NativeSubscriptionStoreSchema>;
+export declare function isNativeSubscriptionStore(value: unknown): value is NativeSubscriptionStore;
+/** Canonical fixed-cap subscription tiers shared by every billing provider. */
+export declare const SYNC_BILLING_TIERS: readonly [{
+    readonly id: "solo";
+    readonly monthlyPriceUsdCents: 500;
+    readonly seatLimit: 1;
+    readonly title: "Solo";
+}, {
+    readonly id: "team_5";
+    readonly monthlyPriceUsdCents: 1000;
+    readonly seatLimit: 5;
+    readonly title: "Team (up to 5)";
+}, {
+    readonly id: "team_10";
+    readonly monthlyPriceUsdCents: 2000;
+    readonly seatLimit: 10;
+    readonly title: "Team (up to 10)";
+}];
+export type SyncBillingTier = (typeof SYNC_BILLING_TIERS)[number];
+export declare const SyncBillingTierIdSchema: z.ZodLiteral<"solo" | "team_5" | "team_10">;
+export type SyncBillingTierId = z.infer<typeof SyncBillingTierIdSchema>;
+export declare function isSyncBillingTierId(value: unknown): value is SyncBillingTierId;
+export declare function getSyncBillingTier(tierId: SyncBillingTierId): SyncBillingTier;
+/** Smallest tier that can cover a membership count, or null above the limit. */
+export declare function getSyncBillingTierForSeatCount(seatCount: number): SyncBillingTier | null;
+/** Largest tier in the canonical ascending-capacity tier list. */
+export declare function getLargestSyncBillingTier(): SyncBillingTier;
+/**
+ * Product identifiers used in App Store, Play, and RevenueCat Test Store.
+ * Staging suffixes and Play base-plan suffixes do not change the tier.
+ */
+export declare function getSyncBillingTierForNativeProduct(productId: string | null | undefined): SyncBillingTier | null;

package/internal/validators/billing.js

@@ -0,0 +1,86 @@
+import { z } from "zod";
+export const BILLING_ERROR_CODES = {
+    checkoutNoActiveMembers: "billing_checkout_no_active_members",
+    rosterOverCapacity: "billing_roster_over_capacity",
+};
+/** Native subscription stores supported by the RevenueCat ownership flow. */
+export const NATIVE_SUBSCRIPTION_STORES = [
+    "app_store",
+    "play_store",
+    "test_store",
+];
+export const NativeSubscriptionStoreSchema = z.literal(NATIVE_SUBSCRIPTION_STORES);
+export function isNativeSubscriptionStore(value) {
+    return NativeSubscriptionStoreSchema.safeParse(value).success;
+}
+/** Canonical fixed-cap subscription tiers shared by every billing provider. */
+export const SYNC_BILLING_TIERS = [
+    {
+        id: "solo",
+        monthlyPriceUsdCents: 500,
+        seatLimit: 1,
+        title: "Solo",
+    },
+    {
+        id: "team_5",
+        monthlyPriceUsdCents: 1_000,
+        seatLimit: 5,
+        title: "Team (up to 5)",
+    },
+    {
+        id: "team_10",
+        monthlyPriceUsdCents: 2_000,
+        seatLimit: 10,
+        title: "Team (up to 10)",
+    },
+];
+export const SyncBillingTierIdSchema = z.literal(SYNC_BILLING_TIERS.map((tier) => tier.id));
+export function isSyncBillingTierId(value) {
+    return SyncBillingTierIdSchema.safeParse(value).success;
+}
+export function getSyncBillingTier(tierId) {
+    const tier = SYNC_BILLING_TIERS.find((candidate) => candidate.id === tierId);
+    if (!tier) {
+        throw new Error(`Unknown sync billing tier: ${tierId}`);
+    }
+    return tier;
+}
+/** Smallest tier that can cover a membership count, or null above the limit. */
+export function getSyncBillingTierForSeatCount(seatCount) {
+    if (!Number.isSafeInteger(seatCount) || seatCount < 1) {
+        return null;
+    }
+    return SYNC_BILLING_TIERS.find((tier) => tier.seatLimit >= seatCount) ?? null;
+}
+/** Largest tier in the canonical ascending-capacity tier list. */
+export function getLargestSyncBillingTier() {
+    const tier = SYNC_BILLING_TIERS.at(-1);
+    if (!tier) {
+        throw new Error("At least one sync billing tier must be configured");
+    }
+    return tier;
+}
+/**
+ * Product identifiers used in App Store, Play, and RevenueCat Test Store.
+ * Staging suffixes and Play base-plan suffixes do not change the tier.
+ */
+export function getSyncBillingTierForNativeProduct(productId) {
+    if (!productId) {
+        return null;
+    }
+    const normalized = productId.split(":", 1)[0];
+    if (normalized === "sync_solo_monthly" ||
+        normalized === "sync_solo_monthly_staging") {
+        return getSyncBillingTier("solo");
+    }
+    if (normalized === "sync_team_5_monthly" ||
+        normalized === "sync_team_5_monthly_staging") {
+        return getSyncBillingTier("team_5");
+    }
+    if (normalized === "sync_team_10_monthly" ||
+        normalized === "sync_team_10_monthly_staging") {
+        return getSyncBillingTier("team_10");
+    }
+    return null;
+}
+//# sourceMappingURL=billing.js.map

