@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/internal/validators/request/documentSyncSchema.js

@@ -0,0 +1,208 @@
+import { z } from "zod";
+import { classifyDocumentSyncCheckpointFields, DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE, DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND, DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND, } from "../documentSyncCheckpoint.js";
+import { documentSyncRequestEnvelopeRefinements, documentSyncRequestPullRefinements, documentSyncRequestRotationRefinement, } from "../documentSyncRefinements.js";
+import { classifyDocumentSyncRequestMode } from "../documentSyncRequestMode.js";
+import { isPlainObject } from "../isPlainObject.js";
+import { registerJsonSchemaFragment, registerJsonSchemaRuntimeRefinements, registerJsonSchemaView, } from "../jsonSchema.js";
+import { arraySchema, boundedNonEmptyArraySchema, boundedNonEmptyStringSchema, boundedStringSchema, loosePlainObject, nonEmptyStringSchema, plainObjectSchema, positiveIntegerSchema, requiredUnknownSchema, sha256HexStringSchema, } from "../schema.js";
+import { AccessManifestBundleWireSchema } from "../util/accessManifestBundle.js";
+import { MAX_INLINE_CONTAINER_REKEYS } from "../util/containerKekKeyringWire.js";
+import { MAX_CONTAINER_PATH_LENGTH } from "../util/containerLimits.js";
+import { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS, MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS, MAX_DOCUMENT_SYNC_OUTGOING_UPDATES, MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH, MAX_DOCUMENT_SYNC_REQUEST_BYTES, } from "../util/documentSyncLimits.js";
+import { isUuidV4String, UUID_V4_PATTERN } from "../util/uuid.js";
+import { isWalLsnString, WAL_LSN_PATTERN } from "../util/walLsn.js";
+import { ContainerMutationRequestSchema, } from "./container.js";
+import { ContentKeyWrappedKeySchema, contentKeyWrappingMetadataSchema, } from "./contentKeyEnvelopeSchema.js";
+/**
+ * A reference to a container access manifest the server already stores, in lieu
+ * of re-embedding the full signed manifest bundle. The server resolves the full
+ * manifest from its own store by `manifestHash` and pins it to the container's
+ * current head, so the reference carries the same authority as the full bundle
+ * without the multi-KB signature. `containerId` is advisory: the server keys the
+ * head lookup off the resolved bundle's own containerId and rejects a mismatch.
+ */
+export const ContainerManifestRefSchema = loosePlainObject({
+    containerId: nonEmptyStringSchema,
+    manifestHash: nonEmptyStringSchema,
+});
+export const ContainerManifestPathSchema = boundedNonEmptyArraySchema(ContainerManifestRefSchema, MAX_CONTAINER_PATH_LENGTH);
+export const ContainerManifestRefArrayArraySchema = arraySchema(ContainerManifestPathSchema, MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS);
+export const DocumentContentKeyTargetEnvelopeSchema = loosePlainObject({
+    containerId: nonEmptyStringSchema,
+    containerKeyEpoch: positiveIntegerSchema,
+    containerKeyEpochId: nonEmptyStringSchema,
+    containerManifestHash: nonEmptyStringSchema,
+    wrappedKey: ContentKeyWrappedKeySchema,
+    wrappingMetadata: contentKeyWrappingMetadataSchema("document"),
+});
+export const DocumentContentKeyBundleRequestSchema = loosePlainObject({
+    contentKeyEpoch: positiveIntegerSchema,
+    linkSetManifestHash: nonEmptyStringSchema,
+    targetHash: nonEmptyStringSchema,
+    targets: arraySchema(DocumentContentKeyTargetEnvelopeSchema, MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS),
+});
+function createDocumentOutgoingUpdateSchema(encryptedDataSchema, versionVectorSchema) {
+    return registerJsonSchemaRuntimeRefinements(loosePlainObject({
+        checkpointKind: z
+            .literal(DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND)
+            .optional(),
+        checkpointPayloadKind: z
+            .literal(DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND)
+            .optional(),
+        encryptedData: encryptedDataSchema,
+        id: registerJsonSchemaFragment(z.string().refine(isUuidV4String), {
+            pattern: UUID_V4_PATTERN.source,
+            type: "string",
+        }),
+        partialEndVersionVector: versionVectorSchema,
+        partialStartVersionVector: versionVectorSchema,
+        plaintextHash: nonEmptyStringSchema,
+        sourceVersionVector: versionVectorSchema.optional(),
+        writeHeader: plainObjectSchema,
+    }).superRefine((update, context) => {
+        if (classifyDocumentSyncCheckpointFields(update) === "invalid") {
+            context.addIssue({
+                code: "custom",
+                message: DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE,
+            });
+        }
+    }), [documentSyncRequestRotationRefinement]);
+}
+// Link-set rotations may carry a full-history baseline that is larger than a
+// single sync request. Their route has its own ingress policy, so keep the
+// shared update contract unbounded and apply the sync-specific ceiling only
+// where an update is embedded in DocumentSyncRequest.
+export const DocumentOutgoingUpdateSchema = createDocumentOutgoingUpdateSchema(nonEmptyStringSchema, nonEmptyStringSchema);
+const DocumentSyncOutgoingUpdateSchema = createDocumentOutgoingUpdateSchema(boundedNonEmptyStringSchema(MAX_DOCUMENT_SYNC_REQUEST_BYTES), boundedNonEmptyStringSchema(MAX_DOCUMENT_SYNC_REQUEST_BYTES));
+// Document sync published container keyrings as opaque records before the
+// canonical container-mutation schema described their fields. Keep that one
+// existing OpenAPI view stable while runtime validation delegates to the shared
+// schema used by newer operations.
+const DocumentSyncContainerMutationRequestSchema = registerJsonSchemaView(z.custom((value) => ContainerMutationRequestSchema.safeParse(value).success), z.looseObject({
+    body: requiredUnknownSchema,
+    containerManifestHistory: z
+        .array(AccessManifestBundleWireSchema)
+        .optional(),
+    destinationParentContainerPath: z
+        .array(AccessManifestBundleWireSchema)
+        .optional(),
+    event: plainObjectSchema,
+    expectedManifestHash: nonEmptyStringSchema,
+    keyEpoch: plainObjectSchema,
+    keyring: plainObjectSchema.nullable(),
+    manifest: plainObjectSchema,
+    parentContainerPath: z.array(AccessManifestBundleWireSchema).optional(),
+    parentKekState: plainObjectSchema.nullable().optional(),
+    predecessorBridge: plainObjectSchema.nullable(),
+    previousContainerPath: z.array(AccessManifestBundleWireSchema).optional(),
+    previousManifest: AccessManifestBundleWireSchema.nullable().optional(),
+    principalPolicies: z.array(plainObjectSchema),
+    userRecipientKeys: z.array(plainObjectSchema).optional(),
+    wraps: z.array(plainObjectSchema),
+}));
+const WalLsnSchema = registerJsonSchemaFragment(z.string().refine(isWalLsnString), { pattern: WAL_LSN_PATTERN.source, type: "string" });
+export const DocumentSyncRequestSchema = registerJsonSchemaRuntimeRefinements(loosePlainObject({
+    authorizingContainerPathRefs: ContainerManifestRefArrayArraySchema.optional(),
+    // Each rotation carries a keyring sized by its epoch, so the batch is
+    // bounded here as well as in the runtime guard.
