@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/workflows/principals/recoverPrincipalPolicyHistory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoverPrincipalPolicyHistory.js","sourceRoot":"","sources":["recoverPrincipalPolicyHistory.ts"],"names":[],"mappings":"AACA,OAAO,EACL,uBAAuB,EAGvB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,mCAAmC,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,yDAAyD,CAAC;AACjE,OAAO,EAAE,+BAA+B,EAAE,MAAM,uDAAuD,CAAC;AACxG,OAAO,EAAE,sCAAsC,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAEL,oCAAoC,GACrC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,+BAA+B,GAGhC,MAAM,iCAAiC,CAAC;AAEzC,SAAS,gBAAgB,CACvB,IAAiC;IAEjC,OAAO;QACL,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;KACpD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAA2C;IAChE,mCAAmC,CACjC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE,CACrD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,KAA2C,EAC3C,KAAoC,EACpC,QAAqC;IAErC,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI;QAClB,eAAe;QACf,aAAa;QACb,SAAS;QACT,WAAW;QACX,UAAU;QACV,gBAAgB;KACR,EAAE,CAAC;QACX,IAAI,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC;YACxD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,0DAA0D,CAC3D,CAAC;IACN,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC1B,IACE,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,gBAAgB,KAAK,IAAI;YAE1C,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,+CAA+C,CAChD,CAAC;QACJ,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,gBAAgB,KAAK,IAAI,CAAC;IAC5D,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IACzC,IAAI,QAAQ;QACV,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,OAAO,CAAC,YAAY;YAC3B,UAAU,EAAE,OAAO,CAAC,iBAAiB;YACrC,MAAM,EAAE,OAAO,CAAC,aAAa;SAC9B,CAAC,CAAC;IACL,MAAM,IAAI,GAAG,MAAM,sCAAsC,CAAC;QACxD,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;QAC3D,0BAA0B,EAAE,KAAK,CAAC,0BAA0B;KAC7D,CAAC,CAAC;IACH,IAAI,OAAO,IAAI,IAAI;QACjB,MAAM,IAAI,uBAAuB,CAC/B,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,EACrE,8DAA8D,CAC/D,CAAC;IACJ,MAAM,iBAAiB,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE,CAAC,OAAO,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC3C,OAAO;QACP,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;IACvC,MAAM,IAAI,GAAG;QACX,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QACpC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,QAAQ;KACT,CAAC;IACF,MAAM,iBAAiB,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,cAAc,CAC3D,MAAM,+BAA+B,CACnC,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,YAAY,EAClB,IAAI,CACL,CACF,CAAC;IACF,IAAI,CAAC,iBAAiB,CAAC,EAAE;QAAE,MAAM,iBAAiB,CAAC,KAAK,CAAC;IACzD,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,EAAE,CAAC;IAC7D,MAAM,yBAAyB,CAAC;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK;QACZ,gBAAgB,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,IAAI,IAAI;QAC/C,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE;KACnE,CAAC,CAAC;IACH,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;IACxB,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,KAA2C,EAC3C,KAAoC,EACpC,UAA4C;IAE5C,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ;QAC1C,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,gDAAgD,CACjD,CAAC;IACJ,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC1D,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,KAAK,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC;QACjD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,OAAO,CAAC,KAAK;KACvB,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,OAAO,CAAC,KAAK,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,YAAY,CAAC,aAAa,EAChC,KAAK,CAAC,YAAY,CAAC,WAAW,CAC/B,CAAC;IACF,IACE,MAAM,EAAE,OAAO,KAAK,UAAU,EAAE,OAAO;QACvC,MAAM,EAAE,SAAS,KAAK,UAAU,EAAE,SAAS;QAE3C,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,4DAA4D,CAC7D,CAAC;IACJ,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,KAA2C;IAE3C,aAAa,CAAC,KAAK,CAAC,CAAC;IACrB,MAAM,UAAU,GAAG,MAAM,6BAA6B,CACpD,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,YAAY,CAAC,aAAa,EAChC,KAAK,CAAC,YAAY,CAAC,WAAW,CAC/B,CAAC;IACF,IAAI,UAAU,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO;QAC/D,MAAM,IAAI,uBAAuB,CAC/B,UAAU,EACV,2DAA2D,CAC5D,CAAC;IACJ,MAAM,YAAY,GAAgC;QAChD,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,aAAa;QAC/C,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,WAAW;QAC3C,eAAe,EAAE,UAAU;QAC3B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,EAAE;KACnD,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,oCAAoC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC9E,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,uBAAuB,CAChE,KAAK,CAAC,YAAY,CAAC,aAAa,EAChC,KAAK,CAAC,YAAY,CAAC,WAAW,EAC9B;QACE,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,SAAS;QACvC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO;YAC9B,CAAC,CAAC;gBACE,MAAM,EAAE;oBACN,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY;iBACvC;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CACF,EAAE,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,qEAAqE;YACrE,yEAAyE;YACzE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,KAAK;gBACxC,MAAM,4BAA4B,CAChC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,EACX,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE,CACrD,CAAC;YACJ,MAAM,IAAI,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,KAAK,IAAI,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,iBAAiB;QACpB,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,8CAA8C,CAC/C,CAAC;IACJ,OAAO,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAA6C;IAE7C,IACE,CAAC,OAAO,CAAC,cAAc;QACvB,CAAC,OAAO,CAAC,YAAY,CAAC,aAAa,KAAK,cAAc;YACpD,OAAO,CAAC,YAAY,CAAC,WAAW,KAAK,OAAO,CAAC,cAAc,CAAC;QAE9D,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,iDAAiD,CAClD,CAAC;IACJ,IACE,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAC9B,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAChE;QAED,MAAM,IAAI,uBAAuB,CAC/B,oBAAoB,EACpB,yDAAyD,CAC1D,CAAC;IACJ,IACE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,YAAY,UAAU,CAAC;QACpD,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,KAAK,EAAE;QAC7C,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO;QAE3B,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,6EAA6E,CAC9E,CAAC;IACJ,MAAM,KAAK,GAAG;QACZ,GAAG,OAAO;QACV,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,YAAY,CAAC;QACnD,kBAAkB,EAAE,eAAe,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;QACrE,UAAU,EAAE;YACV,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO;YACnC,QAAQ,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;SACtD;KACF,CAAC;IACF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;AACH,CAAC","sourcesContent":["import type { PrincipalPolicyPageCurrent } from \"@tearleads/api-client\";\nimport {\n  KeyingVerificationError,\n  type PrincipalPolicyCheckpoint,\n  type PrincipalPolicyHistoryInput,\n  verifyPrincipalPolicyCurrent,\n} from \"@tearleads/crypto\";\nimport type { PrincipalPolicyPageResponse } from \"@tearleads/validators/response\";\nimport { assertProjectionVerificationCurrent } from \"../../data/keyingProjectionVerification/types\";\nimport { loadPrincipalPolicyCheckpoint } from \"../../data/persistence/keyingCheckpointPersistence\";\nimport {\n  discardPrincipalHistoryStage,\n  savePrincipalHistoryStage,\n} from \"../../data/persistence/principalHistoryStagePersistence\";\nimport { principalHistoryStageProtection } from \"../../data/principals/principalHistoryStageProtection\";\nimport { collectPrincipalPolicySignerPublicKeys } from \"./policyVerification\";\nimport {\n  type PrincipalHistoryRecoveryStage,\n  restorePrincipalHistoryRecoveryStage,\n} from \"./principalHistoryRecoveryStage\";\nimport {\n  PrincipalPolicyHistoryReadError,\n  type RecoveredPrincipalPolicyHistory,\n  type RecoverPrincipalPolicyHistoryOptions,\n} from \"./principalHistoryRecoveryTypes\";\n\nfunction currentArtifacts(\n  page: PrincipalPolicyPageResponse,\n): PrincipalPolicyPageCurrent {\n  return {\n    currentState: page.currentState,\n    currentPayload: page.currentPayload,\n    currentProjection: page.currentProjection,\n    currentGrants: page.currentGrants,\n    currentMemberEnvelopes: page.currentMemberEnvelopes,\n  };\n}\n\nfunction assertCurrent(input: RecoverPrincipalPolicyHistoryOptions): void {\n  assertProjectionVerificationCurrent(\n    () => !input.signal?.aborted && input.stillCurrent(),\n  );\n}\n\nasync function acceptPage(\n  input: RecoverPrincipalPolicyHistoryOptions,\n  stage: PrincipalHistoryRecoveryStage,\n  response: PrincipalPolicyPageResponse,\n): Promise<void> {\n  const page = structuredClone(response);\n  assertCurrent(input);\n  for (const field of [\n    \"principalType\",\n    \"principalId\",\n    \"version\",\n    \"stateHash\",\n    \"keyEpoch\",\n    \"keyFingerprint\",\n  ] as const) {\n    if (page.currentState[field] !== input.expectedHead[field])\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"Principal history page does not match its requested head\",\n      );\n  }\n  if (stage.saved?.complete) {\n    if (\n      page.previousStates.length !== 0 ||\n      page.historyPage.nextAfterVersion !== null\n    )\n      throw new KeyingVerificationError(\n        \"invalid_shape\",\n        \"Completed history returned additional entries\",\n      );\n    return;\n  }\n  const complete = page.historyPage.nextAfterVersion === null;\n  const current = currentArtifacts(page);\n  const entries = [...page.previousStates];\n  if (complete)\n    entries.push({\n      state: current.currentState,\n      projection: current.currentProjection,\n      grants: current.currentGrants,\n    });\n  const keys = await collectPrincipalPolicySignerPublicKeys({\n    bundle: { ...current, previousStates: page.previousStates },\n    resolveTrustedUserIdentity: input.resolveTrustedUserIdentity,\n  });\n  if (\"error\" in keys)\n    throw new KeyingVerificationError(\n      keys.error === \"not-found\" ? \"missing_dependency\" : \"signer_mismatch\",\n      \"Principal history signer identity could not be authenticated\",\n    );\n  const externalAuthority = await input.loadExternalAuthority?.(entries);\n  const appended = await stage.verifier.append({\n    entries,\n    signerPublicKeys: keys.signerPublicKeys,\n    ...(externalAuthority ? { externalAuthority } : {}),\n  });\n  if (!appended.ok) throw appended.error;\n  const next = {\n    id: stage.id,\n    organizationId: input.organizationId,\n    currentJson: JSON.stringify(current),\n    afterVersion: appended.value.throughVersion - (complete ? 1 : 0),\n    complete,\n  };\n  const protectedProgress = await stage.verifier.exportProgress(\n    await principalHistoryStageProtection(\n      input.protection,\n      input.expectedHead,\n      next,\n    ),\n  );\n  if (!protectedProgress.ok) throw protectedProgress.error;\n  const saved = { ...next, progress: protectedProgress.value };\n  await savePrincipalHistoryStage({\n    execSql: input.execSql,\n    stage: saved,\n    previousProgress: stage.saved?.progress ?? null,\n    stillCurrent: () => !input.signal?.aborted && input.stillCurrent(),\n  });\n  stage.current = current;\n  stage.saved = saved;\n}\n\nasync function finishRecovery(\n  input: RecoverPrincipalPolicyHistoryOptions,\n  stage: PrincipalHistoryRecoveryStage,\n  checkpoint: PrincipalPolicyCheckpoint | null,\n): Promise<RecoveredPrincipalPolicyHistory> {\n  if (!stage.current || !stage.saved?.complete)\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      \"Principal history ended before its pinned head\",\n    );\n  const history = stage.verifier.finish(input.expectedHead);\n  if (!history.ok) throw history.error;\n  const current = await verifyPrincipalPolicyCurrent({\n    current: stage.current,\n    history: history.value,\n  });\n  if (!current.ok) throw current.error;\n  const latest = await loadPrincipalPolicyCheckpoint(\n    input.execSql,\n    input.expectedHead.principalType,\n    input.expectedHead.principalId,\n  );\n  if (\n    latest?.version !== checkpoint?.version ||\n    latest?.stateHash !== checkpoint?.stateHash\n  )\n    throw new KeyingVerificationError(\n      \"stale_predecessor\",\n      \"Local principal checkpoint changed during history recovery\",\n    );\n  assertCurrent(input);\n  return { current: stage.current, policy: current.value };\n}\n\nasync function recover(\n  input: RecoverPrincipalPolicyHistoryOptions,\n): Promise<RecoveredPrincipalPolicyHistory> {\n  assertCurrent(input);\n  const checkpoint = await loadPrincipalPolicyCheckpoint(\n    input.execSql,\n    input.expectedHead.principalType,\n    input.expectedHead.principalId,\n  );\n  if (checkpoint && input.expectedHead.version < checkpoint.version)\n    throw new KeyingVerificationError(\n      \"rollback\",\n      \"Requested principal history predates the local checkpoint\",\n    );\n  const historyInput: PrincipalPolicyHistoryInput = {\n    principalType: input.expectedHead.principalType,\n    principalId: input.expectedHead.principalId,\n    localCheckpoint: checkpoint,\n    retainedReferences: input.retainedReferences ?? [],\n  };\n  const stage = await restorePrincipalHistoryRecoveryStage(input, historyInput);\n  let receivedFinalPage = false;\n  for await (const result of input.apiClient.getPrincipalPolicyPages(\n    input.expectedHead.principalType,\n    input.expectedHead.principalId,\n    {\n      signal: input.signal,\n      stateHash: input.expectedHead.stateHash,\n      ...(stage.saved && stage.current\n        ? {\n            resume: {\n              current: stage.current,\n              afterVersion: stage.saved.afterVersion,\n            },\n          }\n        : {}),\n    },\n  )) {\n    if (!result.ok) {\n      // A rejected transport pin cannot justify skipping history on retry.\n      // Discard only this operation's progress, then let a new call replay it.\n      if (result.kind === \"shape\" && stage.saved)\n        await discardPrincipalHistoryStage(\n          input.execSql,\n          stage.saved,\n          () => !input.signal?.aborted && input.stillCurrent(),\n        );\n      throw new PrincipalPolicyHistoryReadError(result);\n    }\n    await acceptPage(input, stage, result.data);\n    receivedFinalPage = result.data.historyPage.nextAfterVersion === null;\n  }\n  if (!receivedFinalPage)\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      \"Principal history transport did not complete\",\n    );\n  return finishRecovery(input, stage, checkpoint);\n}\n\n/**\n * Recover one exact head with bounded retained history and durable checked progress.\n * The result is a sparse current-policy capability; this does not advance app checkpoints.\n */\nexport async function recoverPrincipalPolicyHistory(\n  options: RecoverPrincipalPolicyHistoryOptions,\n): Promise<RecoveredPrincipalPolicyHistory> {\n  if (\n    !options.organizationId ||\n    (options.expectedHead.principalType === \"organization\" &&\n      options.expectedHead.principalId !== options.organizationId)\n  )\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Principal history organization scope is invalid\",\n    );\n  if (\n    options.retainedReferences?.some(\n      (reference) => reference.version > options.expectedHead.version,\n    )\n  )\n    throw new KeyingVerificationError(\n      \"missing_dependency\",\n      \"Requested history reference is beyond the recovery head\",\n    );\n  if (\n    !(options.protection.localKey instanceof Uint8Array) ||\n    options.protection.localKey.byteLength !== 32 ||\n    !options.protection.context\n  )\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"Principal history recovery requires a private 32-byte key and trust context\",\n    );\n  const input = {\n    ...options,\n    expectedHead: structuredClone(options.expectedHead),\n    retainedReferences: structuredClone(options.retainedReferences ?? []),\n    protection: {\n      context: options.protection.context,\n      localKey: new Uint8Array(options.protection.localKey),\n    },\n  };\n  try {\n    return await recover(input);\n  } finally {\n    input.protection.localKey.fill(0);\n  }\n}\n"]}

