@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/client/session/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kDAAkD,EAAE,MAAM,kDAAkD,CAAC;AACtH,OAAO,EACL,sBAAsB,EACtB,gBAAgB,IAAI,wBAAwB,GAC7C,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,2BAA2B,EAC3B,iCAAiC,EACjC,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EACL,2BAA2B,EAC3B,gCAAgC,GACjC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAgBhC,MAAM,UAAU,aAAa,CAAC,YAAiC;IAC7D,OAAO,IAAI,cAAc,CAAC,YAAY,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,cAAc;IAOW;IANZ,uBAAuB,GACtC,IAAI,8BAA8B,EAAE,CAAC;IACtB,SAAS,GAAG,iBAAiB,EAAE,CAAC;IACzC,gBAAgB,GAAG,IAAI,CAAC;IACxB,aAAa,GAAG,oBAAoB,EAAE,CAAC;IAE/C,YAA6B,YAAiC;QAAjC,iBAAY,GAAZ,YAAY,CAAqB;IAAG,CAAC;IAElE,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;IACtC,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;IACxC,CAAC;IAED,IAAI,qBAAqB;QACvB,OAAO,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC;IAClD,CAAC;IAED,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;IAC5C,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;IACnC,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;IAC3C,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;IACnC,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAChD,IAAI,CAAC,aAAa,CAAC,MAAM,EACzB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CACvD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,2BAA2B;QAI/B,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,gBAAgB,GAAG,uBAAuB,CAC9C,IAAI,EACJ,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CACvD,CAAC;QACF,IAAI,IAAI,CAAC,eAAe,IAAI,gBAAgB,EAAE,CAAC;YAC7C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,6BAA6B,CAAC,CACzE,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,wBAAwB,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,cAAsB;QAEtB,OAAO,2BAA2B,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACvE,OAAO,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,YAAiC;QAC3C,MAAM,cAAc,GAClB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,WAAW,GACf,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,yBAAyB,EAAE,CAAC,IAAI,IAAI,CAAC;QAEzE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC;QAC3C,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7D,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,oBAAoB,CAAC;QACnE,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,gBAAgB,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,oBAAoB,GAAG,4BAA4B,CACvD,IAAI,CAAC,YAAY,CAAC,uBAAuB,EACzC,OAAO,CACR,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,GAAG,CACnB,YAAY,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,mBAAmB,CACxE,CAAC;QACF,MAAM,cAAc,GAAG,YAAY;YACjC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,yBAAyB,CACnD,WAAW,EACX,cAAc,CAAC,iBAAiB,EAChC,YAAY,CACb;YACH,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CACtC,WAAW,EACX,cAAc,CAAC,iBAAiB,CACjC,CAAC;QAEN,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YAC/C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,uBAAuB,CAAC,aAAa,CACxC,cAAc,CAAC,MAAM,EACrB,WAAW,CACZ,CAAC;YACF,MAAM,oBAAoB,CAAC,cAAc,CAAC,MAAM,EAAE;gBAChD,sBAAsB,EAAE,oBAAoB,CAAC,SAAS;gBACtD,qBAAqB,EAAE,WAAW;gBAClC,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;aAClD,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB;gBAC1D,OAAO,KAAK,CAAC;YACf,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,kBAAkB,CAAC,KAAK,EAAE,cAAc,CAAC,MAAM,EAAE;gBACtD,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC1B,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,sBAAsB;aACjD,CAAC,CAAC;QACL,CAAC;QACD,sEAAsE;QACtE,wEAAwE;QACxE,0EAA0E;QAC1E,oDAAoD;QACpD,MAAM,+BAA+B,CAAC;YACpC,OAAO,EAAE;gBACP,SAAS,EAAE,cAAc,CAAC,KAAK;gBAC/B,qBAAqB,EAAE,cAAc,CAAC,cAAc;gBACpD,eAAe,EAAE,IAAI;gBACrB,MAAM,EAAE,cAAc,CAAC,MAAM;gBAC7B,cAAc,EAAE,cAAc,CAAC,cAAc;gBAC7C,MAAM,EAAE,cAAc,CAAC,MAAM;aAC9B;YACD,SAAS,EAAE,GAAG,EAAE;gBACd,IAAI,IAAI,CAAC,aAAa,KAAK,eAAe;oBAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5D,CAAC;YACD,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,sBAAsB;YAClD,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,IAAI;YACb,kBAAkB,EAAE,WAAW;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7D,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACtD,OAAO,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;QACpC,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,OAAiC;QAEjC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,CAAC,YAAY,CAAC,GAAG,CACnB,mDAAmD,CACpD,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7D,MAAM,cAAc,GAAG,gBAAgB,CAAC,cAAc,CAAC;QACvD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;YAC1E,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,oBAAoB,CAAC;QACnE,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC1B,IAAI,CAAC,YAAY,CAAC,GAAG,CACnB,wDAAwD,CACzD,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,GAAG,CACnB,sDAAsD,CACvD,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,oBAAoB,GAAG,iCAAiC,CAAC;YAC7D,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ;YACpC,gBAAgB;YAChB,uBAAuB,EAAE,IAAI,CAAC,YAAY,CAAC,uBAAuB;SACnE,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAChD,IAAI,CAAC,YAAY,EACjB,gBAAgB,CAAC,kBAAkB,CACpC,CAAC;QACF,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAC1E,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,IAAI,QAA8D,CAAC;QACnE,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,wBAAwB,CAAC;gBACxC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG;gBAChC,WAAW;gBACX,QAAQ;gBACR,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,kBAAkB;gBACxD,oBAAoB;gBACpB,iBAAiB,EAAE,GAAG,EAAE,CACtB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB;gBAC1D,GAAG,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG;gBAC1B,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ;gBACpC,uBAAuB,EAAE,OAAO,EAAE,uBAAuB;gBACzD,oBAAoB;gBACpB,2BAA2B,EACzB,IAAI,CAAC,YAAY,CAAC,2BAA2B;gBAC/C,qBAAqB,EAAE,OAAO,EAAE,qBAAqB;gBACrD,qBAAqB,EAAE,gBAAgB,CAAC,kBAAkB;gBAC1D,cAAc;aACf,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YAClE,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sEAAsE;QACtE,0CAA0C;QAC1C,MAAM,+BAA+B,CAAC;YACpC,OAAO,EAAE;gBACP,WAAW,EAAE,QAAQ,CAAC,eAAe;gBACrC,qBAAqB,EAAE,QAAQ,CAAC,cAAc;gBAC9C,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB;YACD,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,sBAAsB;YAClD,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,IAAI;YACb,kBAAkB,EAAE,gBAAgB,CAAC,kBAAkB;SACxD,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW,EAAE,QAAQ,CAAC,eAAe;YACrC,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,OAAmC,EACnC,sBAA+B,EAC/B,yBAAmC;QAEnC,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,IAAI,CAAC,YAAY,EAAE;YAClE,yBAAyB;YACzB,OAAO;YACP,sBAAsB;YACtB,MAAM;SACP,CAAC,CAAC;QACH,IACE,CAAC,QAAQ;YACT,CAAC,MAAM;YACP,IAAI,CAAC,MAAM,KAAK,MAAM;YACtB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB;YAExD,OAAO,IAAI,CAAC;QACd,MAAM,+BAA+B,CAAC;YACpC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,sBAAsB;YAClD,IAAI,EAAE;gBACJ,MAAM;gBACN,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,eAAe,EAAE,QAAQ,CAAC,WAAW;aACtC;YACD,OAAO,EAAE,IAAI;YACb,kBAAkB,EAAE,gBAAgB,CAAC,kBAAkB;SACxD,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,4CAA4C,CAC1C,OAAmC;QAEnC,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,6CAA6C,CACjD,cAAsB;QAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnD,MAAM,gBAAgB,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7D,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACvC,OAAO,kDAAkD,CAAC;YACxD,SAAS,EAAE,GAAG,EAAE,CACd,IAAI,CAAC,MAAM,KAAK,MAAM;gBACtB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB;YAC1D,QAAQ;YACR,cAAc;YACd,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,cAAsB,EACtB,OAAmC;QAEnC,OAAO,gCAAgC,CACrC,IAAI,CAAC,YAAY,EACjB,IAAI,EACJ,cAAc,EACd,OAAO,CACR,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,SAAwB;QACnC,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,cAAc,CAAC,WAA0B;QACvC,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,UAAU,CAAC,OAAuB;QAChC,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAChD,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CACnC,OAAO,CAAC,MAAM,EACd,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CACvD,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC;QACpC,IAAI,CAAC,WAAW,CACd,mBAAmB,CACjB,QAAQ,EACR,OAAO,EACP,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CACvD,CACF,CAAC;QACF,4EAA4E;QAC5E,wEAAwE;QACxE,IACE,IAAI,CAAC,aAAa,KAAK,QAAQ;YAC/B,eAAe,KAAK,IAAI,CAAC,kBAAkB,EAC3C,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,cAA6B;QAC7C,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,cAAc,CAAC,OAAgB;QAC7B,IAAI,IAAI,CAAC,gBAAgB,KAAK,OAAO,EAAE,CAAC;YACtC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;QAChC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;IAC1B,CAAC;IAED,SAAS,CAAC,MAAqB;QAC7B,IAAI,CAAC,WAAW,CACd,mBAAmB,CACjB,IAAI,CAAC,aAAa,EAClB,EAAE,MAAM,EAAE,EACV,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CACvD,CACF,CAAC;IACJ,CAAC;IAED,SAAS,GAAG,CAAC,QAAyB,EAAgB,EAAE,CACtD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAE7B,WAAW,CAAC,IAAqB;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC;QACpC,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;IAC1B,CAAC;CACF","sourcesContent":["import { removeNativeSubscriptionRestoreProvisioningAttempt } from \"../../workflows/organizations/createOrganization\";\nimport {\n  bootstrapRootContainer,\n  registerIdentity as registerIdentityWorkflow,\n} from \"../../workflows/registration\";\nimport type { ClearRemoteSyncStateResult } from \"../../workflows/sync\";\nimport { createListenerSet } from \"../listenerSet\";\nimport {\n  emptySessionSnapshot,\n  mergeSessionContext,\n  sessionSnapshotsEqual,\n} from \"./sessionContext\";\nimport {\n  registrationKeyAlreadyBound,\n  requireRegistrationIdentityPinner,\n  requireUserIdentityAvailable,\n  SessionIdentityAcknowledgments,\n} from \"./sessionIdentityTrust\";\nimport { userSessionsFromResponse } from \"./sessionListing\";\nimport { refuseSessionLogin } from \"./sessionLoginRefusal\";\nimport { createSessionOrganization } from \"./sessionOrganizationCreation\";\nimport {\n  clearSessionRemoteSyncState,\n  recoverPurgedSessionOrganization,\n} from \"./sessionPurgeRecovery\";\nimport {\n  acknowledgedSessionRoot,\n  commitSessionRootAcknowledgment,\n} from \"./sessionRootAuthority\";\nimport type {\n  CreateOrganizationOptions,\n  RegisterIdentityOptions,\n  Session,\n  SessionContext,\n  SessionCreateOrganizationResult,\n  SessionDependencies,\n  SessionListener,\n  SessionRecoverOrganizationResult,\n  SessionRegistrationRefusal,\n  SessionRegistrationResult,\n  SessionSnapshot,\n  UserSession,\n} from \"./sessionTypes\";\n\nexport function createSession(dependencies: SessionDependencies): Session {\n  return new SessionService(dependencies);\n}\n\nclass SessionService implements Session {\n  private readonly identityAcknowledgments =\n    new SessionIdentityAcknowledgments();\n  private readonly listeners = createListenerSet();\n  private syncEnabledValue = true;\n  private snapshotValue = emptySessionSnapshot();\n\n  constructor(private readonly dependencies: SessionDependencies) {}\n\n  get authToken(): string | null {\n    return this.snapshotValue.authToken;\n  }\n\n  get containerId(): string | null {\n    return this.snapshotValue.containerId;\n  }\n\n  get defaultOrganizationId(): string | null {\n    return this.snapshotValue.defaultOrganizationId;\n  }\n\n  get isAuthenticated(): boolean {\n    return this.snapshotValue.isAuthenticated;\n  }\n\n  get isRoot(): boolean {\n    return this.snapshotValue.isRoot;\n  }\n\n  get organizationId(): string | null {\n    return this.snapshotValue.organizationId;\n  }\n\n  get snapshot(): SessionSnapshot {\n    return this.snapshotValue;\n  }\n\n  get syncEnabled(): boolean {\n    return this.syncEnabledValue;\n  }\n\n  get userId(): string | null {\n    return this.snapshotValue.userId;\n  }\n\n  get userIdAcknowledged(): boolean {\n    return this.identityAcknowledgments.isAcknowledged(\n      this.snapshotValue.userId,\n      this.dependencies.identity.snapshot.signingFingerprint,\n    );\n  }\n\n  async bootstrapLocalRootContainer(): Promise<{\n    containerId: string;\n    created: boolean;\n  }> {\n    // Recovery can request local bootstrap after login. Preserve the root\n    // acknowledged by that session instead of replacing it with a local id.