package/internal/validators/billing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.js","sourceRoot":"","sources":["billing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,uBAAuB,EAAE,oCAAoC;IAC7D,kBAAkB,EAAE,8BAA8B;CAC1C,CAAC;AAKX,6EAA6E;AAC7E,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,WAAW;IACX,YAAY;IACZ,YAAY;CACJ,CAAC;AAEX,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,OAAO,CACpD,0BAA0B,CAC3B,CAAC;AAMF,MAAM,UAAU,yBAAyB,CACvC,KAAc;IAEd,OAAO,6BAA6B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAChE,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC;QACE,EAAE,EAAE,MAAM;QACV,oBAAoB,EAAE,GAAG;QACzB,SAAS,EAAE,CAAC;QACZ,KAAK,EAAE,MAAM;KACd;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,oBAAoB,EAAE,KAAK;QAC3B,SAAS,EAAE,CAAC;QACZ,KAAK,EAAE,gBAAgB;KACxB;IACD;QACE,EAAE,EAAE,SAAS;QACb,oBAAoB,EAAE,KAAK;QAC3B,SAAS,EAAE,EAAE;QACb,KAAK,EAAE,iBAAiB;KACzB;CACO,CAAC;AAIX,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,OAAO,CAC9C,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAC1C,CAAC;AAIF,MAAM,UAAU,mBAAmB,CACjC,KAAc;IAEd,OAAO,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAyB;IAC1D,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IAC7E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,8BAA8B,CAC5C,SAAiB;IAEjB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,IAAI,CAAC;AAChF,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,yBAAyB;IACvC,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kCAAkC,CAChD,SAAoC;IAEpC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IACE,UAAU,KAAK,mBAAmB;QAClC,UAAU,KAAK,2BAA2B,EAC1C,CAAC;QACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,IACE,UAAU,KAAK,qBAAqB;QACpC,UAAU,KAAK,6BAA6B,EAC5C,CAAC;QACD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IACD,IACE,UAAU,KAAK,sBAAsB;QACrC,UAAU,KAAK,8BAA8B,EAC7C,CAAC;QACD,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { z } from \"zod\";\n\nexport const BILLING_ERROR_CODES = {\n  checkoutNoActiveMembers: \"billing_checkout_no_active_members\",\n  rosterOverCapacity: \"billing_roster_over_capacity\",\n} as const;\n\nexport type BillingErrorCode =\n  (typeof BILLING_ERROR_CODES)[keyof typeof BILLING_ERROR_CODES];\n\n/** Native subscription stores supported by the RevenueCat ownership flow. */\nexport const NATIVE_SUBSCRIPTION_STORES = [\n  \"app_store\",\n  \"play_store\",\n  \"test_store\",\n] as const;\n\nexport const NativeSubscriptionStoreSchema = z.literal(\n  NATIVE_SUBSCRIPTION_STORES,\n);\n\nexport type NativeSubscriptionStore = z.infer<\n  typeof NativeSubscriptionStoreSchema\n>;\n\nexport function isNativeSubscriptionStore(\n  value: unknown,\n): value is NativeSubscriptionStore {\n  return NativeSubscriptionStoreSchema.safeParse(value).success;\n}\n\n/** Canonical fixed-cap subscription tiers shared by every billing provider. */\nexport const SYNC_BILLING_TIERS = [\n  {\n    id: \"solo\",\n    monthlyPriceUsdCents: 500,\n    seatLimit: 1,\n    title: \"Solo\",\n  },\n  {\n    id: \"team_5\",\n    monthlyPriceUsdCents: 1_000,\n    seatLimit: 5,\n    title: \"Team (up to 5)\",\n  },\n  {\n    id: \"team_10\",\n    monthlyPriceUsdCents: 2_000,\n    seatLimit: 10,\n    title: \"Team (up to 10)\",\n  },\n] as const;\n\nexport type SyncBillingTier = (typeof SYNC_BILLING_TIERS)[number];\n\nexport const SyncBillingTierIdSchema = z.literal(\n  SYNC_BILLING_TIERS.map((tier) => tier.id),\n);\n\nexport type SyncBillingTierId = z.infer<typeof SyncBillingTierIdSchema>;\n\nexport function isSyncBillingTierId(\n  value: unknown,\n): value is SyncBillingTierId {\n  return SyncBillingTierIdSchema.safeParse(value).success;\n}\n\nexport function getSyncBillingTier(tierId: SyncBillingTierId): SyncBillingTier {\n  const tier = SYNC_BILLING_TIERS.find((candidate) => candidate.id === tierId);\n  if (!tier) {\n    throw new Error(`Unknown sync billing tier: ${tierId}`);\n  }\n  return tier;\n}\n\n/** Smallest tier that can cover a membership count, or null above the limit. */\nexport function getSyncBillingTierForSeatCount(\n  seatCount: number,\n): SyncBillingTier | null {\n  if (!Number.isSafeInteger(seatCount) || seatCount < 1) {\n    return null;\n  }\n  return SYNC_BILLING_TIERS.find((tier) => tier.seatLimit >= seatCount) ?? null;\n}\n\n/** Largest tier in the canonical ascending-capacity tier list. */\nexport function getLargestSyncBillingTier(): SyncBillingTier {\n  const tier = SYNC_BILLING_TIERS.at(-1);\n  if (!tier) {\n    throw new Error(\"At least one sync billing tier must be configured\");\n  }\n  return tier;\n}\n\n/**\n * Product identifiers used in App Store, Play, and RevenueCat Test Store.\n * Staging suffixes and Play base-plan suffixes do not change the tier.\n */\nexport function getSyncBillingTierForNativeProduct(\n  productId: string | null | undefined,\n): SyncBillingTier | null {\n  if (!productId) {\n    return null;\n  }\n  const normalized = productId.split(\":\", 1)[0];\n  if (\n    normalized === \"sync_solo_monthly\" ||\n    normalized === \"sync_solo_monthly_staging\"\n  ) {\n    return getSyncBillingTier(\"solo\");\n  }\n  if (\n    normalized === \"sync_team_5_monthly\" ||\n    normalized === \"sync_team_5_monthly_staging\"\n  ) {\n    return getSyncBillingTier(\"team_5\");\n  }\n  if (\n    normalized === \"sync_team_10_monthly\" ||\n    normalized === \"sync_team_10_monthly_staging\"\n  ) {\n    return getSyncBillingTier(\"team_10\");\n  }\n  return null;\n}\n"]}