package/workflows/principals/runtimePolicyWarmer.js

@@ -0,0 +1,29 @@
+import { cachePrincipalPolicyBundles, cacheReferencedPrincipalPolicies, } from "./policyCache.js";
+export function createRuntimePrincipalPolicyWarmer(runtime) {
+    const policyInput = ({ organizationId, references, stillCurrent, }) => {
+        const input = {
+            execSql: runtime.infra.execSql,
+            getCurrentPrincipalPolicy: (principalType, principalId) => runtime.apiClient.getCurrentPrincipalPolicy(principalType, principalId),
+            log: runtime.util.log,
+            organizationId,
+            reportSecurityIncident: runtime.util.reportSecurityIncident,
+            references,
+            resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,
+            stillCurrent,
+        };
+        return input;
+    };
+    const warmer = async (input) => cacheReferencedPrincipalPolicies(policyInput(input));
+    const cacheBundles = (input) => cachePrincipalPolicyBundles({
+        bundles: input.bundles,
+        execSql: runtime.infra.execSql,
+        getCurrentPrincipalPolicy: (principalType, principalId) => runtime.apiClient.getCurrentPrincipalPolicy(principalType, principalId),
+        log: runtime.util.log,
+        organizationId: input.organizationId,
+        reportSecurityIncident: runtime.util.reportSecurityIncident,
+        resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,
+        stillCurrent: input.stillCurrent,
+    });
+    return Object.assign(warmer, { cacheBundles });
+}
+//# sourceMappingURL=runtimePolicyWarmer.js.map