\n    const acknowledgedRoot = acknowledgedSessionRoot(\n      this,\n      this.dependencies.identity.snapshot.signingFingerprint,\n    );\n    if (this.isAuthenticated && acknowledgedRoot) {\n      return { containerId: acknowledgedRoot, created: false };\n    }\n    const result = await bootstrapRootContainer(\n      this.dependencies.database.requireExecSql(\"bootstrapLocalRootContainer\"),\n    );\n    this.setContainerId(result.containerId);\n    if (result.created) {\n      this.dependencies.log(\"Root container created\");\n    }\n    return result;\n  }\n\n  async listSessions(): Promise<UserSession[]> {\n    return userSessionsFromResponse(await this.dependencies.api.listSessions());\n  }\n\n  async clearRemoteSyncState(\n    organizationId: string,\n  ): Promise<ClearRemoteSyncStateResult> {\n    return clearSessionRemoteSyncState(this.dependencies, this, organizationId);\n  }\n\n  async destroySession(sessionId: string): Promise<boolean> {\n    const response = await this.dependencies.api.destroySession(sessionId);\n    return response?.message === \"ok\";\n  }\n\n  async login(challengeHex?: string | undefined): Promise<boolean> {\n    const signingKeyPair =\n      this.dependencies.identity.requireSigningKeyPair(\"login\");\n    const fingerprint =\n      (await this.dependencies.identity.refreshSigningFingerprint()) ?? null;\n\n    if (!fingerprint) {\n      return false;\n    }\n    // A refusal below clears the session it is evidence against; a session\n    // another login committed meanwhile is not that session and stays.\n    const snapshotAtStart = this.snapshotValue;\n    const identitySnapshot = this.dependencies.identity.snapshot;\n    const encapsulationKeyPair = identitySnapshot.encapsulationKeyPair;\n    if (!encapsulationKeyPair) {\n      return false;\n    }\n    if (identitySnapshot.signingKeyPair !== signingKeyPair) {\n      return false;\n    }\n    const pinLocalUserIdentity = requireUserIdentityAvailable(\n      this.dependencies.onUserIdentityAvailable,\n      \"Login\",\n    );\n\n    this.dependencies.log(\n      challengeHex ? \"Authenticating with challenge...\" : \"Authenticating...\",\n    );\n    const authentication = challengeHex\n      ? await this.dependencies.api.authenticateWithChallenge(\n          fingerprint,\n          signingKeyPair.signingPrivateKey,\n          challengeHex,\n        )\n      : await this.dependencies.api.authenticate(\n          fingerprint,\n          signingKeyPair.signingPrivateKey,\n        );\n\n    if (this.dependencies.identity.snapshot !== identitySnapshot) {\n      return false;\n    }\n\n    if (!authentication) {\n      this.logout();\n      this.dependencies.log(\"Authentication failed\");\n      return false;\n    }\n\n    try {\n      this.identityAcknowledgments.assertMatches(\n        authentication.userId,\n        fingerprint,\n      );\n      await pinLocalUserIdentity(authentication.userId, {\n        encapsulationPublicKey: encapsulationKeyPair.publicKey,\n        signingKeyFingerprint: fingerprint,\n        signingPublicKey: signingKeyPair.signingPublicKey,\n      });\n      if (this.dependencies.identity.snapshot !== identitySnapshot)\n        return false;\n      this.identityAcknowledgments.remember(authentication.userId, fingerprint);\n    } catch (error) {\n      return refuseSessionLogin(error, authentication.userId, {\n        clear: () => this.logout(),\n        report: this.dependencies.reportSecurityIncident,\n      });\n    }\n    // A changed root for this identity+org is refused before the token is\n    // usable. Decision and commit are one synchronous step against the live\n    // snapshot (no await in between); the refusal clears the prior session in\n    // that same step and then reports its own incident.\n    await commitSessionRootAcknowledgment({\n      context: {\n        authToken: authentication.token,\n        defaultOrganizationId: authentication.organizationId,\n        isAuthenticated: true,\n        isRoot: authentication.isRoot,\n        organizationId: authentication.organizationId,\n        userId: authentication.userId,\n      },\n      onRefused: () => {\n        if (this.snapshotValue === snapshotAtStart) this.logout();\n      },\n      reporter: this.dependencies.reportSecurityIncident,\n      root: authentication,\n      session: this,\n      signingFingerprint: fingerprint,\n    });\n    this.dependencies.log(\"Authentication successful\");\n    return true;\n  }\n\n  logout(): void {\n    this.setContext({ authToken: null, isAuthenticated: false, isRoot: false });\n  }\n\n  async logoutRemote(): Promise<boolean> {\n    const identitySnapshot = this.dependencies.identity.snapshot;\n    try {\n      if (!this.authToken) {\n        return true;\n      }\n\n      const response = await this.dependencies.api.logout();\n      return response?.message === \"ok\";\n    } finally {\n      if (this.dependencies.identity.snapshot === identitySnapshot) {\n        this.logout();\n      }\n    }\n  }\n\n  async registerIdentity(\n    options?: RegisterIdentityOptions,\n  ): Promise<SessionRegistrationResult | SessionRegistrationRefusal | null> {\n    const containerId = this.containerId;\n    if (!containerId) {\n      this.dependencies.log(\n        \"Registration skipped: container id is unavailable\",\n      );\n      return null;\n    }\n\n    const identitySnapshot = this.dependencies.identity.snapshot;\n    const signingKeyPair = identitySnapshot.signingKeyPair;\n    if (!signingKeyPair) {\n      this.dependencies.log(\"Registration skipped: signing key is unavailable\");\n      return null;\n    }\n\n    const encapsulationKeyPair = identitySnapshot.encapsulationKeyPair;\n    if (!encapsulationKeyPair) {\n      this.dependencies.log(\n        \"Registration skipped: encapsulation key is unavailable\",\n      );\n      return null;\n    }\n\n    const dbClient = this.dependencies.database.client;\n    if (!dbClient) {\n      this.dependencies.log(\n        \"Registration skipped: database client is unavailable\",\n      );\n      return null;\n    }\n    const pinLocalUserIdentity = requireRegistrationIdentityPinner({\n      identity: this.dependencies.identity,\n      identitySnapshot,\n      onUserIdentityAvailable: this.dependencies.onUserIdentityAvailable,\n    });\n    const keyBound = await registrationKeyAlreadyBound(\n      this.dependencies,\n      identitySnapshot.signingFingerprint,\n    );\n    if (this.dependencies.identity.snapshot !== identitySnapshot) return null;\n    if (keyBound) return keyBound;\n\n    let response: Awaited<ReturnType<typeof registerIdentityWorkflow>>;\n    try {\n      response = await registerIdentityWorkflow({\n        apiClient: this.dependencies.api,\n        containerId,\n        dbClient,\n        documentProjectors: this.dependencies.documentProjectors,\n        encapsulationKeyPair,\n        isIdentityCurrent: () =>\n          this.dependencies.identity.snapshot === identitySnapshot,\n        log: this.dependencies.log,\n        logError: this.dependencies.logError,\n        organizationProfileName: options?.organizationProfileName,\n        pinLocalUserIdentity,\n        provisionedSystemContainers:\n          this.dependencies.provisionedSystemContainers,\n        rosterProfileNickname: options?.rosterProfileNickname,\n        signingKeyFingerprint: identitySnapshot.signingFingerprint,\n        signingKeyPair,\n      });\n    } catch (error: unknown) {\n      this.dependencies.logError(\"Identity registration failed\", error);\n      throw error;\n    }\n\n    if (this.dependencies.identity.snapshot !== identitySnapshot) {\n      return null;\n    }\n\n    if (!response) {\n      this.dependencies.log(\"Registration failed\");\n      return null;\n    }\n\n    // The workflow pinned `response.userId` once the server confirmed it,\n    // under the same currency check as above.\n    await commitSessionRootAcknowledgment({\n      context: {\n        containerId: response.rootContainerId,\n        defaultOrganizationId: response.organizationId,\n        organizationId: response.organizationId,\n        userId: response.userId,\n      },\n      reporter: this.dependencies.reportSecurityIncident,\n      root: response,\n      session: this,\n      signingFingerprint: identitySnapshot.signingFingerprint,\n    });\n\n    return {\n      challenge: response.challenge,\n      containerId: response.rootContainerId,\n      organizationId: response.organizationId,\n      userId: response.userId,\n    };\n  }\n\n  async createOrganization(\n    options?: CreateOrganizationOptions,\n    replacesOrganizationId?: string,\n    nativeSubscriptionRestore?: boolean,\n  ): Promise<SessionCreateOrganizationResult | null> {\n    const identitySnapshot = this.dependencies.identity.snapshot;\n    const userId = this.userId;\n    const response = await createSessionOrganization(this.dependencies, {\n      nativeSubscriptionRestore,\n      options,\n      replacesOrganizationId,\n      userId,\n    });\n    if (\n      !response ||\n      !userId ||\n      this.userId !== userId ||\n      this.dependencies.identity.snapshot !== identitySnapshot\n    )\n      return null;\n    await commitSessionRootAcknowledgment({\n      reporter: this.dependencies.reportSecurityIncident,\n      root: {\n        userId,\n        organizationId: response.organizationId,\n        rootContainerId: response.containerId,\n      },\n      session: this,\n      signingFingerprint: identitySnapshot.signingFingerprint,\n    });\n    return response;\n  }\n\n  prepareNativeSubscriptionRestoreOrganization(\n    options?: CreateOrganizationOptions,\n  ): Promise<SessionCreateOrganizationResult | null> {\n    return this.createOrganization(options, undefined, true);\n  }\n\n  async completeNativeSubscriptionRestoreOrganization(\n    organizationId: string,\n  ): Promise<boolean> {\n    const userId = this.userId;\n    const dbClient = this.dependencies.database.client;\n    const identitySnapshot = this.dependencies.identity.snapshot;\n    if (!userId || !dbClient) return false;\n    return removeNativeSubscriptionRestoreProvisioningAttempt({\n      canCommit: () =>\n        this.userId === userId &&\n        this.dependencies.identity.snapshot === identitySnapshot,\n      dbClient,\n      organizationId,\n      userId,\n    });\n  }\n\n  async recoverPurgedOrganization(\n    organizationId: string,\n    options?: CreateOrganizationOptions,\n  ): Promise<SessionRecoverOrganizationResult | null> {\n    return recoverPurgedSessionOrganization(\n      this.dependencies,\n      this,\n      organizationId,\n      options,\n    );\n  }\n\n  setAuthToken(authToken: string | null): void {\n    this.setSnapshot({ ...this.snapshotValue, authToken });\n  }\n\n  setContainerId(containerId: string | null): void {\n    this.setSnapshot({ ...this.snapshotValue, containerId });\n  }\n\n  setContext(context: SessionContext): void {\n    const wasAcknowledged = this.userIdAcknowledged;\n    this.identityAcknowledgments.remember(\n      context.userId,\n      this.dependencies.identity.snapshot.signingFingerprint,\n    );\n    const previous = this.snapshotValue;\n    this.setSnapshot(\n      mergeSessionContext(\n        previous,\n        context,\n        this.dependencies.identity.snapshot.signingFingerprint,\n      ),\n    );\n    // Acknowledging an already-held userId changes `userIdAcknowledged` without\n    // changing the snapshot; persistence subscribers must still observe it.\n    if (\n      this.snapshotValue === previous &&\n      wasAcknowledged !== this.userIdAcknowledged\n    ) {\n      this.listeners.notify();\n    }\n  }\n\n  setOrganizationId(organizationId: string | null): void {\n    this.setSnapshot({ ...this.snapshotValue, organizationId });\n  }\n\n  setSyncEnabled(enabled: boolean): void {\n    if (this.syncEnabledValue === enabled) {\n      return;\n    }\n    this.syncEnabledValue = enabled;\n    this.listeners.notify();\n  }\n\n  setUserId(userId: string | null): void {\n    this.setSnapshot(\n      mergeSessionContext(\n        this.snapshotValue,\n        { userId },\n        this.dependencies.identity.snapshot.signingFingerprint,\n      ),\n    );\n  }\n\n  subscribe = (listener: SessionListener): (() => void) =>\n    this.listeners.subscribe(listener);\n\n  private setSnapshot(next: SessionSnapshot): void {\n    const previous = this.snapshotValue;\n    if (previous.authToken !== next.authToken) {\n      this.dependencies.api.setAuthToken(next.authToken);\n    }\n\n    if (sessionSnapshotsEqual(previous, next)) {\n      return;\n    }\n\n    this.snapshotValue = next;\n    this.listeners.notify();\n  }\n}\n"]}

