@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/workflows/blobs/multipartUpload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipartUpload.js","sourceRoot":"","sources":["multipartUpload.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAarE,OAAO,EACL,+BAA+B,EAC/B,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAElC,MAAM,oCAAoC,GAAG,CAAC,CAAC;AAC/C,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAC3C,MAAM,wBAAwB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAaxD,SAAS,WAAW,CAAC,KAAsB;IACzC,OAAO,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAG1B;IACC,MAAM,QAAQ,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;IAC/F,OAAO,GAAG,QAAQ,QAAQ,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAA8B;IAC1D,OAAO,UAAU,CACf,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC,CAC1C,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACxB,KAAK,IAAI,CAAC;QACV,KAAK,GAAG,gCAAgC,EACxC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2DAA2D,gCAAgC,EAAE,CAC9F,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAqC;IAErC,OAAO,IAAI,KAAK,SAAS,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,KASvC;IACC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,YAAqD,CAAC;IAC1D,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,KAAK,UAAU,MAAM;QACnB,OAAO,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACxC,aAAa,IAAI,CAAC,CAAC;YACnB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC;oBAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,IAAI;oBACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;iBACzB,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,GAAG,IAAI,CAAC;oBACd,MAAM,IAAI,KAAK,CACb,0BAA0B,CAAC;wBACzB,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,QAAQ,EAAE,uBAAuB,IAAI,CAAC,UAAU,4BAA4B,KAAK,CAAC,OAAO,GAAG;wBAC5F,OAAO,EAAE;4BACP,MAAM,EAAE,KAAK;4BACb,IAAI,EAAE,iBAAiB,CAAC;gCACtB,UAAU,EAAE,IAAI,CAAC,UAAU;gCAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;6BACvB,CAAC;yBACH;qBACF,CAAC,CACH,CAAC;gBACJ,CAAC;gBAED,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG;oBACpC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;oBACxB,UAAU,EAAE,IAAI,CAAC,UAAU;iBAC5B,CAAC;gBACF,KAAK,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,sEAAsE;gBACtE,oEAAoE;gBACpE,+DAA+D;gBAC/D,MAAM,GAAG,IAAI,CAAC;gBACd,YAAY,KAAK,EAAE,KAAK,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACvE,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,YAAY,CAAC,KAAK,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,KAMvC;IACC,MAAM,kBAAkB,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,WAAW,CAC3D,KAAK,CAAC,IAAI,CAAC,SAAS,CACrB,CAAC;IACF,IAAI,kBAAkB,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,CAAC,IAAI,CAAC,UAAU,mCAAmC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,cAAc,kBAAkB,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,CACrL,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,4BAA4B,CACjE,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,IAAI,CAAC,UAAU,EACrB;QACE,UAAU,EAAE,kBAAkB,CAAC,UAAU;QACzC,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,MAAM,cAAc,CAAC,kBAAkB,CAAC;QAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CACF,CAAC;IACF,IACE,QAAQ;QACR,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YACjC,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YACpC,QAAQ,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU;YAClD,QAAQ,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EACrD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,CAAC,IAAI,CAAC,UAAU,uCAAuC,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,yBAAyB,CAChC,KAAwC;IAExC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAA4E;IAE5E,OAAO,WAAW,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;AACtE,CAAC;AAeD;;;GAGG;AACH,SAAS,kBAAkB,CAAC,KAG3B;IACC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,aAAa,GAAwC,IAAI,KAAK,CAClE,UAAU,CAAC,SAAS,CACrB,CAAC;IACF,MAAM,WAAW,GAA8B,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAiC;QAC7C,UAAU,EAAE,CAAC;QACb,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,CAAC;QACjB,UAAU,EAAE,UAAU,CAAC,SAAS;KACjC,CAAC;IAEF,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,UAAU,CAAC,SAAS,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;QACzE,MAAM,UAAU,GAAG,SAAS,GAAG,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3D,QAAQ,CAAC,UAAU,IAAI,UAAU,CAAC;QAClC,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,IAAI,YAAY,EAAE,UAAU,KAAK,UAAU,EAAE,CAAC;YAC5C,aAAa,CAAC,SAAS,CAAC,GAAG;gBACzB,IAAI,EAAE,YAAY,CAAC,IAAI;gBACvB,UAAU;aACX,CAAC;YACF,QAAQ,CAAC,cAAc,IAAI,CAAC,CAAC;YAC7B,QAAQ,CAAC,aAAa,IAAI,UAAU,CAAC;YACrC,SAAS;QACX,CAAC;QAED,WAAW,CAAC,IAAI,CAAC;YACf,UAAU;YACV,SAAS;YACT,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAS1C;IACC,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC;IACpD,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,+BAA+B,CAAC;gBACpC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;gBAC5C,OAAO,EAAE,aAAa;aACvB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACb,uDAAuD,aAAa,GAAG,CACxE,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,sEAAsE;YACtE,wEAAwE;YACxE,yCAAyC;YACzC,IACE,OAAO,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;gBAC/C,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;gBACvC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAC/B,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,+BAA+B,aAAa,sDAAsD,CACnG,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,0BAA0B,CAAC;QAC7D,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,0BAA0B,CAAC;YACzB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,8CAA8C,KAAK,CAAC,UAAU,CAAC,cAAc,EAAE,SAAS;YAClG,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,EAAE;SAC7D,CAAC,CACH,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;QAC7C,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACrC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,OAAO,sBAAsB,CAAC,KAAK,CAAC;QAClC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC;YACE,GAAG,KAAK;YACR,SAAS,EAAE,KAAK;SACjB,CAAC;AACR,CAAC;AAED,SAAS,yBAAyB,CAAC,UAA8B;IAC/D,IAAI,UAAU,CAAC,SAAS,GAAG,oBAAoB,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,uCAAuC,UAAU,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,oBAAoB,CAAC,cAAc,EAAE,sBAAsB,CAClK,CAAC;IACJ,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC,SAAS,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,IAAI,UAAU,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,wBAAwB,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,GAAG,CAAC,0CAA0C,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAUlD;IACC,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,KAAK,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,yBAAyB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC;QAC/C,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,UAAU;QACvC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;KAChC,CAAC,CAAC;IACH,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,KAAK,CAAC,eAAe,EAAE,CAAC;QAC5B,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;QACpC,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,UAAU;YACvC,aAAa,EAAE,KAAK,CAAC,UAAU,CAAC,UAAU;YAC1C,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;YAC1C,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;SACvC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,kBAAkB,CAAC;QAClE,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa,EAAE,yBAAyB,CAAC,MAAM,CAAC,aAAa,CAAC;KAC/D,CAAC,CAAC;IAEH,MAAM,uBAAuB,GAAG,GAAG,EAAE;QACnC,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC1B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,UAAU,EAAE,QAAQ,CAAC,UAAU;SAChC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,uBAAuB,EAAE,CAAC;IAE1B,MAAM,wBAAwB,CAAC;QAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa;QACb,WAAW,EAAE,mCAAmC,CAC9C,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAClC;QACD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,QAAQ,CAAC,cAAc,IAAI,CAAC,CAAC;YAC7B,QAAQ,CAAC,aAAa,IAAI,IAAI,CAAC,UAAU,CAAC;YAC1C,uBAAuB,EAAE,CAAC;QAC5B,CAAC;QACD,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACnE,IAAI,cAAc,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,8CAA8C,MAAM,CAAC,OAAO,eAAe,cAAc,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,cAAc,EAAE,SAAS,CAC7K,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,0BAA0B,CAChE,MAAM,CAAC,OAAO,EACd;QACE,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CACF,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,0BAA0B,CAAC;YACzB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,oDAAoD,MAAM,CAAC,OAAO,SAAS,cAAc,CAAC,MAAM,CAAC,cAAc,EAAE,mBAAmB;YAC9I,OAAO,EAAE;gBACP,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW;aACvD;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IACD,IACE,SAAS,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;QACjD,SAAS,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QACpC,SAAS,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,UAAU;QACpD,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM,EAC5C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,CAAC,OAAO,kDAAkD,CACzF,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC,OAAO,CAAC;AAC3B,CAAC","sourcesContent":["import { bytesToHex, MAX_BLOB_CHUNK_COUNT } from \"@tearleads/crypto\";\nimport type {\n  InitiateMultipartBlobStageResponse,\n  MultipartBlobStagePart,\n  MultipartBlobStageStatusResponse,\n} from \"@tearleads/validators/response\";\nimport type { BlobEncryptionPlan } from \"../../data/documents/blob/shared/crypto\";\nimport type {\n  BlobAttachmentApi,\n  MultipartStageResolvedListener,\n  MultipartUploadProgressListener,\n  UploadDocumentAttachmentInput,\n} from \"../../data/documents/blob/shared/types\";\nimport {\n  assertMultipartStageReplaceable,\n  multipartApiFailureMessage,\n  multipartStagePath,\n} from \"./multipartStageFailures\";\n\nconst DEFAULT_MULTIPART_UPLOAD_CONCURRENCY = 4;\nconst MAX_MULTIPART_UPLOAD_CONCURRENCY = 4;\nconst MAX_MULTIPART_PART_BYTES = 5 * 1024 * 1024 * 1024;\n\ninterface MultipartPartCommit {\n  readonly etag: string;\n  readonly partNumber: number;\n}\n\ninterface MultipartPartUploadTask {\n  readonly byteLength: number;\n  readonly partIndex: number;\n  readonly partNumber: number;\n}\n\nfunction pathSegment(value: number | string): string {\n  return encodeURIComponent(String(value));\n}\n\nfunction multipartPartPath(input: {\n  readonly partNumber: number;\n  readonly stageId: string;\n}): string {\n  const basePath = `${multipartStagePath(input.stageId)}/parts/${pathSegment(input.partNumber)}`;\n  return `${basePath}/bytes`;\n}\n\nasync function sha256BytesHex(bytes: Uint8Array<ArrayBuffer>): Promise<string> {\n  return bytesToHex(\n    new Uint8Array(await crypto.subtle.digest(\"SHA-256\", bytes)),\n  );\n}\n\nfunction normalizeMultipartUploadConcurrency(\n  value: number | undefined,\n): number {\n  if (value === undefined) {\n    return DEFAULT_MULTIPART_UPLOAD_CONCURRENCY;\n  }\n  if (\n    !Number.isInteger(value) ||\n    value <= 0 ||\n    value > MAX_MULTIPART_UPLOAD_CONCURRENCY\n  ) {\n    throw new Error(\n      `Multipart blob upload concurrency must be between 1 and ${MAX_MULTIPART_UPLOAD_CONCURRENCY}`,\n    );\n  }\n\n  return value;\n}\n\nfunction isMultipartPartCommit(\n  part: MultipartPartCommit | undefined,\n): part is MultipartPartCommit {\n  return part !== undefined;\n}\n\nasync function uploadMultipartPartTasks(input: {\n  readonly apiClient: BlobAttachmentApi;\n  readonly completeParts: (MultipartPartCommit | undefined)[];\n  readonly concurrency: number;\n  readonly encryption: BlobEncryptionPlan;\n  readonly onPartUploaded?: (task: MultipartPartUploadTask) => void;\n  readonly stageId: string;\n  readonly tasks: readonly MultipartPartUploadTask[];\n  readonly uploadId: string;\n}): Promise<void> {\n  let failed = false;\n  let firstFailure: { readonly error: unknown } | undefined;\n  let nextTaskIndex = 0;\n\n  async function worker(): Promise<void> {\n    while (!failed) {\n      const task = input.tasks[nextTaskIndex];\n      nextTaskIndex += 1;\n      if (!task) {\n        return;\n      }\n\n      try {\n        const uploaded = await uploadMultipartPartBytes({\n          apiClient: input.apiClient,\n          encryption: input.encryption,\n          stageId: input.stageId,\n          task,\n          uploadId: input.uploadId,\n        });\n        if (!uploaded) {\n          failed = true;\n          throw new Error(\n            multipartApiFailureMessage({\n              apiClient: input.apiClient,\n              fallback: `Multipart blob part ${task.partNumber} upload failed for stage ${input.stageId}.