@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/internal/validators/operation/writerProjections.js

@@ -0,0 +1,59 @@
+import { z } from "zod";
+import { projectionHistoryHeaderRefinement } from "../projectionHistoryRefinements.js";
+import { ContainerNotFoundErrorResponseSchema, ContainerWriterProjectionErrorResponseSchema, ContainerWriterProjectionResponseSchema, DocumentNotFoundErrorResponseSchema, DocumentWriterProjectionErrorResponseSchema, DocumentWriterProjectionResponseSchema, ErrorResponseSchema, isContainerWriterProjectionResponse, isDocumentWriterProjectionResponse, SessionFailureResponseSchema, } from "../response/index.js";
+import { ProjectionHistoryHeadersSchema } from "../util/projectionHistoryWire.js";
+import { writerProjectionResponseRuntimeRefinements } from "../writerProjectionRefinements.js";
+import { defineJsonOperation } from "./definition.js";
+export const ContainerWriterProjectionPathParamsSchema = z.strictObject({
+    containerId: z.string(),
+});
+export const DocumentWriterProjectionPathParamsSchema = z.strictObject({
+    documentId: z.string(),
+});
+export const getContainerWriterProjectionOperation = defineJsonOperation({
+    auth: "session",
+    failureResponses: {
+        400: ErrorResponseSchema,
+        401: SessionFailureResponseSchema,
+        403: ErrorResponseSchema,
+        404: ContainerNotFoundErrorResponseSchema,
+        409: ContainerWriterProjectionErrorResponseSchema,
+        500: ErrorResponseSchema,
+    },
+    failureStatuses: [400, 401, 403, 404, 409, 500],
+    id: "containers.writerProjection.get",
+    method: "GET",
+    headers: ProjectionHistoryHeadersSchema,
+    params: ContainerWriterProjectionPathParamsSchema,
+    path: "/containers/{containerId}/writer-projection",
+    responses: { 200: ContainerWriterProjectionResponseSchema },
+    runtimeRefinements: [
+        ...writerProjectionResponseRuntimeRefinements,
+        projectionHistoryHeaderRefinement,
+    ],
+});
+export const getDocumentWriterProjectionOperation = defineJsonOperation({
+    auth: "session",
+    failureResponses: {
+        400: ErrorResponseSchema,
+        401: SessionFailureResponseSchema,
+        403: ErrorResponseSchema,
+        404: DocumentNotFoundErrorResponseSchema,
+        409: DocumentWriterProjectionErrorResponseSchema,
+        500: ErrorResponseSchema,
+    },
+    failureStatuses: [400, 401, 403, 404, 409, 500],
+    id: "documents.writerProjection.get",
+    method: "GET",
+    headers: ProjectionHistoryHeadersSchema,
+    params: DocumentWriterProjectionPathParamsSchema,
+    path: "/documents/{documentId}/writer-projection",
+    responses: { 200: DocumentWriterProjectionResponseSchema },
+    runtimeRefinements: [
+        ...writerProjectionResponseRuntimeRefinements,
+        projectionHistoryHeaderRefinement,
+    ],
+});
+export const isGetContainerWriterProjectionOperationResponse = isContainerWriterProjectionResponse;
+export const isGetDocumentWriterProjectionOperationResponse = isDocumentWriterProjectionResponse;
+//# sourceMappingURL=writerProjections.js.map

package/internal/validators/operation/writerProjections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writerProjections.js","sourceRoot":"","sources":["writerProjections.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,EACL,oCAAoC,EACpC,4CAA4C,EAC5C,uCAAuC,EACvC,mCAAmC,EACnC,2CAA2C,EAC3C,sCAAsC,EACtC,mBAAmB,EACnB,mCAAmC,EACnC,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,0CAA0C,EAAE,MAAM,gCAAgC,CAAC;AAC5F,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,YAAY,CAAC;IACtE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,YAAY,CAAC;IACrE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AASH,MAAM,CAAC,MAAM,qCAAqC,GAAG,mBAAmB,CAAC;IACvE,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE;QAChB,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,4BAA4B;QACjC,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,oCAAoC;QACzC,GAAG,EAAE,4CAA4C;QACjD,GAAG,EAAE,mBAAmB;KACzB;IACD,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IAC/C,EAAE,EAAE,iCAAiC;IACrC,MAAM,EAAE,KAAK;IACb,OAAO,EAAE,8BAA8B;IACvC,MAAM,EAAE,yCAAyC;IACjD,IAAI,EAAE,6CAA6C;IACnD,SAAS,EAAE,EAAE,GAAG,EAAE,uCAAuC,EAAE;IAC3D,kBAAkB,EAAE;QAClB,GAAG,0CAA0C;QAC7C,iCAAiC;KAClC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oCAAoC,GAAG,mBAAmB,CAAC;IACtE,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE;QAChB,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,4BAA4B;QACjC,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,mCAAmC;QACxC,GAAG,EAAE,2CAA2C;QAChD,GAAG,EAAE,mBAAmB;KACzB;IACD,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IAC/C,EAAE,EAAE,gCAAgC;IACpC,MAAM,EAAE,KAAK;IACb,OAAO,EAAE,8BAA8B;IACvC,MAAM,EAAE,wCAAwC;IAChD,IAAI,EAAE,2CAA2C;IACjD,SAAS,EAAE,EAAE,GAAG,EAAE,sCAAsC,EAAE;IAC1D,kBAAkB,EAAE;QAClB,GAAG,0CAA0C;QAC7C,iCAAiC;KAClC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+CAA+C,GAC1D,mCAAmC,CAAC;AACtC,MAAM,CAAC,MAAM,8CAA8C,GACzD,kCAAkC,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { projectionHistoryHeaderRefinement } from \"../projectionHistoryRefinements\";\nimport {\n  ContainerNotFoundErrorResponseSchema,\n  ContainerWriterProjectionErrorResponseSchema,\n  ContainerWriterProjectionResponseSchema,\n  DocumentNotFoundErrorResponseSchema,\n  DocumentWriterProjectionErrorResponseSchema,\n  DocumentWriterProjectionResponseSchema,\n  ErrorResponseSchema,\n  isContainerWriterProjectionResponse,\n  isDocumentWriterProjectionResponse,\n  SessionFailureResponseSchema,\n} from \"../response\";\nimport { ProjectionHistoryHeadersSchema } from \"../util/projectionHistoryWire\";\nimport { writerProjectionResponseRuntimeRefinements } from \"../writerProjectionRefinements\";\nimport { defineJsonOperation } from \"./definition\";\n\nexport const ContainerWriterProjectionPathParamsSchema = z.strictObject({\n  containerId: z.string(),\n});\n\nexport const DocumentWriterProjectionPathParamsSchema = z.strictObject({\n  documentId: z.string(),\n});\n\nexport type ContainerWriterProjectionPathParams = z.infer<\n  typeof ContainerWriterProjectionPathParamsSchema\n>;\nexport type DocumentWriterProjectionPathParams = z.infer<\n  typeof DocumentWriterProjectionPathParamsSchema\n>;\n\nexport const getContainerWriterProjectionOperation = defineJsonOperation({\n  auth: \"session\",\n  failureResponses: {\n    400: ErrorResponseSchema,\n    401: SessionFailureResponseSchema,\n    403: ErrorResponseSchema,\n    404: ContainerNotFoundErrorResponseSchema,\n    409: ContainerWriterProjectionErrorResponseSchema,\n    500: ErrorResponseSchema,\n  },\n  failureStatuses: [400, 401, 403, 404, 409, 500],\n  id: \"containers.writerProjection.get\",\n  method: \"GET\",\n  headers: ProjectionHistoryHeadersSchema,\n  params: ContainerWriterProjectionPathParamsSchema,\n  path: \"/containers/{containerId}/writer-projection\",\n  responses: { 200: ContainerWriterProjectionResponseSchema },\n  runtimeRefinements: [\n    ...writerProjectionResponseRuntimeRefinements,\n    projectionHistoryHeaderRefinement,\n  ],\n});\n\nexport const getDocumentWriterProjectionOperation = defineJsonOperation({\n  auth: \"session\",\n  failureResponses: {\n    400: ErrorResponseSchema,\n    401: SessionFailureResponseSchema,\n    403: ErrorResponseSchema,\n    404: DocumentNotFoundErrorResponseSchema,\n    409: DocumentWriterProjectionErrorResponseSchema,\n    500: ErrorResponseSchema,\n  },\n  failureStatuses: [400, 401, 403, 404, 409, 500],\n  id: \"documents.writerProjection.get\",\n  method: \"GET\",\n  headers: ProjectionHistoryHeadersSchema,\n  params: DocumentWriterProjectionPathParamsSchema,\n  path: \"/documents/{documentId}/writer-projection\",\n  responses: { 200: DocumentWriterProjectionResponseSchema },\n  runtimeRefinements: [\n    ...writerProjectionResponseRuntimeRefinements,\n    projectionHistoryHeaderRefinement,\n  ],\n});\n\nexport const isGetContainerWriterProjectionOperationResponse =\n  isContainerWriterProjectionResponse;\nexport const isGetDocumentWriterProjectionOperationResponse =\n  isDocumentWriterProjectionResponse;\n"]}