package/client/session/sessionContext.js

@@ -0,0 +1,45 @@
+import { restoreSessionRoots } from "./sessionRootAuthority.js";
+export function mergeSessionContext(previous, context, signingFingerprint) {
+    const rootAcknowledgments = restoreSessionRoots(previous.rootAcknowledgments, context.rootAcknowledgments, signingFingerprint, "userId" in context ? (context.userId ?? null) : previous.userId);
+    return {
+        rootAcknowledgments,
+        authToken: "authToken" in context ? (context.authToken ?? null) : previous.authToken,
+        containerId: "containerId" in context
+            ? (context.containerId ?? null)
+            : previous.containerId,
+        defaultOrganizationId: "defaultOrganizationId" in context
+            ? (context.defaultOrganizationId ?? null)
+            : previous.defaultOrganizationId,
+        isAuthenticated: "isAuthenticated" in context
+            ? (context.isAuthenticated ?? false)
+            : previous.isAuthenticated,
+        isRoot: "isRoot" in context ? (context.isRoot ?? false) : previous.isRoot,
+        organizationId: "organizationId" in context
+            ? (context.organizationId ?? null)
+            : previous.organizationId,
+        userId: "userId" in context ? (context.userId ?? null) : previous.userId,
+    };
+}
+export function sessionSnapshotsEqual(previous, next) {
+    return (previous.rootAcknowledgments === next.rootAcknowledgments &&
+        previous.authToken === next.authToken &&
+        previous.containerId === next.containerId &&
+        previous.defaultOrganizationId === next.defaultOrganizationId &&
+        previous.isAuthenticated === next.isAuthenticated &&
+        previous.isRoot === next.isRoot &&
+        previous.organizationId === next.organizationId &&
+        previous.userId === next.userId);
+}
+export function emptySessionSnapshot() {
+    return {
+        rootAcknowledgments: [],
+        authToken: null,
+        containerId: null,
+        defaultOrganizationId: null,
+        isAuthenticated: false,
+        isRoot: false,
+        organizationId: null,
+        userId: null,
+    };
+}
+//# sourceMappingURL=sessionContext.js.map

package/client/session/sessionContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionContext.js","sourceRoot":"","sources":["sessionContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAG7D,MAAM,UAAU,mBAAmB,CACjC,QAAyB,EACzB,OAAuB,EACvB,kBAAiC;IAEjC,MAAM,mBAAmB,GAAG,mBAAmB,CAC7C,QAAQ,CAAC,mBAAmB,EAC5B,OAAO,CAAC,mBAAmB,EAC3B,kBAAkB,EAClB,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CACjE,CAAC;IACF,OAAO;QACL,mBAAmB;QACnB,SAAS,EACP,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS;QAC3E,WAAW,EACT,aAAa,IAAI,OAAO;YACtB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;YAC/B,CAAC,CAAC,QAAQ,CAAC,WAAW;QAC1B,qBAAqB,EACnB,uBAAuB,IAAI,OAAO;YAChC,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,IAAI,IAAI,CAAC;YACzC,CAAC,CAAC,QAAQ,CAAC,qBAAqB;QACpC,eAAe,EACb,iBAAiB,IAAI,OAAO;YAC1B,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,IAAI,KAAK,CAAC;YACpC,CAAC,CAAC,QAAQ,CAAC,eAAe;QAC9B,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM;QACzE,cAAc,EACZ,gBAAgB,IAAI,OAAO;YACzB,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;YAClC,CAAC,CAAC,QAAQ,CAAC,cAAc;QAC7B,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM;KACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAyB,EACzB,IAAqB;IAErB,OAAO,CACL,QAAQ,CAAC,mBAAmB,KAAK,IAAI,CAAC,mBAAmB;QACzD,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;QACrC,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW;QACzC,QAAQ,CAAC,qBAAqB,KAAK,IAAI,CAAC,qBAAqB;QAC7D,QAAQ,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe;QACjD,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAC/B,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,cAAc;QAC/C,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,mBAAmB,EAAE,EAAE;QACvB,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;QACjB,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,KAAK;QACtB,MAAM,EAAE,KAAK;QACb,cAAc,EAAE,IAAI;QACpB,MAAM,EAAE,IAAI;KACb,CAAC;AACJ,CAAC","sourcesContent":["import { restoreSessionRoots } from \"./sessionRootAuthority\";\nimport type { SessionContext, SessionSnapshot } from \"./sessionTypes\";\n\nexport function mergeSessionContext(\n  previous: SessionSnapshot,\n  context: SessionContext,\n  signingFingerprint: string | null,\n): SessionSnapshot {\n  const rootAcknowledgments = restoreSessionRoots(\n    previous.rootAcknowledgments,\n    context.rootAcknowledgments,\n    signingFingerprint,\n    \"userId\" in context ? (context.userId ?? null) : previous.userId,\n  );\n  return {\n    rootAcknowledgments,\n    authToken:\n      \"authToken\" in context ? (context.authToken ?? null) : previous.authToken,\n    containerId:\n      \"containerId\" in context\n        ? (context.containerId ?? null)\n        : previous.containerId,\n    defaultOrganizationId:\n      \"defaultOrganizationId\" in context\n        ? (context.defaultOrganizationId ?? null)\n        : previous.defaultOrganizationId,\n    isAuthenticated:\n      \"isAuthenticated\" in context\n        ? (context.isAuthenticated ?? false)\n        : previous.isAuthenticated,\n    isRoot: \"isRoot\" in context ? (context.isRoot ?? false) : previous.isRoot,\n    organizationId:\n      \"organizationId\" in context\n        ? (context.organizationId ?? null)\n        : previous.organizationId,\n    userId: \"userId\" in context ? (context.userId ?? null) : previous.userId,\n  };\n}\n\nexport function sessionSnapshotsEqual(\n  previous: SessionSnapshot,\n  next: SessionSnapshot,\n): boolean {\n  return (\n    previous.rootAcknowledgments === next.rootAcknowledgments &&\n    previous.authToken === next.authToken &&\n    previous.containerId === next.containerId &&\n    previous.defaultOrganizationId === next.defaultOrganizationId &&\n    previous.isAuthenticated === next.isAuthenticated &&\n    previous.isRoot === next.isRoot &&\n    previous.organizationId === next.organizationId &&\n    previous.userId === next.userId\n  );\n}\n\nexport function emptySessionSnapshot(): SessionSnapshot {\n  return {\n    rootAcknowledgments: [],\n    authToken: null,\n    containerId: null,\n    defaultOrganizationId: null,\n    isAuthenticated: false,\n    isRoot: false,\n    organizationId: null,\n    userId: null,\n  };\n}\n"]}