`,\n              request: {\n                method: \"PUT\",\n                path: multipartPartPath({\n                  partNumber: task.partNumber,\n                  stageId: input.stageId,\n                }),\n              },\n            }),\n          );\n        }\n\n        input.completeParts[task.partIndex] = {\n          etag: uploaded.part.etag,\n          partNumber: task.partNumber,\n        };\n        input.onPartUploaded?.(task);\n      } catch (error) {\n        // Stop sibling workers from pulling new tasks and firing more uploads\n        // once any part rejects. Keep this worker alive long enough for the\n        // shared join below to drain uploads siblings already started.\n        failed = true;\n        firstFailure ??= { error };\n        return;\n      }\n    }\n  }\n\n  const workerCount = Math.min(input.concurrency, input.tasks.length);\n  await Promise.all(Array.from({ length: workerCount }, () => worker()));\n  if (firstFailure) {\n    throw firstFailure.error;\n  }\n}\n\nasync function uploadMultipartPartBytes(input: {\n  readonly apiClient: BlobAttachmentApi;\n  readonly encryption: BlobEncryptionPlan;\n  readonly stageId: string;\n  readonly task: MultipartPartUploadTask;\n  readonly uploadId: string;\n}): ReturnType<BlobAttachmentApi[\"uploadMultipartBlobPartBytes\"]> {\n  const encryptedPartBytes = await input.encryption.encryptPart(\n    input.task.partIndex,\n  );\n  if (encryptedPartBytes.byteLength !== input.task.byteLength) {\n    throw new Error(\n      `Encrypted blob part ${input.task.partNumber} byte length mismatch: expected ${input.task.byteLength.toLocaleString()}, received ${encryptedPartBytes.byteLength.toLocaleString()}.`,\n    );\n  }\n\n  const uploaded = await input.apiClient.uploadMultipartBlobPartBytes(\n    input.stageId,\n    input.task.partNumber,\n    {\n      byteLength: encryptedPartBytes.byteLength,\n      encryptedBytes: encryptedPartBytes,\n      sha256: await sha256BytesHex(encryptedPartBytes),\n      uploadId: input.uploadId,\n    },\n  );\n  if (\n    uploaded &&\n    (uploaded.stageId !== input.stageId ||\n      uploaded.uploadId !== input.uploadId ||\n      uploaded.part.partNumber !== input.task.partNumber ||\n      uploaded.part.byteLength !== input.task.byteLength)\n  ) {\n    throw new Error(\n      `Multipart blob part ${input.task.partNumber} response does not match its request.`,\n    );\n  }\n  return uploaded;\n}\n\nfunction uploadedPartsByPartNumber(\n  parts: readonly MultipartBlobStagePart[],\n): ReadonlyMap<number, MultipartBlobStagePart> {\n  return new Map(parts.map((part) => [part.partNumber, part]));\n}\n\nfunction isMultipartStageStatus(\n  stage: InitiateMultipartBlobStageResponse | MultipartBlobStageStatusResponse,\n): stage is MultipartBlobStageStatusResponse {\n  return \"completed\" in stage && typeof stage.completed === \"boolean\";\n}\n\ninterface MultipartUploadProgressState {\n  bytesTotal: number;\n  bytesUploaded: number;\n  partsCompleted: number;\n  partsTotal: number;\n}\n\ninterface MultipartPartPlan {\n  completeParts: (MultipartPartCommit | undefined)[];\n  progress: MultipartUploadProgressState;\n  uploadTasks: MultipartPartUploadTask[];\n}\n\n/**\n * Plans encrypted part indices without materializing their bytes, reusing any\n * already-staged parts and seeding cumulative progress for resumed uploads.\n */\nfunction planMultipartParts(input: {\n  encryption: BlobEncryptionPlan;\n  uploadedParts: ReadonlyMap<number, MultipartBlobStagePart>;\n}): MultipartPartPlan {\n  const { encryption, uploadedParts } = input;\n  const completeParts: (MultipartPartCommit | undefined)[] = new Array(\n    encryption.partCount,\n  );\n  const uploadTasks: MultipartPartUploadTask[] = [];\n  const progress: MultipartUploadProgressState = {\n    bytesTotal: 0,\n    bytesUploaded: 0,\n    partsCompleted: 0,\n    partsTotal: encryption.partCount,\n  };\n\n  for (let partIndex = 0; partIndex < encryption.partCount; partIndex += 1) {\n    const partNumber = partIndex + 1;\n    const byteLength = encryption.getPartByteLength(partIndex);\n    progress.bytesTotal += byteLength;\n    const uploadedPart = uploadedParts.get(partNumber);\n    if (uploadedPart?.byteLength === byteLength) {\n      completeParts[partIndex] = {\n        etag: uploadedPart.etag,\n        partNumber,\n      };\n      progress.partsCompleted += 1;\n      progress.bytesUploaded += byteLength;\n      continue;\n    }\n\n    uploadTasks.push({\n      byteLength,\n      partIndex,\n      partNumber,\n    });\n  }\n\n  return { completeParts, progress, uploadTasks };\n}\n\nasync function resolveMultipartStageStatus(input: {\n  readonly apiClient: BlobAttachmentApi;\n  readonly byteLength: number;\n  readonly multipart: NonNullable<UploadDocumentAttachmentInput[\"multipart\"]>;\n  readonly organizationId: string;\n  readonly onStageUnavailable?:\n    | ((stageId: string) => Promise<void>)\n    | undefined;\n  readonly sha256: string;\n}): Promise<MultipartBlobStageStatusResponse> {\n  const resumeStageId = input.multipart.resumeStageId;\n  if (resumeStageId) {\n    const resumed = await input.apiClient.getMultipartBlobStage(resumeStageId);\n    if (!resumed) {\n      await assertMultipartStageReplaceable({\n        apiClient: input.apiClient,\n        onStageUnavailable: input.onStageUnavailable,\n        stageId: resumeStageId,\n      });\n    }\n    if (resumed && resumed.stageId !== resumeStageId) {\n      throw new Error(\n        `Multipart blob resume response does not match stage ${resumeStageId}.`,\n      );\n    }\n    if (resumed) {\n      // A successful lookup is authoritative: a metadata mismatch indicates\n      // inconsistent persisted state or a bad server response, not proof that\n      // the existing stage is safe to abandon.\n      if (\n        resumed.organizationId !== input.organizationId ||\n        resumed.byteLength !== input.byteLength ||\n        resumed.sha256 !== input.sha256\n      ) {\n        throw new Error(\n          `Multipart blob resume stage ${resumeStageId} does not match the requested organization or bytes.`,\n        );\n      }\n      return resumed;\n    }\n  }\n\n  const stage = await input.apiClient.initiateMultipartBlobStage({\n    organizationId: input.organizationId,\n    byteLength: input.byteLength,\n    sha256: input.sha256,\n  });\n  if (!stage) {\n    throw new Error(\n      multipartApiFailureMessage({\n        apiClient: input.apiClient,\n        fallback: `Multipart blob stage initiation failed for ${input.byteLength.toLocaleString()} bytes.`,\n        request: { method: \"POST\", path: \"/blobs/stages/multipart\" },\n      }),\n    );\n  }\n  if (\n    stage.organizationId !== input.organizationId ||\n    stage.byteLength !== input.byteLength ||\n    stage.sha256 !== input.sha256\n  ) {\n    throw new Error(\n      \"Multipart blob stage initiation response does not match its request.\",\n    );\n  }\n\n  return isMultipartStageStatus(stage)\n    ? stage\n    : {\n        ...stage,\n        completed: false,\n      };\n}\n\nfunction assertMultipartPlanLimits(encryption: BlobEncryptionPlan): void {\n  if (encryption.partCount > MAX_BLOB_CHUNK_COUNT) {\n    throw new Error(\n      `Multipart blob upload would require ${encryption.partCount.toLocaleString()} parts; the maximum is ${MAX_BLOB_CHUNK_COUNT.toLocaleString()} fixed 5 MiB chunks.`,\n    );\n  }\n  for (let index = 0; index < encryption.partCount; index += 1) {\n    if (encryption.getPartByteLength(index) > MAX_MULTIPART_PART_BYTES) {\n      throw new Error(\n        `Encrypted blob part ${index + 1} exceeds the 5 GiB multipart part limit.`,\n      );\n    }\n  }\n}\n\nexport async function stageMultipartBlobAttachment(input: {\n  readonly apiClient: BlobAttachmentApi;\n  readonly encryption: BlobEncryptionPlan;\n  readonly multipart: NonNullable<UploadDocumentAttachmentInput[\"multipart\"]>;\n  readonly organizationId: string;\n  readonly onMultipartProgress?: MultipartUploadProgressListener | undefined;\n  readonly onStageResolved?: MultipartStageResolvedListener | undefined;\n  readonly onStageUnavailable?:\n    | ((stageId: string) => Promise<void>)\n    | undefined;\n}): Promise<string | null> {\n  if (input.multipart.partSize !== input.encryption.chunkSize) {\n    throw new Error(\n      \"Multipart part size must match the encryption chunk size exactly.\",\n    );\n  }\n  assertMultipartPlanLimits(input.encryption);\n  const status = await resolveMultipartStageStatus({\n    apiClient: input.apiClient,\n    byteLength: input.encryption.byteLength,\n    multipart: input.multipart,\n    organizationId: input.organizationId,\n    onStageUnavailable: input.onStageUnavailable,\n    sha256: input.encryption.sha256,\n  });\n  // Surface the stage id before any parts upload so the caller can persist it;\n  // an upload interrupted mid-flight can then resume this same stage.\n  await input.onStageResolved?.({\n    partSize: input.encryption.chunkSize,\n    stageId: status.stageId,\n  });\n  if (status.completed) {\n    input.onMultipartProgress?.({\n      bytesTotal: input.encryption.byteLength,\n      bytesUploaded: input.encryption.byteLength,\n      partsCompleted: input.encryption.partCount,\n      partsTotal: input.encryption.partCount,\n    });\n    return status.stageId;\n  }\n\n  const { completeParts, progress, uploadTasks } = planMultipartParts({\n    encryption: input.encryption,\n    uploadedParts: uploadedPartsByPartNumber(status.uploadedParts),\n  });\n\n  const reportMultipartProgress = () => {\n    input.onMultipartProgress?.({\n      bytesTotal: progress.bytesTotal,\n      bytesUploaded: progress.bytesUploaded,\n      partsCompleted: progress.partsCompleted,\n      partsTotal: progress.partsTotal,\n    });\n  };\n  reportMultipartProgress();\n\n  await uploadMultipartPartTasks({\n    apiClient: input.apiClient,\n    completeParts,\n    concurrency: normalizeMultipartUploadConcurrency(\n      input.multipart.uploadConcurrency,\n    ),\n    encryption: input.encryption,\n    onPartUploaded: (task) => {\n      progress.partsCompleted += 1;\n      progress.bytesUploaded += task.byteLength;\n      reportMultipartProgress();\n    },\n    stageId: status.stageId,\n    tasks: uploadTasks,\n    uploadId: status.uploadId,\n  });\n  const committedParts = completeParts.filter(isMultipartPartCommit);\n  if (committedParts.length !== input.encryption.partCount) {\n    throw new Error(\n      `Multipart blob upload incomplete for stage ${status.stageId}: committed ${committedParts.length.toLocaleString()} of ${input.encryption.partCount.toLocaleString()} parts.`,\n    );\n  }\n\n  const completed = await input.apiClient.completeMultipartBlobStage(\n    status.stageId,\n    {\n      parts: committedParts,\n      uploadId: status.uploadId,\n    },\n  );\n  if (!completed) {\n    throw new Error(\n      multipartApiFailureMessage({\n        apiClient: input.apiClient,\n        fallback: `Multipart blob stage completion failed for stage ${status.stageId} with ${committedParts.length.toLocaleString()} committed parts.`,\n        request: {\n          method: \"POST\",\n          path: `${multipartStagePath(status.stageId)}/complete`,\n        },\n      }),\n    );\n  }\n  if (\n    completed.organizationId !== input.organizationId ||\n    completed.stageId !== status.stageId ||\n    completed.byteLength !== input.encryption.byteLength ||\n    completed.sha256 !== input.encryption.sha256\n  ) {\n    throw new Error(\n      `Multipart blob stage ${status.stageId} completion response does not match its request.`,\n    );\n  }\n\n  return completed.stageId;\n}\n"]}