package/internal/validators/organizationBillingRefinements.js

@@ -0,0 +1,5 @@
+export const organizationBillingAssignedSeatsRefinement = {
+    description: "assignedSeatCount equals the number of assignedUserIds in the response",
+    id: "response.organization-billing-assigned-seats",
+};
+//# sourceMappingURL=organizationBillingRefinements.js.map

package/internal/validators/organizationBillingRefinements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationBillingRefinements.js","sourceRoot":"","sources":["organizationBillingRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,0CAA0C,GAAG;IACxD,WAAW,EACT,wEAAwE;IAC1E,EAAE,EAAE,8CAA8C;CAC1C,CAAC","sourcesContent":["export const organizationBillingAssignedSeatsRefinement = {\n  description:\n    \"assignedSeatCount equals the number of assignedUserIds in the response\",\n  id: \"response.organization-billing-assigned-seats\",\n} as const;\n"]}

package/internal/validators/organizationDataUsageRefinements.js

@@ -0,0 +1,18 @@
+export const organizationDocumentUsageCategoriesRefinement = {
+    description: "the document usage breakdown contains each document category exactly once",
+    id: "response.organization-data-usage-document-categories",
+};
+export const organizationDocumentUsageTotalsRefinement = {
+    description: "document usage totals equal the sums of the category breakdown",
+    id: "response.organization-data-usage-document-totals",
+};
+export const organizationDataUsageTotalRefinement = {
+    description: "totalByteLength equals the sum of document and blob byte lengths",
+    id: "response.organization-data-usage-total-byte-length",
+};
+export const organizationDataUsageResponseRuntimeRefinements = [
+    organizationDataUsageTotalRefinement,
+    organizationDocumentUsageCategoriesRefinement,
+    organizationDocumentUsageTotalsRefinement,
+];
+//# sourceMappingURL=organizationDataUsageRefinements.js.map

package/internal/validators/organizationDataUsageRefinements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationDataUsageRefinements.js","sourceRoot":"","sources":["organizationDataUsageRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,6CAA6C,GAAG;IAC3D,WAAW,EACT,2EAA2E;IAC7E,EAAE,EAAE,sDAAsD;CAClD,CAAC;AAEX,MAAM,CAAC,MAAM,yCAAyC,GAAG;IACvD,WAAW,EAAE,gEAAgE;IAC7E,EAAE,EAAE,kDAAkD;CAC9C,CAAC;AAEX,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,WAAW,EACT,kEAAkE;IACpE,EAAE,EAAE,oDAAoD;CAChD,CAAC;AAEX,MAAM,CAAC,MAAM,+CAA+C,GAAG;IAC7D,oCAAoC;IACpC,6CAA6C;IAC7C,yCAAyC;CACjC,CAAC","sourcesContent":["export const organizationDocumentUsageCategoriesRefinement = {\n  description:\n    \"the document usage breakdown contains each document category exactly once\",\n  id: \"response.organization-data-usage-document-categories\",\n} as const;\n\nexport const organizationDocumentUsageTotalsRefinement = {\n  description: \"document usage totals equal the sums of the category breakdown\",\n  id: \"response.organization-data-usage-document-totals\",\n} as const;\n\nexport const organizationDataUsageTotalRefinement = {\n  description:\n    \"totalByteLength equals the sum of document and blob byte lengths\",\n  id: \"response.organization-data-usage-total-byte-length\",\n} as const;\n\nexport const organizationDataUsageResponseRuntimeRefinements = [\n  organizationDataUsageTotalRefinement,\n  organizationDocumentUsageCategoriesRefinement,\n  organizationDocumentUsageTotalsRefinement,\n] as const;\n"]}