package/internal/validators/billingWebhookRefinements.js

@@ -0,0 +1,9 @@
+export const revenueCatWebhookAuthorizationRefinement = {
+    description: "Authorization must match the configured RevenueCat webhook secret in constant time",
+    id: "request.revenuecat-webhook-authorization",
+};
+export const stripeWebhookSignatureRefinement = {
+    description: "Stripe-Signature must authenticate the exact raw request body within the replay tolerance",
+    id: "request.stripe-webhook-signature",
+};
+//# sourceMappingURL=billingWebhookRefinements.js.map

package/internal/validators/billingWebhookRefinements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billingWebhookRefinements.js","sourceRoot":"","sources":["billingWebhookRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wCAAwC,GAAG;IACtD,WAAW,EACT,oFAAoF;IACtF,EAAE,EAAE,0CAA0C;CACtC,CAAC;AAEX,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,WAAW,EACT,2FAA2F;IAC7F,EAAE,EAAE,kCAAkC;CAC9B,CAAC","sourcesContent":["export const revenueCatWebhookAuthorizationRefinement = {\n  description:\n    \"Authorization must match the configured RevenueCat webhook secret in constant time\",\n  id: \"request.revenuecat-webhook-authorization\",\n} as const;\n\nexport const stripeWebhookSignatureRefinement = {\n  description:\n    \"Stripe-Signature must authenticate the exact raw request body within the replay tolerance\",\n  id: \"request.stripe-webhook-signature\",\n} as const;\n"]}

package/internal/validators/containerReadRefinements.js

@@ -0,0 +1,32 @@
+export const containerKekLogSingleKeyringRefinement = {
+    description: "a container KEK log page contains at most one sealed keyring",
+    id: "response.container-kek-log-single-keyring",
+};
+const containerDocumentWatermarkRefinement = {
+    description: "container-document watermark fields must be supplied together with a parseable date",
+    id: "request.container-documents-watermark",
+};
+export const containerParentLaneRequestUniqueIdsRefinement = {
+    description: "container parent-lane request lane ids must be unique",
+    id: "request.container-parent-lane-unique-ids",
+};
+export const containerParentLaneRequestPageTotalRefinement = {
+    description: "container parent-lane request page limits must total at most 500",
+    id: "request.container-parent-lane-page-total",
+};
+export const containerParentLaneResponseUniqueIdsRefinement = {
+    description: "container parent-lane response lane ids must be unique",
+    id: "response.container-parent-lane-unique-ids",
+};
+export const containerKekLogResponseRuntimeRefinements = [
+    containerKekLogSingleKeyringRefinement,
+];
+export const containerDocumentRuntimeRefinements = [
+    containerDocumentWatermarkRefinement,
+];
+export const containerParentLaneRuntimeRefinements = [
+    containerParentLaneRequestUniqueIdsRefinement,
+    containerParentLaneRequestPageTotalRefinement,
+    containerParentLaneResponseUniqueIdsRefinement,
+];
+//# sourceMappingURL=containerReadRefinements.js.map