package/workflows/blobs/retainedAttachmentVerification.js

@@ -0,0 +1,38 @@
+import { KeyingVerificationError } from "../../internal/crypto/index.js";
+import { assertBlobContentKeyBundleTargetHash } from "../../data/documents/blob/shared/responses.js";
+import { assertDocumentWriterProjectionConsistent } from "../../data/documents/shared/projection.js";
+import { projectionVerificationOptions } from "../../data/documents/shared/types.js";
+import { requireProjectionUserKeyResolver, } from "../../data/keyingProjectionVerification.js";
+import { assertAttachmentBindingVerified } from "./attachmentBindingVerification.js";
+import { assertBlobWrapScopeVerified } from "./verifiedWrapScope.js";
+/** Retaining an existing envelope does not propagate a key to a new recipient. */
+export async function verifyRetainedAttachment(input) {
+    const resolveProjectionUserKey = requireProjectionUserKeyResolver(input.resolveProjectionUserKey, "Retained attachment scope");
+    let authorization;
+    await assertDocumentWriterProjectionConsistent(input.writerProjection, {
+        allowStaleContentKeyBundle: true,
+        ...projectionVerificationOptions({
+            execSql: input.execSql,
+            resolveProjectionUserKey,
+        }),
+        onVerifiedAuthorization: (value) => {
+            authorization = value;
+        },
+    });
+    if (input.binding.contentKeyBundle.blobId !== input.binding.blobId)
+        throw new KeyingVerificationError("object_mismatch", "Retained attachment bundle names another blob");
+    await assertBlobContentKeyBundleTargetHash(input.binding.contentKeyBundle);
+    await assertAttachmentBindingVerified({
+        ...input,
+        authorization,
+        resolveProjectionUserKey,
+    });
+    if (!authorization)
+        throw new Error("Attachment authority is unavailable");
+    assertBlobWrapScopeVerified({
+        authorization,
+        binding: input.binding,
+        documentId: input.expectedDocumentId,
+    });
+}
+//# sourceMappingURL=retainedAttachmentVerification.js.map

package/workflows/blobs/retainedAttachmentVerification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retainedAttachmentVerification.js","sourceRoot":"","sources":["retainedAttachmentVerification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,oCAAoC,EAAE,MAAM,4CAA4C,CAAC;AAElG,OAAO,EAAE,wCAAwC,EAAE,MAAM,wCAAwC,CAAC;AAClG,OAAO,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AAClF,OAAO,EAEL,gCAAgC,GACjC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAElE,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAGC;IAED,MAAM,wBAAwB,GAAG,gCAAgC,CAC/D,KAAK,CAAC,wBAAwB,EAC9B,2BAA2B,CAC5B,CAAC;IACF,IAAI,aAAgE,CAAC;IACrE,MAAM,wCAAwC,CAAC,KAAK,CAAC,gBAAgB,EAAE;QACrE,0BAA0B,EAAE,IAAI;QAChC,GAAG,6BAA6B,CAAC;YAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,wBAAwB;SACzB,CAAC;QACF,uBAAuB,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,aAAa,GAAG,KAAK,CAAC;QACxB,CAAC;KACF,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM;QAChE,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,+CAA+C,CAChD,CAAC;IACJ,MAAM,oCAAoC,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC3E,MAAM,+BAA+B,CAAC;QACpC,GAAG,KAAK;QACR,aAAa;QACb,wBAAwB;KACzB,CAAC,CAAC;IACH,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC3E,2BAA2B,CAAC;QAC1B,aAAa;QACb,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,kBAAkB;KACrC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport { assertBlobContentKeyBundleTargetHash } from \"../../data/documents/blob/shared/responses\";\nimport type { DecryptDocumentAttachmentBlobInput } from \"../../data/documents/blob/shared/types\";\nimport { assertDocumentWriterProjectionConsistent } from \"../../data/documents/shared/projection\";\nimport { projectionVerificationOptions } from \"../../data/documents/shared/types\";\nimport {\n  type DocumentWriterProjectionAuthorization,\n  requireProjectionUserKeyResolver,\n} from \"../../data/keyingProjectionVerification\";\nimport { assertAttachmentBindingVerified } from \"./attachmentBindingVerification\";\nimport { assertBlobWrapScopeVerified } from \"./verifiedWrapScope\";\n\n/** Retaining an existing envelope does not propagate a key to a new recipient. */\nexport async function verifyRetainedAttachment(\n  input: Omit<\n    DecryptDocumentAttachmentBlobInput,\n    \"encryptedBytes\" | \"targetSecretKey\"\n  >,\n): Promise<void> {\n  const resolveProjectionUserKey = requireProjectionUserKeyResolver(\n    input.resolveProjectionUserKey,\n    \"Retained attachment scope\",\n  );\n  let authorization: DocumentWriterProjectionAuthorization | undefined;\n  await assertDocumentWriterProjectionConsistent(input.writerProjection, {\n    allowStaleContentKeyBundle: true,\n    ...projectionVerificationOptions({\n      execSql: input.execSql,\n      resolveProjectionUserKey,\n    }),\n    onVerifiedAuthorization: (value) => {\n      authorization = value;\n    },\n  });\n  if (input.binding.contentKeyBundle.blobId !== input.binding.blobId)\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Retained attachment bundle names another blob\",\n    );\n  await assertBlobContentKeyBundleTargetHash(input.binding.contentKeyBundle);\n  await assertAttachmentBindingVerified({\n    ...input,\n    authorization,\n    resolveProjectionUserKey,\n  });\n  if (!authorization) throw new Error(\"Attachment authority is unavailable\");\n  assertBlobWrapScopeVerified({\n    authorization,\n    binding: input.binding,\n    documentId: input.expectedDocumentId,\n  });\n}\n"]}