+    containerRekeys: arraySchema(DocumentSyncContainerMutationRequestSchema, MAX_INLINE_CONTAINER_REKEYS).optional(),
+    contentKeyBundle: DocumentContentKeyBundleRequestSchema.optional(),
+    contentKeyEpoch: positiveIntegerSchema,
+    expectedLinkSetManifestHash: nonEmptyStringSchema,
+    expectedTargetHash: nonEmptyStringSchema,
+    historyMode: z
+        .literal("raw")
+        .describe("Explicit read-only recovery mode that bypasses rotation-baseline redirection and returns retained missing history")
+        .optional(),
+    inlineRekeyCommitId: sha256HexStringSchema.optional(),
+    localVersionVector: boundedStringSchema(MAX_DOCUMENT_SYNC_REQUEST_BYTES).nullable(),
+    minLsn: WalLsnSchema.optional(),
+    outgoingUpdates: arraySchema(DocumentSyncOutgoingUpdateSchema, MAX_DOCUMENT_SYNC_OUTGOING_UPDATES),
+    pullCursor: boundedNonEmptyStringSchema(MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH).optional(),
+    supportsPullPagination: z.literal(true),
+}).superRefine((request, context) => {
+    if (!Array.isArray(request.outgoingUpdates)) {
+        return;
+    }
+    // The field schemas have already recorded their cardinality errors. Do
+    // not let the cross-field checks below rescan attacker-sized arrays after
+    // those bounded schemas deliberately stopped before item validation.
+    if (request.outgoingUpdates.length > MAX_DOCUMENT_SYNC_OUTGOING_UPDATES) {
+        return;
+    }
+    if (Array.isArray(request.authorizingContainerPathRefs) &&
+        request.authorizingContainerPathRefs.length >
+            MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS) {
+        return;
+    }
+    const hasOutgoingUpdates = request.outgoingUpdates.length > 0;
+    if ((request.containerRekeys?.length ?? 0) > 0 !==
+        (request.inlineRekeyCommitId !== undefined)) {
+        context.addIssue({
+            code: "custom",
+            message: "inline rekey commit id must accompany container rekeys",
+            path: ["inlineRekeyCommitId"],
+        });
+    }
+    if (request.pullCursor !== undefined &&
+        (hasOutgoingUpdates ||
+            (request.containerRekeys?.length ?? 0) > 0 ||
+            request.contentKeyBundle !== undefined ||
+            request.authorizingContainerPathRefs !== undefined)) {
+        context.addIssue({
+            code: "custom",
+            message: "continued pulls must be read-only",
+            path: ["pullCursor"],
+        });
+    }
+    if (request.historyMode === "raw" &&
+        (hasOutgoingUpdates ||
+            (request.containerRekeys?.length ?? 0) > 0 ||
+            request.contentKeyBundle !== undefined ||
+            request.authorizingContainerPathRefs !== undefined)) {
+        context.addIssue({
+            code: "custom",
+            message: "raw-history pulls must be read-only",
+            path: ["historyMode"],
+        });
+    }
+    if (request.historyMode === "raw" && request.localVersionVector !== null) {
+        context.addIssue({
+            code: "custom",
+            message: "raw-history pulls must start from a null version vector",
+            path: ["localVersionVector"],
+        });
+    }
+    const requestMode = classifyDocumentSyncRequestMode({
+        authorizingContainerPathRefsPresent: request.authorizingContainerPathRefs !== undefined,
+        hasContainerRekeys: (request.containerRekeys?.length ?? 0) > 0,
+        hasOutgoingUpdates,
+    });
+    if (requestMode === "invalid-authorizing-path-refs-absent") {
+        context.addIssue({
+            code: "custom",
+            message: "authorizing container paths are required for outgoing updates",
+            path: ["authorizingContainerPathRefs"],
+        });
+    }
+    if (requestMode === "invalid-rekeys-without-write") {
+        context.addIssue({
+            code: "custom",
+            message: "container rekeys require an outgoing update",
+            path: ["containerRekeys"],
+        });
+    }
+    if (new Set(request.outgoingUpdates
+        .filter(isPlainObject)
+        .map((update) => Reflect.get(update, "id"))).size !== request.outgoingUpdates.length) {
+        context.addIssue({
+            code: "custom",
+            message: "outgoing update ids must be unique",
+            path: ["outgoingUpdates"],
+        });
+    }
+}), [
+    ...documentSyncRequestEnvelopeRefinements,
+    ...documentSyncRequestPullRefinements,
+]);
+//# sourceMappingURL=documentSyncSchema.js.map

package/internal/validators/request/documentSyncSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documentSyncSchema.js","sourceRoot":"","sources":["documentSyncSchema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oCAAoC,EACpC,gDAAgD,EAChD,sCAAsC,EACtC,8CAA8C,GAC/C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sCAAsC,EACtC,kCAAkC,EAClC,qCAAqC,GACtC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,0BAA0B,EAC1B,oCAAoC,EACpC,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,EACX,0BAA0B,EAC1B,2BAA2B,EAC3B,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EACL,qCAAqC,EACrC,qCAAqC,EACrC,kCAAkC,EAClC,oCAAoC,EACpC,+BAA+B,GAChC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAEL,8BAA8B,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;IACzD,WAAW,EAAE,oBAAoB;IACjC,YAAY,EAAE,oBAAoB;CACnC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CACnE,0BAA0B,EAC1B,yBAAyB,CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG,WAAW,CAC7D,2BAA2B,EAC3B,qCAAqC,CACtC,CAAC;AAEF,MAAM,CAAC,MAAM,sCAAsC,GAAG,gBAAgB,CAAC;IACrE,WAAW,EAAE,oBAAoB;IACjC,iBAAiB,EAAE,qBAAqB;IACxC,mBAAmB,EAAE,oBAAoB;IACzC,qBAAqB,EAAE,oBAAoB;IAC3C,UAAU,EAAE,0BAA0B;IACtC,gBAAgB,EAAE,gCAAgC,CAAC,UAAU,CAAC;CAC/D,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,qCAAqC,GAAG,gBAAgB,CAAC;IACpE,eAAe,EAAE,qBAAqB;IACtC,mBAAmB,EAAE,oBAAoB;IACzC,UAAU,EAAE,oBAAoB;IAChC,OAAO,EAAE,WAAW,CAClB,sCAAsC,EACtC,qCAAqC,CACtC;CACF,CAAC,CAAC;AAMH,SAAS,kCAAkC,CACzC,mBAAsC,EACtC,mBAAsC;IAEtC,OAAO,oCAAoC,CACzC,gBAAgB,CAAC;QACf,cAAc,EAAE,CAAC;aACd,OAAO,CAAC,sCAAsC,CAAC;aAC/C,QAAQ,EAAE;QACb,qBAAqB,EAAE,CAAC;aACrB,OAAO,CAAC,8CAA8C,CAAC;aACvD,QAAQ,EAAE;QACb,aAAa,EAAE,mBAAmB;QAClC,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE;YAChE,OAAO,EAAE,eAAe,CAAC,MAAM;YAC/B,IAAI,EAAE,QAAQ;SACf,CAAC;QACF,uBAAuB,EAAE,mBAAmB;QAC5C,yBAAyB,EAAE,mBAAmB;QAC9C,aAAa,EAAE,oBAAoB;QACnC,mBAAmB,EAAE,mBAAmB,CAAC,QAAQ,EAAE;QACnD,WAAW,EAAE,iBAAiB;KAC/B,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QACjC,IAAI,oCAAoC,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/D,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,gDAAgD;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,EACF,CAAC,qCAAqC,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,sDAAsD;AACtD,MAAM,CAAC,MAAM,4BAA4B,GAAG,kCAAkC,CAC5E,oBAAoB,EACpB,oBAAoB,CACrB,CAAC;AAEF,MAAM,gCAAgC,GAAG,kCAAkC,CACzE,2BAA2B,CAAC,+BAA+B,CAAC,EAC5D,2BAA2B,CAAC,+BAA+B,CAAC,CAC7D,CAAC;AAMF,0EAA0E;AAC1E,4EAA4E;AAC5E,gFAAgF;AAChF,mCAAmC;AACnC,MAAM,0CAA0C,GAAG,sBAAsB,CACvE,CAAC,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CACnE,EACD,CAAC,CAAC,WAAW,CAAC;IACZ,IAAI,EAAE,qBAAqB;IAC3B,wBAAwB,EAAE,CAAC;SACxB,KAAK,CAAC,8BAA8B,CAAC;SACrC,QAAQ,EAAE;IACb,8BAA8B,EAAE,CAAC;SAC9B,KAAK,CAAC,8BAA8B,CAAC;SACrC,QAAQ,EAAE;IACb,KAAK,EAAE,iBAAiB;IACxB,oBAAoB,EAAE,oBAAoB;IAC1C,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,iBAAiB;IAC3B,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,QAAQ,EAAE;IACvE,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC/C,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,QAAQ,EAAE;IACzE,gBAAgB,EAAE,8BAA8B,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtE,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAC7C,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;IACxD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;CAClC,CAAC,CACH,CAAC;AAEF,MAAM,YAAY,GAAG,0BAA0B,CAC7C,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,EACjC,EAAE,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CACpD,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,oCAAoC,CAC3E,gBAAgB,CAAC;IACf,4BAA4B,EAC1B,oCAAoC,CAAC,QAAQ,EAAE;IACjD,sEAAsE;IACtE,gDAAgD;IAChD,eAAe,EAAE,WAAW,CAC1B,0CAA0C,EAC1C,2BAA2B,CAC5B,CAAC,QAAQ,EAAE;IACZ,gBAAgB,EAAE,qCAAqC,CAAC,QAAQ,EAAE;IAClE,eAAe,EAAE,qBAAqB;IACtC,2BAA2B,EAAE,oBAAoB;IACjD,kBAAkB,EAAE,oBAAoB;IACxC,WAAW,EAAE,CAAC;SACX,OAAO,CAAC,KAAK,CAAC;SACd,QAAQ,CACP,mHAAmH,CACpH;SACA,QAAQ,EAAE;IACb,mBAAmB,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACrD,kBAAkB,EAAE,mBAAmB,CACrC,+BAA+B,CAChC,CAAC,QAAQ,EAAE;IACZ,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,eAAe,EAAE,WAAW,CAC1B,gCAAgC,EAChC,kCAAkC,CACnC;IACD,UAAU,EAAE,2BAA2B,CACrC,oCAAoC,CACrC,CAAC,QAAQ,EAAE;IACZ,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACxC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5C,OAAO;IACT,CAAC;IACD,uEAAuE;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,kCAAkC,EAAE,CAAC;QACxE,OAAO;IACT,CAAC;IACD,IACE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC;QACnD,OAAO,CAAC,4BAA4B,CAAC,MAAM;YACzC,qCAAqC,EACvC,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,IACE,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAC1C,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS,CAAC,EAC3C,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,wDAAwD;YACjE,IAAI,EAAE,CAAC,qBAAqB,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,CAAC,UAAU,KAAK,SAAS;QAChC,CAAC,kBAAkB;YACjB,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;YAC1C,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACtC,OAAO,CAAC,4BAA4B,KAAK,SAAS,CAAC,EACrD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,mCAAmC;YAC5C,IAAI,EAAE,CAAC,YAAY,CAAC;SACrB,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,CAAC,WAAW,KAAK,KAAK;QAC7B,CAAC,kBAAkB;YACjB,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;YAC1C,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACtC,OAAO,CAAC,4BAA4B,KAAK,SAAS,CAAC,EACrD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,qCAAqC;YAC9C,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK,IAAI,OAAO,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;QACzE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,yDAAyD;YAClE,IAAI,EAAE,CAAC,oBAAoB,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,+BAA+B,CAAC;QAClD,mCAAmC,EACjC,OAAO,CAAC,4BAA4B,KAAK,SAAS;QACpD,kBAAkB,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QAC9D,kBAAkB;KACnB,CAAC,CAAC;IAEH,IAAI,WAAW,KAAK,sCAAsC,EAAE,CAAC;QAC3D,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EACL,+DAA+D;YACjE,IAAI,EAAE,CAAC,8BAA8B,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,WAAW,KAAK,8BAA8B,EAAE,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,6CAA6C;YACtD,IAAI,EAAE,CAAC,iBAAiB,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IACE,IAAI,GAAG,CACL,OAAO,CAAC,eAAe;SACpB,MAAM,CAAC,aAAa,CAAC;SACrB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAC9C,CAAC,IAAI,KAAK,OAAO,CAAC,eAAe,CAAC,MAAM,EACzC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,oCAAoC;YAC7C,IAAI,EAAE,CAAC,iBAAiB,CAAC;SAC1B,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,EACF;IACE,GAAG,sCAAsC;IACzC,GAAG,kCAAkC;CACtC,CACF,CAAC","sourcesContent":["import { z } from \"zod\";\nimport {\n  classifyDocumentSyncCheckpointFields,\n  DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE,\n  DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND,\n  DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND,\n} from \"../documentSyncCheckpoint\";\nimport {\n  documentSyncRequestEnvelopeRefinements,\n  documentSyncRequestPullRefinements,\n  documentSyncRequestRotationRefinement,\n} from \"../documentSyncRefinements\";\nimport { classifyDocumentSyncRequestMode } from \"../documentSyncRequestMode\";\nimport { isPlainObject } from \"../isPlainObject\";\nimport {\n  registerJsonSchemaFragment,\n  registerJsonSchemaRuntimeRefinements,\n  registerJsonSchemaView,\n} from \"../jsonSchema\";\nimport {\n  arraySchema,\n  boundedNonEmptyArraySchema,\n  boundedNonEmptyStringSchema,\n  boundedStringSchema,\n  loosePlainObject,\n  nonEmptyStringSchema,\n  plainObjectSchema,\n  positiveIntegerSchema,\n  requiredUnknownSchema,\n  sha256HexStringSchema,\n} from \"../schema\";\nimport { AccessManifestBundleWireSchema } from \"../util/accessManifestBundle\";\nimport { MAX_INLINE_CONTAINER_REKEYS } from \"../util/containerKekKeyringWire\";\nimport { MAX_CONTAINER_PATH_LENGTH } from \"../util/containerLimits\";\nimport {\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n  MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n  MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n  MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n  MAX_DOCUMENT_SYNC_REQUEST_BYTES,\n} from \"../util/documentSyncLimits\";\nimport { isUuidV4String, UUID_V4_PATTERN } from \"../util/uuid\";\nimport { isWalLsnString, WAL_LSN_PATTERN } from \"../util/walLsn\";\nimport {\n  type ContainerMutationRequest,\n  ContainerMutationRequestSchema,\n} from \"./container\";\nimport {\n  ContentKeyWrappedKeySchema,\n  contentKeyWrappingMetadataSchema,\n} from \"./contentKeyEnvelopeSchema\";\n\n/**\n * A reference to a container access manifest the server already stores, in lieu\n * of re-embedding the full signed manifest bundle. The server resolves the full\n * manifest from its own store by `manifestHash` and pins it to the container's\n * current head, so the reference carries the same authority as the full bundle\n * without the multi-KB signature. `containerId` is advisory: the server keys the\n * head lookup off the resolved bundle's own containerId and rejects a mismatch.\n */\nexport const ContainerManifestRefSchema = loosePlainObject({\n  containerId: nonEmptyStringSchema,\n  manifestHash: nonEmptyStringSchema,\n});\n\nexport type ContainerManifestRef = z.infer<typeof ContainerManifestRefSchema>;\n\nexport const ContainerManifestPathSchema = boundedNonEmptyArraySchema(\n  ContainerManifestRefSchema,\n  MAX_CONTAINER_PATH_LENGTH,\n);\n\nexport const ContainerManifestRefArrayArraySchema = arraySchema(\n  ContainerManifestPathSchema,\n  MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS,\n);\n\nexport const DocumentContentKeyTargetEnvelopeSchema = loosePlainObject({\n  containerId: nonEmptyStringSchema,\n  containerKeyEpoch: positiveIntegerSchema,\n  containerKeyEpochId: nonEmptyStringSchema,\n  containerManifestHash: nonEmptyStringSchema,\n  wrappedKey: ContentKeyWrappedKeySchema,\n  wrappingMetadata: contentKeyWrappingMetadataSchema(\"document\"),\n});\n\nexport type DocumentContentKeyTargetEnvelope = z.infer<\n  typeof DocumentContentKeyTargetEnvelopeSchema\n>;\n\nexport const DocumentContentKeyBundleRequestSchema = loosePlainObject({\n  contentKeyEpoch: positiveIntegerSchema,\n  linkSetManifestHash: nonEmptyStringSchema,\n  targetHash: nonEmptyStringSchema,\n  targets: arraySchema(\n    DocumentContentKeyTargetEnvelopeSchema,\n    MAX_DOCUMENT_SYNC_CONTENT_KEY_TARGETS,\n  ),\n});\n\nexport type DocumentContentKeyBundleRequest = z.infer<\n  typeof DocumentContentKeyBundleRequestSchema\n>;\n\nfunction createDocumentOutgoingUpdateSchema(\n  encryptedDataSchema: z.ZodType<string>,\n  versionVectorSchema: z.ZodType<string>,\n) {\n  return registerJsonSchemaRuntimeRefinements(\n    loosePlainObject({\n      checkpointKind: z\n        .literal(DOCUMENT_SYNC_ROTATION_CHECKPOINT_KIND)\n        .optional(),\n      checkpointPayloadKind: z\n        .literal(DOCUMENT_SYNC_ROTATION_CHECKPOINT_PAYLOAD_KIND)\n        .optional(),\n      encryptedData: encryptedDataSchema,\n      id: registerJsonSchemaFragment(z.string().refine(isUuidV4String), {\n        pattern: UUID_V4_PATTERN.source,\n        type: \"string\",\n      }),\n      partialEndVersionVector: versionVectorSchema,\n      partialStartVersionVector: versionVectorSchema,\n      plaintextHash: nonEmptyStringSchema,\n      sourceVersionVector: versionVectorSchema.optional(),\n      writeHeader: plainObjectSchema,\n    }).superRefine((update, context) => {\n      if (classifyDocumentSyncCheckpointFields(update) === \"invalid\") {\n        context.addIssue({\n          code: \"custom\",\n          message: DOCUMENT_SYNC_CHECKPOINT_FIELD_SET_ISSUE_MESSAGE,\n        });\n      }\n    }),\n    [documentSyncRequestRotationRefinement],\n  );\n}\n\n// Link-set rotations may carry a full-history baseline that is larger than a\n// single sync request. Their route has its own ingress policy, so keep the\n// shared update contract unbounded and apply the sync-specific ceiling only\n// where an update is embedded in DocumentSyncRequest.