package/internal/validators/containerReadRefinements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerReadRefinements.js","sourceRoot":"","sources":["containerReadRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,WAAW,EAAE,8DAA8D;IAC3E,EAAE,EAAE,2CAA2C;CACvC,CAAC;AAEX,MAAM,oCAAoC,GAAG;IAC3C,WAAW,EACT,qFAAqF;IACvF,EAAE,EAAE,uCAAuC;CACnC,CAAC;AAEX,MAAM,CAAC,MAAM,6CAA6C,GAAG;IAC3D,WAAW,EAAE,uDAAuD;IACpE,EAAE,EAAE,0CAA0C;CACtC,CAAC;AAEX,MAAM,CAAC,MAAM,6CAA6C,GAAG;IAC3D,WAAW,EACT,kEAAkE;IACpE,EAAE,EAAE,0CAA0C;CACtC,CAAC;AAEX,MAAM,CAAC,MAAM,8CAA8C,GAAG;IAC5D,WAAW,EAAE,wDAAwD;IACrE,EAAE,EAAE,2CAA2C;CACvC,CAAC;AAEX,MAAM,CAAC,MAAM,yCAAyC,GAAG;IACvD,sCAAsC;CAC9B,CAAC;AAEX,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,oCAAoC;CAC5B,CAAC;AAEX,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,6CAA6C;IAC7C,6CAA6C;IAC7C,8CAA8C;CACtC,CAAC","sourcesContent":["export const containerKekLogSingleKeyringRefinement = {\n  description: \"a container KEK log page contains at most one sealed keyring\",\n  id: \"response.container-kek-log-single-keyring\",\n} as const;\n\nconst containerDocumentWatermarkRefinement = {\n  description:\n    \"container-document watermark fields must be supplied together with a parseable date\",\n  id: \"request.container-documents-watermark\",\n} as const;\n\nexport const containerParentLaneRequestUniqueIdsRefinement = {\n  description: \"container parent-lane request lane ids must be unique\",\n  id: \"request.container-parent-lane-unique-ids\",\n} as const;\n\nexport const containerParentLaneRequestPageTotalRefinement = {\n  description:\n    \"container parent-lane request page limits must total at most 500\",\n  id: \"request.container-parent-lane-page-total\",\n} as const;\n\nexport const containerParentLaneResponseUniqueIdsRefinement = {\n  description: \"container parent-lane response lane ids must be unique\",\n  id: \"response.container-parent-lane-unique-ids\",\n} as const;\n\nexport const containerKekLogResponseRuntimeRefinements = [\n  containerKekLogSingleKeyringRefinement,\n] as const;\n\nexport const containerDocumentRuntimeRefinements = [\n  containerDocumentWatermarkRefinement,\n] as const;\n\nexport const containerParentLaneRuntimeRefinements = [\n  containerParentLaneRequestUniqueIdsRefinement,\n  containerParentLaneRequestPageTotalRefinement,\n  containerParentLaneResponseUniqueIdsRefinement,\n] as const;\n"]}

package/internal/validators/containerReadSchemas.js

@@ -0,0 +1,4 @@
+import { z } from "zod";
+import { registerJsonSchemaFragment } from "./jsonSchema.js";
+export const ContainerParentLaneIdSchema = registerJsonSchemaFragment(z.custom((value) => typeof value === "string" && value.length > 0 && value.length <= 64), { maxLength: 64, minLength: 1, type: "string" });
+//# sourceMappingURL=containerReadSchemas.js.map

package/internal/validators/containerReadSchemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerReadSchemas.js","sourceRoot":"","sources":["containerReadSchemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CACnE,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CACtE,EACD,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAChD,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaFragment } from \"./jsonSchema\";\n\nexport const ContainerParentLaneIdSchema = registerJsonSchemaFragment(\n  z.custom<string>(\n    (value) =>\n      typeof value === \"string\" && value.length > 0 && value.length <= 64,\n  ),\n  { maxLength: 64, minLength: 1, type: \"string\" },\n);\n"]}

package/internal/validators/containerSystemSlot.d.ts

@@ -0,0 +1,12 @@
+import { z } from "zod";
+export declare function formatContainerSystemSlot(digest: Uint8Array): ContainerSystemSlot;
+export declare const ContainerSystemSlotSchema: z.ZodCustom<string, string>;
+export type ContainerSystemSlot = z.infer<typeof ContainerSystemSlotSchema>;
+export declare function isContainerSystemSlot(value: unknown): value is ContainerSystemSlot;
+export declare function isNullableContainerSystemSlot(value: unknown): value is ContainerSystemSlot | null;
+export declare function deriveOrganizationRosterProfileContainerSystemSlot(input: {
+    readonly organizationId: string;
+}): Promise<ContainerSystemSlot>;
+export declare function deriveOrganizationMetadataContainerSystemSlot(input: {
+    readonly organizationId: string;
+}): Promise<ContainerSystemSlot>;

package/internal/validators/containerSystemSlot.js

@@ -0,0 +1,44 @@
+import { z } from "zod";
+import { registerJsonSchemaFragment } from "./jsonSchema.js";
+const CONTAINER_SYSTEM_SLOT_PATTERN = /^sys_v1_[A-Za-z0-9_-]{43}$/;
+export function formatContainerSystemSlot(digest) {
+    if (digest.byteLength !== 32) {
+        throw new Error("Container system slot digests must be exactly 32 bytes");
+    }
+    const encoded = btoa(String.fromCharCode(...digest))
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_")
+        .replace(/=+$/g, "");
+    return `sys_v1_${encoded}`;
+}
+async function deriveOrganizationSystemSlot(input) {
+    const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify({
+        namespace: input.namespace,
+        organizationId: input.organizationId,
+        version: 1,
+    })));
+    return formatContainerSystemSlot(new Uint8Array(digest));
+}
+export const ContainerSystemSlotSchema = registerJsonSchemaFragment(z.custom((value) => typeof value === "string" && CONTAINER_SYSTEM_SLOT_PATTERN.test(value)), {
+    pattern: CONTAINER_SYSTEM_SLOT_PATTERN.source,
+    type: "string",
+});
+export function isContainerSystemSlot(value) {
+    return ContainerSystemSlotSchema.safeParse(value).success;
+}
+export function isNullableContainerSystemSlot(value) {
+    return value === null || isContainerSystemSlot(value);
+}
+export function deriveOrganizationRosterProfileContainerSystemSlot(input) {
+    return deriveOrganizationSystemSlot({
+        namespace: "tearleads.organization-roster-profiles",
+        organizationId: input.organizationId,
+    });
+}
+export function deriveOrganizationMetadataContainerSystemSlot(input) {
+    return deriveOrganizationSystemSlot({
+        namespace: "tearleads.organization-metadata",
+        organizationId: input.organizationId,
+    });
+}
+//# sourceMappingURL=containerSystemSlot.js.map