package/workflows/principals/runtimePolicyWarmer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimePolicyWarmer.js","sourceRoot":"","sources":["runtimePolicyWarmer.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,2BAA2B,EAC3B,gCAAgC,GACjC,MAAM,eAAe,CAAC;AAiBvB,MAAM,UAAU,kCAAkC,CAChD,OAAmC;IAEnC,MAAM,WAAW,GAAG,CAAC,EACnB,cAAc,EACd,UAAU,EACV,YAAY,GACmC,EAAE,EAAE;QACnD,MAAM,KAAK,GAA2D;YACpE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,yBAAyB,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,CACxD,OAAO,CAAC,SAAS,CAAC,yBAAyB,CAAC,aAAa,EAAE,WAAW,CAAC;YACzE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG;YACrB,cAAc;YACd,sBAAsB,EAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB;YAC3D,UAAU;YACV,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;YAC9D,YAAY;SACb,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,EAClB,KAAqD,EACrD,EAAE,CAAC,gCAAgC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,CAAC,KAAwC,EAAE,EAAE,CAChE,2BAA2B,CAAC;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;QAC9B,yBAAyB,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,EAAE,CACxD,OAAO,CAAC,SAAS,CAAC,yBAAyB,CAAC,aAAa,EAAE,WAAW,CAAC;QACzE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG;QACrB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,sBAAsB,EAAE,OAAO,CAAC,IAAI,CAAC,sBAAsB;QAC3D,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;QAC9D,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACL,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;AACjD,CAAC","sourcesContent":["import type { PrincipalPolicyBundleResponse } from \"@tearleads/validators/response\";\nimport type {\n  PrincipalPolicyBundleCacheRequest,\n  ReferencedPrincipalPolicyWarmer,\n} from \"../../data/keyingProjectionVerification\";\nimport type { SecurityIncidentReporter } from \"../../data/securityIncidents\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport type { TrustedUserIdentityResolver } from \"../../data/trustedUserIdentity\";\nimport {\n  cachePrincipalPolicyBundles,\n  cacheReferencedPrincipalPolicies,\n} from \"./policyCache\";\n\ninterface PrincipalPolicyWarmRuntime {\n  readonly apiClient: {\n    getCurrentPrincipalPolicy(\n      principalType: \"group\" | \"organization\",\n      principalId: string,\n    ): Promise<PrincipalPolicyBundleResponse | null>;\n  };\n  readonly infra: { readonly execSql: ExecSql };\n  readonly util: {\n    readonly log: (message: string) => void;\n    readonly reportSecurityIncident: SecurityIncidentReporter;\n  };\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n}\n\nexport function createRuntimePrincipalPolicyWarmer(\n  runtime: PrincipalPolicyWarmRuntime,\n): ReferencedPrincipalPolicyWarmer {\n  const policyInput = ({\n    organizationId,\n    references,\n    stillCurrent,\n  }: Parameters<ReferencedPrincipalPolicyWarmer>[0]) => {\n    const input: Parameters<typeof cacheReferencedPrincipalPolicies>[0] = {\n      execSql: runtime.infra.execSql,\n      getCurrentPrincipalPolicy: (principalType, principalId) =>\n        runtime.apiClient.getCurrentPrincipalPolicy(principalType, principalId),\n      log: runtime.util.log,\n      organizationId,\n      reportSecurityIncident: runtime.util.reportSecurityIncident,\n      references,\n      resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,\n      stillCurrent,\n    };\n    return input;\n  };\n  const warmer = async (\n    input: Parameters<ReferencedPrincipalPolicyWarmer>[0],\n  ) => cacheReferencedPrincipalPolicies(policyInput(input));\n  const cacheBundles = (input: PrincipalPolicyBundleCacheRequest) =>\n    cachePrincipalPolicyBundles({\n      bundles: input.bundles,\n      execSql: runtime.infra.execSql,\n      getCurrentPrincipalPolicy: (principalType, principalId) =>\n        runtime.apiClient.getCurrentPrincipalPolicy(principalType, principalId),\n      log: runtime.util.log,\n      organizationId: input.organizationId,\n      reportSecurityIncident: runtime.util.reportSecurityIncident,\n      resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,\n      stillCurrent: input.stillCurrent,\n    });\n  return Object.assign(warmer, { cacheBundles });\n}\n"]}

package/workflows/registration/bootstrapRootContainer.d.ts

@@ -0,0 +1,7 @@
+import { type ExecSql, type ExecSqlClientLike } from "../../data/sqlite/sqlSchema.js";
+interface RootContainerBootstrapResult {
+    containerId: string;
+    created: boolean;
+}
+export declare function bootstrapRootContainer(input: ExecSql | ExecSqlClientLike): Promise<RootContainerBootstrapResult>;
+export {};

package/workflows/registration/bootstrapRootContainer.js

@@ -0,0 +1,33 @@
+import { ensureContainerTables, loadContainers, saveContainer, } from "../../data/persistence/containers/containerPersistence.js";
+import { createExecSql, runSerializedSqlMutation, } from "../../data/sqlite/sqlSchema.js";
+async function bootstrapRootContainerFromExecSql(execSql) {
+    return runSerializedSqlMutation(execSql, async (lockedExecSql) => {
+        await ensureContainerTables(lockedExecSql);
+        const containers = await loadContainers(lockedExecSql);
+        const root = containers.find((container) => container.parentId === null && !container.systemSlot);
+        if (root) {
+            return {
+                containerId: root.id,
+                created: false,
+            };
+        }
+        const containerId = crypto.randomUUID();
+        await saveContainer(lockedExecSql, {
+            id: containerId,
+            effectiveAccessLevel: "admin",
+            organizationId: "",
+            parentId: null,
+            metadataDocumentId: null,
+            name: "/",
+            icon: null,
+        });
+        return {
+            containerId,
+            created: true,
+        };
+    });
+}
+export async function bootstrapRootContainer(input) {
+    return bootstrapRootContainerFromExecSql(typeof input === "function" ? input : createExecSql(input));
+}
+//# sourceMappingURL=bootstrapRootContainer.js.map

package/workflows/registration/bootstrapRootContainer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrapRootContainer.js","sourceRoot":"","sources":["bootstrapRootContainer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,aAAa,GACd,MAAM,wDAAwD,CAAC;AAChE,OAAO,EACL,aAAa,EAGb,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AAOrC,KAAK,UAAU,iCAAiC,CAC9C,OAAgB;IAEhB,OAAO,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC/D,MAAM,qBAAqB,CAAC,aAAa,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAC1B,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CACpE,CAAC;QAEF,IAAI,IAAI,EAAE,CAAC;YACT,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,EAAE;gBACpB,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,aAAa,CAAC,aAAa,EAAE;YACjC,EAAE,EAAE,WAAW;YACf,oBAAoB,EAAE,OAAO;YAC7B,cAAc,EAAE,EAAE;YAClB,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,IAAI;YACxB,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QAEH,OAAO;YACL,WAAW;YACX,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAkC;IAElC,OAAO,iCAAiC,CACtC,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAC3D,CAAC;AACJ,CAAC","sourcesContent":["import {\n  ensureContainerTables,\n  loadContainers,\n  saveContainer,\n} from \"../../data/persistence/containers/containerPersistence\";\nimport {\n  createExecSql,\n  type ExecSql,\n  type ExecSqlClientLike,\n  runSerializedSqlMutation,\n} from \"../../data/sqlite/sqlSchema\";\n\ninterface RootContainerBootstrapResult {\n  containerId: string;\n  created: boolean;\n}\n\nasync function bootstrapRootContainerFromExecSql(\n  execSql: ExecSql,\n): Promise<RootContainerBootstrapResult> {\n  return runSerializedSqlMutation(execSql, async (lockedExecSql) => {\n    await ensureContainerTables(lockedExecSql);\n    const containers = await loadContainers(lockedExecSql);\n    const root = containers.find(\n      (container) => container.parentId === null && !container.systemSlot,\n    );\n\n    if (root) {\n      return {\n        containerId: root.id,\n        created: false,\n      };\n    }\n\n    const containerId = crypto.randomUUID();\n    await saveContainer(lockedExecSql, {\n      id: containerId,\n      effectiveAccessLevel: \"admin\",\n      organizationId: \"\",\n      parentId: null,\n      metadataDocumentId: null,\n      name: \"/\",\n      icon: null,\n    });\n\n    return {\n      containerId,\n      created: true,\n    };\n  });\n}\n\nexport async function bootstrapRootContainer(\n  input: ExecSql | ExecSqlClientLike,\n): Promise<RootContainerBootstrapResult> {\n  return bootstrapRootContainerFromExecSql(\n    typeof input === \"function\" ? input : createExecSql(input),\n  );\n}\n"]}

package/workflows/registration/index.d.ts

@@ -0,0 +1,5 @@
+export { bootstrapRootContainer } from "./bootstrapRootContainer.js";
+export { persistRegistrationBootstrap } from "./persistRegistrationBootstrap.js";
+export { buildInitialOrganizationPolicyRequest, type ProvisionedSystemContainerSpec, type RegisterIdentityInput, type RegistrationApi, registerIdentity, } from "./registerIdentity.js";
+export { principalPolicyBundleFromInitialGroupRequest } from "./registrationPrincipalPolicyPersistence.js";
+export { createInitialRootMetadataBootstrap, type InitialRootMetadataBootstrap, } from "./rootMetadataBootstrap.js";

package/workflows/registration/index.js

@@ -0,0 +1,6 @@
+export { bootstrapRootContainer } from "./bootstrapRootContainer.js";
+export { persistRegistrationBootstrap } from "./persistRegistrationBootstrap.js";
+export { buildInitialOrganizationPolicyRequest, registerIdentity, } from "./registerIdentity.js";
+export { principalPolicyBundleFromInitialGroupRequest } from "./registrationPrincipalPolicyPersistence.js";
+export { createInitialRootMetadataBootstrap, } from "./rootMetadataBootstrap.js";
+//# sourceMappingURL=index.js.map