\nexport const DocumentOutgoingUpdateSchema = createDocumentOutgoingUpdateSchema(\n  nonEmptyStringSchema,\n  nonEmptyStringSchema,\n);\n\nconst DocumentSyncOutgoingUpdateSchema = createDocumentOutgoingUpdateSchema(\n  boundedNonEmptyStringSchema(MAX_DOCUMENT_SYNC_REQUEST_BYTES),\n  boundedNonEmptyStringSchema(MAX_DOCUMENT_SYNC_REQUEST_BYTES),\n);\n\nexport type DocumentOutgoingUpdate = z.infer<\n  typeof DocumentOutgoingUpdateSchema\n>;\n\n// Document sync published container keyrings as opaque records before the\n// canonical container-mutation schema described their fields. Keep that one\n// existing OpenAPI view stable while runtime validation delegates to the shared\n// schema used by newer operations.\nconst DocumentSyncContainerMutationRequestSchema = registerJsonSchemaView(\n  z.custom<ContainerMutationRequest>(\n    (value) => ContainerMutationRequestSchema.safeParse(value).success,\n  ),\n  z.looseObject({\n    body: requiredUnknownSchema,\n    containerManifestHistory: z\n      .array(AccessManifestBundleWireSchema)\n      .optional(),\n    destinationParentContainerPath: z\n      .array(AccessManifestBundleWireSchema)\n      .optional(),\n    event: plainObjectSchema,\n    expectedManifestHash: nonEmptyStringSchema,\n    keyEpoch: plainObjectSchema,\n    keyring: plainObjectSchema.nullable(),\n    manifest: plainObjectSchema,\n    parentContainerPath: z.array(AccessManifestBundleWireSchema).optional(),\n    parentKekState: plainObjectSchema.nullable().optional(),\n    predecessorBridge: plainObjectSchema.nullable(),\n    previousContainerPath: z.array(AccessManifestBundleWireSchema).optional(),\n    previousManifest: AccessManifestBundleWireSchema.nullable().optional(),\n    principalPolicies: z.array(plainObjectSchema),\n    userRecipientKeys: z.array(plainObjectSchema).optional(),\n    wraps: z.array(plainObjectSchema),\n  }),\n);\n\nconst WalLsnSchema = registerJsonSchemaFragment(\n  z.string().refine(isWalLsnString),\n  { pattern: WAL_LSN_PATTERN.source, type: \"string\" },\n);\n\nexport const DocumentSyncRequestSchema = registerJsonSchemaRuntimeRefinements(\n  loosePlainObject({\n    authorizingContainerPathRefs:\n      ContainerManifestRefArrayArraySchema.optional(),\n    // Each rotation carries a keyring sized by its epoch, so the batch is\n    // bounded here as well as in the runtime guard.\n    containerRekeys: arraySchema(\n      DocumentSyncContainerMutationRequestSchema,\n      MAX_INLINE_CONTAINER_REKEYS,\n    ).optional(),\n    contentKeyBundle: DocumentContentKeyBundleRequestSchema.optional(),\n    contentKeyEpoch: positiveIntegerSchema,\n    expectedLinkSetManifestHash: nonEmptyStringSchema,\n    expectedTargetHash: nonEmptyStringSchema,\n    historyMode: z\n      .literal(\"raw\")\n      .describe(\n        \"Explicit read-only recovery mode that bypasses rotation-baseline redirection and returns retained missing history\",\n      )\n      .optional(),\n    inlineRekeyCommitId: sha256HexStringSchema.optional(),\n    localVersionVector: boundedStringSchema(\n      MAX_DOCUMENT_SYNC_REQUEST_BYTES,\n    ).nullable(),\n    minLsn: WalLsnSchema.optional(),\n    outgoingUpdates: arraySchema(\n      DocumentSyncOutgoingUpdateSchema,\n      MAX_DOCUMENT_SYNC_OUTGOING_UPDATES,\n    ),\n    pullCursor: boundedNonEmptyStringSchema(\n      MAX_DOCUMENT_SYNC_PULL_CURSOR_LENGTH,\n    ).optional(),\n    supportsPullPagination: z.literal(true),\n  }).superRefine((request, context) => {\n    if (!Array.isArray(request.outgoingUpdates)) {\n      return;\n    }\n    // The field schemas have already recorded their cardinality errors. Do\n    // not let the cross-field checks below rescan attacker-sized arrays after\n    // those bounded schemas deliberately stopped before item validation.\n    if (request.outgoingUpdates.length > MAX_DOCUMENT_SYNC_OUTGOING_UPDATES) {\n      return;\n    }\n    if (\n      Array.isArray(request.authorizingContainerPathRefs) &&\n      request.authorizingContainerPathRefs.length >\n        MAX_DOCUMENT_SYNC_AUTHORIZATION_PATHS\n    ) {\n      return;\n    }\n\n    const hasOutgoingUpdates = request.outgoingUpdates.length > 0;\n    if (\n      (request.containerRekeys?.length ?? 0) > 0 !==\n      (request.inlineRekeyCommitId !== undefined)\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"inline rekey commit id must accompany container rekeys\",\n        path: [\"inlineRekeyCommitId\"],\n      });\n    }\n    if (\n      request.pullCursor !== undefined &&\n      (hasOutgoingUpdates ||\n        (request.containerRekeys?.length ?? 0) > 0 ||\n        request.contentKeyBundle !== undefined ||\n        request.authorizingContainerPathRefs !== undefined)\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"continued pulls must be read-only\",\n        path: [\"pullCursor\"],\n      });\n    }\n    if (\n      request.historyMode === \"raw\" &&\n      (hasOutgoingUpdates ||\n        (request.containerRekeys?.length ?? 0) > 0 ||\n        request.contentKeyBundle !== undefined ||\n        request.authorizingContainerPathRefs !== undefined)\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"raw-history pulls must be read-only\",\n        path: [\"historyMode\"],\n      });\n    }\n    if (request.historyMode === \"raw\" && request.localVersionVector !== null) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"raw-history pulls must start from a null version vector\",\n        path: [\"localVersionVector\"],\n      });\n    }\n    const requestMode = classifyDocumentSyncRequestMode({\n      authorizingContainerPathRefsPresent:\n        request.authorizingContainerPathRefs !