package/internal/validators/organizationProvisioningRefinements.js

@@ -0,0 +1,25 @@
+export const organizationProvisioningDocumentSeedRefinement = {
+    description: "each provisioned document seed must contain exactly one outgoing update and no container rekeys",
+    id: "request.organization-provisioning-document-seed",
+};
+export const organizationProvisioningContainerSeedRefinement = {
+    description: "each provisioned system-container metadata seed must contain exactly one outgoing update and no container rekeys",
+    id: "request.organization-provisioning-container-seed",
+};
+export const organizationProvisioningRequestRuntimeRefinements = [
+    organizationProvisioningContainerSeedRefinement,
+    organizationProvisioningDocumentSeedRefinement,
+];
+export const organizationProvisioningContainerKeyringRefinement = {
+    description: "a container response keyring is null exactly for container key epoch 1",
+    id: "response.organization-provisioning-container-keyring",
+};
+export const organizationProvisioningCommittedUpdateIdsRefinement = {
+    description: "core and profile metadata update id arrays contain no duplicates",
+    id: "response.organization-provisioning-unique-update-ids",
+};
+export const organizationProvisioningResponseRuntimeRefinements = [
+    organizationProvisioningCommittedUpdateIdsRefinement,
+    organizationProvisioningContainerKeyringRefinement,
+];
+//# sourceMappingURL=organizationProvisioningRefinements.js.map

package/internal/validators/organizationProvisioningRefinements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationProvisioningRefinements.js","sourceRoot":"","sources":["organizationProvisioningRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,8CAA8C,GAAG;IAC5D,WAAW,EACT,iGAAiG;IACnG,EAAE,EAAE,iDAAiD;CAC7C,CAAC;AAEX,MAAM,CAAC,MAAM,+CAA+C,GAAG;IAC7D,WAAW,EACT,kHAAkH;IACpH,EAAE,EAAE,kDAAkD;CAC9C,CAAC;AAEX,MAAM,CAAC,MAAM,iDAAiD,GAAG;IAC/D,+CAA+C;IAC/C,8CAA8C;CACtC,CAAC;AAEX,MAAM,CAAC,MAAM,kDAAkD,GAAG;IAChE,WAAW,EACT,wEAAwE;IAC1E,EAAE,EAAE,sDAAsD;CAClD,CAAC;AAEX,MAAM,CAAC,MAAM,oDAAoD,GAAG;IAClE,WAAW,EACT,kEAAkE;IACpE,EAAE,EAAE,sDAAsD;CAClD,CAAC;AAEX,MAAM,CAAC,MAAM,kDAAkD,GAAG;IAChE,oDAAoD;IACpD,kDAAkD;CAC1C,CAAC","sourcesContent":["export const organizationProvisioningDocumentSeedRefinement = {\n  description:\n    \"each provisioned document seed must contain exactly one outgoing update and no container rekeys\",\n  id: \"request.organization-provisioning-document-seed\",\n} as const;\n\nexport const organizationProvisioningContainerSeedRefinement = {\n  description:\n    \"each provisioned system-container metadata seed must contain exactly one outgoing update and no container rekeys\",\n  id: \"request.organization-provisioning-container-seed\",\n} as const;\n\nexport const organizationProvisioningRequestRuntimeRefinements = [\n  organizationProvisioningContainerSeedRefinement,\n  organizationProvisioningDocumentSeedRefinement,\n] as const;\n\nexport const organizationProvisioningContainerKeyringRefinement = {\n  description:\n    \"a container response keyring is null exactly for container key epoch 1\",\n  id: \"response.organization-provisioning-container-keyring\",\n} as const;\n\nexport const organizationProvisioningCommittedUpdateIdsRefinement = {\n  description:\n    \"core and profile metadata update id arrays contain no duplicates\",\n  id: \"response.organization-provisioning-unique-update-ids\",\n} as const;\n\nexport const organizationProvisioningResponseRuntimeRefinements = [\n  organizationProvisioningCommittedUpdateIdsRefinement,\n  organizationProvisioningContainerKeyringRefinement,\n] as const;\n"]}

package/internal/validators/organizationReadModelRefinements.js

@@ -0,0 +1,8 @@
+const organizationReadModelConsistencyRefinement = {
+    description: "read-model lanes match the response organization; grants and memberships are unambiguous; snapshot lanes are complete and contain no deletions",
+    id: "response.organization-read-model-consistency",
+};
+export const organizationReadModelResponseRuntimeRefinements = [
+    organizationReadModelConsistencyRefinement,
+];
+//# sourceMappingURL=organizationReadModelRefinements.js.map

package/internal/validators/organizationReadModelRefinements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationReadModelRefinements.js","sourceRoot":"","sources":["organizationReadModelRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,0CAA0C,GAAG;IACjD,WAAW,EACT,gJAAgJ;IAClJ,EAAE,EAAE,8CAA8C;CAC1C,CAAC;AAEX,MAAM,CAAC,MAAM,+CAA+C,GAAG;IAC7D,0CAA0C;CAClC,CAAC","sourcesContent":["const organizationReadModelConsistencyRefinement = {\n  description:\n    \"read-model lanes match the response organization; grants and memberships are unambiguous; snapshot lanes are complete and contain no deletions\",\n  id: \"response.organization-read-model-consistency\",\n} as const;\n\nexport const organizationReadModelResponseRuntimeRefinements = [\n  organizationReadModelConsistencyRefinement,\n] as const;\n"]}

package/internal/validators/projectionHistoryRefinements.js

@@ -0,0 +1,5 @@
+export const projectionHistoryHeaderRefinement = {
+    id: "request.projection-history-prefixes",
+    description: "x-projection-history must decode to at most 32 prefixes with unique keys, positive safe integer counts, and lowercase SHA-256 digests",
+};
+//# sourceMappingURL=projectionHistoryRefinements.js.map

package/internal/validators/projectionHistoryRefinements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectionHistoryRefinements.js","sourceRoot":"","sources":["projectionHistoryRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,EAAE,EAAE,qCAAqC;IACzC,WAAW,EACT,uIAAuI;CACjI,CAAC","sourcesContent":["export const projectionHistoryHeaderRefinement = {\n  id: \"request.projection-history-prefixes\",\n  description:\n    \"x-projection-history must decode to at most 32 prefixes with unique keys, positive safe integer counts, and lowercase SHA-256 digests\",\n} as const;\n"]}

package/internal/validators/realtime/index.js

@@ -0,0 +1,5 @@
+export { MAX_WS_CLIENT_MESSAGE_BYTES, MAX_WS_INTEREST_CONTAINER_IDS, parseWsClientDeclaration, serializeWsClientDeclaration, WsClientDeclarationSchema, WsKnownContainersAddSchema, WsKnownContainersRemoveSchema, WsKnownContainersReplaceSchema, WsKnownOrganizationsReplaceSchema, } from "./wsClientDeclarations.js";
+export { WsContainerMutationCreatedHintSchema, WsDocumentMutationCreatedHintSchema, WsDocumentUpdateCreatedHintSchema, WsInvalidationHintSchema, WsSharedWithYouHintSchema, WsUserRegisteredHintSchema, } from "./wsInvalidationHints.js";
+export { parseWsServerMessage, serializeWsServerMessage, WsInterestStateFrameSchema, WsKnownContainersAckFrameSchema, WsKnownOrganizationsAckFrameSchema, WsOrganizationReadModelAccessRevokedFrameSchema, WsOrganizationReadModelChangedFrameSchema, WsResyncRequiredFrameSchema, WsServerControlFrameSchema, WsServerMessageSchema, } from "./wsServerFrames.js";
+export { MAX_WS_DECLARATION_ID_LENGTH } from "./wsShared.js";
+//# sourceMappingURL=index.js.map