package/client/session/sessionIdentityTrust.d.ts

@@ -0,0 +1,35 @@
+import type { LocalUserIdentityCandidate } from "../../data/trustedUserIdentity/index.js";
+import type { Identity, IdentitySnapshot } from "../identity.js";
+/** Successful auth and fingerprint-bound host restores establish this binding. */
+export declare class SessionIdentityAcknowledgments {
+    private readonly userIdsByFingerprint;
+    assertMatches(userId: string, fingerprint: string): void;
+    /** True only for a user ID the server acknowledged for this fingerprint. */
+    isAcknowledged(userId: string | null | undefined, fingerprint: string | null): boolean;
+    remember(userId: string | null | undefined, fingerprint: string | null): void;
+}
+export type UserIdentityAvailable = (userId: string, candidate: LocalUserIdentityCandidate) => Promise<void>;
+export declare function requireUserIdentityAvailable(onUserIdentityAvailable: UserIdentityAvailable | undefined, operation: string): UserIdentityAvailable;
+export declare function requireRegistrationIdentityPinner(input: {
+    readonly identity: Identity;
+    readonly identitySnapshot: IdentitySnapshot;
+    readonly onUserIdentityAvailable?: UserIdentityAvailable | undefined;
+}): UserIdentityAvailable;
+/** Registration made no server request; try login with the bound identity. */
+export interface SessionRegistrationRefusal {
+    readonly status: "identity-already-bound";
+    readonly userId: string;
+}
+export type BoundUserIdLookup = (signingKeyFingerprint: string) => Promise<string | null>;
+/**
+ * A key this device already binds to a user belongs to that user: the trust
+ * store holds one user per key, so a new registration's pin would be refused
+ * only after the server had created the account. Registration declines before
+ * touching the server instead; like a lost or conflicting registration, the
+ * caller then proves ownership by logging in. After an environment reset this
+ * requires clearing the device's local data.
+ */
+export declare function registrationKeyAlreadyBound(dependencies: {
+    readonly boundUserIdForSigningKey?: BoundUserIdLookup | undefined;
+    readonly log: (message: string) => void;
+}, signingFingerprint: string | null): Promise<SessionRegistrationRefusal | null>;

package/client/session/sessionIdentityTrust.js

@@ -0,0 +1,62 @@
+import { KeyingVerificationError } from "../../internal/crypto/index.js";
+/** Successful auth and fingerprint-bound host restores establish this binding. */
+export class SessionIdentityAcknowledgments {
+    userIdsByFingerprint = new Map();
+    assertMatches(userId, fingerprint) {
+        const acknowledgedUserId = this.userIdsByFingerprint.get(fingerprint);
+        if (acknowledgedUserId && acknowledgedUserId !== userId) {
+            throw new KeyingVerificationError("object_mismatch", "Login user ID differs from the acknowledged identity");
+        }
+    }
+    /** True only for a user ID the server acknowledged for this fingerprint. */
+    isAcknowledged(userId, fingerprint) {
+        return (!!userId &&
+            !!fingerprint &&
+            this.userIdsByFingerprint.get(fingerprint) === userId);
+    }
+    remember(userId, fingerprint) {
+        if (!userId || !fingerprint)
+            return;
+        this.assertMatches(userId, fingerprint);
+        this.userIdsByFingerprint.set(fingerprint, userId);
+    }
+}
+export function requireUserIdentityAvailable(onUserIdentityAvailable, operation) {
+    if (!onUserIdentityAvailable) {
+        throw new KeyingVerificationError("missing_dependency", `${operation} requires the durable local identity trust service`);
+    }
+    return onUserIdentityAvailable;
+}
+export function requireRegistrationIdentityPinner(input) {
+    const onUserIdentityAvailable = requireUserIdentityAvailable(input.onUserIdentityAvailable, "Registration");
+    return async (userId, candidate) => {
+        await onUserIdentityAvailable(userId, {
+            ...candidate,
+            signingKeyFingerprint: input.identitySnapshot.signingFingerprint,
+        });
+        if (input.identity.snapshot !== input.identitySnapshot) {
+            throw new KeyingVerificationError("object_mismatch", "Local identity changed during registration trust establishment");
+        }
+    };
+}
+/**
+ * A key this device already binds to a user belongs to that user: the trust
+ * store holds one user per key, so a new registration's pin would be refused
+ * only after the server had created the account. Registration declines before
+ * touching the server instead; like a lost or conflicting registration, the
+ * caller then proves ownership by logging in. After an environment reset this
+ * requires clearing the device's local data.
+ */
+export async function registrationKeyAlreadyBound(dependencies, signingFingerprint) {
+    if (!dependencies.boundUserIdForSigningKey) {
+        throw new KeyingVerificationError("missing_dependency", "Registration requires the durable local identity trust service");
+    }
+    if (!signingFingerprint)
+        return null;
+    const boundUserId = await dependencies.boundUserIdForSigningKey(signingFingerprint);
+    if (!boundUserId)
+        return null;
+    dependencies.log(`Registration skipped: this signing key is already bound to ${boundUserId}`);
+    return { status: "identity-already-bound", userId: boundUserId };
+}
+//# sourceMappingURL=sessionIdentityTrust.js.map

package/client/session/sessionIdentityTrust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionIdentityTrust.js","sourceRoot":"","sources":["sessionIdentityTrust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAI5D,kFAAkF;AAClF,MAAM,OAAO,8BAA8B;IACxB,oBAAoB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElE,aAAa,CAAC,MAAc,EAAE,WAAmB;QAC/C,MAAM,kBAAkB,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,kBAAkB,IAAI,kBAAkB,KAAK,MAAM,EAAE,CAAC;YACxD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,sDAAsD,CACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,cAAc,CACZ,MAAiC,EACjC,WAA0B;QAE1B,OAAO,CACL,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,WAAW;YACb,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,MAAM,CACtD,CAAC;IACJ,CAAC;IAED,QAAQ,CACN,MAAiC,EACjC,WAA0B;QAE1B,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW;YAAE,OAAO;QACpC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACxC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;CACF;AAOD,MAAM,UAAU,4BAA4B,CAC1C,uBAA0D,EAC1D,SAAiB;IAEjB,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC7B,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,GAAG,SAAS,oDAAoD,CACjE,CAAC;IACJ,CAAC;IACD,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAIjD;IACC,MAAM,uBAAuB,GAAG,4BAA4B,CAC1D,KAAK,CAAC,uBAAuB,EAC7B,cAAc,CACf,CAAC;IACF,OAAO,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;QACjC,MAAM,uBAAuB,CAAC,MAAM,EAAE;YACpC,GAAG,SAAS;YACZ,qBAAqB,EAAE,KAAK,CAAC,gBAAgB,CAAC,kBAAkB;SACjE,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB,EAAE,CAAC;YACvD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,gEAAgE,CACjE,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAYD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,YAGC,EACD,kBAAiC;IAEjC,IAAI,CAAC,YAAY,CAAC,wBAAwB,EAAE,CAAC;QAC3C,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,WAAW,GACf,MAAM,YAAY,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAClE,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,YAAY,CAAC,GAAG,CACd,8DAA8D,WAAW,EAAE,CAC5E,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACnE,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type { LocalUserIdentityCandidate } from \"../../data/trustedUserIdentity\";\nimport type { Identity, IdentitySnapshot } from \"../identity\";\n\n/** Successful auth and fingerprint-bound host restores establish this binding. */\nexport class SessionIdentityAcknowledgments {\n  private readonly userIdsByFingerprint = new Map<string, string>();\n\n  assertMatches(userId: string, fingerprint: string): void {\n    const acknowledgedUserId = this.userIdsByFingerprint.get(fingerprint);\n    if (acknowledgedUserId && acknowledgedUserId !== userId) {\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"Login user ID differs from the acknowledged identity\",\n      );\n    }\n  }\n\n  /** True only for a user ID the server acknowledged for this fingerprint. */\n  isAcknowledged(\n    userId: string | null | undefined,\n    fingerprint: string | null,\n  ): boolean {\n    return (\n      !!userId &&\n      !!fingerprint &&\n      this.userIdsByFingerprint.get(fingerprint) === userId\n    );\n  }\n\n  remember(\n    userId: string | null | undefined,\n    fingerprint: string | null,\n  ): void {\n    if (!userId || !fingerprint) return;\n    this.assertMatches(userId, fingerprint);\n    this.userIdsByFingerprint.set(fingerprint, userId);\n  }\n}\n\nexport type UserIdentityAvailable = (\n  userId: string,\n  candidate: LocalUserIdentityCandidate,\n) => Promise<void>;\n\nexport function requireUserIdentityAvailable(\n  onUserIdentityAvailable: UserIdentityAvailable | undefined,\n  operation: string,\n): UserIdentityAvailable {\n  if (!onUserIdentityAvailable) {\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      `${operation} requires the durable local identity trust service`,\n    );\n  }\n  return onUserIdentityAvailable;\n}\n\nexport function requireRegistrationIdentityPinner(input: {\n  readonly identity: Identity;\n  readonly identitySnapshot: IdentitySnapshot;\n  readonly onUserIdentityAvailable?: UserIdentityAvailable | undefined;\n}): UserIdentityAvailable {\n  const onUserIdentityAvailable = requireUserIdentityAvailable(\n    input.onUserIdentityAvailable,\n    \"Registration\",\n  );\n  return async (userId, candidate) => {\n    await onUserIdentityAvailable(userId, {\n      ...candidate,\n      signingKeyFingerprint: input.identitySnapshot.signingFingerprint,\n    });\n    if (input.identity.snapshot !== input.identitySnapshot) {\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"Local identity changed during registration trust establishment\",\n      );\n    }\n  };\n}\n\n/** Registration made no server request; try login with the bound identity. */\nexport interface SessionRegistrationRefusal {\n  readonly status: \"identity-already-bound\";\n  readonly userId: string;\n}\n\nexport type BoundUserIdLookup = (\n  signingKeyFingerprint: string,\n) => Promise<string | null>;\n\n/**\n * A key this device already binds to a user belongs to that user: the trust\n * store holds one user per key, so a new registration's pin would be refused\n * only after the server had created the account. Registration declines before\n * touching the server instead; like a lost or conflicting registration, the\n * caller then proves ownership by logging in. After an environment reset this\n * requires clearing the device's local data.\n */\nexport async function registrationKeyAlreadyBound(\n  dependencies: {\n    readonly boundUserIdForSigningKey?: BoundUserIdLookup | undefined;\n    readonly log: (message: string) => void;\n  },\n  signingFingerprint: string | null,\n): Promise<SessionRegistrationRefusal | null> {\n  if (!dependencies.boundUserIdForSigningKey) {\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      \"Registration requires the durable local identity trust service\",\n    );\n  }\n  if (!signingFingerprint) return null;\n  const boundUserId =\n    await dependencies.boundUserIdForSigningKey(signingFingerprint);\n  if (!boundUserId) return null;\n  dependencies.log(\n    `Registration skipped: this signing key is already bound to ${boundUserId}`,\n  );\n  return { status: \"identity-already-bound\", userId: boundUserId };\n}\n"]}