package/workflows/blobs/upload.d.ts

@@ -0,0 +1,10 @@
+import type { BlobSourceSnapshot } from "../../data/documents/blob/shared/blobSourceSnapshot.js";
+import type { UploadDocumentAttachmentInput, UploadDocumentAttachmentResult } from "../../data/documents/blob/shared/types.js";
+interface PreparedUploadDocumentAttachmentInput extends UploadDocumentAttachmentInput {
+    readonly sourceSnapshot?: BlobSourceSnapshot | undefined;
+    readonly onStageUnavailable?: ((stageId: string) => Promise<void>) | undefined;
+}
+export declare function uploadDocumentAttachment(input: UploadDocumentAttachmentInput): Promise<UploadDocumentAttachmentResult | null>;
+/** Internal upload path for a source snapshot produced by `inspectBlobSource`. */
+export declare function uploadPreparedDocumentAttachment(input: PreparedUploadDocumentAttachmentInput): Promise<UploadDocumentAttachmentResult | null>;
+export {};

package/workflows/blobs/upload.js

@@ -0,0 +1,243 @@
+import { computeBlobAccessManifestHash, computeBlobContentKeyTargetHash, } from "../../internal/crypto/index.js";
+import { createBlobByteSource, } from "../../data/blobContracts.js";
+import { prepareBlobEncryption } from "../../data/documents/blob/shared/crypto.js";
+import { signBlobAttachmentEvent, signBlobAttachmentWriteHeader, } from "../../data/documents/blob/shared/events.js";
+import { verifiedBlobWrapTargetsFromDocumentProjection, wrapBlobContentKey, } from "../../data/documents/blob/shared/projection.js";
+import { assertBlobAttachmentBindResponse } from "../../data/documents/blob/shared/responses.js";
+import { authorizingContainerPathRefs } from "../../data/documents/shared/projection.js";
+import { uniqueSortedStrings } from "../../data/documents/shared/readers.js";
+import { projectionVerificationOptions, } from "../../data/documents/shared/types.js";
+import { readCanonicalRecord } from "../../data/keyingCanonicalJson.js";
+import { requireProjectionUserKeyResolver } from "../../data/keyingProjectionVerification.js";
+import { shouldRetryWithFreshProjection } from "../documents/syncFailureClassification.js";
+import { resolveMultipartUploadOptions } from "./automaticMultipartUpload.js";
+import { stageMultipartBlobAttachment } from "./multipartUpload.js";
+import { resolveBlobMutationWriterProjection } from "./writerProjection.js";
+async function buildBlobAttachmentMaterial(input) {
+    const resolved = await resolveBlobMutationWriterProjection({
+        apiClient: input.apiClient,
+        documentId: input.documentId,
+        errorLabel: "Blob attachment",
+        execSql: input.execSql,
+        isRemoteSyncBlocked: input.isRemoteSyncBlocked,
+        writerProjection: input.writerProjection,
+        ...projectionVerificationOptions(input),
+    });
+    if (!resolved) {
+        return null;
+    }
+    const { manifestIdentity, writerProjection } = resolved;
+    const targets = verifiedBlobWrapTargetsFromDocumentProjection({
+        bindingId: input.bindingId,
+        documentId: input.documentId,
+        writerProjection,
+    });
+    const targetHash = await computeBlobContentKeyTargetHash(targets);
+    const contentKeyBundle = {
+        contentKeyEpoch: input.contentKeyEpoch,
+        targetHash,
+        targets: await wrapBlobContentKey({
+            blobId: input.blobId,
+            contentKey: input.contentKey,
+            contentKeyEpoch: input.contentKeyEpoch,
+            execSql: input.execSql,
+            secretKey: input.targetSecretKey,
+            targets,
+            writerProjection,
+            ...projectionVerificationOptions(input),
+        }),
+    };
+    const encrypted = await prepareBlobEncryption({
+        blobId: input.blobId,
+        chunkSize: input.partSize,
+        contentKey: input.contentKey,
+        contentKeyBundle,
+        nonceSeed: input.nonceSeed,
+        organizationId: manifestIdentity.organizationId,
+        source: input.source,
+        sourceSnapshot: input.sourceSnapshot,
+    });
+    const blobAccessManifestHash = await computeBlobAccessManifestHash({
+        version: 1,
+        blobId: input.blobId,
+        organizationId: manifestIdentity.organizationId,
+        activeBindingIds: [input.bindingId],
+        documentManifestHashes: [manifestIdentity.manifestHash],
+        linkedContainerManifestHashes: uniqueSortedStrings(targets.map((target) => target.containerManifestHash)),
+        linkedContainerKeyEpochIds: uniqueSortedStrings(targets.map((target) => target.containerKeyEpochId)),
+        blobKeyTargetHash: targetHash,
+    });
+    return {
+        blobAccessManifestHash,
+        contentKeyBundle,
+        encrypted,
+        manifestIdentity,
+        targetHash,
+        targets,
+        writerProjection,
+    };
+}
+function blobAttachmentBindRequest(input) {
+    return {
+        event: readCanonicalRecord(input.event, "Blob attachment bind event"),
+        body: readCanonicalRecord(input.body, "Blob attachment bind body"),
+        authorizingContainerPathRefs: authorizingContainerPathRefs(input.material.writerProjection),
+        contentKeyBundle: input.material.contentKeyBundle,
+        stagedBlob: {
+            stageId: input.stageId,
+            writeHeader: readCanonicalRecord(input.writeHeader, "Blob attachment write header"),
+        },
+    };
+}
+async function stageAndBindBlobAttachment(input) {
+    const { body, event } = await signBlobAttachmentEvent({
+        author: input.author,
+        bindingId: input.bindingId,
+        blobId: input.blobId,
+        documentId: input.documentId,
+        eventId: input.eventId,
+        expectedBindingId: input.expectedBindingId,
+        manifestIdentity: input.material.manifestIdentity,
+        signedAt: input.signedAt,
+        slotId: input.slotId,
+        authorizingContainerPathRefs: authorizingContainerPathRefs(input.material.writerProjection),
+    });
+    const { writeHeader, writeHeaderHash } = await signBlobAttachmentWriteHeader({
+        authorizingContainerPathRefs: authorizingContainerPathRefs(input.material.writerProjection),
+        author: input.author,
+        blobAccessManifestHash: input.material.blobAccessManifestHash,
+        blobId: input.blobId,
+        contentKeyEpoch: input.contentKeyEpoch,
+        encrypted: input.material.encrypted,
+        manifestIdentity: input.material.manifestIdentity,
+        signedAt: input.signedAt,
+        targetHash: input.material.targetHash,
+    });
+    const stageId = await stageMultipartBlobAttachment({
+        organizationId: input.material.manifestIdentity.organizationId,
+        apiClient: input.apiClient,
+        encryption: input.material.encrypted,
+        multipart: input.multipart,
+        onMultipartProgress: input.onMultipartProgress,
+        onStageResolved: input.onStageResolved,
+        onStageUnavailable: input.onStageUnavailable,
+    });
+    if (!stageId) {
+        return null;
+    }
+    const request = blobAttachmentBindRequest({
+        body,
+        event,
+        material: input.material,
+        stageId,
+        writeHeader,
+    });
+    const response = await input.apiClient.bindBlobAttachment(input.blobId, request, {
+        expectedPaymentRequiredOrganizationId: input.material.manifestIdentity.organizationId,
+    });
+    if (!response) {
+        return null;
+    }
+    await assertBlobAttachmentBindResponse({
+        body,
+        bindingId: input.bindingId,
+        blobAccessManifestHash: input.material.blobAccessManifestHash,
+        blobId: input.blobId,
+        contentKeyBundle: input.material.contentKeyBundle,
+        documentId: input.documentId,
+        event,
+        manifestIdentity: input.material.manifestIdentity,
+        response,
+        slotId: input.slotId,
+        targetHash: input.material.targetHash,
+        targets: input.material.targets,
+        writeHeader,
+        writeHeaderHash,
+    });
+    return {
+        request,
+        response,
+        sha256: input.material.encrypted.sha256,
+        byteLength: input.material.encrypted.byteLength,
+        writeHeader,
+        writeHeaderHash,
+    };
+}
+async function uploadDocumentAttachmentImpl({ apiClient, author, blobId = crypto.randomUUID(), bindingId = crypto.randomUUID(), bytes, contentKey = crypto.getRandomValues(new Uint8Array(32)), contentKeyEpoch = 1, documentId, eventId = crypto.randomUUID(), execSql, expectedBindingId, isRemoteSyncBlocked, nonceSeed, multipart, onMultipartProgress, onStageResolved, onStageUnavailable, resolveProjectionUserKey, signedAt = new Date().toISOString(), slotId, sourceSnapshot, targetSecretKey, warmReferencedPrincipalPolicies, writerProjection, }) {
+    if (contentKey.byteLength !== 32) {
+        throw new Error("Blob content key must be 32 bytes");
+    }
+    const resolveProjectionUserKeyForUpload = requireProjectionUserKeyResolver(resolveProjectionUserKey, "Document attachment upload");
+    const resolvedMultipart = resolveMultipartUploadOptions(multipart);
+    const source = createBlobByteSource(bytes);
+    const buildMaterial = (freshWriterProjection) => buildBlobAttachmentMaterial({
+        apiClient,
+        bindingId,
+        blobId,
+        contentKey,
+        contentKeyEpoch,
+        documentId,
+        execSql,
+        isRemoteSyncBlocked,
+        nonceSeed,
+        partSize: resolvedMultipart.partSize,
+        resolveProjectionUserKey: resolveProjectionUserKeyForUpload,
+        source,
+        sourceSnapshot,
+        targetSecretKey,
+        warmReferencedPrincipalPolicies,
+        writerProjection: freshWriterProjection,
+    });
+    let material;
+    try {
+        material = await buildMaterial(writerProjection);
+    }
+    catch (error) {
+        if (!apiClient.evictDocumentWriterProjection ||
+            !shouldRetryWithFreshProjection(error, (message) => message.startsWith("Container writer projection KEK") &&
+                message.includes("could not be unwrapped"))) {
+            throw error;
+        }
+        // The attachment binds to this document; only its projection was stale, so
+        // evict just it rather than wiping the whole projection cache.
+        apiClient.evictDocumentWriterProjection(documentId);
+        material = await buildMaterial(undefined);
+    }
+    if (!material) {
+        return null;
+    }
+    const result = await stageAndBindBlobAttachment({
+        apiClient,
+        author,
+        bindingId,
+        blobId,
+        contentKeyEpoch,
+        documentId,
+        eventId,
+        expectedBindingId,
+        material,
+        multipart: resolvedMultipart,
+        onMultipartProgress,
+        onStageResolved,
+        onStageUnavailable,
+        signedAt,
+        slotId,
+    });
+    if (!result) {
+        return null;
+    }
+    return {
+        blobId,
+        bindingId,
+        writerProjection: material.writerProjection,
+        ...result,
+    };
+}
+export function uploadDocumentAttachment(input) {
+    return uploadDocumentAttachmentImpl({ ...input, sourceSnapshot: undefined });
+}
+/** Internal upload path for a source snapshot produced by `inspectBlobSource`. */
+export function uploadPreparedDocumentAttachment(input) {
+    return uploadDocumentAttachmentImpl(input);
+}
+//# sourceMappingURL=upload.js.map