package/workflows/registration/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EACL,qCAAqC,EAIrC,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,4CAA4C,EAAE,MAAM,0CAA0C,CAAC;AACxG,OAAO,EACL,kCAAkC,GAEnC,MAAM,yBAAyB,CAAC","sourcesContent":["export { bootstrapRootContainer } from \"./bootstrapRootContainer\";\nexport { persistRegistrationBootstrap } from \"./persistRegistrationBootstrap\";\nexport {\n  buildInitialOrganizationPolicyRequest,\n  type ProvisionedSystemContainerSpec,\n  type RegisterIdentityInput,\n  type RegistrationApi,\n  registerIdentity,\n} from \"./registerIdentity\";\nexport { principalPolicyBundleFromInitialGroupRequest } from \"./registrationPrincipalPolicyPersistence\";\nexport {\n  createInitialRootMetadataBootstrap,\n  type InitialRootMetadataBootstrap,\n} from \"./rootMetadataBootstrap\";\n"]}

package/workflows/registration/organizationProvisioningArtifacts.d.ts

@@ -0,0 +1,60 @@
+import type { ContainerSystemSlot } from "../../internal/validators/containerSystemSlot.js";
+import type { CreateOrganizationGroupRequest, ProvisionedDocumentRequest, ProvisionedSystemContainerRequest, RegistrationRequest } from "../../internal/validators/request/index.js";
+import type { OrganizationReplacementAuthorization } from "../../internal/validators/util/index.js";
+import type { buildContainerCreatePlan } from "../containers/child/create.js";
+import type { buildRootContainerCreatePlan } from "../containers/root/create.js";
+import type { buildMaterializedDocumentCreatePlan } from "../documents/create.js";
+import type { createInitialRootMetadataBootstrap } from "./rootMetadataBootstrap.js";
+export type InitialRootMetadataDocument = Awaited<ReturnType<typeof buildMaterializedDocumentCreatePlan>>;
+export type InitialRootContainerCreatePlan = Awaited<ReturnType<typeof buildRootContainerCreatePlan>>;
+export interface InitialSystemContainerCreatePlan {
+    containerKey: Uint8Array;
+    plan: Awaited<ReturnType<typeof buildContainerCreatePlan>>;
+}
+export interface InitialRosterProfileBootstrap {
+    containerId: string;
+    containerMetadataDocument: InitialRootMetadataDocument;
+    containerMetadataInitialUpdate: Uint8Array;
+    containerPlan: InitialSystemContainerCreatePlan;
+    containerRequest: ProvisionedSystemContainerRequest;
+    profileDocument: InitialRootMetadataDocument;
+    profileDocumentInitialUpdate: Uint8Array;
+    profileDocumentRequest: ProvisionedDocumentRequest;
+    systemSlot: ContainerSystemSlot;
+}
+export interface InitialSystemContainerBootstrap {
+    containerId: string;
+    containerMetadataDocument: InitialRootMetadataDocument;
+    containerMetadataInitialUpdate: Uint8Array;
+    containerPlan: InitialSystemContainerCreatePlan;
+    containerRequest: ProvisionedSystemContainerRequest;
+    icon: string | null;
+    name: string;
+    systemSlot: ContainerSystemSlot;
+}
+export interface InitialOrganizationMetadataBootstrap {
+    containerId: string;
+    containerMetadataDocument: InitialRootMetadataDocument;
+    containerMetadataInitialUpdate: Uint8Array;
+    containerPlan: InitialSystemContainerCreatePlan;
+    containerRequest: ProvisionedSystemContainerRequest;
+    organizationProfileDocument: InitialRootMetadataDocument;
+    organizationProfileDocumentRequest: ProvisionedDocumentRequest;
+    organizationProfileSnapshot: string;
+    systemSlot: ContainerSystemSlot;
+}
+export interface OrganizationProvisioningArtifacts {
+    replacementAuthorization: OrganizationReplacementAuthorization | null;
+    bootstrap: Awaited<ReturnType<typeof createInitialRootMetadataBootstrap>>;
+    initialAdminGroup: CreateOrganizationGroupRequest;
+    initialMemberGroup: CreateOrganizationGroupRequest;
+    initialOrganizationPolicy: RegistrationRequest["initialOrganizationPolicy"];
+    initialRootContainer: RegistrationRequest["initialRootContainer"];
+    organizationId: string;
+    organizationMetadataBootstrap: InitialOrganizationMetadataBootstrap;
+    rootContainer: InitialRootContainerCreatePlan;
+    rootMetadataDocument: InitialRootMetadataDocument;
+    rootMetadataDocumentRequest: ProvisionedDocumentRequest;
+    rosterProfileBootstrap: InitialRosterProfileBootstrap;
+    systemContainerBootstraps: InitialSystemContainerBootstrap[];
+}

package/workflows/registration/organizationProvisioningArtifacts.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=organizationProvisioningArtifacts.js.map

package/workflows/registration/organizationProvisioningArtifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationProvisioningArtifacts.js","sourceRoot":"","sources":["organizationProvisioningArtifacts.ts"],"names":[],"mappings":"","sourcesContent":["import type { ContainerSystemSlot } from \"@tearleads/validators/containerSystemSlot\";\nimport type {\n  CreateOrganizationGroupRequest,\n  ProvisionedDocumentRequest,\n  ProvisionedSystemContainerRequest,\n  RegistrationRequest,\n} from \"@tearleads/validators/request\";\nimport type { OrganizationReplacementAuthorization } from \"@tearleads/validators/util\";\nimport type { buildContainerCreatePlan } from \"../containers/child/create\";\nimport type { buildRootContainerCreatePlan } from \"../containers/root/create\";\nimport type { buildMaterializedDocumentCreatePlan } from \"../documents/create\";\nimport type { createInitialRootMetadataBootstrap } from \"./rootMetadataBootstrap\";\n\nexport type InitialRootMetadataDocument = Awaited<\n  ReturnType<typeof buildMaterializedDocumentCreatePlan>\n>;\n\nexport type InitialRootContainerCreatePlan = Awaited<\n  ReturnType<typeof buildRootContainerCreatePlan>\n>;\n\nexport interface InitialSystemContainerCreatePlan {\n  containerKey: Uint8Array;\n  plan: Awaited<ReturnType<typeof buildContainerCreatePlan>>;\n}\n\nexport interface InitialRosterProfileBootstrap {\n  containerId: string;\n  containerMetadataDocument: InitialRootMetadataDocument;\n  containerMetadataInitialUpdate: Uint8Array;\n  containerPlan: InitialSystemContainerCreatePlan;\n  containerRequest: ProvisionedSystemContainerRequest;\n  profileDocument: InitialRootMetadataDocument;\n  profileDocumentInitialUpdate: Uint8Array;\n  profileDocumentRequest: ProvisionedDocumentRequest;\n  systemSlot: ContainerSystemSlot;\n}\n\nexport interface InitialSystemContainerBootstrap {\n  containerId: string;\n  containerMetadataDocument: InitialRootMetadataDocument;\n  containerMetadataInitialUpdate: Uint8Array;\n  containerPlan: InitialSystemContainerCreatePlan;\n  containerRequest: ProvisionedSystemContainerRequest;\n  icon: string | null;\n  name: string;\n  systemSlot: ContainerSystemSlot;\n}\n\nexport interface InitialOrganizationMetadataBootstrap {\n  containerId: string;\n  containerMetadataDocument: InitialRootMetadataDocument;\n  containerMetadataInitialUpdate: Uint8Array;\n  containerPlan: InitialSystemContainerCreatePlan;\n  containerRequest: ProvisionedSystemContainerRequest;\n  organizationProfileDocument: InitialRootMetadataDocument;\n  organizationProfileDocumentRequest: ProvisionedDocumentRequest;\n  organizationProfileSnapshot: string;\n  systemSlot: ContainerSystemSlot;\n}\n\nexport interface OrganizationProvisioningArtifacts {\n  replacementAuthorization: OrganizationReplacementAuthorization | null;\n  bootstrap: Awaited<ReturnType<typeof createInitialRootMetadataBootstrap>>;\n  initialAdminGroup: CreateOrganizationGroupRequest;\n  initialMemberGroup: CreateOrganizationGroupRequest;\n  initialOrganizationPolicy: RegistrationRequest[\"initialOrganizationPolicy\"];\n  initialRootContainer: RegistrationRequest[\"initialRootContainer\"];\n  organizationId: string;\n  organizationMetadataBootstrap: InitialOrganizationMetadataBootstrap;\n  rootContainer: InitialRootContainerCreatePlan;\n  rootMetadataDocument: InitialRootMetadataDocument;\n  rootMetadataDocumentRequest: ProvisionedDocumentRequest;\n  rosterProfileBootstrap: InitialRosterProfileBootstrap;\n  systemContainerBootstraps: InitialSystemContainerBootstrap[];\n}\n"]}