package/client/session/sessionListing.js

@@ -0,0 +1,16 @@
+/** Projects the server's session listing onto the public SDK shape. */
+export function userSessionsFromResponse(response) {
+    if (!response) {
+        return [];
+    }
+    return response.sessions.map(({ createdAt, id, ipAddresses, isCurrent, lastActiveAt, lastActiveIp, signingKeyFingerprint, }) => ({
+        createdAt,
+        id,
+        ipAddresses,
+        isCurrent,
+        lastActiveAt,
+        lastActiveIp,
+        signingKeyFingerprint,
+    }));
+}
+//# sourceMappingURL=sessionListing.js.map

package/client/session/sessionListing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionListing.js","sourceRoot":"","sources":["sessionListing.ts"],"names":[],"mappings":"AAGA,uEAAuE;AACvE,MAAM,UAAU,wBAAwB,CACtC,QAAwD;IAExD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAC1B,CAAC,EACC,SAAS,EACT,EAAE,EACF,WAAW,EACX,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,qBAAqB,GACtB,EAAE,EAAE,CAAC,CAAC;QACL,SAAS;QACT,EAAE;QACF,WAAW;QACX,SAAS;QACT,YAAY;QACZ,YAAY;QACZ,qBAAqB;KACtB,CAAC,CACH,CAAC;AACJ,CAAC","sourcesContent":["import type { ApiClient } from \"@tearleads/api-client\";\nimport type { UserSession } from \"./sessionTypes\";\n\n/** Projects the server's session listing onto the public SDK shape. */\nexport function userSessionsFromResponse(\n  response: Awaited<ReturnType<ApiClient[\"listSessions\"]>>,\n): UserSession[] {\n  if (!response) {\n    return [];\n  }\n  return response.sessions.map(\n    ({\n      createdAt,\n      id,\n      ipAddresses,\n      isCurrent,\n      lastActiveAt,\n      lastActiveIp,\n      signingKeyFingerprint,\n    }) => ({\n      createdAt,\n      id,\n      ipAddresses,\n      isCurrent,\n      lastActiveAt,\n      lastActiveIp,\n      signingKeyFingerprint,\n    }),\n  );\n}\n"]}

package/client/session/sessionLoginRefusal.js

@@ -0,0 +1,16 @@
+import { reportAndRethrowKeyingVerificationError } from "../../data/keyingProjectionVerification/error.js";
+/**
+ * A server answering this identity with another account, or an identity
+ * whose durable pin no longer matches, is evidence, not a login failure: the
+ * session is cleared, the keying error is recorded, and the error propagates.
+ */
+export async function refuseSessionLogin(error, userId, session) {
+    session.clear();
+    await reportAndRethrowKeyingVerificationError(error, session.report, {
+        objectId: userId,
+        objectKind: "user",
+        operation: "session.login",
+    });
+    throw error;
+}
+//# sourceMappingURL=sessionLoginRefusal.js.map

package/client/session/sessionLoginRefusal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionLoginRefusal.js","sourceRoot":"","sources":["sessionLoginRefusal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AAGxG;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAAc,EACd,MAAc,EACd,OAGC;IAED,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,MAAM,uCAAuC,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;QACnE,QAAQ,EAAE,MAAM;QAChB,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE,eAAe;KAC3B,CAAC,CAAC;IACH,MAAM,KAAK,CAAC;AACd,CAAC","sourcesContent":["import { reportAndRethrowKeyingVerificationError } from \"../../data/keyingProjectionVerification/error\";\nimport type { SecurityIncidentReporter } from \"../../data/securityIncidents\";\n\n/**\n * A server answering this identity with another account, or an identity\n * whose durable pin no longer matches, is evidence, not a login failure: the\n * session is cleared, the keying error is recorded, and the error propagates.\n */\nexport async function refuseSessionLogin(\n  error: unknown,\n  userId: string,\n  session: {\n    readonly clear: () => void;\n    readonly report: SecurityIncidentReporter | undefined;\n  },\n): Promise<never> {\n  session.clear();\n  await reportAndRethrowKeyingVerificationError(error, session.report, {\n    objectId: userId,\n    objectKind: \"user\",\n    operation: \"session.login\",\n  });\n  throw error;\n}\n"]}

package/client/session/sessionOrganizationCreation.js

@@ -0,0 +1,53 @@
+import { createOrganization as createOrganizationWorkflow } from "../../workflows/organizations/createOrganization.js";
+export async function createSessionOrganization(dependencies, input) {
+    if (!input.userId) {
+        dependencies.log("Create organization skipped: user id is unavailable");
+        return null;
+    }
+    const identitySnapshot = dependencies.identity.snapshot;
+    const { encapsulationKeyPair, signingKeyPair } = identitySnapshot;
+    if (!signingKeyPair || !encapsulationKeyPair) {
+        dependencies.log("Create organization skipped: identity keys are unavailable");
+        return null;
+    }
+    const dbClient = dependencies.database.client;
+    if (!dbClient) {
+        dependencies.log("Create organization skipped: database client is unavailable");
+        return null;
+    }
+    let response;
+    try {
+        response = await createOrganizationWorkflow({
+            apiClient: dependencies.api,
+            dbClient,
+            documentProjectors: dependencies.documentProjectors,
+            encapsulationKeyPair,
+            isIdentityCurrent: () => dependencies.identity.snapshot === identitySnapshot,
+            log: dependencies.log,
+            logError: dependencies.logError,
+            nativeSubscriptionRestore: input.nativeSubscriptionRestore,
+            organizationProfileName: input.options?.organizationProfileName,
+            provisionedSystemContainers: dependencies.provisionedSystemContainers,
+            replacesOrganizationId: input.replacesOrganizationId,
+            rosterProfileNickname: input.options?.rosterProfileNickname,
+            signingKeyPair,
+            userId: input.userId,
+        });
+    }
+    catch (error) {
+        dependencies.logError("Organization creation failed", error);
+        throw error;
+    }
+    if (dependencies.identity.snapshot !== identitySnapshot)
+        return null;
+    if (!response) {
+        dependencies.log("Organization creation failed");
+        return null;
+    }
+    // Creating an organization does not switch the active organization.
+    return {
+        containerId: response.rootContainerId,
+        organizationId: response.organizationId,
+    };
+}
+//# sourceMappingURL=sessionOrganizationCreation.js.map

package/client/session/sessionOrganizationCreation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionOrganizationCreation.js","sourceRoot":"","sources":["sessionOrganizationCreation.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,IAAI,0BAA0B,EAAE,MAAM,kDAAkD,CAAC;AAqBpH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,YAAqD,EACrD,KAKC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,YAAY,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,GAAG,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACxD,MAAM,EAAE,oBAAoB,EAAE,cAAc,EAAE,GAAG,gBAAgB,CAAC;IAClE,IAAI,CAAC,cAAc,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC7C,YAAY,CAAC,GAAG,CACd,4DAA4D,CAC7D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,YAAY,CAAC,GAAG,CACd,6DAA6D,CAC9D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAgE,CAAC;IACrE,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,0BAA0B,CAAC;YAC1C,SAAS,EAAE,YAAY,CAAC,GAAG;YAC3B,QAAQ;YACR,kBAAkB,EAAE,YAAY,CAAC,kBAAkB;YACnD,oBAAoB;YACpB,iBAAiB,EAAE,GAAG,EAAE,CACtB,YAAY,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB;YACrD,GAAG,EAAE,YAAY,CAAC,GAAG;YACrB,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;YAC1D,uBAAuB,EAAE,KAAK,CAAC,OAAO,EAAE,uBAAuB;YAC/D,2BAA2B,EAAE,YAAY,CAAC,2BAA2B;YACrE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,qBAAqB,EAAE,KAAK,CAAC,OAAO,EAAE,qBAAqB;YAC3D,cAAc;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,YAAY,CAAC,QAAQ,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QAC7D,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,YAAY,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,YAAY,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,oEAAoE;IACpE,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,eAAe;QACrC,cAAc,EAAE,QAAQ,CAAC,cAAc;KACxC,CAAC;AACJ,CAAC","sourcesContent":["import type { ApiClient } from \"@tearleads/api-client\";\nimport type { DocumentProjectorRegistryInput } from \"../../data/documents/documentKinds\";\nimport { createOrganization as createOrganizationWorkflow } from \"../../workflows/organizations/createOrganization\";\nimport type { ProvisionedSystemContainerSpec } from \"../../workflows/registration\";\nimport type { Database } from \"../database\";\nimport type { Identity } from \"../identity\";\nimport type {\n  CreateOrganizationOptions,\n  SessionCreateOrganizationResult,\n} from \"./sessionTypes\";\n\ninterface SessionOrganizationCreationDependencies {\n  readonly api: ApiClient;\n  readonly database: Database;\n  readonly documentProjectors?: DocumentProjectorRegistryInput | undefined;\n  readonly identity: Identity;\n  readonly log: (message: string) => void;\n  readonly logError: (message: string | Error, cause?: unknown) => void;\n  readonly provisionedSystemContainers?:\n    | ReadonlyArray<ProvisionedSystemContainerSpec>\n    | undefined;\n}\n\nexport async function createSessionOrganization(\n  dependencies: SessionOrganizationCreationDependencies,\n  input: {\n    readonly nativeSubscriptionRestore?: boolean | undefined;\n    readonly options?: CreateOrganizationOptions | undefined;\n    readonly replacesOrganizationId?: string | undefined;\n    readonly userId: string | null;\n  },\n): Promise<SessionCreateOrganizationResult | null> {\n  if (!input.userId) {\n    dependencies.log(\"Create organization skipped: user id is unavailable\");\n    return null;\n  }\n\n  const identitySnapshot = dependencies.identity.snapshot;\n  const { encapsulationKeyPair, signingKeyPair } = identitySnapshot;\n  if (!signingKeyPair || !encapsulationKeyPair) {\n    dependencies.log(\n      \"Create organization skipped: identity keys are unavailable\",\n    );\n    return null;\n  }\n\n  const dbClient = dependencies.database.client;\n  if (!dbClient) {\n    dependencies.log(\n      \"Create organization skipped: database client is unavailable\",\n    );\n    return null;\n  }\n\n  let response: Awaited<ReturnType<typeof createOrganizationWorkflow>>;\n  try {\n    response = await createOrganizationWorkflow({\n      apiClient: dependencies.api,\n      dbClient,\n      documentProjectors: dependencies.documentProjectors,\n      encapsulationKeyPair,\n      isIdentityCurrent: () =>\n        dependencies.identity.snapshot === identitySnapshot,\n      log: dependencies.log,\n      logError: dependencies.logError,\n      nativeSubscriptionRestore: input.nativeSubscriptionRestore,\n      organizationProfileName: input.options?.organizationProfileName,\n      provisionedSystemContainers: dependencies.provisionedSystemContainers,\n      replacesOrganizationId: input.replacesOrganizationId,\n      rosterProfileNickname: input.options?.rosterProfileNickname,\n      signingKeyPair,\n      userId: input.userId,\n    });\n  } catch (error: unknown) {\n    dependencies.logError(\"Organization creation failed\", error);\n    throw error;\n  }\n\n  if (dependencies.identity.snapshot !== identitySnapshot) return null;\n  if (!response) {\n    dependencies.log(\"Organization creation failed\");\n    return null;\n  }\n  // Creating an organization does not switch the active organization.\n  return {\n    containerId: response.rootContainerId,\n    organizationId: response.organizationId,\n  };\n}\n"]}