package/internal/validators/containerSystemSlot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"containerSystemSlot.js","sourceRoot":"","sources":["containerSystemSlot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,6BAA6B,GAAG,4BAA4B,CAAC;AAEnE,MAAM,UAAU,yBAAyB,CACvC,MAAkB;IAElB,IAAI,MAAM,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,CAAC;SACjD,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,OAAO,UAAU,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,KAG3C;IACC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CACtB,IAAI,CAAC,SAAS,CAAC;QACb,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,OAAO,EAAE,CAAC;KACX,CAAC,CACH,CACF,CAAC;IACF,OAAO,yBAAyB,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,0BAA0B,CACjE,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ,IAAI,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,CACzE,EACD;IACE,OAAO,EAAE,6BAA6B,CAAC,MAAM;IAC7C,IAAI,EAAE,QAAQ;CACf,CACF,CAAC;AAIF,MAAM,UAAU,qBAAqB,CACnC,KAAc;IAEd,OAAO,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAc;IAEd,OAAO,KAAK,KAAK,IAAI,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,kDAAkD,CAAC,KAElE;IACC,OAAO,4BAA4B,CAAC;QAClC,SAAS,EAAE,wCAAwC;QACnD,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6CAA6C,CAAC,KAE7D;IACC,OAAO,4BAA4B,CAAC;QAClC,SAAS,EAAE,iCAAiC;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { registerJsonSchemaFragment } from \"./jsonSchema\";\n\nconst CONTAINER_SYSTEM_SLOT_PATTERN = /^sys_v1_[A-Za-z0-9_-]{43}$/;\n\nexport function formatContainerSystemSlot(\n  digest: Uint8Array,\n): ContainerSystemSlot {\n  if (digest.byteLength !== 32) {\n    throw new Error(\"Container system slot digests must be exactly 32 bytes\");\n  }\n  const encoded = btoa(String.fromCharCode(...digest))\n    .replace(/\\+/g, \"-\")\n    .replace(/\\//g, \"_\")\n    .replace(/=+$/g, \"\");\n  return `sys_v1_${encoded}`;\n}\n\nasync function deriveOrganizationSystemSlot(input: {\n  readonly namespace: string;\n  readonly organizationId: string;\n}): Promise<ContainerSystemSlot> {\n  const digest = await crypto.subtle.digest(\n    \"SHA-256\",\n    new TextEncoder().encode(\n      JSON.stringify({\n        namespace: input.namespace,\n        organizationId: input.organizationId,\n        version: 1,\n      }),\n    ),\n  );\n  return formatContainerSystemSlot(new Uint8Array(digest));\n}\n\nexport const ContainerSystemSlotSchema = registerJsonSchemaFragment(\n  z.custom<string>(\n    (value) =>\n      typeof value === \"string\" && CONTAINER_SYSTEM_SLOT_PATTERN.test(value),\n  ),\n  {\n    pattern: CONTAINER_SYSTEM_SLOT_PATTERN.source,\n    type: \"string\",\n  },\n);\n\nexport type ContainerSystemSlot = z.infer<typeof ContainerSystemSlotSchema>;\n\nexport function isContainerSystemSlot(\n  value: unknown,\n): value is ContainerSystemSlot {\n  return ContainerSystemSlotSchema.safeParse(value).success;\n}\n\nexport function isNullableContainerSystemSlot(\n  value: unknown,\n): value is ContainerSystemSlot | null {\n  return value === null || isContainerSystemSlot(value);\n}\n\nexport function deriveOrganizationRosterProfileContainerSystemSlot(input: {\n  readonly organizationId: string;\n}): Promise<ContainerSystemSlot> {\n  return deriveOrganizationSystemSlot({\n    namespace: \"tearleads.organization-roster-profiles\",\n    organizationId: input.organizationId,\n  });\n}\n\nexport function deriveOrganizationMetadataContainerSystemSlot(input: {\n  readonly organizationId: string;\n}): Promise<ContainerSystemSlot> {\n  return deriveOrganizationSystemSlot({\n    namespace: \"tearleads.organization-metadata\",\n    organizationId: input.organizationId,\n  });\n}\n"]}

package/internal/validators/documentAttributionRefinements.js

@@ -0,0 +1,8 @@
+export const documentAttributionCounterRangeRefinement = {
+    description: "document attribution segment start counters are less than end counters",
+    id: "response.document-attribution-counter-range",
+};
+export const documentAttributionResponseRuntimeRefinements = [
+    documentAttributionCounterRangeRefinement,
+];
+//# sourceMappingURL=documentAttributionRefinements.js.map