package/workflows/registration/organizationProvisioningPersistence.d.ts

@@ -0,0 +1,18 @@
+import type { OrganizationProvisioningResponse } from "../../internal/validators/response/index.js";
+import type { DocumentProjectorRegistryInput } from "../../data/documents/documentKinds.js";
+import type { ExecSqlClientLike } from "../../data/sqlite/sqlSchema.js";
+import type { OrganizationProvisioningArtifacts } from "./organizationProvisioningArtifacts.js";
+type PersistOrganizationProvisioningStateInput = Pick<OrganizationProvisioningArtifacts, "bootstrap" | "initialAdminGroup" | "initialMemberGroup" | "initialOrganizationPolicy" | "organizationMetadataBootstrap" | "rootContainer" | "rootMetadataDocument" | "rootMetadataDocumentRequest" | "rosterProfileBootstrap" | "systemContainerBootstraps"> & {
+    /** Forwarded to the bootstrap persist's in-mutex currency check. */
+    readonly canStartDurableMutation?: (() => boolean) | undefined;
+    /** @internal Forwarded to the bootstrap persist; test-only seam. */
+    readonly onPersistQueued?: (() => void) | undefined;
+    readonly containerId: string;
+    readonly dbClient: ExecSqlClientLike;
+    readonly documentProjectors?: DocumentProjectorRegistryInput | undefined;
+    readonly log?: ((message: string) => void) | undefined;
+    readonly logError?: ((message: string | Error, cause?: unknown) => void) | undefined;
+    readonly response: OrganizationProvisioningResponse;
+};
+export declare function persistOrganizationProvisioningState(input: PersistOrganizationProvisioningStateInput): Promise<void>;
+export {};

package/workflows/registration/organizationProvisioningPersistence.js

@@ -0,0 +1,164 @@
+import { bytesToBase64 } from "../../internal/encoding/index.js";
+import { persistedDocumentCreateStateFromResponse } from "../../data/documents/shared/responses.js";
+import { createExecSql } from "../../data/sqlite/sqlSchema.js";
+import { persistRegistrationBootstrapFromExecSql } from "./persistRegistrationBootstrap.js";
+import { buildOrganizationProfileBootstrapInput, buildRosterProfileBootstrapInput, } from "./profileBootstrapPersistence.js";
+import { provisioningAcknowledgedAccessHeads } from "./provisioningAcknowledgement.js";
+import { principalPolicyBundleFromInitialGroupRequest, principalPolicyBundleFromInitialOrganizationRequest, } from "./registrationPrincipalPolicyPersistence.js";
+function coreMetadataInitialUpdateCommitted(response, updateId) {
+    return (updateId !== undefined &&
+        response.committedCoreMetadataUpdateIds.includes(updateId));
+}
+function buildCoreContainerBootstrapInput(response, container, bootstrap) {
+    return {
+        accessEpoch: container.container.manifestHead.epoch,
+        accessStateHash: container.container.manifestHead.manifestHash,
+        containerId: bootstrap.containerId,
+        createdAt: container.container.createdAt,
+        metadataDocumentId: container.metadataDocument.id,
+        metadataInitialUpdate: bootstrap.containerMetadataInitialUpdate,
+        metadataInitialUpdateCommitted: coreMetadataInitialUpdateCommitted(response, bootstrap.containerRequest.initialMetadataSync.outgoingUpdates[0]?.id),
+        metadataSnapshot: bytesToBase64(bootstrap.containerMetadataInitialUpdate),
+        metadataState: persistedDocumentCreateStateFromResponse(bootstrap.containerMetadataDocument.plan, container.metadataDocument),
+        systemSlot: bootstrap.systemSlot,
+        updatedAt: container.container.updatedAt,
+    };
+}
+function buildSystemContainersBootstrapInput(input) {
+    const responses = input.response.systemContainers;
+    if (responses.length === 0) {
+        return;
+    }
+    const responseByContainerId = new Map(responses.map((response) => [response.container.containerId, response]));
+    const entries = [];
+    for (const bootstrap of input.systemContainerBootstraps) {
+        const response = responseByContainerId.get(bootstrap.containerId);
+        if (!response) {
+            continue;
+        }
+        entries.push({
+            accessEpoch: response.container.manifestHead.epoch,
+            accessStateHash: response.container.manifestHead.manifestHash,
+            containerId: bootstrap.containerId,
+            createdAt: response.container.createdAt,
+            icon: bootstrap.icon,
+            metadataDocumentId: response.metadataDocument.id,
+            metadataSnapshot: bytesToBase64(bootstrap.containerMetadataInitialUpdate),
+            metadataState: persistedDocumentCreateStateFromResponse(bootstrap.containerMetadataDocument.plan, response.metadataDocument),
+            name: bootstrap.name,
+            systemSlot: bootstrap.systemSlot,
+            updatedAt: response.container.updatedAt,
+        });
+    }
+    return entries.length > 0 ? entries : undefined;
+}
+async function buildProvisioningPersistenceArtifacts(input) {
+    const acknowledgedAccessHeads = await provisioningAcknowledgedAccessHeads({
+        expectedOrganizationId: input.rootContainer.plan.state.organizationId,
+        expectedUserId: input.rootContainer.plan.event.signerUserId,
+        organizationMetadata: {
+            containerPlan: input.organizationMetadataBootstrap.containerPlan.plan,
+            metadataDocumentPlan: input.organizationMetadataBootstrap.containerMetadataDocument.plan,
+        },
+        organizationProfileDocumentPlan: input.organizationMetadataBootstrap.organizationProfileDocument.plan,
+        response: input.response,
+        rootContainerPlan: input.rootContainer.plan,
+        rootMetadataDocumentPlan: input.rootMetadataDocument.plan,
+        rosterProfile: {
+            containerPlan: input.rosterProfileBootstrap.containerPlan.plan,
+            metadataDocumentPlan: input.rosterProfileBootstrap.containerMetadataDocument.plan,
+        },
+        rosterProfileDocumentPlan: input.rosterProfileBootstrap.profileDocument.plan,
+        systemContainers: input.systemContainerBootstraps.map((bootstrap) => ({
+            containerPlan: bootstrap.containerPlan.plan,
+            metadataDocumentPlan: bootstrap.containerMetadataDocument.plan,
+        })),
+    });
+    const [initialAdminGroupPolicy, initialMemberGroupPolicy, initialOrganizationPolicy,] = await Promise.all([
+        principalPolicyBundleFromInitialGroupRequest(input.initialAdminGroup),
+        principalPolicyBundleFromInitialGroupRequest(input.initialMemberGroup),
+        principalPolicyBundleFromInitialOrganizationRequest(input.initialOrganizationPolicy),
+    ]);
+    return {
+        acknowledgedAccessHeads,
+        initialAdminGroupPolicy,
+        initialMemberGroupPolicy,
+        initialOrganizationPolicy,
+        organizationMetadataContainer: buildCoreContainerBootstrapInput(input.response, input.response.organizationMetadataContainer, input.organizationMetadataBootstrap),
+        organizationProfileDocument: buildOrganizationProfileBootstrapInput({
+            containerId: input.organizationMetadataBootstrap.containerId,
+            materializedDocument: input.organizationMetadataBootstrap.organizationProfileDocument,
+            request: input.organizationMetadataBootstrap.organizationProfileDocumentRequest,
+            response: input.response,
+            snapshot: input.organizationMetadataBootstrap.organizationProfileSnapshot,
+        }),
+        rosterProfileContainer: input.response.rosterProfileContainer
+            ? buildCoreContainerBootstrapInput(input.response, input.response.rosterProfileContainer, input.rosterProfileBootstrap)
+            : undefined,
+        rosterProfileDocument: buildRosterProfileBootstrapInput({
+            containerId: input.rosterProfileBootstrap.containerId,
+            initialUpdate: input.rosterProfileBootstrap.profileDocumentInitialUpdate,
+            materializedDocument: input.rosterProfileBootstrap.profileDocument,
+            request: input.rosterProfileBootstrap.profileDocumentRequest,
+            response: input.response,
+        }),
+        systemContainers: buildSystemContainersBootstrapInput(input),
+    };
+}
+export async function persistOrganizationProvisioningState(input) {
+    try {
+        const artifacts = await buildProvisioningPersistenceArtifacts(input);
+        const persisted = await persistRegistrationBootstrapFromExecSql(createExecSql(input.dbClient), {
+            acknowledgedAccessHeads: artifacts.acknowledgedAccessHeads,
+            canStartDurableMutation: input.canStartDurableMutation,
+            onPersistQueued: input.onPersistQueued,
+            containerId: input.containerId,
+            documentProjectors: input.documentProjectors,
+            initialAdminGroupPolicy: artifacts.initialAdminGroupPolicy,
+            initialMemberGroupPolicy: artifacts.initialMemberGroupPolicy,
+            initialOrganizationPolicy: artifacts.initialOrganizationPolicy,
+            organizationId: input.response.organizationId,
+            // The provisioning response does not expose the root container's own
+            // timestamps. Its metadata document is created in the same transaction,
+            // so its server timestamp is the acknowledged remote anchor for the
+            // locally persisted root row.
+            rootContainerServerTimestamp: input.response.rootMetadataDocument.createdAt,
+            rootMetadataAccessEpoch: input.response.rootMetadataAccessEpoch,
+            rootMetadataAccessStateHash: input.response.rootMetadataAccessStateHash,
+            rootMetadataDocumentId: input.response.rootMetadataDocumentId,
+            rootMetadataInitialUpdate: input.bootstrap.initialUpdate,
+            rootMetadataInitialUpdateCommitted: coreMetadataInitialUpdateCommitted(input.response, input.rootMetadataDocumentRequest.initialSync.outgoingUpdates[0]?.id),
+            rootMetadataSnapshot: bytesToBase64(input.bootstrap.initialUpdate),
+            rootMetadataState: persistedDocumentCreateStateFromResponse(input.rootMetadataDocument.plan, input.response.rootMetadataDocument),
+            ...(artifacts.rosterProfileContainer
+                ? { rosterProfileContainer: artifacts.rosterProfileContainer }
+                : {}),
+            organizationMetadataContainer: artifacts.organizationMetadataContainer,
+            ...(artifacts.organizationProfileDocument
+                ? {
+                    organizationProfileDocument: artifacts.organizationProfileDocument,
+                }
+                : {}),
+            ...(artifacts.rosterProfileDocument
+                ? { rosterProfileDocument: artifacts.rosterProfileDocument }
+                : {}),
+            ...(artifacts.systemContainers
+                ? { systemContainers: artifacts.systemContainers }
+                : {}),
+            userId: input.response.userId,
+        });
+        input.log?.(persisted
+            ? "Local organization bootstrap persisted"
+            : "Local organization bootstrap skipped: identity replaced");
+    }
+    catch (error) {
+        if (input.logError) {
+            input.logError("Failed to persist registration data", error);
+        }
+        else {
+            console.error("Failed to persist registration data:", error);
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=organizationProvisioningPersistence.js.map