package/internal/validators/realtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,wBAAwB,EACxB,4BAA4B,EAE5B,yBAAyB,EACzB,0BAA0B,EAC1B,6BAA6B,EAC7B,8BAA8B,EAC9B,iCAAiC,GAClC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,oCAAoC,EACpC,mCAAmC,EACnC,iCAAiC,EAEjC,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,0BAA0B,EAC1B,+BAA+B,EAC/B,kCAAkC,EAClC,+CAA+C,EAC/C,yCAAyC,EACzC,2BAA2B,EAE3B,0BAA0B,EAE1B,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC","sourcesContent":["export {\n  MAX_WS_CLIENT_MESSAGE_BYTES,\n  MAX_WS_INTEREST_CONTAINER_IDS,\n  parseWsClientDeclaration,\n  serializeWsClientDeclaration,\n  type WsClientDeclaration,\n  WsClientDeclarationSchema,\n  WsKnownContainersAddSchema,\n  WsKnownContainersRemoveSchema,\n  WsKnownContainersReplaceSchema,\n  WsKnownOrganizationsReplaceSchema,\n} from \"./wsClientDeclarations\";\nexport {\n  WsContainerMutationCreatedHintSchema,\n  WsDocumentMutationCreatedHintSchema,\n  WsDocumentUpdateCreatedHintSchema,\n  type WsInvalidationHint,\n  WsInvalidationHintSchema,\n  WsSharedWithYouHintSchema,\n  WsUserRegisteredHintSchema,\n} from \"./wsInvalidationHints\";\nexport {\n  parseWsServerMessage,\n  serializeWsServerMessage,\n  WsInterestStateFrameSchema,\n  WsKnownContainersAckFrameSchema,\n  WsKnownOrganizationsAckFrameSchema,\n  WsOrganizationReadModelAccessRevokedFrameSchema,\n  WsOrganizationReadModelChangedFrameSchema,\n  WsResyncRequiredFrameSchema,\n  type WsServerControlFrame,\n  WsServerControlFrameSchema,\n  type WsServerMessage,\n  WsServerMessageSchema,\n} from \"./wsServerFrames\";\nexport { MAX_WS_DECLARATION_ID_LENGTH } from \"./wsShared\";\n"]}

package/internal/validators/realtime/wsClientDeclarations.js

@@ -0,0 +1,57 @@
+import { z } from "zod";
+import { uuidV4StringSchema } from "../schema.js";
+import { parseWsJson, wsDeclarationIdSchema } from "./wsShared.js";
+/**
+ * Client→server websocket interest declarations. Interest is routing state a
+ * socket asks invalidations for; it is NOT an authorization grant (the HTTP
+ * read models remain the source of access truth), and organization interest is
+ * additionally authorized by the gateway before it is applied.
+ */
+// Bounds the transport payload (Bun's maxPayloadLength) and the pre-parse
+// length check, so a hostile client cannot make the server parse an unbounded
+// JSON document.
+export const MAX_WS_CLIENT_MESSAGE_BYTES = 1_000_000;
+export const MAX_WS_INTEREST_CONTAINER_IDS = 10_000;
+const interestContainerIdsSchema = z
+    .array(uuidV4StringSchema)
+    .max(MAX_WS_INTEREST_CONTAINER_IDS);
+export const WsKnownContainersReplaceSchema = z.object({
+    type: z.literal("known_containers"),
+    containerIds: interestContainerIdsSchema.optional(),
+    declarationId: wsDeclarationIdSchema.optional(),
+});
+export const WsKnownContainersAddSchema = z.object({
+    type: z.literal("known_containers.add"),
+    containerIds: interestContainerIdsSchema.optional(),
+    declarationId: wsDeclarationIdSchema.optional(),
+});
+export const WsKnownContainersRemoveSchema = z.object({
+    type: z.literal("known_containers.remove"),
+    containerIds: interestContainerIdsSchema.optional(),
+    declarationId: wsDeclarationIdSchema.optional(),
+});
+// At most one organization may hold realtime interest per socket; an empty
+// array clears it. The declaration id is required because every organization
+// declaration is acknowledged after gateway authorization.
+export const WsKnownOrganizationsReplaceSchema = z.object({
+    type: z.literal("known_organizations"),
+    declarationId: wsDeclarationIdSchema,
+    organizationIds: z.array(uuidV4StringSchema).max(1),
+});
+export const WsClientDeclarationSchema = z.discriminatedUnion("type", [
+    WsKnownContainersReplaceSchema,
+    WsKnownContainersAddSchema,
+    WsKnownContainersRemoveSchema,
+    WsKnownOrganizationsReplaceSchema,
+]);
+export function serializeWsClientDeclaration(declaration) {
+    return JSON.stringify(declaration);
+}
+/** Malformed, unknown-tag, and oversized declarations fail closed to null. */
+export function parseWsClientDeclaration(rawMessage) {
+    if (rawMessage.length > MAX_WS_CLIENT_MESSAGE_BYTES) {
+        return null;
+    }
+    return parseWsJson(WsClientDeclarationSchema, rawMessage);
+}
+//# sourceMappingURL=wsClientDeclarations.js.map