package/client/session/sessionPurgeRecovery.js

@@ -0,0 +1,110 @@
+import { resolveOrganizationBillingView } from "../../workflows/organizations/billing.js";
+import { loadOrganizationReplacementFinalizationRequest, removeOrganizationProvisioningAttempt, } from "../../workflows/organizations/organizationProvisioningAttempt.js";
+import { verifyOrganizationReplacementResponse } from "../../workflows/organizations/organizationReplacementVerification.js";
+import { clearRemoteSyncState } from "../../workflows/sync/index.js";
+import { PurgedOrganizationRecoveryBillingRequiredError } from "./sessionRecoveryErrors.js";
+function requireReplacementCanSync(replacement, billing) {
+    if (!billing) {
+        throw new Error("Replacement organization billing could not be loaded");
+    }
+    if (!resolveOrganizationBillingView(billing, Date.now()).canSync) {
+        throw new PurgedOrganizationRecoveryBillingRequiredError(replacement.organizationId, billing.status, replacement.containerId);
+    }
+}
+export async function clearSessionRemoteSyncState(dependencies, session, organizationId) {
+    const execSql = dependencies.database.requireExecSql("clearRemoteSyncState");
+    const result = await clearRemoteSyncState(execSql, {
+        organizationId,
+    });
+    dependencies.api.clearWriterProjectionCaches();
+    if (session.organizationId === organizationId) {
+        session.setContext({ containerId: null, organizationId: null });
+    }
+    dependencies.log("Remote sync state cleared");
+    return result;
+}
+function verifyFinalizedReplacement(finalizedReplacement, replacement, replacesOrganizationId, userId, signingKeyPair) {
+    if (!finalizedReplacement ||
+        finalizedReplacement.organizationId !== replacement.organizationId ||
+        finalizedReplacement.rootContainerId !== replacement.containerId ||
+        finalizedReplacement.userId !== userId) {
+        throw new Error("Organization replacement finalization was inconsistent");
+    }
+    if (!signingKeyPair) {
+        throw new Error("Organization replacement requires the current signing identity");
+    }
+    verifyOrganizationReplacementResponse({
+        replacesOrganizationId,
+        response: finalizedReplacement,
+        signingPublicKey: signingKeyPair.signingPublicKey,
+        userId,
+    });
+}
+export async function recoverPurgedSessionOrganization(dependencies, session, organizationId, options) {
+    const identitySnapshot = dependencies.identity.snapshot;
+    const sessionOrganizationId = session.organizationId;
+    const userId = session.userId;
+    if (!userId) {
+        throw new Error("Purged organization recovery requires a current user");
+    }
+    const isRecoveryCurrent = () => dependencies.identity.snapshot === identitySnapshot &&
+        session.organizationId === sessionOrganizationId &&
+        session.userId === userId;
+    const billing = await dependencies.api.getOrganizationBilling(organizationId);
+    if (billing?.status !== "purged") {
+        throw new Error(`Organization ${organizationId} cannot be recovered before its purge finishes`);
+    }
+    if (!isRecoveryCurrent())
+        return null;
+    const replacement = await session.createOrganization(options, organizationId);
+    if (!replacement)
+        return null;
+    if (!isRecoveryCurrent())
+        return null;
+    const replacementBilling = await dependencies.api.getOrganizationBilling(replacement.organizationId);
+    if (!isRecoveryCurrent())
+        return null;
+    requireReplacementCanSync(replacement, replacementBilling);
+    const execSql = dependencies.database.requireExecSql("recoverPurgedOrganization");
+    const reset = await clearRemoteSyncState(execSql, {
+        organizationId,
+        replacement: {
+            organizationId: replacement.organizationId,
+            rootContainerId: replacement.containerId,
+        },
+    }, isRecoveryCurrent);
+    if (!isRecoveryCurrent())
+        return null;
+    const finalizationRequest = await loadOrganizationReplacementFinalizationRequest({
+        execSql,
+        replacedOrganizationId: organizationId,
+        userId,
+    });
+    if (!isRecoveryCurrent())
+        return null;
+    const finalizedReplacement = await dependencies.api.createOrganization(finalizationRequest);
+    if (!isRecoveryCurrent())
+        return null;
+    verifyFinalizedReplacement(finalizedReplacement, replacement, organizationId, userId, identitySnapshot.signingKeyPair);
+    const attemptRemoved = await removeOrganizationProvisioningAttempt({
+        canCommit: isRecoveryCurrent,
+        execSql,
+        replacedOrganizationId: organizationId,
+        userId,
+    });
+    if (!attemptRemoved || !isRecoveryCurrent())
+        return null;
+    dependencies.api.clearWriterProjectionCaches();
+    session.setContext({
+        containerId: replacement.containerId,
+        defaultOrganizationId: replacement.organizationId,
+        organizationId: replacement.organizationId,
+    });
+    dependencies.log(`Purged organization replaced (${replacement.organizationId})`);
+    return {
+        ...replacement,
+        replacedOrganizationId: organizationId,
+        reset,
+    };
+}
+//# sourceMappingURL=sessionPurgeRecovery.js.map