package/internal/validators/documentAttributionRefinements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentAttributionRefinements.js","sourceRoot":"","sources":["documentAttributionRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yCAAyC,GAAG;IACvD,WAAW,EACT,wEAAwE;IAC1E,EAAE,EAAE,6CAA6C;CACzC,CAAC;AAEX,MAAM,CAAC,MAAM,6CAA6C,GAAG;IAC3D,yCAAyC;CACjC,CAAC","sourcesContent":["export const documentAttributionCounterRangeRefinement = {\n  description:\n    \"document attribution segment start counters are less than end counters\",\n  id: \"response.document-attribution-counter-range\",\n} as const;\n\nexport const documentAttributionResponseRuntimeRefinements = [\n  documentAttributionCounterRangeRefinement,\n] as const;\n"]}

package/internal/validators/documentSyncCheckpoint.js

@@ -0,0 +1,17 @@
+export const DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND = "rotate_baseline";
+export const DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND = "full_history_snapshot";
+export const DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE = "checkpoint fields must be absent or form a rotation baseline";
+export function classifyDocumentSyncCheckpointFields({ checkpointKind, checkpointPayloadKind, sourceVersionVector, }) {
+    if (checkpointKind === undefined &&
+        checkpointPayloadKind === undefined &&
+        sourceVersionVector === undefined) {
+        return "absent";
+    }
+    if (checkpointKind === DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND &&
+        checkpointPayloadKind === DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND &&
+        sourceVersionVector !== undefined) {
+        return "rotation-baseline";
+    }
+    return "invalid";
+}
+//# sourceMappingURL=documentSyncCheckpoint.js.map

package/internal/validators/documentSyncCheckpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentSyncCheckpoint.js","sourceRoot":"","sources":["documentSyncCheckpoint.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sCAAsC,GAAG,iBAAiB,CAAC;AACxE,MAAM,CAAC,MAAM,8CAA8C,GACzD,uBAAuB,CAAC;AAC1B,MAAM,CAAC,MAAM,gDAAgD,GAC3D,8DAA8D,CAAC;AAiBjE,MAAM,UAAU,oCAAoC,CAAC,EACnD,cAAc,EACd,qBAAqB,EACrB,mBAAmB,GACU;IAC7B,IACE,cAAc,KAAK,SAAS;QAC5B,qBAAqB,KAAK,SAAS;QACnC,mBAAmB,KAAK,SAAS,EACjC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IACE,cAAc,KAAK,sCAAsC;QACzD,qBAAqB,KAAK,8CAA8C;QACxE,mBAAmB,KAAK,SAAS,EACjC,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["export const DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND = \"rotate_baseline\";\nexport const DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND =\n  \"full_history_snapshot\";\nexport const DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE =\n  \"checkpoint fields must be absent or form a rotation baseline\";\n\ninterface DocumentSyncCheckpointFields {\n  readonly checkpointKind?:\n    | typeof DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND\n    | undefined;\n  readonly checkpointPayloadKind?:\n    | typeof DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND\n    | undefined;\n  readonly sourceVersionVector?: string | undefined;\n}\n\nexport type DocumentSyncCheckpointFieldClassification =\n  | \"absent\"\n  | \"invalid\"\n  | \"rotation-baseline\";\n\nexport function classifyDocumentSyncCheckpointFields({\n  checkpointKind,\n  checkpointPayloadKind,\n  sourceVersionVector,\n}: DocumentSyncCheckpointFields): DocumentSyncCheckpointFieldClassification {\n  if (\n    checkpointKind === undefined &&\n    checkpointPayloadKind === undefined &&\n    sourceVersionVector === undefined\n  ) {\n    return \"absent\";\n  }\n\n  if (\n    checkpointKind === DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND &&\n    checkpointPayloadKind === DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND &&\n    sourceVersionVector !== undefined\n  ) {\n    return \"rotation-baseline\";\n  }\n\n  return \"invalid\";\n}\n"]}