package/internal/validators/realtime/wsClientDeclarations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wsClientDeclarations.js","sourceRoot":"","sources":["wsClientDeclarations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEhE;;;;;GAKG;AAEH,0EAA0E;AAC1E,8EAA8E;AAC9E,iBAAiB;AACjB,MAAM,CAAC,MAAM,2BAA2B,GAAG,SAAS,CAAC;AACrD,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEpD,MAAM,0BAA0B,GAAG,CAAC;KACjC,KAAK,CAAC,kBAAkB,CAAC;KACzB,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAEtC,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnC,YAAY,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACnD,aAAa,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACvC,YAAY,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACnD,aAAa,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;IAC1C,YAAY,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACnD,aAAa,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAEH,2EAA2E;AAC3E,6EAA6E;AAC7E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACtC,aAAa,EAAE,qBAAqB;IACpC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACpE,8BAA8B;IAC9B,0BAA0B;IAC1B,6BAA6B;IAC7B,iCAAiC;CAClC,CAAC,CAAC;AAIH,MAAM,UAAU,4BAA4B,CAC1C,WAAgC;IAEhC,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,wBAAwB,CACtC,UAAkB;IAElB,IAAI,UAAU,CAAC,MAAM,GAAG,2BAA2B,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,WAAW,CAAC,yBAAyB,EAAE,UAAU,CAAC,CAAC;AAC5D,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { uuidV4StringSchema } from \"../schema\";\nimport { parseWsJson, wsDeclarationIdSchema } from \"./wsShared\";\n\n/**\n * Client→server websocket interest declarations. Interest is routing state a\n * socket asks invalidations for; it is NOT an authorization grant (the HTTP\n * read models remain the source of access truth), and organization interest is\n * additionally authorized by the gateway before it is applied.\n */\n\n// Bounds the transport payload (Bun's maxPayloadLength) and the pre-parse\n// length check, so a hostile client cannot make the server parse an unbounded\n// JSON document.\nexport const MAX_WS_CLIENT_MESSAGE_BYTES = 1_000_000;\nexport const MAX_WS_INTEREST_CONTAINER_IDS = 10_000;\n\nconst interestContainerIdsSchema = z\n  .array(uuidV4StringSchema)\n  .max(MAX_WS_INTEREST_CONTAINER_IDS);\n\nexport const WsKnownContainersReplaceSchema = z.object({\n  type: z.literal(\"known_containers\"),\n  containerIds: interestContainerIdsSchema.optional(),\n  declarationId: wsDeclarationIdSchema.optional(),\n});\n\nexport const WsKnownContainersAddSchema = z.object({\n  type: z.literal(\"known_containers.add\"),\n  containerIds: interestContainerIdsSchema.optional(),\n  declarationId: wsDeclarationIdSchema.optional(),\n});\n\nexport const WsKnownContainersRemoveSchema = z.object({\n  type: z.literal(\"known_containers.remove\"),\n  containerIds: interestContainerIdsSchema.optional(),\n  declarationId: wsDeclarationIdSchema.optional(),\n});\n\n// At most one organization may hold realtime interest per socket; an empty\n// array clears it. The declaration id is required because every organization\n// declaration is acknowledged after gateway authorization.\nexport const WsKnownOrganizationsReplaceSchema = z.object({\n  type: z.literal(\"known_organizations\"),\n  declarationId: wsDeclarationIdSchema,\n  organizationIds: z.array(uuidV4StringSchema).max(1),\n});\n\nexport const WsClientDeclarationSchema = z.discriminatedUnion(\"type\", [\n  WsKnownContainersReplaceSchema,\n  WsKnownContainersAddSchema,\n  WsKnownContainersRemoveSchema,\n  WsKnownOrganizationsReplaceSchema,\n]);\n\nexport type WsClientDeclaration = z.infer<typeof WsClientDeclarationSchema>;\n\nexport function serializeWsClientDeclaration(\n  declaration: WsClientDeclaration,\n): string {\n  return JSON.stringify(declaration);\n}\n\n/** Malformed, unknown-tag, and oversized declarations fail closed to null. */\nexport function parseWsClientDeclaration(\n  rawMessage: string,\n): WsClientDeclaration | null {\n  if (rawMessage.length > MAX_WS_CLIENT_MESSAGE_BYTES) {\n    return null;\n  }\n  return parseWsJson(WsClientDeclarationSchema, rawMessage);\n}\n"]}

package/internal/validators/realtime/wsInvalidationHints.js

@@ -0,0 +1,76 @@
+import { z } from "zod";
+/**
+ * Public realtime invalidation hints — the server→client websocket frames that
+ * tell a client some server state changed so it can re-fetch over HTTP. Hints
+ * are lossy notifications, never data carriers: payloads identify what changed,
+ * and HTTP remains the source of truth for content and access.
+ *
+ * The server reconstructs every outgoing hint from these schemas, so internal
+ * routing metadata (the authoring session origin, recipient audiences) never
+ * crosses the websocket boundary.
+ */
+// Every container id a hint carries is scoped per recipient: the gateway
+// removes ids the receiving socket holds no verified interest in, so a frame
+// never names a container its recipient cannot read. `containerIds` therefore
+// holds only the recipient's own linked containers, and a container hint omits
+// `parentId`/`previousParentId` when the recipient is not indexed on them.
+export const WsDocumentUpdateCreatedHintSchema = z.object({
+    type: z.literal("document_update_created"),
+    containerIds: z.array(z.string().min(1)),
+    documentId: z.string().min(1),
+    // Attachment bind/detach hints carry no update ids; readers treat their
+    // absence as a lossy signal to pull.
+    updateIds: z.array(z.string().min(1)).optional(),
+});
+export const WsDocumentMutationCreatedHintSchema = z.object({
+    type: z.literal("document_mutation_created"),
+    containerIds: z.array(z.string().min(1)),
+    documentId: z.string().min(1),
+    eventType: z.enum(["document.link", "document.purge", "document.unlink"]),
+});
+export const WsContainerMutationCreatedHintSchema = z.object({
+    type: z.literal("container_mutation_created"),
+    containerId: z.string().min(1),
+    eventType: z.string().min(1),
+    // Null is the root; absent means the recipient is not subscribed to it.
+    parentId: z.string().min(1).nullable().optional(),
+    previousParentId: z.string().min(1).nullable().optional(),
+    updatedAt: z.string().min(1),
+});
+// Derived per recipient: parent watchers refresh authorized child listings
+// without learning a child's id, mutation type, or the other side of a move.
+const WsContainerChildrenChangedHintSchema = z.object({
+    type: z.literal("container_children_changed"),
+    containerIds: z.array(z.string().min(1)).min(1),
+});
+// Routed by user, not container interest: the recipient does not know the
+// shared container yet, so the client reacts by re-listing root containers.
+export const WsSharedWithYouHintSchema = z.object({
+    type: z.literal("shared_with_you"),
+    userId: z.string().min(1),
+});
+// Derived by the gateway, never published: a container mutation moved the
+// manifest every dependent subscription cites in its writer projection. Grants,
+// rekeys, and recites do not evict those dependents, and a subscriber granted
+// directly at a descendant never receives the ancestor's own hint, so this names
+// the recipient's held containers whose cited path now carries a stale manifest.
+// Invalidation only: drop cached projections, keep the subscriptions.
+const WsContainerPathChangedHintSchema = z.object({
+    type: z.literal("container_path_changed"),
+    containerIds: z.array(z.string().min(1)).min(1),
+});
+export const WsUserRegisteredHintSchema = z.object({
+    type: z.literal("user_registered"),
+    userId: z.string().min(1),
+    fingerprint: z.string().min(1).optional(),
+});
+export const WsInvalidationHintSchema = z.discriminatedUnion("type", [
+    WsDocumentUpdateCreatedHintSchema,
+    WsDocumentMutationCreatedHintSchema,
+    WsContainerMutationCreatedHintSchema,
+    WsContainerPathChangedHintSchema,
+    WsContainerChildrenChangedHintSchema,
+    WsSharedWithYouHintSchema,
+    WsUserRegisteredHintSchema,
+]);
+//# sourceMappingURL=wsInvalidationHints.js.map