package/client/session/sessionPurgeRecovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionPurgeRecovery.js","sourceRoot":"","sources":["sessionPurgeRecovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,8BAA8B,EAAE,MAAM,uCAAuC,CAAC;AACvF,OAAO,EACL,8CAA8C,EAC9C,qCAAqC,GACtC,MAAM,+DAA+D,CAAC;AACvE,OAAO,EAAE,qCAAqC,EAAE,MAAM,mEAAmE,CAAC;AAC1H,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAG5D,OAAO,EAAE,8CAA8C,EAAE,MAAM,yBAAyB,CAAC;AAyBzF,SAAS,yBAAyB,CAChC,WAA4C,EAC5C,OAAiE;IAEjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,8BAA8B,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACjE,MAAM,IAAI,8CAA8C,CACtD,WAAW,CAAC,cAAc,EAC1B,OAAO,CAAC,MAAM,EACd,WAAW,CAAC,WAAW,CACxB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,YAA8C,EAC9C,OAAoC,EACpC,cAAsB;IAEtB,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE;QACjD,cAAc;KACf,CAAC,CAAC;IACH,YAAY,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;QAC9C,OAAO,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,YAAY,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,0BAA0B,CACjC,oBAA0E,EAC1E,WAA4C,EAC5C,sBAA8B,EAC9B,MAAc,EACd,cAAsD;IAEtD,IACE,CAAC,oBAAoB;QACrB,oBAAoB,CAAC,cAAc,KAAK,WAAW,CAAC,cAAc;QAClE,oBAAoB,CAAC,eAAe,KAAK,WAAW,CAAC,WAAW;QAChE,oBAAoB,CAAC,MAAM,KAAK,MAAM,EACtC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,qCAAqC,CAAC;QACpC,sBAAsB;QACtB,QAAQ,EAAE,oBAAoB;QAC9B,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;QACjD,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,YAOC,EACD,OAAoC,EACpC,cAAsB,EACtB,OAA8C;IAE9C,MAAM,gBAAgB,GAAG,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACxD,MAAM,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAC7B,YAAY,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB;QACnD,OAAO,CAAC,cAAc,KAAK,qBAAqB;QAChD,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IAC5B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC;IAC9E,IAAI,OAAO,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,gBAAgB,cAAc,gDAAgD,CAC/E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,iBAAiB,EAAE;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC9E,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,iBAAiB,EAAE;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,kBAAkB,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,sBAAsB,CACtE,WAAW,CAAC,cAAc,CAC3B,CAAC;IACF,IAAI,CAAC,iBAAiB,EAAE;QAAE,OAAO,IAAI,CAAC;IACtC,yBAAyB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,cAAc,CAClD,2BAA2B,CAC5B,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CACtC,OAAO,EACP;QACE,cAAc;QACd,WAAW,EAAE;YACX,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,eAAe,EAAE,WAAW,CAAC,WAAW;SACzC;KACF,EACD,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC,iBAAiB,EAAE;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,mBAAmB,GACvB,MAAM,8CAA8C,CAAC;QACnD,OAAO;QACP,sBAAsB,EAAE,cAAc;QACtC,MAAM;KACP,CAAC,CAAC;IACL,IAAI,CAAC,iBAAiB,EAAE;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,oBAAoB,GACxB,MAAM,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;IACjE,IAAI,CAAC,iBAAiB,EAAE;QAAE,OAAO,IAAI,CAAC;IACtC,0BAA0B,CACxB,oBAAoB,EACpB,WAAW,EACX,cAAc,EACd,MAAM,EACN,gBAAgB,CAAC,cAAc,CAChC,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,qCAAqC,CAAC;QACjE,SAAS,EAAE,iBAAiB;QAC5B,OAAO;QACP,sBAAsB,EAAE,cAAc;QACtC,MAAM;KACP,CAAC,CAAC;IACH,IAAI,CAAC,cAAc,IAAI,CAAC,iBAAiB,EAAE;QAAE,OAAO,IAAI,CAAC;IACzD,YAAY,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC;IAC/C,OAAO,CAAC,UAAU,CAAC;QACjB,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,qBAAqB,EAAE,WAAW,CAAC,cAAc;QACjD,cAAc,EAAE,WAAW,CAAC,cAAc;KAC3C,CAAC,CAAC;IACH,YAAY,CAAC,GAAG,CACd,iCAAiC,WAAW,CAAC,cAAc,GAAG,CAC/D,CAAC;IACF,OAAO;QACL,GAAG,WAAW;QACd,sBAAsB,EAAE,cAAc;QACtC,KAAK;KACN,CAAC;AACJ,CAAC","sourcesContent":["import type { ApiClient } from \"@tearleads/api-client\";\nimport { resolveOrganizationBillingView } from \"../../workflows/organizations/billing\";\nimport {\n  loadOrganizationReplacementFinalizationRequest,\n  removeOrganizationProvisioningAttempt,\n} from \"../../workflows/organizations/organizationProvisioningAttempt\";\nimport { verifyOrganizationReplacementResponse } from \"../../workflows/organizations/organizationReplacementVerification\";\nimport { clearRemoteSyncState } from \"../../workflows/sync\";\nimport type { Database } from \"../database\";\nimport type { Identity } from \"../identity\";\nimport { PurgedOrganizationRecoveryBillingRequiredError } from \"./sessionRecoveryErrors\";\nimport type {\n  CreateOrganizationOptions,\n  SessionContext,\n  SessionCreateOrganizationResult,\n  SessionRecoverOrganizationResult,\n} from \"./sessionTypes\";\n\ninterface SessionPurgeRecoveryDependencies {\n  api: Pick<ApiClient, \"clearWriterProjectionCaches\">;\n  database: Pick<Database, \"requireExecSql\">;\n  identity: Pick<Identity, \"snapshot\">;\n  log: (message: string) => void;\n}\n\ninterface SessionPurgeRecoveryContext {\n  createOrganization: (\n    options?: CreateOrganizationOptions,\n    replacesOrganizationId?: string,\n  ) => Promise<SessionCreateOrganizationResult | null>;\n  organizationId: string | null;\n  setContext: (context: SessionContext) => void;\n  userId: string | null;\n}\n\nfunction requireReplacementCanSync(\n  replacement: SessionCreateOrganizationResult,\n  billing: Awaited<ReturnType<ApiClient[\"getOrganizationBilling\"]>>,\n): void {\n  if (!billing) {\n    throw new Error(\"Replacement organization billing could not be loaded\");\n  }\n  if (!resolveOrganizationBillingView(billing, Date.now()).canSync) {\n    throw new PurgedOrganizationRecoveryBillingRequiredError(\n      replacement.organizationId,\n      billing.status,\n      replacement.containerId,\n    );\n  }\n}\n\nexport async function clearSessionRemoteSyncState(\n  dependencies: SessionPurgeRecoveryDependencies,\n  session: SessionPurgeRecoveryContext,\n  organizationId: string,\n) {\n  const execSql = dependencies.database.requireExecSql(\"clearRemoteSyncState\");\n  const result = await clearRemoteSyncState(execSql, {\n    organizationId,\n  });\n  dependencies.api.clearWriterProjectionCaches();\n  if (session.organizationId === organizationId) {\n    session.setContext({ containerId: null, organizationId: null });\n  }\n  dependencies.log(\"Remote sync state cleared\");\n  return result;\n}\n\nfunction verifyFinalizedReplacement(\n  finalizedReplacement: Awaited<ReturnType<ApiClient[\"createOrganization\"]>>,\n  replacement: SessionCreateOrganizationResult,\n  replacesOrganizationId: string,\n  userId: string,\n  signingKeyPair: Identity[\"snapshot\"][\"signingKeyPair\"],\n): void {\n  if (\n    !finalizedReplacement ||\n    finalizedReplacement.organizationId !== replacement.organizationId ||\n    finalizedReplacement.rootContainerId !== replacement.containerId ||\n    finalizedReplacement.userId !== userId\n  ) {\n    throw new Error(\"Organization replacement finalization was inconsistent\");\n  }\n  if (!signingKeyPair) {\n    throw new Error(\n      \"Organization replacement requires the current signing identity\",\n    );\n  }\n  verifyOrganizationReplacementResponse({\n    replacesOrganizationId,\n    response: finalizedReplacement,\n    signingPublicKey: signingKeyPair.signingPublicKey,\n    userId,\n  });\n}\n\nexport async function recoverPurgedSessionOrganization(\n  dependencies: SessionPurgeRecoveryDependencies & {\n    api: Pick<\n      ApiClient,\n      | \"clearWriterProjectionCaches\"\n      | \"createOrganization\"\n      | \"getOrganizationBilling\"\n    >;\n  },\n  session: SessionPurgeRecoveryContext,\n  organizationId: string,\n  options: CreateOrganizationOptions | undefined,\n): Promise<SessionRecoverOrganizationResult | null> {\n  const identitySnapshot = dependencies.identity.snapshot;\n  const sessionOrganizationId = session.organizationId;\n  const userId = session.userId;\n  if (!userId) {\n    throw new Error(\"Purged organization recovery requires a current user\");\n  }\n  const isRecoveryCurrent = () =>\n    dependencies.identity.snapshot === identitySnapshot &&\n    session.organizationId === sessionOrganizationId &&\n    session.userId === userId;\n  const billing = await dependencies.api.getOrganizationBilling(organizationId);\n  if (billing?.status !== \"purged\") {\n    throw new Error(\n      `Organization ${organizationId} cannot be recovered before its purge finishes`,\n    );\n  }\n  if (!isRecoveryCurrent()) return null;\n  const replacement = await session.createOrganization(options, organizationId);\n  if (!replacement) return null;\n  if (!isRecoveryCurrent()) return null;\n  const replacementBilling = await dependencies.api.getOrganizationBilling(\n    replacement.organizationId,\n  );\n  if (!isRecoveryCurrent()) return null;\n  requireReplacementCanSync(replacement, replacementBilling);\n  const execSql = dependencies.database.requireExecSql(\n    \"recoverPurgedOrganization\",\n  );\n  const reset = await clearRemoteSyncState(\n    execSql,\n    {\n      organizationId,\n      replacement: {\n        organizationId: replacement.organizationId,\n        rootContainerId: replacement.containerId,\n      },\n    },\n    isRecoveryCurrent,\n  );\n  if (!isRecoveryCurrent()) return null;\n  const finalizationRequest =\n    await loadOrganizationReplacementFinalizationRequest({\n      execSql,\n      replacedOrganizationId: organizationId,\n      userId,\n    });\n  if (!isRecoveryCurrent()) return null;\n  const finalizedReplacement =\n    await dependencies.api.createOrganization(finalizationRequest);\n  if (!isRecoveryCurrent()) return null;\n  verifyFinalizedReplacement(\n    finalizedReplacement,\n    replacement,\n    organizationId,\n    userId,\n    identitySnapshot.signingKeyPair,\n  );\n  const attemptRemoved = await removeOrganizationProvisioningAttempt({\n    canCommit: isRecoveryCurrent,\n    execSql,\n    replacedOrganizationId: organizationId,\n    userId,\n  });\n  if (!attemptRemoved || !isRecoveryCurrent()) return null;\n  dependencies.api.clearWriterProjectionCaches();\n  session.setContext({\n    containerId: replacement.containerId,\n    defaultOrganizationId: replacement.organizationId,\n    organizationId: replacement.organizationId,\n  });\n  dependencies.log(\n    `Purged organization replaced (${replacement.organizationId})`,\n  );\n  return {\n    ...replacement,\n    replacedOrganizationId: organizationId,\n    reset,\n  };\n}\n"]}

package/client/session/sessionRecoveryErrors.d.ts

@@ -0,0 +1,9 @@
+import type { OrganizationBillingStatus } from "../../internal/validators/response/index.js";
+/** Recovery provisioned a replacement that must be activated before rebind. */
+export declare class PurgedOrganizationRecoveryBillingRequiredError extends Error {
+    readonly replacementOrganizationId: string;
+    readonly billingStatus: OrganizationBillingStatus;
+    readonly replacementContainerId: string;
+    readonly code: "purged_organization_recovery_billing_required";
+    constructor(replacementOrganizationId: string, billingStatus: OrganizationBillingStatus, replacementContainerId: string);
+}

package/client/session/sessionRecoveryErrors.js

@@ -0,0 +1,15 @@
+/** Recovery provisioned a replacement that must be activated before rebind. */
+export class PurgedOrganizationRecoveryBillingRequiredError extends Error {
+    replacementOrganizationId;
+    billingStatus;
+    replacementContainerId;
+    code = "purged_organization_recovery_billing_required";
+    constructor(replacementOrganizationId, billingStatus, replacementContainerId) {
+        super(`Organization ${replacementOrganizationId} requires active sync billing before purge recovery can finish`);
+        this.replacementOrganizationId = replacementOrganizationId;
+        this.billingStatus = billingStatus;
+        this.replacementContainerId = replacementContainerId;
+        this.name = "PurgedOrganizationRecoveryBillingRequiredError";
+    }
+}
+//# sourceMappingURL=sessionRecoveryErrors.js.map

package/client/session/sessionRecoveryErrors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionRecoveryErrors.js","sourceRoot":"","sources":["sessionRecoveryErrors.ts"],"names":[],"mappings":"AAEA,+EAA+E;AAC/E,MAAM,OAAO,8CAA+C,SAAQ,KAAK;IAI5D;IACA;IACA;IALF,IAAI,GAAG,+CAAwD,CAAC;IAEzE,YACW,yBAAiC,EACjC,aAAwC,EACxC,sBAA8B;QAEvC,KAAK,CACH,gBAAgB,yBAAyB,gEAAgE,CAC1G,CAAC;QANO,8BAAyB,GAAzB,yBAAyB,CAAQ;QACjC,kBAAa,GAAb,aAAa,CAA2B;QACxC,2BAAsB,GAAtB,sBAAsB,CAAQ;QAKvC,IAAI,CAAC,IAAI,GAAG,gDAAgD,CAAC;IAC/D,CAAC;CACF","sourcesContent":["import type { OrganizationBillingStatus } from \"@tearleads/validators/response\";\n\n/** Recovery provisioned a replacement that must be activated before rebind. */\nexport class PurgedOrganizationRecoveryBillingRequiredError extends Error {\n  readonly code = \"purged_organization_recovery_billing_required\" as const;\n\n  constructor(\n    readonly replacementOrganizationId: string,\n    readonly billingStatus: OrganizationBillingStatus,\n    readonly replacementContainerId: string,\n  ) {\n    super(\n      `Organization ${replacementOrganizationId} requires active sync billing before purge recovery can finish`,\n    );\n    this.name = \"PurgedOrganizationRecoveryBillingRequiredError\";\n  }\n}\n"]}