== undefined,\n      hasContainerRekeys: (request.containerRekeys?.length ?? 0) > 0,\n      hasOutgoingUpdates,\n    });\n\n    if (requestMode === \"invalid-authorizing-path-refs-absent\") {\n      context.addIssue({\n        code: \"custom\",\n        message:\n          \"authorizing container paths are required for outgoing updates\",\n        path: [\"authorizingContainerPathRefs\"],\n      });\n    }\n\n    if (requestMode === \"invalid-rekeys-without-write\") {\n      context.addIssue({\n        code: \"custom\",\n        message: \"container rekeys require an outgoing update\",\n        path: [\"containerRekeys\"],\n      });\n    }\n\n    if (\n      new Set(\n        request.outgoingUpdates\n          .filter(isPlainObject)\n          .map((update) => Reflect.get(update, \"id\")),\n      ).size !== request.outgoingUpdates.length\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        message: \"outgoing update ids must be unique\",\n        path: [\"outgoingUpdates\"],\n      });\n    }\n  }),\n  [\n    ...documentSyncRequestEnvelopeRefinements,\n    ...documentSyncRequestPullRefinements,\n  ],\n);\n\nexport type DocumentSyncRequest = z.infer<typeof DocumentSyncRequestSchema>;\n"]}

package/internal/validators/request/index.d.ts

@@ -0,0 +1,14 @@
+export type { AccessManifestBundleWire } from "../util/accessManifestBundle.js";
+export { type ChallengeRequest, ChallengeRequestSchema, isChallengeRequest, isVerifyRequest, type VerifyRequest, VerifyRequestSchema, } from "./auth/index.js";
+export { type BlobAttachmentBindRequest, BlobAttachmentBindRequestSchema, type BlobAttachmentDetachRequest, BlobAttachmentDetachRequestSchema, type BlobContentKeyBundleRequest, BlobContentKeyBundleRequestSchema, type BlobContentKeyTargetEnvelopeRequest, BlobContentKeyTargetEnvelopeRequestSchema, type BlobStagedBlobRequest, BlobStagedBlobRequestSchema, type CompleteMultipartBlobStageRequest, CompleteMultipartBlobStageRequestSchema, type InitiateMultipartBlobStageRequest, InitiateMultipartBlobStageRequestSchema, isBlobAttachmentBindRequest, isBlobAttachmentDetachRequest, isCompleteMultipartBlobStageRequest, isInitiateMultipartBlobStageRequest, type MultipartBlobPartCommitRequest, MultipartBlobPartCommitRequestSchema, } from "./blob.js";
+export { type ContainerMutationRequest, ContainerMutationRequestSchema, type ContainerReciteRequest, ContainerReciteRequestSchema, type ContainerRotationRequest, ContainerRotationRequestSchema, isContainerMutationRequest, isContainerReciteRequest, isContainerRotationRequest, } from "./container.js";
+export { type ContainerCreateWithMetadataDocumentRequest, ContainerCreateWithMetadataDocumentRequestSchema, isContainerCreateWithMetadataDocumentRequest, } from "./containerMetadata.js";
+export { isListContainerParentLanesRequest, type ListContainerParentLanesRequest, ListContainerParentLanesRequestSchema, } from "./containerParentLanes.js";
+export { type ContainerManifestRef, ContainerManifestRefArrayArraySchema, ContainerManifestRefSchema, type DocumentContentKeyBundleRequest, DocumentContentKeyBundleRequestSchema, type DocumentContentKeyTargetEnvelope, DocumentContentKeyTargetEnvelopeSchema, type DocumentCreateRequest, DocumentCreateRequestSchema, type DocumentLinkSetMutationRequest, DocumentLinkSetMutationRequestSchema, type DocumentOutgoingUpdate, DocumentOutgoingUpdateSchema, type DocumentPurgeRequest, DocumentPurgeRequestSchema, type DocumentSyncRequest, DocumentSyncRequestSchema, isContainerManifestRefArrayArray, isDocumentContentKeyBundleRequest, isDocumentCreateRequest, isDocumentLinkSetMutationRequest, isDocumentPurgeRequest, isDocumentSyncRequest, } from "./document.js";
+export { type CreateOrganizationGroupRequest, CreateOrganizationGroupRequestSchema, type CreateOrganizationGroupWithPolicyRequest, CreateOrganizationGroupWithPolicyRequestSchema, type DeleteOrganizationGroupRequest, DeleteOrganizationGroupRequestSchema, isCreateOrganizationGroupRequest, isCreateOrganizationGroupWithPolicyRequest, isDeleteOrganizationGroupRequest, isUpdateOrganizationProfileRequest, isUpdateOrganizationRosterEntryRequest, type OrganizationReadModelQuery, OrganizationReadModelQuerySchema, type UpdateOrganizationProfileRequest, UpdateOrganizationProfileRequestSchema, type UpdateOrganizationRosterEntryRequest, UpdateOrganizationRosterEntryRequestSchema, } from "./organization.js";
+export { type CreateOrganizationRequest, CreateOrganizationRequestSchema, isCreateOrganizationRequest, isOrganizationProvisioningRequest, isProvisionedDocumentRequest, isProvisionedSystemContainerRequest, type OrganizationProvisioningRequest, OrganizationProvisioningRequestSchema, type ProvisionedDocumentRequest, ProvisionedDocumentRequestSchema, type ProvisionedSystemContainerRequest, ProvisionedSystemContainerRequestSchema, } from "./organizationProvisioning.js";
+export { type CommitOrganizationGroupPolicyRequest, CommitOrganizationGroupPolicyRequestSchema, isCommitOrganizationGroupPolicyRequest, isOrganizationPrincipalPolicyRequest, isPutPrincipalPolicyRequest, type OrganizationPrincipalPolicyRequest, OrganizationPrincipalPolicyRequestSchema, type PrincipalContainerGrantRequest, PrincipalContainerGrantRequestSchema, type PrincipalMemberEnvelopeRequest, type PrincipalProjectionMemberRequest, type PrincipalStateEncryptedPayloadRequest, type PrincipalStateRequest, type PutPrincipalPolicyRequest, PutPrincipalPolicyRequestSchema, } from "./principal.js";
+export { isRegistrationRequest, type RegistrationRequest, RegistrationRequestSchema, } from "./registration.js";