package/workflows/registration/organizationProvisioningPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationProvisioningPersistence.js","sourceRoot":"","sources":["organizationProvisioningPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,EAAE,wCAAwC,EAAE,MAAM,uCAAuC,CAAC;AAEjG,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,OAAO,EAAE,uCAAuC,EAAE,MAAM,gCAAgC,CAAC;AACzF,OAAO,EACL,sCAAsC,EACtC,gCAAgC,GACjC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,mCAAmC,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EACL,4CAA4C,EAC5C,mDAAmD,GACpD,MAAM,0CAA0C,CAAC;AAiClD,SAAS,kCAAkC,CACzC,QAA0C,EAC1C,QAAiB;IAEjB,OAAO,CACL,QAAQ,KAAK,SAAS;QACtB,QAAQ,CAAC,8BAA8B,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,QAA0C,EAC1C,SAA4E,EAC5E,SAOC;IAED,OAAO;QACL,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK;QACnD,eAAe,EAAE,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY;QAC9D,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,SAAS;QACxC,kBAAkB,EAAE,SAAS,CAAC,gBAAgB,CAAC,EAAE;QACjD,qBAAqB,EAAE,SAAS,CAAC,8BAA8B;QAC/D,8BAA8B,EAAE,kCAAkC,CAChE,QAAQ,EACR,SAAS,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CACtE;QACD,gBAAgB,EAAE,aAAa,CAAC,SAAS,CAAC,8BAA8B,CAAC;QACzE,aAAa,EAAE,wCAAwC,CACrD,SAAS,CAAC,yBAAyB,CAAC,IAAI,EACxC,SAAS,CAAC,gBAAgB,CAC3B;QACD,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,SAAS,EAAE,SAAS,CAAC,SAAS,CAAC,SAAS;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC,CAC1C,KAAgD;IAEhD,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAClD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CACnC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CACxE,CAAC;IACF,MAAM,OAAO,GAA2D,EAAE,CAAC;IAC3E,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,yBAAyB,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK;YAClD,eAAe,EAAE,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY;YAC7D,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS;YACvC,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,kBAAkB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE;YAChD,gBAAgB,EAAE,aAAa,CAAC,SAAS,CAAC,8BAA8B,CAAC;YACzE,aAAa,EAAE,wCAAwC,CACrD,SAAS,CAAC,yBAAyB,CAAC,IAAI,EACxC,QAAQ,CAAC,gBAAgB,CAC1B;YACD,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS;SACxC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,qCAAqC,CAClD,KAAgD;IAEhD,MAAM,uBAAuB,GAAG,MAAM,mCAAmC,CAAC;QACxE,sBAAsB,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc;QACrE,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY;QAC3D,oBAAoB,EAAE;YACpB,aAAa,EAAE,KAAK,CAAC,6BAA6B,CAAC,aAAa,CAAC,IAAI;YACrE,oBAAoB,EAClB,KAAK,CAAC,6BAA6B,CAAC,yBAAyB,CAAC,IAAI;SACrE;QACD,+BAA+B,EAC7B,KAAK,CAAC,6BAA6B,CAAC,2BAA2B,CAAC,IAAI;QACtE,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI;QAC3C,wBAAwB,EAAE,KAAK,CAAC,oBAAoB,CAAC,IAAI;QACzD,aAAa,EAAE;YACb,aAAa,EAAE,KAAK,CAAC,sBAAsB,CAAC,aAAa,CAAC,IAAI;YAC9D,oBAAoB,EAClB,KAAK,CAAC,sBAAsB,CAAC,yBAAyB,CAAC,IAAI;SAC9D;QACD,yBAAyB,EACvB,KAAK,CAAC,sBAAsB,CAAC,eAAe,CAAC,IAAI;QACnD,gBAAgB,EAAE,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACpE,aAAa,EAAE,SAAS,CAAC,aAAa,CAAC,IAAI;YAC3C,oBAAoB,EAAE,SAAS,CAAC,yBAAyB,CAAC,IAAI;SAC/D,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,MAAM,CACJ,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EAC1B,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpB,4CAA4C,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACrE,4CAA4C,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACtE,mDAAmD,CACjD,KAAK,CAAC,yBAAyB,CAChC;KACF,CAAC,CAAC;IACH,OAAO;QACL,uBAAuB;QACvB,uBAAuB;QACvB,wBAAwB;QACxB,yBAAyB;QACzB,6BAA6B,EAAE,gCAAgC,CAC7D,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,QAAQ,CAAC,6BAA6B,EAC5C,KAAK,CAAC,6BAA6B,CACpC;QACD,2BAA2B,EAAE,sCAAsC,CAAC;YAClE,WAAW,EAAE,KAAK,CAAC,6BAA6B,CAAC,WAAW;YAC5D,oBAAoB,EAClB,KAAK,CAAC,6BAA6B,CAAC,2BAA2B;YACjE,OAAO,EACL,KAAK,CAAC,6BAA6B,CAAC,kCAAkC;YACxE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,6BAA6B,CAAC,2BAA2B;SAC1E,CAAC;QACF,sBAAsB,EAAE,KAAK,CAAC,QAAQ,CAAC,sBAAsB;YAC3D,CAAC,CAAC,gCAAgC,CAC9B,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,QAAQ,CAAC,sBAAsB,EACrC,KAAK,CAAC,sBAAsB,CAC7B;YACH,CAAC,CAAC,SAAS;QACb,qBAAqB,EAAE,gCAAgC,CAAC;YACtD,WAAW,EAAE,KAAK,CAAC,sBAAsB,CAAC,WAAW;YACrD,aAAa,EAAE,KAAK,CAAC,sBAAsB,CAAC,4BAA4B;YACxE,oBAAoB,EAAE,KAAK,CAAC,sBAAsB,CAAC,eAAe;YAClE,OAAO,EAAE,KAAK,CAAC,sBAAsB,CAAC,sBAAsB;YAC5D,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;QACF,gBAAgB,EAAE,mCAAmC,CAAC,KAAK,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,KAAgD;IAEhD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,qCAAqC,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,MAAM,uCAAuC,CAC7D,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAC7B;YACE,uBAAuB,EAAE,SAAS,CAAC,uBAAuB;YAC1D,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,uBAAuB,EAAE,SAAS,CAAC,uBAAuB;YAC1D,wBAAwB,EAAE,SAAS,CAAC,wBAAwB;YAC5D,yBAAyB,EAAE,SAAS,CAAC,yBAAyB;YAC9D,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,qEAAqE;YACrE,wEAAwE;YACxE,oEAAoE;YACpE,8BAA8B;YAC9B,4BAA4B,EAC1B,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,SAAS;YAC/C,uBAAuB,EAAE,KAAK,CAAC,QAAQ,CAAC,uBAAuB;YAC/D,2BAA2B,EAAE,KAAK,CAAC,QAAQ,CAAC,2BAA2B;YACvE,sBAAsB,EAAE,KAAK,CAAC,QAAQ,CAAC,sBAAsB;YAC7D,yBAAyB,EAAE,KAAK,CAAC,SAAS,CAAC,aAAa;YACxD,kCAAkC,EAAE,kCAAkC,CACpE,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,2BAA2B,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,EAAE,CACrE;YACD,oBAAoB,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC;YAClE,iBAAiB,EAAE,wCAAwC,CACzD,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAC/B,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CACpC;YACD,GAAG,CAAC,SAAS,CAAC,sBAAsB;gBAClC,CAAC,CAAC,EAAE,sBAAsB,EAAE,SAAS,CAAC,sBAAsB,EAAE;gBAC9D,CAAC,CAAC,EAAE,CAAC;YACP,6BAA6B,EAAE,SAAS,CAAC,6BAA6B;YACtE,GAAG,CAAC,SAAS,CAAC,2BAA2B;gBACvC,CAAC,CAAC;oBACE,2BAA2B,EACzB,SAAS,CAAC,2BAA2B;iBACxC;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,qBAAqB;gBACjC,CAAC,CAAC,EAAE,qBAAqB,EAAE,SAAS,CAAC,qBAAqB,EAAE;gBAC5D,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,gBAAgB;gBAC5B,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;SAC9B,CACF,CAAC;QACF,KAAK,CAAC,GAAG,EAAE,CACT,SAAS;YACP,CAAC,CAAC,wCAAwC;YAC1C,CAAC,CAAC,yDAAyD,CAC9D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,KAAK,CAAC,QAAQ,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { bytesToBase64 } from \"@tearleads/encoding\";\nimport type { OrganizationProvisioningResponse } from \"@tearleads/validators/response\";\nimport type { DocumentProjectorRegistryInput } from \"../../data/documents/documentKinds\";\nimport { persistedDocumentCreateStateFromResponse } from \"../../data/documents/shared/responses\";\nimport type { ExecSqlClientLike } from \"../../data/sqlite/sqlSchema\";\nimport { createExecSql } from \"../../data/sqlite/sqlSchema\";\nimport type { OrganizationProvisioningArtifacts } from \"./organizationProvisioningArtifacts\";\nimport { persistRegistrationBootstrapFromExecSql } from \"./persistRegistrationBootstrap\";\nimport {\n  buildOrganizationProfileBootstrapInput,\n  buildRosterProfileBootstrapInput,\n} from \"./profileBootstrapPersistence\";\nimport { provisioningAcknowledgedAccessHeads } from \"./provisioningAcknowledgement\";\nimport {\n  principalPolicyBundleFromInitialGroupRequest,\n  principalPolicyBundleFromInitialOrganizationRequest,\n} from \"./registrationPrincipalPolicyPersistence\";\n\ntype PersistOrganizationProvisioningStateInput = Pick<\n  OrganizationProvisioningArtifacts,\n  | \"bootstrap\"\n  | \"initialAdminGroup\"\n  | \"initialMemberGroup\"\n  | \"initialOrganizationPolicy\"\n  | \"organizationMetadataBootstrap\"\n  | \"rootContainer\"\n  | \"rootMetadataDocument\"\n  | \"rootMetadataDocumentRequest\"\n  | \"rosterProfileBootstrap\"\n  | \"systemContainerBootstraps\"\n> & {\n  /** Forwarded to the bootstrap persist's in-mutex currency check. */\n  readonly canStartDurableMutation?: (() => boolean) | undefined;\n  /** @internal Forwarded to the bootstrap persist; test-only seam. */\n  readonly onPersistQueued?: (() => void) | undefined;\n  readonly containerId: string;\n  readonly dbClient: ExecSqlClientLike;\n  readonly documentProjectors?: DocumentProjectorRegistryInput | undefined;\n  readonly log?: ((message: string) => void) | undefined;\n  readonly logError?:\n    | ((message: string | Error, cause?: unknown) => void)\n    | undefined;\n  readonly response: OrganizationProvisioningResponse;\n};\n\ntype PersistBootstrapInput = Parameters<\n  typeof persistRegistrationBootstrapFromExecSql\n>[1];\n\nfunction coreMetadataInitialUpdateCommitted(\n  response: OrganizationProvisioningResponse,\n  updateId?: string,\n): boolean {\n  return (\n    updateId !