package/internal/validators/documentSyncRefinements.js

@@ -0,0 +1,69 @@
+import { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS } from "./util/documentSyncLimits.js";
+export const documentSyncRequestRotationRefinement = {
+    description: "checkpointKind, checkpointPayloadKind, and sourceVersionVector must be absent together or form a rotation baseline",
+    id: "request.rotation-checkpoint-fields",
+};
+export const documentSyncRequestEnvelopeRefinements = [
+    {
+        description: "inlineRekeyCommitId must be present exactly when containerRekeys is non-empty",
+        id: "request.inline-rekey-commit-marker",
+    },
+    {
+        description: "authorizingContainerPathRefs is required when outgoingUpdates is non-empty",
+        id: "request.authorizing-paths-for-writes",
+    },
+    {
+        description: "containerRekeys may be non-empty only when outgoingUpdates is non-empty",
+        id: "request.container-rekeys-require-write",
+    },
+    {
+        description: "outgoing update ids must be unique within the request",
+        id: "request.unique-outgoing-update-ids",
+    },
+];
+export const documentSyncRequestPullRefinements = [
+    {
+        description: "a request carrying pullCursor must not contain outgoing updates, container rekeys, a content-key bundle, or authorizing paths",
+        id: "request.pull-continuation-read-only",
+    },
+    {
+        description: 'historyMode "raw" must not be combined with outgoing updates, container rekeys, a content-key bundle, or authorizing paths',
+        id: "request.raw-history-read-only",
+    },
+    {
+        description: 'historyMode "raw" requires localVersionVector to be null so the complete retained history is requested',
+        id: "request.raw-history-null-frontier",
+    },
+];
+export const documentSyncRequestRuntimeRefinements = [
+    ...documentSyncRequestEnvelopeRefinements,
+    ...documentSyncRequestPullRefinements,
+    documentSyncRequestRotationRefinement,
+];
+export const documentLinkSetPathRefinement = {
+    description: `authorizingContainerPathRefs and targetContainerPathRefs may contain at most ${MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS} references in total`,
+    id: "request.post-link-authorization-path-total-references",
+};
+export const documentSyncResponseRotationRefinement = {
+    description: "checkpointKind, checkpointPayloadKind, and sourceVersionVector must be absent together or form a rotation baseline",
+    id: "response.rotation-checkpoint-fields",
+};
+export const documentSyncResponseCommitLsnModeRefinement = {
+    description: 'commitLsnMode "untracked" requires the commitLsn "0/0" sentinel',
+    id: "response.untracked-commit-lsn-sentinel",
+};
+export const documentSyncResponseCommitLsnSentinelRefinement = {
+    description: 'commitLsn "0/0" requires commitLsnMode "untracked" in the same response',
+    id: "response.untracked-commit-lsn-mode",
+};
+export const documentSyncResponsePullPageRefinement = {
+    description: "pullPage.hasMore is true exactly when pullPage.nextCursor is non-null",
+    id: "response.pull-page-continuation",
+};
+export const documentSyncResponseRuntimeRefinements = [
+    documentSyncResponseRotationRefinement,
+    documentSyncResponseCommitLsnModeRefinement,
+    documentSyncResponseCommitLsnSentinelRefinement,
+    documentSyncResponsePullPageRefinement,
+];
+//# sourceMappingURL=documentSyncRefinements.js.map

package/internal/validators/documentSyncRefinements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentSyncRefinements.js","sourceRoot":"","sources":["documentSyncRefinements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yCAAyC,EAAE,MAAM,2BAA2B,CAAC;AAEtF,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,WAAW,EACT,oHAAoH;IACtH,EAAE,EAAE,oCAAoC;CAChC,CAAC;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD;QACE,WAAW,EACT,+EAA+E;QACjF,EAAE,EAAE,oCAAoC;KACzC;IACD;QACE,WAAW,EACT,4EAA4E;QAC9E,EAAE,EAAE,sCAAsC;KAC3C;IACD;QACE,WAAW,EACT,yEAAyE;QAC3E,EAAE,EAAE,wCAAwC;KAC7C;IACD;QACE,WAAW,EAAE,uDAAuD;QACpE,EAAE,EAAE,oCAAoC;KACzC;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD;QACE,WAAW,EACT,+HAA+H;QACjI,EAAE,EAAE,qCAAqC;KAC1C;IACD;QACE,WAAW,EACT,4HAA4H;QAC9H,EAAE,EAAE,+BAA+B;KACpC;IACD;QACE,WAAW,EACT,wGAAwG;QAC1G,EAAE,EAAE,mCAAmC;KACxC;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,GAAG,sCAAsC;IACzC,GAAG,kCAAkC;IACrC,qCAAqC;CAC7B,CAAC;AAEX,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,WAAW,EAAE,gFAAgF,yCAAyC,sBAAsB;IAC5J,EAAE,EAAE,uDAAuD;CACnD,CAAC;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,WAAW,EACT,oHAAoH;IACtH,EAAE,EAAE,qCAAqC;CACjC,CAAC;AAEX,MAAM,CAAC,MAAM,2CAA2C,GAAG;IACzD,WAAW,EACT,iEAAiE;IACnE,EAAE,EAAE,wCAAwC;CACpC,CAAC;AAEX,MAAM,CAAC,MAAM,+CAA+C,GAAG;IAC7D,WAAW,EACT,yEAAyE;IAC3E,EAAE,EAAE,oCAAoC;CAChC,CAAC;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,WAAW,EACT,uEAAuE;IACzE,EAAE,EAAE,iCAAiC;CAC7B,CAAC;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,sCAAsC;IACtC,2CAA2C;IAC3C,+CAA+C;IAC/C,sCAAsC;CAC9B,CAAC","sourcesContent":["import { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS } from \"./util/documentSyncLimits\";\n\nexport const documentSyncRequestRotationRefinement = {\n  description:\n    \"checkpointKind, checkpointPayloadKind, and sourceVersionVector must be absent together or form a rotation baseline\",\n  id: \"request.rotation-checkpoint-fields\",\n} as const;\n\nexport const documentSyncRequestEnvelopeRefinements = [\n  {\n    description:\n      \"inlineRekeyCommitId must be present exactly when containerRekeys is non-empty\",\n    id: \"request.inline-rekey-commit-marker\",\n  },\n  {\n    description:\n      \"authorizingContainerPathRefs is required when outgoingUpdates is non-empty\",\n    id: \"request.authorizing-paths-for-writes\",\n  },\n  {\n    description:\n      \"containerRekeys may be non-empty only when outgoingUpdates is non-empty\",\n    id: \"request.container-rekeys-require-write\",\n  },\n  {\n    description: \"outgoing update ids must be unique within the request\",\n    id: \"request.unique-outgoing-update-ids\",\n  },\n] as const;\n\nexport const documentSyncRequestPullRefinements = [\n  {\n    description:\n      \"a request carrying pullCursor must not contain outgoing updates, container rekeys, a content-key bundle, or authorizing paths\",\n    id: \"request.pull-continuation-read-only\",\n  },\n  {\n    description:\n      'historyMode \"raw\" must not be combined with outgoing updates, container rekeys, a content-key bundle, or authorizing paths',\n    id: \"request.raw-history-read-only\",\n  },\n  {\n    description:\n      'historyMode \"raw\" requires localVersionVector to be null so the complete retained history is requested',\n    id: \"request.raw-history-null-frontier\",\n  },\n] as const;\n\nexport const documentSyncRequestRuntimeRefinements = [\n  ...documentSyncRequestEnvelopeRefinements,\n  ...documentSyncRequestPullRefinements,\n  documentSyncRequestRotationRefinement,\n] as const;\n\nexport const documentLinkSetPathRefinement = {\n  description: `authorizingContainerPathRefs and targetContainerPathRefs may contain at most ${MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS} references in total`,\n  id: \"request.post-link-authorization-path-total-references\",\n} as const;\n\nexport const documentSyncResponseRotationRefinement = {\n  description:\n    \"checkpointKind, checkpointPayloadKind, and sourceVersionVector must be absent together or form a rotation baseline\",\n  id: \"response.rotation-checkpoint-fields\",\n} as const;\n\nexport const documentSyncResponseCommitLsnModeRefinement = {\n  description:\n    'commitLsnMode \"untracked\" requires the commitLsn \"0/0\" sentinel',\n  id: \"response.untracked-commit-lsn-sentinel\",\n} as const;\n\nexport const documentSyncResponseCommitLsnSentinelRefinement = {\n  description:\n    'commitLsn \"0/0\" requires commitLsnMode \"untracked\" in the same response',\n  id: \"response.untracked-commit-lsn-mode\",\n} as const;\n\nexport const documentSyncResponsePullPageRefinement = {\n  description:\n    \"pullPage.hasMore is true exactly when pullPage.nextCursor is non-null\",\n  id: \"response.pull-page-continuation\",\n} as const;\n\nexport const documentSyncResponseRuntimeRefinements = [\n  documentSyncResponseRotationRefinement,\n  documentSyncResponseCommitLsnModeRefinement,\n  documentSyncResponseCommitLsnSentinelRefinement,\n  documentSyncResponsePullPageRefinement,\n] as const;\n"]}