package/workflows/blobs/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["upload.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,GAChC,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAEL,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EACL,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,6CAA6C,EAC7C,kBAAkB,GACnB,MAAM,6CAA6C,CAAC;AACrD,OAAO,EAAE,gCAAgC,EAAE,MAAM,4CAA4C,CAAC;AAS9F,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,EAGL,6BAA6B,GAC9B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,gCAAgC,EAAE,MAAM,yCAAyC,CAAC;AAE3F,OAAO,EAAE,8BAA8B,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,mCAAmC,EAAE,MAAM,oBAAoB,CAAC;AAEzE,KAAK,UAAU,2BAA2B,CACxC,KAeiC;IAEjC,MAAM,QAAQ,GAAG,MAAM,mCAAmC,CAAC;QACzD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,GAAG,6BAA6B,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,QAAQ,CAAC;IAExD,MAAM,OAAO,GAAG,6CAA6C,CAAC;QAC5D,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,gBAAgB;KACjB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAgC;QACpD,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU;QACV,OAAO,EAAE,MAAM,kBAAkB,CAAC;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,eAAe;YAChC,OAAO;YACP,gBAAgB;YAChB,GAAG,6BAA6B,CAAC,KAAK,CAAC;SACxC,CAAC;KACH,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;QAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,QAAQ;QACzB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,gBAAgB;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,gBAAgB,CAAC,cAAc;QAC/C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,MAAM,sBAAsB,GAAG,MAAM,6BAA6B,CAAC;QACjE,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,gBAAgB,CAAC,cAAc;QAC/C,gBAAgB,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;QACnC,sBAAsB,EAAE,CAAC,gBAAgB,CAAC,YAAY,CAAC;QACvD,6BAA6B,EAAE,mBAAmB,CAChD,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CACtD;QACD,0BAA0B,EAAE,mBAAmB,CAC7C,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CACpD;QACD,iBAAiB,EAAE,UAAU;KAC9B,CAAC,CAAC;IAEH,OAAO;QACL,sBAAsB;QACtB,gBAAgB;QAChB,SAAS;QACT,gBAAgB;QAChB,UAAU;QACV,OAAO;QACP,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAMlC;IACC,OAAO;QACL,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,4BAA4B,CAAC;QACrE,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,2BAA2B,CAAC;QAClE,4BAA4B,EAAE,4BAA4B,CACxD,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAChC;QACD,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;QACjD,UAAU,EAAE;YACV,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,mBAAmB,CAC9B,KAAK,CAAC,WAAW,EACjB,8BAA8B,CAC/B;SACF;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAgBzC;IAQC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,uBAAuB,CAAC;QACpD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;QACjD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,4BAA4B,EAAE,4BAA4B,CACxD,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAChC;KACF,CAAC,CAAC;IACH,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,MAAM,6BAA6B,CAAC;QAC3E,4BAA4B,EAAE,4BAA4B,CACxD,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAChC;QACD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,sBAAsB,EAAE,KAAK,CAAC,QAAQ,CAAC,sBAAsB;QAC7D,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;QACnC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;QACjD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;KACtC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC;QACjD,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,cAAc;QAC9D,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;KAC7C,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,yBAAyB,CAAC;QACxC,IAAI;QACJ,KAAK;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,OAAO;QACP,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,kBAAkB,CACvD,KAAK,CAAC,MAAM,EACZ,OAAO,EACP;QACE,qCAAqC,EACnC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,cAAc;KACjD,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,gCAAgC,CAAC;QACrC,IAAI;QACJ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,sBAAsB,EAAE,KAAK,CAAC,QAAQ,CAAC,sBAAsB;QAC7D,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;QACjD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK;QACL,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;QACjD,QAAQ;QACR,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;QACrC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;QAC/B,WAAW;QACX,eAAe;KAChB,CAAC,CAAC;IAEH,OAAO;QACL,OAAO;QACP,QAAQ;QACR,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM;QACvC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU;QAC/C,WAAW;QACX,eAAe;KAChB,CAAC;AACJ,CAAC;AAUD,KAAK,UAAU,4BAA4B,CAAC,EAC1C,SAAS,EACT,MAAM,EACN,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,EAC5B,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,EAC/B,KAAK,EACL,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,EACvD,eAAe,GAAG,CAAC,EACnB,UAAU,EACV,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,EAC7B,OAAO,EACP,iBAAiB,EACjB,mBAAmB,EACnB,SAAS,EACT,SAAS,EACT,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,wBAAwB,EACxB,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACnC,MAAM,EACN,cAAc,EACd,eAAe,EACf,+BAA+B,EAC/B,gBAAgB,GACsB;IACtC,IAAI,UAAU,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,iCAAiC,GAAG,gCAAgC,CACxE,wBAAwB,EACxB,4BAA4B,CAC7B,CAAC;IACF,MAAM,iBAAiB,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAE3C,MAAM,aAAa,GAAG,CACpB,qBAAwE,EACxE,EAAE,CACF,2BAA2B,CAAC;QAC1B,SAAS;QACT,SAAS;QACT,MAAM;QACN,UAAU;QACV,eAAe;QACf,UAAU;QACV,OAAO;QACP,mBAAmB;QACnB,SAAS;QACT,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;QACpC,wBAAwB,EAAE,iCAAiC;QAC3D,MAAM;QACN,cAAc;QACd,eAAe;QACf,+BAA+B;QAC/B,gBAAgB,EAAE,qBAAqB;KACxC,CAAC,CAAC;IACL,IAAI,QAAuC,CAAC;IAC5C,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,CAAC,SAAS,CAAC,6BAA6B;YACxC,CAAC,8BAA8B,CAC7B,KAAK,EACL,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,UAAU,CAAC,iCAAiC,CAAC;gBACrD,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAC7C,EACD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,2EAA2E;QAC3E,+DAA+D;QAC/D,SAAS,CAAC,6BAA6B,CAAC,UAAU,CAAC,CAAC;QACpD,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;QAC9C,SAAS;QACT,MAAM;QACN,SAAS;QACT,MAAM;QACN,eAAe;QACf,UAAU;QACV,OAAO;QACP,iBAAiB;QACjB,QAAQ;QACR,SAAS,EAAE,iBAAiB;QAC5B,mBAAmB;QACnB,eAAe;QACf,kBAAkB;QAClB,QAAQ;QACR,MAAM;KACP,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,MAAM;QACN,SAAS;QACT,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,GAAG,MAAM;KACV,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAoC;IAEpC,OAAO,4BAA4B,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gCAAgC,CAC9C,KAA4C;IAE5C,OAAO,4BAA4B,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC","sourcesContent":["import type {\n  AccessEvent,\n  AttachmentBindAccessEventBody,\n  WriteHeader,\n} from \"@tearleads/crypto\";\nimport {\n  computeBlobAccessManifestHash,\n  computeBlobContentKeyTargetHash,\n} from \"@tearleads/crypto\";\nimport type {\n  BlobAttachmentBindRequest,\n  BlobContentKeyBundleRequest,\n} from \"@tearleads/validators/request\";\nimport type { BlobAttachmentBindResponse } from \"@tearleads/validators/response\";\nimport {\n  type BlobByteSource,\n  createBlobByteSource,\n} from \"../../data/blobContracts\";\nimport type { BlobSourceSnapshot } from \"../../data/documents/blob/shared/blobSourceSnapshot\";\nimport { prepareBlobEncryption } from \"../../data/documents/blob/shared/crypto\";\nimport {\n  signBlobAttachmentEvent,\n  signBlobAttachmentWriteHeader,\n} from \"../../data/documents/blob/shared/events\";\nimport {\n  verifiedBlobWrapTargetsFromDocumentProjection,\n  wrapBlobContentKey,\n} from \"../../data/documents/blob/shared/projection\";\nimport { assertBlobAttachmentBindResponse } from \"../../data/documents/blob/shared/responses\";\nimport type {\n  BlobAttachmentApi,\n  BlobAttachmentMaterial,\n  MultipartStageResolvedListener,\n  MultipartUploadProgressListener,\n  UploadDocumentAttachmentInput,\n  UploadDocumentAttachmentResult,\n} from \"../../data/documents/blob/shared/types\";\nimport { authorizingContainerPathRefs } from \"../../data/documents/shared/projection\";\nimport { uniqueSortedStrings } from \"../../data/documents/shared/readers\";\nimport {\n  type DocumentCreateAuthor,\n  type ProjectionVerificationOptions,\n  projectionVerificationOptions,\n} from \"../../data/documents/shared/types\";\nimport { readCanonicalRecord } from \"../../data/keyingCanonicalJson\";\nimport { requireProjectionUserKeyResolver } from \"../../data/keyingProjectionVerification\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport { shouldRetryWithFreshProjection } from \"../documents/syncFailureClassification\";\nimport { resolveMultipartUploadOptions } from \"./automaticMultipartUpload\";\nimport { stageMultipartBlobAttachment } from \"./multipartUpload\";\nimport { resolveBlobMutationWriterProjection } from \"./writerProjection\";\n\nasync function buildBlobAttachmentMaterial(\n  input: {\n    apiClient: BlobAttachmentApi;\n    bindingId: string;\n    blobId: string;\n    contentKey: Uint8Array;\n    contentKeyEpoch: number;\n    documentId: string;\n    execSql?: ExecSql | undefined;\n    isRemoteSyncBlocked?: ((organizationId: string) => boolean) | undefined;\n    nonceSeed?: Uint8Array | undefined;\n    partSize: number;\n    source: BlobByteSource;\n    sourceSnapshot?: BlobSourceSnapshot | undefined;\n    targetSecretKey: Uint8Array;\n    writerProjection?: UploadDocumentAttachmentInput[\"writerProjection\"];\n  } & ProjectionVerificationOptions,\n): Promise<BlobAttachmentMaterial | null> {\n  const resolved = await resolveBlobMutationWriterProjection({\n    apiClient: input.apiClient,\n    documentId: input.documentId,\n    errorLabel: \"Blob attachment\",\n    execSql: input.execSql,\n    isRemoteSyncBlocked: input.isRemoteSyncBlocked,\n    