+export { isRevenueCatTransferWebhookEvent, isRevenueCatWebhookRequest, type RevenueCatIncomingWebhookEvent, RevenueCatIncomingWebhookEventSchema, type RevenueCatSubscriberAttribute, RevenueCatSubscriberAttributeSchema, type RevenueCatTransferWebhookEvent, RevenueCatTransferWebhookEventSchema, type RevenueCatWebhookEvent, RevenueCatWebhookEventSchema, type RevenueCatWebhookRequest, RevenueCatWebhookRequestSchema, } from "./revenuecatWebhook.js";
+export { isStripeReturnUrlRequest, type StripeReturnUrlRequest, StripeReturnUrlRequestSchema, } from "./stripeCheckout.js";
+export { isStripeWebhookRequest, type StripeWebhookRequest, StripeWebhookRequestSchema, } from "./stripeWebhook.js";

package/internal/validators/request/index.js

@@ -0,0 +1,14 @@
+export { ChallengeRequestSchema, isChallengeRequest, isVerifyRequest, VerifyRequestSchema, } from "./auth/index.js";
+export { BlobAttachmentBindRequestSchema, BlobAttachmentDetachRequestSchema, BlobContentKeyBundleRequestSchema, BlobContentKeyTargetEnvelopeRequestSchema, BlobStagedBlobRequestSchema, CompleteMultipartBlobStageRequestSchema, InitiateMultipartBlobStageRequestSchema, isBlobAttachmentBindRequest, isBlobAttachmentDetachRequest, isCompleteMultipartBlobStageRequest, isInitiateMultipartBlobStageRequest, MultipartBlobPartCommitRequestSchema, } from "./blob.js";
+export { ContainerMutationRequestSchema, ContainerReciteRequestSchema, ContainerRotationRequestSchema, isContainerMutationRequest, isContainerReciteRequest, isContainerRotationRequest, } from "./container.js";
+export { ContainerCreateWithMetadataDocumentRequestSchema, isContainerCreateWithMetadataDocumentRequest, } from "./containerMetadata.js";
+export { isListContainerParentLanesRequest, ListContainerParentLanesRequestSchema, } from "./containerParentLanes.js";
+export { ContainerManifestRefArrayArraySchema, ContainerManifestRefSchema, DocumentContentKeyBundleRequestSchema, DocumentContentKeyTargetEnvelopeSchema, DocumentCreateRequestSchema, DocumentLinkSetMutationRequestSchema, DocumentOutgoingUpdateSchema, DocumentPurgeRequestSchema, DocumentSyncRequestSchema, isContainerManifestRefArrayArray, isDocumentContentKeyBundleRequest, isDocumentCreateRequest, isDocumentLinkSetMutationRequest, isDocumentPurgeRequest, isDocumentSyncRequest, } from "./document.js";
+export { CreateOrganizationGroupRequestSchema, CreateOrganizationGroupWithPolicyRequestSchema, DeleteOrganizationGroupRequestSchema, isCreateOrganizationGroupRequest, isCreateOrganizationGroupWithPolicyRequest, isDeleteOrganizationGroupRequest, isUpdateOrganizationProfileRequest, isUpdateOrganizationRosterEntryRequest, OrganizationReadModelQuerySchema, UpdateOrganizationProfileRequestSchema, UpdateOrganizationRosterEntryRequestSchema, } from "./organization.js";
+export { CreateOrganizationRequestSchema, isCreateOrganizationRequest, isOrganizationProvisioningRequest, isProvisionedDocumentRequest, isProvisionedSystemContainerRequest, OrganizationProvisioningRequestSchema, ProvisionedDocumentRequestSchema, ProvisionedSystemContainerRequestSchema, } from "./organizationProvisioning.js";
+export { CommitOrganizationGroupPolicyRequestSchema, isCommitOrganizationGroupPolicyRequest, isOrganizationPrincipalPolicyRequest, isPutPrincipalPolicyRequest, OrganizationPrincipalPolicyRequestSchema, PrincipalContainerGrantRequestSchema, PutPrincipalPolicyRequestSchema, } from "./principal.js";
+export { isRegistrationRequest, RegistrationRequestSchema, } from "./registration.js";
+export { isRevenueCatTransferWebhookEvent, isRevenueCatWebhookRequest, RevenueCatIncomingWebhookEventSchema, RevenueCatSubscriberAttributeSchema, RevenueCatTransferWebhookEventSchema, RevenueCatWebhookEventSchema, RevenueCatWebhookRequestSchema, } from "./revenuecatWebhook.js";
+export { isStripeReturnUrlRequest, StripeReturnUrlRequestSchema, } from "./stripeCheckout.js";
+export { isStripeWebhookRequest, StripeWebhookRequestSchema, } from "./stripeWebhook.js";
+//# sourceMappingURL=index.js.map

package/internal/validators/request/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,EAEf,mBAAmB,GACpB,MAAM,QAAQ,CAAC;AAChB,OAAO,EAEL,+BAA+B,EAE/B,iCAAiC,EAEjC,iCAAiC,EAEjC,yCAAyC,EAEzC,2BAA2B,EAE3B,uCAAuC,EAEvC,uCAAuC,EACvC,2BAA2B,EAC3B,6BAA6B,EAC7B,mCAAmC,EACnC,mCAAmC,EAEnC,oCAAoC,GACrC,MAAM,QAAQ,CAAC;AAChB,OAAO,EAEL,8BAA8B,EAE9B,4BAA4B,EAE5B,8BAA8B,EAC9B,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,gDAAgD,EAChD,4CAA4C,GAC7C,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iCAAiC,EAEjC,qCAAqC,GACtC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,oCAAoC,EACpC,0BAA0B,EAE1B,qCAAqC,EAErC,sCAAsC,EAEtC,2BAA2B,EAE3B,oCAAoC,EAEpC,4BAA4B,EAE5B,0BAA0B,EAE1B,yBAAyB,EACzB,gCAAgC,EAChC,iCAAiC,EACjC,uBAAuB,EACvB,gCAAgC,EAChC,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AACpB,OAAO,EAEL,oCAAoC,EAEpC,8CAA8C,EAE9C,oCAAoC,EACpC,gCAAgC,EAChC,0CAA0C,EAC1C,gCAAgC,EAChC,kCAAkC,EAClC,sCAAsC,EAEtC,gCAAgC,EAEhC,sCAAsC,EAEtC,0CAA0C,GAC3C,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,+BAA+B,EAC/B,2BAA2B,EAC3B,iCAAiC,EACjC,4BAA4B,EAC5B,mCAAmC,EAEnC,qCAAqC,EAErC,gCAAgC,EAEhC,uCAAuC,GACxC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAEL,0CAA0C,EAC1C,sCAAsC,EACtC,oCAAoC,EACpC,2BAA2B,EAE3B,wCAAwC,EAExC,oCAAoC,EAMpC,+BAA+B,GAChC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,qBAAqB,EAErB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gCAAgC,EAChC,0BAA0B,EAE1B,oCAAoC,EAEpC,mCAAmC,EAEnC,oCAAoC,EAEpC,4BAA4B,EAE5B,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,wBAAwB,EAExB,4BAA4B,GAC7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EAEtB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC","sourcesContent":["export