package/internal/validators/realtime/wsInvalidationHints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wsInvalidationHints.js","sourceRoot":"","sources":["wsInvalidationHints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;GASG;AAEH,yEAAyE;AACzE,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,wEAAwE;IACxE,qCAAqC;IACrC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC;IAC5C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;CAC1E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAEH,2EAA2E;AAC3E,6EAA6E;AAC7E,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC;IAC7C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAChD,CAAC,CAAC;AAEH,0EAA0E;AAC1E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAEH,0EAA0E;AAC1E,gFAAgF;AAChF,8EAA8E;AAC9E,iFAAiF;AACjF,iFAAiF;AACjF,sEAAsE;AACtE,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACzC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACnE,iCAAiC;IACjC,mCAAmC;IACnC,oCAAoC;IACpC,gCAAgC;IAChC,oCAAoC;IACpC,yBAAyB;IACzB,0BAA0B;CAC3B,CAAC,CAAC","sourcesContent":["import { z } from \"zod\";\n\n/**\n * Public realtime invalidation hints — the server→client websocket frames that\n * tell a client some server state changed so it can re-fetch over HTTP. Hints\n * are lossy notifications, never data carriers: payloads identify what changed,\n * and HTTP remains the source of truth for content and access.\n *\n * The server reconstructs every outgoing hint from these schemas, so internal\n * routing metadata (the authoring session origin, recipient audiences) never\n * crosses the websocket boundary.\n */\n\n// Every container id a hint carries is scoped per recipient: the gateway\n// removes ids the receiving socket holds no verified interest in, so a frame\n// never names a container its recipient cannot read. `containerIds` therefore\n// holds only the recipient's own linked containers, and a container hint omits\n// `parentId`/`previousParentId` when the recipient is not indexed on them.\nexport const WsDocumentUpdateCreatedHintSchema = z.object({\n  type: z.literal(\"document_update_created\"),\n  containerIds: z.array(z.string().min(1)),\n  documentId: z.string().min(1),\n  // Attachment bind/detach hints carry no update ids; readers treat their\n  // absence as a lossy signal to pull.\n  updateIds: z.array(z.string().min(1)).optional(),\n});\n\nexport const WsDocumentMutationCreatedHintSchema = z.object({\n  type: z.literal(\"document_mutation_created\"),\n  containerIds: z.array(z.string().min(1)),\n  documentId: z.string().min(1),\n  eventType: z.enum([\"document.link\", \"document.purge\", \"document.unlink\"]),\n});\n\nexport const WsContainerMutationCreatedHintSchema = z.object({\n  type: z.literal(\"container_mutation_created\"),\n  containerId: z.string().min(1),\n  eventType: z.string().min(1),\n  // Null is the root; absent means the recipient is not subscribed to it.\n  parentId: z.string().min(1).nullable().optional(),\n  previousParentId: z.string().min(1).nullable().optional(),\n  updatedAt: z.string().min(1),\n});\n\n// Derived per recipient: parent watchers refresh authorized child listings\n// without learning a child's id, mutation type, or the other side of a move.\nconst WsContainerChildrenChangedHintSchema = z.object({\n  type: z.literal(\"container_children_changed\"),\n  containerIds: z.array(z.string().min(1)).min(1),\n});\n\n// Routed by user, not container interest: the recipient does not know the\n// shared container yet, so the client reacts by re-listing root containers.\nexport const WsSharedWithYouHintSchema = z.object({\n  type: z.literal(\"shared_with_you\"),\n  userId: z.string().min(1),\n});\n\n// Derived by the gateway, never published: a container mutation moved the\n// manifest every dependent subscription cites in its writer projection. Grants,\n// rekeys, and recites do not evict those dependents, and a subscriber granted\n// directly at a descendant never receives the ancestor's own hint, so this names\n// the recipient's held containers whose cited path now carries a stale manifest.\n// Invalidation only: drop cached projections, keep the subscriptions.\nconst WsContainerPathChangedHintSchema = z.object({\n  type: z.literal(\"container_path_changed\"),\n  containerIds: z.array(z.string().min(1)).min(1),\n});\n\nexport const WsUserRegisteredHintSchema = z.object({\n  type: z.literal(\"user_registered\"),\n  userId: z.string().min(1),\n  fingerprint: z.string().min(1).optional(),\n});\n\nexport const WsInvalidationHintSchema = z.discriminatedUnion(\"type\", [\n  WsDocumentUpdateCreatedHintSchema,\n  WsDocumentMutationCreatedHintSchema,\n  WsContainerMutationCreatedHintSchema,\n  WsContainerPathChangedHintSchema,\n  WsContainerChildrenChangedHintSchema,\n  WsSharedWithYouHintSchema,\n  WsUserRegisteredHintSchema,\n]);\n\nexport type WsInvalidationHint = z.infer<typeof WsInvalidationHintSchema>;\n"]}