writerProjection: input.writerProjection,\n    ...projectionVerificationOptions(input),\n  });\n  if (!resolved) {\n    return null;\n  }\n  const { manifestIdentity, writerProjection } = resolved;\n\n  const targets = verifiedBlobWrapTargetsFromDocumentProjection({\n    bindingId: input.bindingId,\n    documentId: input.documentId,\n    writerProjection,\n  });\n  const targetHash = await computeBlobContentKeyTargetHash(targets);\n  const contentKeyBundle: BlobContentKeyBundleRequest = {\n    contentKeyEpoch: input.contentKeyEpoch,\n    targetHash,\n    targets: await wrapBlobContentKey({\n      blobId: input.blobId,\n      contentKey: input.contentKey,\n      contentKeyEpoch: input.contentKeyEpoch,\n      execSql: input.execSql,\n      secretKey: input.targetSecretKey,\n      targets,\n      writerProjection,\n      ...projectionVerificationOptions(input),\n    }),\n  };\n  const encrypted = await prepareBlobEncryption({\n    blobId: input.blobId,\n    chunkSize: input.partSize,\n    contentKey: input.contentKey,\n    contentKeyBundle,\n    nonceSeed: input.nonceSeed,\n    organizationId: manifestIdentity.organizationId,\n    source: input.source,\n    sourceSnapshot: input.sourceSnapshot,\n  });\n  const blobAccessManifestHash = await computeBlobAccessManifestHash({\n    version: 1,\n    blobId: input.blobId,\n    organizationId: manifestIdentity.organizationId,\n    activeBindingIds: [input.bindingId],\n    documentManifestHashes: [manifestIdentity.manifestHash],\n    linkedContainerManifestHashes: uniqueSortedStrings(\n      targets.map((target) => target.containerManifestHash),\n    ),\n    linkedContainerKeyEpochIds: uniqueSortedStrings(\n      targets.map((target) => target.containerKeyEpochId),\n    ),\n    blobKeyTargetHash: targetHash,\n  });\n\n  return {\n    blobAccessManifestHash,\n    contentKeyBundle,\n    encrypted,\n    manifestIdentity,\n    targetHash,\n    targets,\n    writerProjection,\n  };\n}\n\nfunction blobAttachmentBindRequest(input: {\n  body: AttachmentBindAccessEventBody;\n  event: AccessEvent;\n  material: BlobAttachmentMaterial;\n  stageId: string;\n  writeHeader: WriteHeader;\n}): BlobAttachmentBindRequest {\n  return {\n    event: readCanonicalRecord(input.event, \"Blob attachment bind event\"),\n    body: readCanonicalRecord(input.body, \"Blob attachment bind body\"),\n    authorizingContainerPathRefs: authorizingContainerPathRefs(\n      input.material.writerProjection,\n    ),\n    contentKeyBundle: input.material.contentKeyBundle,\n    stagedBlob: {\n      stageId: input.stageId,\n      writeHeader: readCanonicalRecord(\n        input.writeHeader,\n        \"Blob attachment write header\",\n      ),\n    },\n  };\n}\n\nasync function stageAndBindBlobAttachment(input: {\n  apiClient: BlobAttachmentApi;\n  author: DocumentCreateAuthor;\n  bindingId: string;\n  blobId: string;\n  contentKeyEpoch: number;\n  documentId: string;\n  eventId: string;\n  expectedBindingId: string | null;\n  material: BlobAttachmentMaterial;\n  multipart: NonNullable<UploadDocumentAttachmentInput[\"multipart\"]>;\n  onMultipartProgress?: MultipartUploadProgressListener | undefined;\n  onStageResolved?: MultipartStageResolvedListener | undefined;\n  onStageUnavailable?: ((stageId: string) => Promise<void>) | undefined;\n  signedAt: string;\n  slotId: string;\n}): Promise<{\n  request: BlobAttachmentBindRequest;\n  response: BlobAttachmentBindResponse;\n  sha256: string;\n  byteLength: number;\n  writeHeader: WriteHeader;\n  writeHeaderHash: string;\n} | null> {\n  const { body, event } = await signBlobAttachmentEvent({\n    author: input.author,\n    bindingId: input.bindingId,\n    blobId: input.blobId,\n    documentId: input.documentId,\n    eventId: input.eventId,\n    expectedBindingId: input.expectedBindingId,\n    manifestIdentity: input.material.manifestIdentity,\n    signedAt: input.signedAt,\n    slotId: input.slotId,\n    authorizingContainerPathRefs: authorizingContainerPathRefs(\n      input.material.writerProjection,\n    ),\n  });\n  const { writeHeader, writeHeaderHash } = await signBlobAttachmentWriteHeader({\n    authorizingContainerPathRefs: authorizingContainerPathRefs(\n      input.material.writerProjection,\n    ),\n    author: input.author,\n    blobAccessManifestHash: input.material.blobAccessManifestHash,\n    blobId: input.blobId,\n    contentKeyEpoch: input.contentKeyEpoch,\n    encrypted: input.material.encrypted,\n    manifestIdentity: input.material.manifestIdentity,\n    signedAt: input.signedAt,\n    targetHash: input.material.targetHash,\n  });\n  const stageId = await stageMultipartBlobAttachment({\n    organizationId: input.material.manifestIdentity.organizationId,\n    apiClient: input.apiClient,\n    encryption: input.material.encrypted,\n    multipart: input.multipart,\n    onMultipartProgress: input.onMultipartProgress,\n    onStageResolved: input.onStageResolved,\n    onStageUnavailable: input.onStageUnavailable,\n  });\n  if (!stageId) {\n    return null;\n  }\n\n  const request = blobAttachmentBindRequest({\n    body,\n    event,\n    material: input.material,\n    stageId,\n    writeHeader,\n  });\n  const response = await input.apiClient.bindBlobAttachment(\n    input.blobId,\n    request,\n    {\n      expectedPaymentRequiredOrganizationId:\n        input.material.manifestIdentity.organizationId,\n    },\n  );\n  if (!response) {\n    return null;\n  }\n\n  await assertBlobAttachmentBindResponse({\n    body,\n    bindingId: input.bindingId,\n    blobAccessManifestHash: input.material.blobAccessManifestHash,\n    blobId: input.blobId,\n    contentKeyBundle: input.material.contentKeyBundle,\n    documentId: input.documentId,\n    event,\n    manifestIdentity: input.material.manifestIdentity,\n    response,\n    slotId: input.slotId,\n    targetHash: input.material.targetHash,\n    targets: input.material.targets,\n    writeHeader,\n    writeHeaderHash,\n  });\n\n  return {\n    request,\n    response,\n    sha256: input.material.encrypted.sha256,\n    byteLength: input.material.encrypted.byteLength,\n    writeHeader,\n    writeHeaderHash,\n  };\n}\n\ninterface PreparedUploadDocumentAttachmentInput\n  extends UploadDocumentAttachmentInput {\n  readonly sourceSnapshot?: BlobSourceSnapshot | undefined;\n  readonly onStageUnavailable?:\n    | ((stageId: string) => Promise<void>)\n    | undefined;\n}\n\nasync function uploadDocumentAttachmentImpl({\n  apiClient,\n  author,\n  blobId = crypto.randomUUID(),\n  bindingId = crypto.randomUUID(),\n  bytes,\n  contentKey = crypto.getRandomValues(new Uint8Array(32)),\n  contentKeyEpoch = 1,\n  documentId,\n  eventId = crypto.randomUUID(),\n  execSql,\n  expectedBindingId,\n  isRemoteSyncBlocked,\n  nonceSeed,\n  multipart,\n  onMultipartProgress,\n  onStageResolved,\n  onStageUnavailable,\n  resolveProjectionUserKey,\n  signedAt = new Date().toISOString(),\n  slotId,\n  sourceSnapshot,\n  targetSecretKey,\n  warmReferencedPrincipalPolicies,\n  writerProjection,\n}: PreparedUploadDocumentAttachmentInput): Promise<UploadDocumentAttachmentResult | null> {\n  if (contentKey.byteLength !== 32) {\n    throw new Error(\"Blob content key must be 32 bytes\");\n  }\n  const resolveProjectionUserKeyForUpload = requireProjectionUserKeyResolver(\n    resolveProjectionUserKey,\n    \"Document attachment upload\",\n  );\n  const resolvedMultipart = resolveMultipartUploadOptions(multipart);\n  const source = createBlobByteSource(bytes);\n\n  const buildMaterial = (\n    freshWriterProjection: UploadDocumentAttachmentInput[\"writerProjection\"],\n  ) =>\n    buildBlobAttachmentMaterial({\n      apiClient,\n      bindingId,\n      blobId,\n      contentKey,\n      contentKeyEpoch,\n      documentId,\n      execSql,\n      isRemoteSyncBlocked,\n      nonceSeed,\n      partSize: resolvedMultipart.partSize,\n      resolveProjectionUserKey: resolveProjectionUserKeyForUpload,\n      source,\n      sourceSnapshot,\n      targetSecretKey,\n      warmReferencedPrincipalPolicies,\n      writerProjection: freshWriterProjection,\n    });\n  let material: BlobAttachmentMaterial | null;\n  try {\n    material = await buildMaterial(writerProjection);\n  } catch (error) {\n    if (\n      !apiClient.evictDocumentWriterProjection ||\n      !shouldRetryWithFreshProjection(\n        error,\n        (message) =>\n          message.startsWith(\"Container writer projection KEK\") &&\n          message.includes(\"could not be unwrapped\"),\n      )\n    ) {\n      throw error;\n    }\n\n    // The attachment binds to this document; only its projection was stale, so\n    // evict just it rather than wiping the whole projection cache.\n    apiClient.evictDocumentWriterProjection(documentId);\n    material = await buildMaterial(undefined);\n  }\n  if (!material) {\n    return null;\n  }\n  const result = await stageAndBindBlobAttachment({\n    apiClient,\n    author,\n    bindingId,\n    blobId,\n    contentKeyEpoch,\n    documentId,\n    eventId,\n    expectedBindingId,\n    material,\n    multipart: resolvedMultipart,\n    onMultipartProgress,\n    onStageResolved,\n    onStageUnavailable,\n    signedAt,\n    slotId,\n  });\n  if (!result) {\n    return null;\n  }\n\n  return {\n    blobId,\n    bindingId,\n    writerProjection: material.writerProjection,\n    ...result,\n  };\n}\n\nexport function uploadDocumentAttachment(\n  input: UploadDocumentAttachmentInput,\n): Promise<UploadDocumentAttachmentResult | null> {\n  return uploadDocumentAttachmentImpl({ ...input, sourceSnapshot: undefined });\n}\n\n/** Internal upload path for a source snapshot produced by `inspectBlobSource`. */\nexport function uploadPreparedDocumentAttachment(\n  input: PreparedUploadDocumentAttachmentInput,\n): Promise<UploadDocumentAttachmentResult | null> {\n  return uploadDocumentAttachmentImpl(input);\n}\n"]}