type { AccessManifestBundleWire } from \"../util/accessManifestBundle\";\nexport {\n  type ChallengeRequest,\n  ChallengeRequestSchema,\n  isChallengeRequest,\n  isVerifyRequest,\n  type VerifyRequest,\n  VerifyRequestSchema,\n} from \"./auth\";\nexport {\n  type BlobAttachmentBindRequest,\n  BlobAttachmentBindRequestSchema,\n  type BlobAttachmentDetachRequest,\n  BlobAttachmentDetachRequestSchema,\n  type BlobContentKeyBundleRequest,\n  BlobContentKeyBundleRequestSchema,\n  type BlobContentKeyTargetEnvelopeRequest,\n  BlobContentKeyTargetEnvelopeRequestSchema,\n  type BlobStagedBlobRequest,\n  BlobStagedBlobRequestSchema,\n  type CompleteMultipartBlobStageRequest,\n  CompleteMultipartBlobStageRequestSchema,\n  type InitiateMultipartBlobStageRequest,\n  InitiateMultipartBlobStageRequestSchema,\n  isBlobAttachmentBindRequest,\n  isBlobAttachmentDetachRequest,\n  isCompleteMultipartBlobStageRequest,\n  isInitiateMultipartBlobStageRequest,\n  type MultipartBlobPartCommitRequest,\n  MultipartBlobPartCommitRequestSchema,\n} from \"./blob\";\nexport {\n  type ContainerMutationRequest,\n  ContainerMutationRequestSchema,\n  type ContainerReciteRequest,\n  ContainerReciteRequestSchema,\n  type ContainerRotationRequest,\n  ContainerRotationRequestSchema,\n  isContainerMutationRequest,\n  isContainerReciteRequest,\n  isContainerRotationRequest,\n} from \"./container\";\nexport {\n  type ContainerCreateWithMetadataDocumentRequest,\n  ContainerCreateWithMetadataDocumentRequestSchema,\n  isContainerCreateWithMetadataDocumentRequest,\n} from \"./containerMetadata\";\nexport {\n  isListContainerParentLanesRequest,\n  type ListContainerParentLanesRequest,\n  ListContainerParentLanesRequestSchema,\n} from \"./containerParentLanes\";\nexport {\n  type ContainerManifestRef,\n  ContainerManifestRefArrayArraySchema,\n  ContainerManifestRefSchema,\n  type DocumentContentKeyBundleRequest,\n  DocumentContentKeyBundleRequestSchema,\n  type DocumentContentKeyTargetEnvelope,\n  DocumentContentKeyTargetEnvelopeSchema,\n  type DocumentCreateRequest,\n  DocumentCreateRequestSchema,\n  type DocumentLinkSetMutationRequest,\n  DocumentLinkSetMutationRequestSchema,\n  type DocumentOutgoingUpdate,\n  DocumentOutgoingUpdateSchema,\n  type DocumentPurgeRequest,\n  DocumentPurgeRequestSchema,\n  type DocumentSyncRequest,\n  DocumentSyncRequestSchema,\n  isContainerManifestRefArrayArray,\n  isDocumentContentKeyBundleRequest,\n  isDocumentCreateRequest,\n  isDocumentLinkSetMutationRequest,\n  isDocumentPurgeRequest,\n  isDocumentSyncRequest,\n} from \"./document\";\nexport {\n  type CreateOrganizationGroupRequest,\n  CreateOrganizationGroupRequestSchema,\n  type CreateOrganizationGroupWithPolicyRequest,\n  CreateOrganizationGroupWithPolicyRequestSchema,\n  type DeleteOrganizationGroupRequest,\n  DeleteOrganizationGroupRequestSchema,\n  isCreateOrganizationGroupRequest,\n  isCreateOrganizationGroupWithPolicyRequest,\n  isDeleteOrganizationGroupRequest,\n  isUpdateOrganizationProfileRequest,\n  isUpdateOrganizationRosterEntryRequest,\n  type OrganizationReadModelQuery,\n  OrganizationReadModelQuerySchema,\n  type UpdateOrganizationProfileRequest,\n  UpdateOrganizationProfileRequestSchema,\n  type UpdateOrganizationRosterEntryRequest,\n  UpdateOrganizationRosterEntryRequestSchema,\n} from \"./organization\";\nexport {\n  type CreateOrganizationRequest,\n  CreateOrganizationRequestSchema,\n  isCreateOrganizationRequest,\n  isOrganizationProvisioningRequest,\n  isProvisionedDocumentRequest,\n  isProvisionedSystemContainerRequest,\n  type OrganizationProvisioningRequest,\n  OrganizationProvisioningRequestSchema,\n  type ProvisionedDocumentRequest,\n  ProvisionedDocumentRequestSchema,\n  type ProvisionedSystemContainerRequest,\n  ProvisionedSystemContainerRequestSchema,\n} from \"./organizationProvisioning\";\nexport {\n  type CommitOrganizationGroupPolicyRequest,\n  CommitOrganizationGroupPolicyRequestSchema,\n  isCommitOrganizationGroupPolicyRequest,\n  isOrganizationPrincipalPolicyRequest,\n  isPutPrincipalPolicyRequest,\n  type OrganizationPrincipalPolicyRequest,\n  OrganizationPrincipalPolicyRequestSchema,\n  type PrincipalContainerGrantRequest,\n  PrincipalContainerGrantRequestSchema,\n  type PrincipalMemberEnvelopeRequest,\n  type PrincipalProjectionMemberRequest,\n  type PrincipalStateEncryptedPayloadRequest,\n  type PrincipalStateRequest,\n  type PutPrincipalPolicyRequest,\n  PutPrincipalPolicyRequestSchema,\n} from \"./principal\";\nexport {\n  isRegistrationRequest,\n  type RegistrationRequest,\n  RegistrationRequestSchema,\n} from \"./registration\";\nexport {\n  isRevenueCatTransferWebhookEvent,\n  isRevenueCatWebhookRequest,\n  type RevenueCatIncomingWebhookEvent,\n  RevenueCatIncomingWebhookEventSchema,\n  type RevenueCatSubscriberAttribute,\n  RevenueCatSubscriberAttributeSchema,\n  type RevenueCatTransferWebhookEvent,\n  RevenueCatTransferWebhookEventSchema,\n  type RevenueCatWebhookEvent,\n  RevenueCatWebhookEventSchema,\n  type RevenueCatWebhookRequest,\n  RevenueCatWebhookRequestSchema,\n} from \"./revenuecatWebhook\";\nexport {\n  isStripeReturnUrlRequest,\n  type StripeReturnUrlRequest,\n  StripeReturnUrlRequestSchema,\n} from \"./stripeCheckout\";\nexport {\n  isStripeWebhookRequest,\n  type StripeWebhookRequest,\n  StripeWebhookRequestSchema,\n} from \"./stripeWebhook\";\n"]}