package/internal/validators/realtime/wsServerFrames.js

@@ -0,0 +1,64 @@
+import { z } from "zod";
+import { uuidV4StringSchema } from "../schema.js";
+import { WsInvalidationHintSchema, } from "./wsInvalidationHints.js";
+import { parseWsJson, wsDeclarationIdSchema } from "./wsShared.js";
+/**
+ * Server→client websocket control frames: connection/interest lifecycle and
+ * resync signals, as opposed to the invalidation hints that fan out interest-
+ * routed server events. Together with the hints they form the complete set of
+ * frames a client may receive; anything else fails closed on both sides.
+ */
+// The reconnect baseline frame: the container ids the server already holds for
+// this session. The matching declaration acknowledgement — not this frame — is
+// the client's ordering barrier for closing the lossy reconnect interval.
+export const WsInterestStateFrameSchema = z.object({
+    type: z.literal("interest_state"),
+    containerIds: z.array(z.string().min(1)),
+});
+export const WsKnownContainersAckFrameSchema = z.object({
+    type: z.literal("known_containers_ack"),
+    containerIds: z.array(z.string().min(1)),
+    declarationId: wsDeclarationIdSchema,
+});
+export const WsKnownOrganizationsAckFrameSchema = z.object({
+    type: z.literal("known_organizations_ack"),
+    declarationId: wsDeclarationIdSchema,
+    organizationId: uuidV4StringSchema.nullable(),
+    authorized: z.boolean(),
+});
+// A container's access changed; the client must reconcile it over HTTP and, if
+// still authorized, re-declare interest.
+export const WsResyncRequiredFrameSchema = z.object({
+    type: z.literal("resync_required"),
+    containerIds: z.array(z.string().min(1)).min(1),
+});
+export const WsOrganizationReadModelChangedFrameSchema = z.object({
+    type: z.literal("organization_read_model_changed"),
+    organizationId: uuidV4StringSchema,
+    originatedFromSession: z.boolean(),
+});
+export const WsOrganizationReadModelAccessRevokedFrameSchema = z.object({
+    type: z.literal("organization_read_model_access_revoked"),
+    organizationId: uuidV4StringSchema,
+});
+export const WsServerControlFrameSchema = z.discriminatedUnion("type", [
+    WsInterestStateFrameSchema,
+    WsKnownContainersAckFrameSchema,
+    WsKnownOrganizationsAckFrameSchema,
+    WsResyncRequiredFrameSchema,
+    WsOrganizationReadModelChangedFrameSchema,
+    WsOrganizationReadModelAccessRevokedFrameSchema,
+]);
+export const WsServerMessageSchema = z.discriminatedUnion("type", [
+    ...WsServerControlFrameSchema.options,
+    ...WsInvalidationHintSchema.options,
+]);
+/** The single typed egress: the server cannot serialize an undeclared frame. */
+export function serializeWsServerMessage(message) {
+    return JSON.stringify(message);
+}
+/** Malformed and unknown-tag server frames fail closed to null. */
+export function parseWsServerMessage(rawMessage) {
+    return parseWsJson(WsServerMessageSchema, rawMessage);
+}
+//# sourceMappingURL=wsServerFrames.js.map

package/internal/validators/realtime/wsServerFrames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wsServerFrames.js","sourceRoot":"","sources":["wsServerFrames.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAEL,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEhE;;;;;GAKG;AAEH,+EAA+E;AAC/E,+EAA+E;AAC/E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxC,aAAa,EAAE,qBAAqB;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;IAC1C,aAAa,EAAE,qBAAqB;IACpC,cAAc,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;CACxB,CAAC,CAAC;AAEH,+EAA+E;AAC/E,yCAAyC;AACzC,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,MAAM,CAAC;IAChE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC;IAClD,cAAc,EAAE,kBAAkB;IAClC,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+CAA+C,GAAG,CAAC,CAAC,MAAM,CAAC;IACtE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wCAAwC,CAAC;IACzD,cAAc,EAAE,kBAAkB;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACrE,0BAA0B;IAC1B,+BAA+B;IAC/B,kCAAkC;IAClC,2BAA2B;IAC3B,yCAAyC;IACzC,+CAA+C;CAChD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAChE,GAAG,0BAA0B,CAAC,OAAO;IACrC,GAAG,wBAAwB,CAAC,OAAO;CACpC,CAAC,CAAC;AAIH,gFAAgF;AAChF,MAAM,UAAU,wBAAwB,CAAC,OAAwB;IAC/D,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,oBAAoB,CAClC,UAAkB;IAElB,OAAO,WAAW,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAC;AACxD,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { uuidV4StringSchema } from \"../schema\";\nimport {\n  type WsInvalidationHint,\n  WsInvalidationHintSchema,\n} from \"./wsInvalidationHints\";\nimport { parseWsJson, wsDeclarationIdSchema } from \"./wsShared\";\n\n/**\n * Server→client websocket control frames: connection/interest lifecycle and\n * resync signals, as opposed to the invalidation hints that fan out interest-\n * routed server events. Together with the hints they form the complete set of\n * frames a client may receive; anything else fails closed on both sides.\n */\n\n// The reconnect baseline frame: the container ids the server already holds for\n// this session. The matching declaration acknowledgement — not this frame — is\n// the client's ordering barrier for closing the lossy reconnect interval.\nexport const WsInterestStateFrameSchema = z.object({\n  type: z.literal(\"interest_state\"),\n  containerIds: z.array(z.string().min(1)),\n});\n\nexport const WsKnownContainersAckFrameSchema = z.object({\n  type: z.literal(\"known_containers_ack\"),\n  containerIds: z.array(z.string().min(1)),\n  declarationId: wsDeclarationIdSchema,\n});\n\nexport const WsKnownOrganizationsAckFrameSchema = z.object({\n  type: z.literal(\"known_organizations_ack\"),\n  declarationId: wsDeclarationIdSchema,\n  organizationId: uuidV4StringSchema.nullable(),\n  authorized: z.boolean(),\n});\n\n// A container's access changed; the client must reconcile it over HTTP and, if\n// still authorized, re-declare interest.\nexport const WsResyncRequiredFrameSchema = z.object({\n  type: z.literal(\"resync_required\"),\n  containerIds: z.array(z.string().min(1)).min(1),\n});\n\nexport const WsOrganizationReadModelChangedFrameSchema = z.object({\n  type: z.literal(\"organization_read_model_changed\"),\n  organizationId: uuidV4StringSchema,\n  originatedFromSession: z.boolean(),\n});\n\nexport const WsOrganizationReadModelAccessRevokedFrameSchema = z.object({\n  type: z.literal(\"organization_read_model_access_revoked\"),\n  organizationId: uuidV4StringSchema,\n});\n\nexport const WsServerControlFrameSchema = z.discriminatedUnion(\"type\", [\n  WsInterestStateFrameSchema,\n  WsKnownContainersAckFrameSchema,\n  WsKnownOrganizationsAckFrameSchema,\n  WsResyncRequiredFrameSchema,\n  WsOrganizationReadModelChangedFrameSchema,\n  WsOrganizationReadModelAccessRevokedFrameSchema,\n]);\n\nexport type WsServerControlFrame = z.infer<typeof WsServerControlFrameSchema>;\n\nexport const WsServerMessageSchema = z.discriminatedUnion(\"type\", [\n  ...WsServerControlFrameSchema.options,\n  ...WsInvalidationHintSchema.options,\n]);\n\nexport type WsServerMessage = WsServerControlFrame | WsInvalidationHint;\n\n/** The single typed egress: the server cannot serialize an undeclared frame. */\nexport function serializeWsServerMessage(message: WsServerMessage): string {\n  return JSON.stringify(message);\n}\n\n/** Malformed and unknown-tag server frames fail closed to null. */\nexport function parseWsServerMessage(\n  rawMessage: string,\n): WsServerMessage | null {\n  return parseWsJson(WsServerMessageSchema, rawMessage);\n}\n"]}