== undefined &&\n    response.committedCoreMetadataUpdateIds.includes(updateId)\n  );\n}\n\nfunction buildCoreContainerBootstrapInput(\n  response: OrganizationProvisioningResponse,\n  container: OrganizationProvisioningResponse[\"organizationMetadataContainer\"],\n  bootstrap: Pick<\n    OrganizationProvisioningArtifacts[\"rosterProfileBootstrap\"],\n    | \"containerId\"\n    | \"containerMetadataDocument\"\n    | \"containerMetadataInitialUpdate\"\n    | \"containerRequest\"\n    | \"systemSlot\"\n  >,\n): NonNullable<PersistBootstrapInput[\"organizationMetadataContainer\"]> {\n  return {\n    accessEpoch: container.container.manifestHead.epoch,\n    accessStateHash: container.container.manifestHead.manifestHash,\n    containerId: bootstrap.containerId,\n    createdAt: container.container.createdAt,\n    metadataDocumentId: container.metadataDocument.id,\n    metadataInitialUpdate: bootstrap.containerMetadataInitialUpdate,\n    metadataInitialUpdateCommitted: coreMetadataInitialUpdateCommitted(\n      response,\n      bootstrap.containerRequest.initialMetadataSync.outgoingUpdates[0]?.id,\n    ),\n    metadataSnapshot: bytesToBase64(bootstrap.containerMetadataInitialUpdate),\n    metadataState: persistedDocumentCreateStateFromResponse(\n      bootstrap.containerMetadataDocument.plan,\n      container.metadataDocument,\n    ),\n    systemSlot: bootstrap.systemSlot,\n    updatedAt: container.container.updatedAt,\n  };\n}\n\nfunction buildSystemContainersBootstrapInput(\n  input: PersistOrganizationProvisioningStateInput,\n): PersistBootstrapInput[\"systemContainers\"] {\n  const responses = input.response.systemContainers;\n  if (responses.length === 0) {\n    return;\n  }\n  const responseByContainerId = new Map(\n    responses.map((response) => [response.container.containerId, response]),\n  );\n  const entries: NonNullable<PersistBootstrapInput[\"systemContainers\"]> = [];\n  for (const bootstrap of input.systemContainerBootstraps) {\n    const response = responseByContainerId.get(bootstrap.containerId);\n    if (!response) {\n      continue;\n    }\n    entries.push({\n      accessEpoch: response.container.manifestHead.epoch,\n      accessStateHash: response.container.manifestHead.manifestHash,\n      containerId: bootstrap.containerId,\n      createdAt: response.container.createdAt,\n      icon: bootstrap.icon,\n      metadataDocumentId: response.metadataDocument.id,\n      metadataSnapshot: bytesToBase64(bootstrap.containerMetadataInitialUpdate),\n      metadataState: persistedDocumentCreateStateFromResponse(\n        bootstrap.containerMetadataDocument.plan,\n        response.metadataDocument,\n      ),\n      name: bootstrap.name,\n      systemSlot: bootstrap.systemSlot,\n      updatedAt: response.container.updatedAt,\n    });\n  }\n  return entries.length > 0 ? entries : undefined;\n}\n\nasync function buildProvisioningPersistenceArtifacts(\n  input: PersistOrganizationProvisioningStateInput,\n) {\n  const acknowledgedAccessHeads = await provisioningAcknowledgedAccessHeads({\n    expectedOrganizationId: input.rootContainer.plan.state.organizationId,\n    expectedUserId: input.rootContainer.plan.event.signerUserId,\n    organizationMetadata: {\n      containerPlan: input.organizationMetadataBootstrap.containerPlan.plan,\n      metadataDocumentPlan:\n        input.organizationMetadataBootstrap.containerMetadataDocument.plan,\n    },\n    organizationProfileDocumentPlan:\n      input.organizationMetadataBootstrap.organizationProfileDocument.plan,\n    response: input.response,\n    rootContainerPlan: input.rootContainer.plan,\n    rootMetadataDocumentPlan: input.rootMetadataDocument.plan,\n    rosterProfile: {\n      containerPlan: input.rosterProfileBootstrap.containerPlan.plan,\n      metadataDocumentPlan:\n        input.rosterProfileBootstrap.containerMetadataDocument.plan,\n    },\n    rosterProfileDocumentPlan:\n      input.rosterProfileBootstrap.profileDocument.plan,\n    systemContainers: input.systemContainerBootstraps.map((bootstrap) => ({\n      containerPlan: bootstrap.containerPlan.plan,\n      metadataDocumentPlan: bootstrap.containerMetadataDocument.plan,\n    })),\n  });\n  const [\n    initialAdminGroupPolicy,\n    initialMemberGroupPolicy,\n    initialOrganizationPolicy,\n  ] = await Promise.all([\n    principalPolicyBundleFromInitialGroupRequest(input.initialAdminGroup),\n    principalPolicyBundleFromInitialGroupRequest(input.initialMemberGroup),\n    principalPolicyBundleFromInitialOrganizationRequest(\n      input.initialOrganizationPolicy,\n    ),\n  ]);\n  return {\n    acknowledgedAccessHeads,\n    initialAdminGroupPolicy,\n    initialMemberGroupPolicy,\n    initialOrganizationPolicy,\n    organizationMetadataContainer: buildCoreContainerBootstrapInput(\n      input.response,\n      input.response.organizationMetadataContainer,\n      input.organizationMetadataBootstrap,\n    ),\n    organizationProfileDocument: buildOrganizationProfileBootstrapInput({\n      containerId: input.organizationMetadataBootstrap.containerId,\n      materializedDocument:\n        input.organizationMetadataBootstrap.organizationProfileDocument,\n      request:\n        input.organizationMetadataBootstrap.organizationProfileDocumentRequest,\n      response: input.response,\n      snapshot: input.organizationMetadataBootstrap.organizationProfileSnapshot,\n    }),\n    rosterProfileContainer: input.response.rosterProfileContainer\n      ? buildCoreContainerBootstrapInput(\n          input.response,\n          input.response.rosterProfileContainer,\n          input.rosterProfileBootstrap,\n        )\n      : undefined,\n    rosterProfileDocument: buildRosterProfileBootstrapInput({\n      containerId: input.rosterProfileBootstrap.containerId,\n      initialUpdate: input.rosterProfileBootstrap.profileDocumentInitialUpdate,\n      materializedDocument: input.rosterProfileBootstrap.profileDocument,\n      request: input.rosterProfileBootstrap.profileDocumentRequest,\n      response: input.response,\n    }),\n    systemContainers: buildSystemContainersBootstrapInput(input),\n  };\n}\n\nexport async function persistOrganizationProvisioningState(\n  input: PersistOrganizationProvisioningStateInput,\n): Promise<void> {\n  try {\n    const artifacts = await buildProvisioningPersistenceArtifacts(input);\n    const persisted = await persistRegistrationBootstrapFromExecSql(\n      createExecSql(input.dbClient),\n      {\n        acknowledgedAccessHeads: artifacts.acknowledgedAccessHeads,\n        canStartDurableMutation: input.canStartDurableMutation,\n        onPersistQueued: input.onPersistQueued,\n        containerId: input.containerId,\n        documentProjectors: input.documentProjectors,\n        initialAdminGroupPolicy: artifacts.initialAdminGroupPolicy,\n        initialMemberGroupPolicy: artifacts.initialMemberGroupPolicy,\n        initialOrganizationPolicy: artifacts.initialOrganizationPolicy,\n        organizationId: input.response.organizationId,\n        // The provisioning response does not expose the root container's own\n        // timestamps. Its metadata document is created in the same transaction,\n        // so its server timestamp is the acknowledged remote anchor for the\n        // locally persisted root row.\n        rootContainerServerTimestamp:\n          input.response.rootMetadataDocument.createdAt,\n        rootMetadataAccessEpoch: input.response.rootMetadataAccessEpoch,\n        rootMetadataAccessStateHash: input.response.rootMetadataAccessStateHash,\n        rootMetadataDocumentId: input.response.rootMetadataDocumentId,\n        rootMetadataInitialUpdate: input.bootstrap.initialUpdate,\n        rootMetadataInitialUpdateCommitted: coreMetadataInitialUpdateCommitted(\n          input.response,\n          input.rootMetadataDocumentRequest.initialSync.outgoingUpdates[0]?.id,\n        ),\n        rootMetadataSnapshot: bytesToBase64(input.bootstrap.initialUpdate),\n        rootMetadataState: persistedDocumentCreateStateFromResponse(\n          input.rootMetadataDocument.plan,\n          input.response.rootMetadataDocument,\n        ),\n        ...(artifacts.rosterProfileContainer\n          ? { rosterProfileContainer: artifacts.rosterProfileContainer }\n          : {}),\n        organizationMetadataContainer: artifacts.organizationMetadataContainer,\n        ...(artifacts.organizationProfileDocument\n          ? {\n              organizationProfileDocument:\n                artifacts.organizationProfileDocument,\n            }\n          : {}),\n        ...(artifacts.rosterProfileDocument\n          ? { rosterProfileDocument: artifacts.rosterProfileDocument }\n          : {}),\n        ...(artifacts.systemContainers\n          ? { systemContainers: artifacts.systemContainers }\n          : {}),\n        userId: input.response.userId,\n      },\n    );\n    input.log?.(\n      persisted\n        ? \"Local organization bootstrap persisted\"\n        : \"Local organization bootstrap skipped: identity replaced\",\n    );\n  } catch (error: unknown) {\n    if (input.logError) {\n      input.logError(\"Failed to persist registration data\", error);\n    } else {\n      console.error(\"Failed to persist registration data:\", error);\n    }\n    throw error;\n  }\n}\n"]}