package/workflows/blobs/verifiedWrapScope.js

@@ -0,0 +1,20 @@
+import { KeyingVerificationError } from "../../internal/crypto/index.js";
+import { ProjectionDependencyUnavailableError } from "../../data/keyingProjectionVerification/dependencyUnavailable.js";
+/** A retained wrap must name a KEK committed by verified container history. */
+export function assertBlobWrapScopeVerified(input) {
+    const targets = input.binding.contentKeyBundle.targets.filter((target) => target.bindingId === input.binding.bindingId &&
+        target.documentId === input.documentId);
+    if (targets.length === 0)
+        throw new KeyingVerificationError("object_mismatch", "Blob bundle lacks its attachment target");
+    for (const target of targets) {
+        const path = input.authorization.containerPathByManifestHash.get(target.containerManifestHash);
+        const manifest = path?.at(-1);
+        if (!manifest)
+            throw new ProjectionDependencyUnavailableError("Blob wrapped-target manifest is unavailable");
+        if (manifest.state.containerId !== target.containerId ||
+            manifest.state.containerKeyEpochId !== target.containerKeyEpochId) {
+            throw new KeyingVerificationError("object_mismatch", "Blob wrapped target differs from verified container history");
+        }
+    }
+}
+//# sourceMappingURL=verifiedWrapScope.js.map

package/workflows/blobs/verifiedWrapScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedWrapScope.js","sourceRoot":"","sources":["verifiedWrapScope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAG5D,OAAO,EAAE,oCAAoC,EAAE,MAAM,+DAA+D,CAAC;AAErH,+EAA+E;AAC/E,MAAM,UAAU,2BAA2B,CAAC,KAI3C;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAC3D,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,CAAC,SAAS;QAC5C,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CACzC,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QACtB,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,yCAAyC,CAC1C,CAAC;IACJ,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,CAAC,2BAA2B,CAAC,GAAG,CAC9D,MAAM,CAAC,qBAAqB,CAC7B,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ;YACX,MAAM,IAAI,oCAAoC,CAC5C,6CAA6C,CAC9C,CAAC;QACJ,IACE,QAAQ,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;YACjD,QAAQ,CAAC,KAAK,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,EACjE,CAAC;YACD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,6DAA6D,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport type { BlobAttachmentSummary } from \"@tearleads/validators/response\";\nimport type { DocumentWriterProjectionAuthorization } from \"../../data/keyingProjectionVerification\";\nimport { ProjectionDependencyUnavailableError } from \"../../data/keyingProjectionVerification/dependencyUnavailable\";\n\n/** A retained wrap must name a KEK committed by verified container history. */\nexport function assertBlobWrapScopeVerified(input: {\n  authorization: DocumentWriterProjectionAuthorization;\n  binding: BlobAttachmentSummary;\n  documentId: string;\n}): void {\n  const targets = input.binding.contentKeyBundle.targets.filter(\n    (target) =>\n      target.bindingId === input.binding.bindingId &&\n      target.documentId === input.documentId,\n  );\n  if (targets.length === 0)\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Blob bundle lacks its attachment target\",\n    );\n  for (const target of targets) {\n    const path = input.authorization.containerPathByManifestHash.get(\n      target.containerManifestHash,\n    );\n    const manifest = path?.at(-1);\n    if (!manifest)\n      throw new ProjectionDependencyUnavailableError(\n        \"Blob wrapped-target manifest is unavailable\",\n      );\n    if (\n      manifest.state.containerId !== target.containerId ||\n      manifest.state.containerKeyEpochId !== target.containerKeyEpochId\n    ) {\n      throw new KeyingVerificationError(\n        \"object_mismatch\",\n        \"Blob wrapped target differs from verified container history\",\n      );\n    }\n  }\n}\n"]}