package/internal/validators/realtime/wsShared.js

@@ -0,0 +1,18 @@
+import { z } from "zod";
+export const MAX_WS_DECLARATION_ID_LENGTH = 128;
+export const wsDeclarationIdSchema = z
+    .string()
+    .min(1)
+    .max(MAX_WS_DECLARATION_ID_LENGTH);
+export function parseWsJson(schema, rawMessage) {
+    let value;
+    try {
+        value = JSON.parse(rawMessage);
+    }
+    catch {
+        return null;
+    }
+    const parsed = schema.safeParse(value);
+    return parsed.success ? parsed.data : null;
+}
+//# sourceMappingURL=wsShared.js.map

package/internal/validators/realtime/wsShared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wsShared.js","sourceRoot":"","sources":["wsShared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAEhD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAErC,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,UAAkB;IAElB,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC","sourcesContent":["import { z } from \"zod\";\n\nexport const MAX_WS_DECLARATION_ID_LENGTH = 128;\n\nexport const wsDeclarationIdSchema = z\n  .string()\n  .min(1)\n  .max(MAX_WS_DECLARATION_ID_LENGTH);\n\nexport function parseWsJson<Schema extends z.ZodType>(\n  schema: Schema,\n  rawMessage: string,\n): z.output<Schema> | null {\n  let value: unknown;\n  try {\n    value = JSON.parse(rawMessage);\n  } catch {\n    return null;\n  }\n  const parsed = schema.safeParse(value);\n  return parsed.success ? parsed.data : null;\n}\n"]}

package/internal/validators/request/auth/challenge.d.ts

@@ -0,0 +1,12 @@
+import type { z } from "zod";
+export declare const ChallengeRequestSchema: z.ZodType<{
+    fingerprint: string;
+}, {
+    fingerprint: string;
+}, z.core.$ZodTypeInternals<{
+    fingerprint: string;
+}, {
+    fingerprint: string;
+}>>;
+export type ChallengeRequest = z.infer<typeof ChallengeRequestSchema>;
+export declare function isChallengeRequest(value: unknown): value is ChallengeRequest;

package/internal/validators/request/auth/challenge.js

@@ -0,0 +1,8 @@
+import { loosePlainObject, sha256HexStringSchema } from "../../schema.js";
+export const ChallengeRequestSchema = loosePlainObject({
+    fingerprint: sha256HexStringSchema,
+});
+export function isChallengeRequest(value) {
+    return ChallengeRequestSchema.safeParse(value).success;
+}
+//# sourceMappingURL=challenge.js.map

package/internal/validators/request/auth/challenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.js","sourceRoot":"","sources":["challenge.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAEvE,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;IACrD,WAAW,EAAE,qBAAqB;CACnC,CAAC,CAAC;AAIH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACzD,CAAC","sourcesContent":["import type { z } from \"zod\";\nimport { loosePlainObject, sha256HexStringSchema } from \"../../schema\";\n\nexport const ChallengeRequestSchema = loosePlainObject({\n  fingerprint: sha256HexStringSchema,\n});\n\nexport type ChallengeRequest = z.infer<typeof ChallengeRequestSchema>;\n\nexport function isChallengeRequest(value: unknown): value is ChallengeRequest {\n  return ChallengeRequestSchema.safeParse(value).success;\n}\n"]}

package/internal/validators/request/auth/index.d.ts

@@ -0,0 +1,2 @@
+export { type ChallengeRequest, ChallengeRequestSchema, isChallengeRequest, } from "./challenge.js";
+export { isVerifyRequest, type VerifyRequest, VerifyRequestSchema, } from "./verify.js";

package/internal/validators/request/auth/index.js

@@ -0,0 +1,3 @@
+export { ChallengeRequestSchema, isChallengeRequest, } from "./challenge.js";
+export { isVerifyRequest, VerifyRequestSchema, } from "./verify.js";
+//# sourceMappingURL=index.js.map

package/internal/validators/request/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EAEf,mBAAmB,GACpB,MAAM,UAAU,CAAC","sourcesContent":["export {\n  type ChallengeRequest,\n  ChallengeRequestSchema,\n  isChallengeRequest,\n} from \"./challenge\";\nexport {\n  isVerifyRequest,\n  type VerifyRequest,\n  VerifyRequestSchema,\n} from \"./verify\";\n"]}

package/internal/validators/request/auth/verify.d.ts

@@ -0,0 +1,16 @@
+import type { z } from "zod";
+export declare const VerifyRequestSchema: z.ZodType<{
+    fingerprint: string;
+    signature: number[];
+}, {
+    fingerprint: string;
+    signature: number[];
+}, z.core.$ZodTypeInternals<{
+    fingerprint: string;
+    signature: number[];
+}, {
+    fingerprint: string;
+    signature: number[];
+}>>;
+export type VerifyRequest = z.infer<typeof VerifyRequestSchema>;
+export declare function isVerifyRequest(value: unknown): value is VerifyRequest;

package/internal/validators/request/auth/verify.js

@@ -0,0 +1,10 @@
+import { fixedLengthByteArraySchema, loosePlainObject, sha256HexStringSchema, } from "../../schema.js";
+import { ML_DSA87_SIGNATURE_BYTES } from "../../util/index.js";
+export const VerifyRequestSchema = loosePlainObject({
+    fingerprint: sha256HexStringSchema,
+    signature: fixedLengthByteArraySchema(ML_DSA87_SIGNATURE_BYTES),
+});
+export function isVerifyRequest(value) {
+    return VerifyRequestSchema.safeParse(value).success;
+}
+//# sourceMappingURL=verify.js.map

package/internal/validators/request/auth/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["verify.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,EAC1B,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEtD,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;IAClD,WAAW,EAAE,qBAAqB;IAClC,SAAS,EAAE,0BAA0B,CAAC,wBAAwB,CAAC;CAChE,CAAC,CAAC;AAIH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;AACtD,CAAC","sourcesContent":["import type { z } from \"zod\";\nimport {\n  fixedLengthByteArraySchema,\n  loosePlainObject,\n  sha256HexStringSchema,\n} from \"../../schema\";\nimport { ML_DSA87_SIGNATURE_BYTES } from \"../../util\";\n\nexport const VerifyRequestSchema = loosePlainObject({\n  fingerprint: sha256HexStringSchema,\n  signature: fixedLengthByteArraySchema(ML_DSA87_SIGNATURE_BYTES),\n});\n\nexport type VerifyRequest = z.infer<typeof VerifyRequestSchema>;\n\nexport function isVerifyRequest(value: unknown): value is VerifyRequest {\n  return VerifyRequestSchema.safeParse(value).success;\n}\n"]}