package/client/session/sessionRootAuthority.js

@@ -0,0 +1,84 @@
+import { KeyingVerificationError } from "../../internal/crypto/index.js";
+import { reportKeyingVerificationErrorInCauseChain } from "../../data/keyingProjectionVerification/error.js";
+/**
+ * The login, registration and organization-creation responses that carry a
+ * root id are unsigned. An organization's root row is created once, in the
+ * provisioning transaction, and only ever disappears through a purge, so an
+ * honest server can re-acknowledge the same root or report it gone (null) but
+ * never presents a different root for an organization this identity already
+ * acknowledged. A different id is a substitution attempt: the previous root
+ * stays authoritative and the caller records a security incident.
+ */
+function assertRootAcknowledgmentUnchanged(previous, input) {
+    if (!previous ||
+        previous.rootContainerId === input.rootContainerId ||
+        input.rootContainerId === null) {
+        return;
+    }
+    throw new KeyingVerificationError("object_mismatch", "Session root acknowledgement changed for an acknowledged organization");
+}
+export function acknowledgeSessionRoot(known, input, signingFingerprint) {
+    if (!signingFingerprint)
+        throw new KeyingVerificationError("missing_dependency", "Session root acknowledgement requires a signing identity");
+    const matchesIdentity = (entry) => entry.signingFingerprint === signingFingerprint &&
+        entry.userId === input.userId;
+    assertRootAcknowledgmentUnchanged(known.find((entry) => matchesIdentity(entry) && entry.organizationId === input.organizationId), input);
+    return [
+        ...known.filter((entry) => matchesIdentity(entry) && entry.organizationId !== input.organizationId),
+        {
+            userId: input.userId,
+            organizationId: input.organizationId,
+            rootContainerId: input.rootContainerId,
+            signingFingerprint,
+        },
+    ];
+}
+/**
+ * Decides and commits an acknowledgement against the session's CURRENT
+ * snapshot in one synchronous step: reading `rootAcknowledgments`, deciding,
+ * and `setContext` happen with no await between them, so an overlapping login,
+ * registration or organization creation can never overwrite this entry with a
+ * stale copy (a lost acknowledgement would erase that organization's root-swap
+ * protection). Only the incident report for a refusal is asynchronous, and it
+ * runs after the decision has been made and before the error propagates;
+ * `onRefused` runs synchronously with the decision, ahead of that report.
+ */
+export async function commitSessionRootAcknowledgment(input) {
+    const { context, reporter, root, session, signingFingerprint } = input;
+    let rootAcknowledgments;
+    try {
+        rootAcknowledgments = acknowledgeSessionRoot(session.snapshot.rootAcknowledgments, root, signingFingerprint);
+    }
+    catch (error) {
+        input.onRefused?.();
+        if (signingFingerprint) {
+            await reportKeyingVerificationErrorInCauseChain(error, reporter, {
+                objectId: root.rootContainerId,
+                objectKind: "container",
+                operation: "session.root.acknowledge",
+                organizationId: root.organizationId,
+            });
+        }
+        throw error;
+    }
+    session.setContext({ ...context, rootAcknowledgments });
+}
+/** Only the encrypted host restore may supply previously acknowledged roots. */
+export function restoreSessionRoots(known, restored, signingFingerprint, userId) {
+    const matches = (entry) => entry.signingFingerprint === signingFingerprint && entry.userId === userId;
+    if (restored) {
+        if (!restored.every(matches) ||
+            new Set(restored.map((entry) => entry.organizationId)).size !==
+                restored.length) {
+            throw new KeyingVerificationError("object_mismatch", "Restored roots differ from the active identity");
+        }
+        return restored.map((entry) => ({ ...entry }));
+    }
+    return known.every(matches) ? known : known.filter(matches);
+}
+export function acknowledgedSessionRoot(session, signingFingerprint) {
+    return (session.snapshot.rootAcknowledgments.find((entry) => entry.signingFingerprint === signingFingerprint &&
+        entry.userId === session.userId &&
+        entry.organizationId === session.organizationId)?.rootContainerId ?? null);
+}
+//# sourceMappingURL=sessionRootAuthority.js.map

package/client/session/sessionRootAuthority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionRootAuthority.js","sourceRoot":"","sources":["sessionRootAuthority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,yCAAyC,EAAE,MAAM,+CAA+C,CAAC;AAU1G;;;;;;;;GAQG;AACH,SAAS,iCAAiC,CACxC,QAAiD,EACjD,KAA8B;IAE9B,IACE,CAAC,QAAQ;QACT,QAAQ,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe;QAClD,KAAK,CAAC,eAAe,KAAK,IAAI,EAC9B,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,uEAAuE,CACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAA0B,EAC1B,KAA8B,EAC9B,kBAAiC;IAEjC,IAAI,CAAC,kBAAkB;QACrB,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,0DAA0D,CAC3D,CAAC;IACJ,MAAM,eAAe,GAAG,CAAC,KAAkC,EAAE,EAAE,CAC7D,KAAK,CAAC,kBAAkB,KAAK,kBAAkB;QAC/C,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;IAChC,iCAAiC,CAC/B,KAAK,CAAC,IAAI,CACR,CAAC,KAAK,EAAE,EAAE,CACR,eAAe,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,CAC1E,EACD,KAAK,CACN,CAAC;IACF,OAAO;QACL,GAAG,KAAK,CAAC,MAAM,CACb,CAAC,KAAK,EAAE,EAAE,CACR,eAAe,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,CAC1E;QACD;YACE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,kBAAkB;SACnB;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAOrD;IACC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,KAAK,CAAC;IACvE,IAAI,mBAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,mBAAmB,GAAG,sBAAsB,CAC1C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,EACpC,IAAI,EACJ,kBAAkB,CACnB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;QACpB,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,yCAAyC,CAAC,KAAK,EAAE,QAAQ,EAAE;gBAC/D,QAAQ,EAAE,IAAI,CAAC,eAAe;gBAC9B,UAAU,EAAE,WAAW;gBACvB,SAAS,EAAE,0BAA0B;gBACrC,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CACjC,KAA0B,EAC1B,QAAyC,EACzC,kBAAiC,EACjC,MAAqB;IAErB,MAAM,OAAO,GAAG,CAAC,KAAkC,EAAE,EAAE,CACrD,KAAK,CAAC,kBAAkB,KAAK,kBAAkB,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;IAC7E,IAAI,QAAQ,EAAE,CAAC;QACb,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;YACxB,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;gBACzD,QAAQ,CAAC,MAAM,EACjB,CAAC;YACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,gDAAgD,CACjD,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAgB,EAChB,kBAAiC;IAEjC,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CACvC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,kBAAkB,KAAK,kBAAkB;QAC/C,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAC/B,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,CAClD,EAAE,eAAe,IAAI,IAAI,CAC3B,CAAC;AACJ,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport { reportKeyingVerificationErrorInCauseChain } from \"../../data/keyingProjectionVerification/error\";\nimport type { SecurityIncidentReporter } from \"../../data/securityIncidents\";\nimport type { Session, SessionContext, SessionSnapshot } from \"./sessionTypes\";\n\ntype RootAcknowledgments = SessionSnapshot[\"rootAcknowledgments\"];\ntype RootAcknowledgmentInput = Omit<\n  RootAcknowledgments[number],\n  \"signingFingerprint\"\n>;\n\n/**\n * The login, registration and organization-creation responses that carry a\n * root id are unsigned. An organization's root row is created once, in the\n * provisioning transaction, and only ever disappears through a purge, so an\n * honest server can re-acknowledge the same root or report it gone (null) but\n * never presents a different root for an organization this identity already\n * acknowledged. A different id is a substitution attempt: the previous root\n * stays authoritative and the caller records a security incident.\n */\nfunction assertRootAcknowledgmentUnchanged(\n  previous: RootAcknowledgments[number] | undefined,\n  input: RootAcknowledgmentInput,\n): void {\n  if (\n    !previous ||\n    previous.rootContainerId === input.rootContainerId ||\n    input.rootContainerId === null\n  ) {\n    return;\n  }\n  throw new KeyingVerificationError(\n    \"object_mismatch\",\n    \"Session root acknowledgement changed for an acknowledged organization\",\n  );\n}\n\nexport function acknowledgeSessionRoot(\n  known: RootAcknowledgments,\n  input: RootAcknowledgmentInput,\n  signingFingerprint: string | null,\n): RootAcknowledgments {\n  if (!signingFingerprint)\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      \"Session root acknowledgement requires a signing identity\",\n    );\n  const matchesIdentity = (entry: RootAcknowledgments[number]) =>\n    entry.signingFingerprint === signingFingerprint &&\n    entry.userId === input.userId;\n  assertRootAcknowledgmentUnchanged(\n    known.find(\n      (entry) =>\n        matchesIdentity(entry) && entry.organizationId === input.organizationId,\n    ),\n    input,\n  );\n  return [\n    ...known.filter(\n      (entry) =>\n        matchesIdentity(entry) && entry.organizationId !== input.organizationId,\n    ),\n    {\n      userId: input.userId,\n      organizationId: input.organizationId,\n      rootContainerId: input.rootContainerId,\n      signingFingerprint,\n    },\n  ];\n}\n\n/**\n * Decides and commits an acknowledgement against the session's CURRENT\n * snapshot in one synchronous step: reading `rootAcknowledgments`, deciding,\n * and `setContext` happen with no await between them, so an overlapping login,\n * registration or organization creation can never overwrite this entry with a\n * stale copy (a lost acknowledgement would erase that organization's root-swap\n * protection). Only the incident report for a refusal is asynchronous, and it\n * runs after the decision has been made and before the error propagates;\n * `onRefused` runs synchronously with the decision, ahead of that report.\n */\nexport async function commitSessionRootAcknowledgment(input: {\n  readonly context?: Omit<SessionContext, \"rootAcknowledgments\"> | undefined;\n  readonly onRefused?: (() => void) | undefined;\n  readonly reporter: SecurityIncidentReporter | undefined;\n  readonly root: RootAcknowledgmentInput;\n  readonly session: Pick<Session, \"setContext\" | \"snapshot\">;\n  readonly signingFingerprint: string | null;\n}): Promise<void> {\n  const { context, reporter, root, session, signingFingerprint } = input;\n  let rootAcknowledgments: RootAcknowledgments;\n  try {\n    rootAcknowledgments = acknowledgeSessionRoot(\n      session.snapshot.rootAcknowledgments,\n      root,\n      signingFingerprint,\n    );\n  } catch (error) {\n    input.onRefused?.();\n    if (signingFingerprint) {\n      await reportKeyingVerificationErrorInCauseChain(error, reporter, {\n        objectId: root.rootContainerId,\n        objectKind: \"container\",\n        operation: \"session.root.acknowledge\",\n        organizationId: root.organizationId,\n      });\n    }\n    throw error;\n  }\n  session.setContext({ ...context, rootAcknowledgments });\n}\n\n/** Only the encrypted host restore may supply previously acknowledged roots. */\nexport function restoreSessionRoots(\n  known: RootAcknowledgments,\n  restored: RootAcknowledgments | undefined,\n  signingFingerprint: string | null,\n  userId: string | null,\n): RootAcknowledgments {\n  const matches = (entry: RootAcknowledgments[number]) =>\n    entry.signingFingerprint === signingFingerprint && entry.userId === userId;\n  if (restored) {\n    if (\n      !restored.every(matches) ||\n      new Set(restored.map((entry) => entry.organizationId)).size !==\n        restored.length\n    ) {\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"Restored roots differ from the active identity\",\n      );\n    }\n    return restored.map((entry) => ({ ...entry }));\n  }\n  return known.every(matches) ? known : known.filter(matches);\n}\n\nexport function acknowledgedSessionRoot(\n  session: Session,\n  signingFingerprint: string | null,\n): string | null {\n  return (\n    session.snapshot.rootAcknowledgments.find(\n      (entry) =>\n        entry.signingFingerprint === signingFingerprint &&\n        entry.userId === session.userId &&\n        entry.organizationId === session.organizationId,\n    )?.rootContainerId ?? null\n  );\n}\n"]}