package/workflows/registration/persistRegistrationBootstrap.d.ts

@@ -0,0 +1,93 @@
+import type { ContainerSystemSlot } from "../../internal/validators/containerSystemSlot.js";
+import type { PrincipalPolicyBundleResponse } from "../../internal/validators/response/index.js";
+import type { DocumentProjectorRegistryInput } from "../../data/documents/documentKinds.js";
+import { type LocallyAcknowledgedAccessManifestHead } from "../../data/persistence/locallyAcknowledgedCheckpointPersistence.js";
+import type { DocumentRecord } from "../../data/sqlite/documentPersistence.js";
+import { type ExecSql, type ExecSqlClientLike } from "../../data/sqlite/sqlSchema.js";
+interface ProvisionedContainerBootstrapInput {
+    accessEpoch: number;
+    accessStateHash: string;
+    containerId: string;
+    createdAt: string;
+    metadataDocumentId: string;
+    metadataSnapshot: string;
+    metadataState: Pick<DocumentRecord, "documentId" | "contentKeyBundle" | "documentKekTargets" | "documentManifestBundle">;
+    systemSlot: ContainerSystemSlot;
+    updatedAt: string;
+}
+interface ProvisionedProfileDocumentBootstrapInput {
+    accessEpoch: number;
+    accessStateHash: string;
+    containerId: string;
+    documentId: string;
+    documentState: ProvisionedContainerBootstrapInput["metadataState"];
+    initialUpdate: Uint8Array;
+    initialUpdateCommitted: boolean;
+    localId: string;
+}
+export interface RegistrationBootstrapInput {
+    acknowledgedAccessHeads: readonly LocallyAcknowledgedAccessManifestHead[];
+    /** Checked inside the mutation queue claim; false skips every write. */
+    canStartDurableMutation?: (() => boolean) | undefined;
+    /**
+     * @internal Test-only synchronization seam. Invoked synchronously,
+     * immediately before this persist joins the serialized mutation queue —
+     * no interleaving can separate the two. Lets identity-race tests
+     * deterministically place an identity replacement inside the queue-wait
+     * window instead of sleeping.
+     */
+    onPersistQueued?: (() => void) | undefined;
+    containerId: string;
+    initialAdminGroupPolicy: PrincipalPolicyBundleResponse;
+    initialMemberGroupPolicy: PrincipalPolicyBundleResponse;
+    initialOrganizationPolicy: PrincipalPolicyBundleResponse;
+    rootMetadataAccessEpoch: number;
+    rootMetadataAccessStateHash: string;
+    rootContainerServerTimestamp: string;
+    rootMetadataDocumentId: string;
+    rootMetadataInitialUpdate: Uint8Array;
+    rootMetadataInitialUpdateCommitted?: boolean | undefined;
+    rootMetadataSnapshot: string;
+    rootMetadataState: ProvisionedContainerBootstrapInput["metadataState"];
+    rosterProfileContainer?: ProvisionedContainerBootstrapInput & {
+        metadataInitialUpdate: Uint8Array;
+        metadataInitialUpdateCommitted?: boolean | undefined;
+    };
+    organizationMetadataContainer?: ProvisionedContainerBootstrapInput & {
+        metadataInitialUpdate: Uint8Array;
+        metadataInitialUpdateCommitted?: boolean | undefined;
+    };
+    organizationProfileDocument?: ProvisionedProfileDocumentBootstrapInput;
+    rosterProfileDocument?: ProvisionedProfileDocumentBootstrapInput;
+    systemContainers?: Array<ProvisionedContainerBootstrapInput & {
+        icon: string | null;
+        name: string;
+    }>;
+    documentProjectors?: DocumentProjectorRegistryInput | undefined;
+    organizationId: string;
+    userId: string;
+}
+export declare function persistInitialDocumentBootstrap(execSql: ExecSql, input: {
+    accessEpoch: number;
+    accessStateHash: string;
+    containerId: string;
+    documentId: string;
+    documentKind: string;
+    documentProjectors: DocumentProjectorRegistryInput | undefined;
+    documentState: Pick<DocumentRecord, "contentKeyBundle" | "documentKekTargets" | "documentManifestBundle">;
+    initialUpdate: Uint8Array;
+    initialUpdateCommitted: boolean;
+    localId: string;
+}): Promise<void>;
+/**
+ * Persists the local root-container bootstrap created during successful
+ * registration so container contents can initialize from SQLite on first
+ * login — atomically: every write lands inside ONE transaction whose last
+ * act re-checks identity currency, so an identity replaced anywhere between
+ * the queue claim and the commit rolls the entire bootstrap back instead of
+ * leaving a partial one. Resolves false when either currency check rejected
+ * the write, so callers do not report a bootstrap that was never persisted.
+ */
+export declare function persistRegistrationBootstrapFromExecSql(execSql: ExecSql, input: RegistrationBootstrapInput): Promise<boolean>;
+export declare function persistRegistrationBootstrap(client: ExecSqlClientLike, input: RegistrationBootstrapInput): Promise<void>;
+export {};