package/internal/validators/documentSyncRequestMode.js

@@ -0,0 +1,9 @@
+export function classifyDocumentSyncRequestMode({ authorizingContainerPathRefsPresent, hasContainerRekeys, hasOutgoingUpdates, }) {
+    if (!hasOutgoingUpdates) {
+        return hasContainerRekeys ? "invalid-rekeys-without-write" : "read-only";
+    }
+    return authorizingContainerPathRefsPresent
+        ? "write"
+        : "invalid-authorizing-path-refs-absent";
+}
+//# sourceMappingURL=documentSyncRequestMode.js.map

package/internal/validators/documentSyncRequestMode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentSyncRequestMode.js","sourceRoot":"","sources":["documentSyncRequestMode.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,+BAA+B,CAAC,EAC9C,mCAAmC,EACnC,kBAAkB,EAClB,kBAAkB,GACW;IAC7B,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,kBAAkB,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,WAAW,CAAC;IAC3E,CAAC;IAED,OAAO,mCAAmC;QACxC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,sCAAsC,CAAC;AAC7C,CAAC","sourcesContent":["interface DocumentSyncRequestModeFacts {\n  readonly authorizingContainerPathRefsPresent: boolean;\n  readonly hasContainerRekeys: boolean;\n  readonly hasOutgoingUpdates: boolean;\n}\n\nexport type DocumentSyncRequestModeClassification =\n  | \"invalid-authorizing-path-refs-absent\"\n  | \"invalid-rekeys-without-write\"\n  | \"read-only\"\n  | \"write\";\n\nexport function classifyDocumentSyncRequestMode({\n  authorizingContainerPathRefsPresent,\n  hasContainerRekeys,\n  hasOutgoingUpdates,\n}: DocumentSyncRequestModeFacts): DocumentSyncRequestModeClassification {\n  if (!hasOutgoingUpdates) {\n    return hasContainerRekeys ? \"invalid-rekeys-without-write\" : \"read-only\";\n  }\n\n  return authorizingContainerPathRefsPresent\n    ? \"write\"\n    : \"invalid-authorizing-path-refs-absent\";\n}\n"]}

package/internal/validators/isPlainObject.js

@@ -0,0 +1,8 @@
+export function isPlainObject(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return false;
+    }
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+//# sourceMappingURL=isPlainObject.js.map

package/internal/validators/isPlainObject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isPlainObject.js","sourceRoot":"","sources":["isPlainObject.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,aAAa,CAC3B,KAAc;IAEd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC","sourcesContent":["export function isPlainObject(\n  value: unknown,\n): value is Record<string, unknown> {\n  if (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n    return false;\n  }\n\n  const prototype = Object.getPrototypeOf(value);\n  return prototype === Object.prototype || prototype === null;\n}\n"]}