package/workflows/blobs/writerProjection.js

@@ -0,0 +1,29 @@
+import { readDocumentManifestIdentity } from "../../data/documents/blob/shared/readers.js";
+import { assertDocumentWriterProjectionConsistent } from "../../data/documents/shared/projection.js";
+import { projectionVerificationOptions, } from "../../data/documents/shared/types.js";
+/**
+ * Shared prologue for blob attachment mutations (upload/detach): resolve the
+ * document writer projection, verify its consistency, confirm it targets the
+ * mutated document, and gate on a blocked organization. Returns null when the
+ * projection is unavailable or the organization's remote sync is blocked.
+ */
+export async function resolveBlobMutationWriterProjection(input) {
+    const writerProjection = input.writerProjection ??
+        (await input.apiClient.getDocumentWriterProjection(input.documentId));
+    if (!writerProjection) {
+        return null;
+    }
+    await assertDocumentWriterProjectionConsistent(writerProjection, {
+        execSql: input.execSql,
+        ...projectionVerificationOptions(input),
+    });
+    const manifestIdentity = readDocumentManifestIdentity(writerProjection);
+    if (manifestIdentity.documentId !== input.documentId) {
+        throw new Error(`${input.errorLabel} writer projection targets wrong document`);
+    }
+    if (input.isRemoteSyncBlocked?.(manifestIdentity.organizationId)) {
+        return null;
+    }
+    return { manifestIdentity, writerProjection };
+}
+//# sourceMappingURL=writerProjection.js.map

package/workflows/blobs/writerProjection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writerProjection.js","sourceRoot":"","sources":["writerProjection.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AAKxF,OAAO,EAAE,wCAAwC,EAAE,MAAM,wCAAwC,CAAC;AAClG,OAAO,EAEL,6BAA6B,GAC9B,MAAM,mCAAmC,CAAC;AAG3C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,KAQiC;IAKjC,MAAM,gBAAgB,GACpB,KAAK,CAAC,gBAAgB;QACtB,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,wCAAwC,CAAC,gBAAgB,EAAE;QAC/D,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,6BAA6B,CAAC,KAAK,CAAC;KACxC,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,4BAA4B,CAAC,gBAAgB,CAAC,CAAC;IACxE,IAAI,gBAAgB,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,CAAC,UAAU,2CAA2C,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC;AAChD,CAAC","sourcesContent":["import type { DocumentWriterProjectionResponse } from \"@tearleads/validators/response\";\nimport { readDocumentManifestIdentity } from \"../../data/documents/blob/shared/readers\";\nimport type {\n  BlobAttachmentApi,\n  DocumentManifestIdentity,\n} from \"../../data/documents/blob/shared/types\";\nimport { assertDocumentWriterProjectionConsistent } from \"../../data/documents/shared/projection\";\nimport {\n  type ProjectionVerificationOptions,\n  projectionVerificationOptions,\n} from \"../../data/documents/shared/types\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\n\n/**\n * Shared prologue for blob attachment mutations (upload/detach): resolve the\n * document writer projection, verify its consistency, confirm it targets the\n * mutated document, and gate on a blocked organization. Returns null when the\n * projection is unavailable or the organization's remote sync is blocked.\n */\nexport async function resolveBlobMutationWriterProjection(\n  input: {\n    apiClient: Pick<BlobAttachmentApi, \"getDocumentWriterProjection\">;\n    documentId: string;\n    /** Prefix for the wrong-document error, e.g. \"Blob attachment detach\". */\n    errorLabel: string;\n    execSql?: ExecSql | undefined;\n    isRemoteSyncBlocked?: ((organizationId: string) => boolean) | undefined;\n    writerProjection?: DocumentWriterProjectionResponse | undefined;\n  } & ProjectionVerificationOptions,\n): Promise<{\n  manifestIdentity: DocumentManifestIdentity;\n  writerProjection: DocumentWriterProjectionResponse;\n} | null> {\n  const writerProjection =\n    input.writerProjection ??\n    (await input.apiClient.getDocumentWriterProjection(input.documentId));\n  if (!writerProjection) {\n    return null;\n  }\n\n  await assertDocumentWriterProjectionConsistent(writerProjection, {\n    execSql: input.execSql,\n    ...projectionVerificationOptions(input),\n  });\n  const manifestIdentity = readDocumentManifestIdentity(writerProjection);\n  if (manifestIdentity.documentId !== input.documentId) {\n    throw new Error(\n      `${input.errorLabel} writer projection targets wrong document`,\n    );\n  }\n  if (input.isRemoteSyncBlocked?.(manifestIdentity.organizationId)) {\n    return null;\n  }\n\n  return { manifestIdentity, writerProjection };\n}\n"]}

package/workflows/container-contents/availableDocumentLinkIntent.js

@@ -0,0 +1,32 @@
+import { DOCUMENT_LINK_INTENT_TYPE, } from "../../data/persistence/container-contents/documentMoveIntentPersistence.js";
+/** Plan available additions without forgetting any part of the durable intent. */
+export function availableDocumentLinkIntent(intent, hasContainer) {
+    if (intent.intentType !== DOCUMENT_LINK_INTENT_TYPE)
+        return { intent, deferred: false };
+    // For link intents the primary target is a routing hint, often the old source.
+    // Only explicit additions can defer the requested removals.
+    const requested = [...new Set(intent.additionalLinkContainerIds ?? [])];
+    const available = requested.filter(hasContainer);
+    const deferred = available.length !== requested.length;
+    const targetContainerId = hasContainer(intent.targetContainerId)
+        ? intent.targetContainerId
+        : (available[0] ??
+            (intent.sourceContainerId && hasContainer(intent.sourceContainerId)
+                ? intent.sourceContainerId
+                : undefined));
+    if (!targetContainerId ||
+        (!deferred && targetContainerId === intent.targetContainerId))
+        return { intent, deferred };
+    return {
+        deferred,
+        intent: {
+            ...intent,
+            targetContainerId,
+            additionalLinkContainerIds: available,
+            ...(deferred
+                ? { removedLinkContainerIds: [], replaceLinkedContainers: false }
+                : {}),
+        },
+    };
+}
+//# sourceMappingURL=availableDocumentLinkIntent.js.map

package/workflows/container-contents/availableDocumentLinkIntent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"availableDocumentLinkIntent.js","sourceRoot":"","sources":["availableDocumentLinkIntent.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,GAE1B,MAAM,yEAAyE,CAAC;AAEjF,kFAAkF;AAClF,MAAM,UAAU,2BAA2B,CACzC,MAAgC,EAChC,YAAqC;IAErC,IAAI,MAAM,CAAC,UAAU,KAAK,yBAAyB;QACjD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACrC,+EAA+E;IAC/E,4DAA4D;IAC5D,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,CAAC;IACvD,MAAM,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC9D,CAAC,CAAC,MAAM,CAAC,iBAAiB;QAC1B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YACb,CAAC,MAAM,CAAC,iBAAiB,IAAI,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAC;gBACjE,CAAC,CAAC,MAAM,CAAC,iBAAiB;gBAC1B,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACpB,IACE,CAAC,iBAAiB;QAClB,CAAC,CAAC,QAAQ,IAAI,iBAAiB,KAAK,MAAM,CAAC,iBAAiB,CAAC;QAE7D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC9B,OAAO;QACL,QAAQ;QACR,MAAM,EAAE;YACN,GAAG,MAAM;YACT,iBAAiB;YACjB,0BAA0B,EAAE,SAAS;YACrC,GAAG,CAAC,QAAQ;gBACV,CAAC,CAAC,EAAE,uBAAuB,EAAE,EAAE,EAAE,uBAAuB,EAAE,KAAK,EAAE;gBACjE,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;AACJ,CAAC","sourcesContent":["import {\n  DOCUMENT_LINK_INTENT_TYPE,\n  type DocumentMoveIntentRecord,\n} from \"../../data/persistence/container-contents/documentMoveIntentPersistence\";\n\n/** Plan available additions without forgetting any part of the durable intent. */\nexport function availableDocumentLinkIntent(\n  intent: DocumentMoveIntentRecord,\n  hasContainer: (id: string) => boolean,\n): { intent: DocumentMoveIntentRecord; deferred: boolean } {\n  if (intent.intentType !== DOCUMENT_LINK_INTENT_TYPE)\n    return { intent, deferred: false };\n  // For link intents the primary target is a routing hint, often the old source.\n  // Only explicit additions can defer the requested removals.\n  const requested = [...new Set(intent.additionalLinkContainerIds ?? [])];\n  const available = requested.filter(hasContainer);\n  const deferred = available.length !== requested.length;\n  const targetContainerId = hasContainer(intent.targetContainerId)\n    ? intent.targetContainerId\n    : (available[0] ??\n      (intent.sourceContainerId && hasContainer(intent.sourceContainerId)\n        ? intent.sourceContainerId\n        : undefined));\n  if (\n    !targetContainerId ||\n    (!deferred && targetContainerId === intent.targetContainerId)\n  )\n    return { intent, deferred };\n  return {\n    deferred,\n    intent: {\n      ...intent,\n      targetContainerId,\n      additionalLinkContainerIds: available,\n      ...(deferred\n        ? { removedLinkContainerIds: [], replaceLinkedContainers: false }\n        : {}),\n    },\n  };\n}\n"]}

package/workflows/container-contents/blobInfo.d.ts

@@ -0,0 +1,6 @@
+import type { ExecSql } from "../../data/sqlite/sqlSchema.js";
+import type { BlobInfoInput, BlobInfoList } from "./blobInfoTypes.js";
+export type { BlobInfo, BlobInfoAttachmentKind, BlobInfoDocumentReference, BlobInfoInput, BlobInfoList, BlobInfoSort, BlobInfoSortDirection, BlobInfoSortKey, } from "./blobInfoTypes.js";
+export declare function listBlobInfo(input: BlobInfoInput & {
+    readonly execSql?: ExecSql | null | undefined;
+}): Promise<BlobInfoList>;