@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/data/documents/shared/readers.js

@@ -0,0 +1,156 @@
+export { readRecordNullableString, readRecordPositiveInteger, readRecordString, } from "../../recordReaders.js";
+import { CONTENT_RECORD_ENCRYPTION_SUITE, compareCanonicalStrings, } from "../../../internal/crypto/index.js";
+import { isPlainObject as isPlainRecord } from "../../../internal/validators/isPlainObject.js";
+import { readCanonicalRecord } from "../../keyingCanonicalJson.js";
+import { readRecordInteger, readRecordPositiveInteger, readRecordString, readRecordValue, readStringArray, } from "../../recordReaders.js";
+export { assertDocumentManifestBundleConsistent, serializeCanonical, } from "./manifestBundleReaders.js";
+function isContentObjectKind(value) {
+    return value === "blob" || value === "document";
+}
+export function readWriteHeader(value, label) {
+    const record = readCanonicalRecord(value, label);
+    const objectKind = readRecordValue(record, "objectKind");
+    if (!isContentObjectKind(objectKind)) {
+        throw new Error(`${label}.objectKind is invalid`);
+    }
+    if (readRecordInteger(record, "version", label) !== 1) {
+        throw new Error(`${label}.version must be 1`);
+    }
+    const encryptionSuite = readRecordValue(record, "encryptionSuite");
+    if (encryptionSuite !== CONTENT_RECORD_ENCRYPTION_SUITE) {
+        throw new Error(`${label}.encryptionSuite is invalid`);
+    }
+    return {
+        version: 1,
+        dependencyManifestHashes: readStringArray(readRecordValue(record, "dependencyManifestHashes"), `${label}.dependencyManifestHashes`),
+        organizationId: readRecordString(record, "organizationId", label),
+        objectKind,
+        objectId: readRecordString(record, "objectId", label),
+        accessManifestHash: readRecordString(record, "accessManifestHash", label),
+        contentKeyEpoch: readRecordPositiveInteger(record, "contentKeyEpoch", label),
+        targetHash: readRecordString(record, "targetHash", label),
+        encryptionSuite,
+        contentRecordId: readRecordString(record, "contentRecordId", label),
+        nonceDomainHash: readRecordString(record, "nonceDomainHash", label),
+        metadataHash: readRecordString(record, "metadataHash", label),
+        ciphertextHash: readRecordString(record, "ciphertextHash", label),
+        writerUserId: readRecordString(record, "writerUserId", label),
+        writerDeviceId: readRecordString(record, "writerDeviceId", label),
+        writerKeyFingerprint: readRecordString(record, "writerKeyFingerprint", label),
+        signedAt: readRecordString(record, "signedAt", label),
+        signature: readRecordString(record, "signature", label),
+    };
+}
+export function readManifestContainerId(bundle) {
+    const containerId = isPlainRecord(bundle.state)
+        ? Reflect.get(bundle.state, "containerId")
+        : undefined;
+    return typeof containerId === "string" && containerId.length > 0
+        ? containerId
+        : null;
+}
+export function targetKey(target) {
+    return [
+        target.containerId,
+        target.containerManifestHash,
+        target.containerKeyEpochId,
+        String(target.containerKeyEpoch),
+    ].join(":");
+}
+export function sortTargets(targets, keyOf) {
+    return [...targets].sort((left, right) => compareCanonicalStrings(keyOf(left), keyOf(right)));
+}
+export function sortDocumentTargets(targets) {
+    return sortTargets(targets, targetKey);
+}
+export function describeDocumentTargetKek(target) {
+    return `container ${target.containerId} epoch ${target.containerKeyEpochId}`;
+}
+export function uniqueSortedStrings(values) {
+    return [...new Set(values)].sort();
+}
+export function asWebCryptoBytes(bytes) {
+    const buffer = bytes.buffer;
+    if (!(buffer instanceof ArrayBuffer)) {
+        throw new Error("Document byte material must be ArrayBuffer-backed");
+    }
+    return new Uint8Array(buffer, bytes.byteOffset, bytes.byteLength);
+}
+export function assertOnlyRecordKeys(record, allowedKeys, label) {
+    const unexpectedKeys = Object.keys(record).filter((key) => !allowedKeys.has(key));
+    if (unexpectedKeys.length === 0)
+        return;
+    const named = unexpectedKeys
+        .slice(0, 3)
+        .map((key) => JSON.stringify(key.slice(0, 32)))
+        .join(",");
+    const remaining = unexpectedKeys.length - 3;
+    throw new Error(`${label} has unexpected keys: ${named}${remaining > 0 ? ` and ${remaining} more` : ""}`);
+}
+export function normalizeContainerKeyWrap(value) {
+    if (!isPlainRecord(value)) {
+        throw new Error("Container writer projection KEK wrap is invalid");
+    }
+    const recipientKind = readRecordString(value, "recipientKind", "container KEK wrap");
+    if (recipientKind !== "user" &&
+        recipientKind !== "group" &&
+        recipientKind !== "container") {
+        throw new Error("Container writer projection KEK wrap recipient is invalid");
+    }
+    return {
+        containerKeyEpochId: readRecordString(value, "containerKeyEpochId", "container KEK wrap"),
+        recipientKind,
+        recipientId: readRecordString(value, "recipientId", "container KEK wrap"),
+        recipientKeyEpochId: readRecordString(value, "recipientKeyEpochId", "container KEK wrap"),
+        recipientKeyFingerprint: readRecordString(value, "recipientKeyFingerprint", "container KEK wrap"),
+        kemCipherText: readRecordString(value, "kemCipherText", "container KEK wrap"),
+        wrappedKey: readRecordString(value, "wrappedKey", "container KEK wrap"),
+        wrapManifestHash: readRecordString(value, "wrapManifestHash", "container KEK wrap"),
+    };
+}
+export function assertEqualBytes(left, right, message) {
+    let mismatch = left.byteLength ^ right.byteLength;
+    const length = Math.max(left.byteLength, right.byteLength);
+    for (let index = 0; index < length; index += 1) {
+        mismatch |= (left[index] ?? 0) ^ (right[index] ?? 0);
+    }
+    if (mismatch !== 0) {
+        throw new Error(message);
+    }
+}
+function readDocumentTarget(value, label) {
+    return {
+        containerId: readRecordString(value, "containerId", label),
+        containerManifestHash: readRecordString(value, "containerManifestHash", label),
+        containerKeyEpochId: readRecordString(value, "containerKeyEpochId", label),
+        containerKeyEpoch: readRecordPositiveInteger(value, "containerKeyEpoch", label),
+    };
+}
+export function normalizeDocumentKekTargetResponse(targets) {
+    return sortDocumentTargets(targets.targets.map((target, index) => {
+        if (!isPlainRecord(target)) {
+            throw new Error(`Document KEK target[${index}] is invalid`);
+        }
+        return readDocumentTarget(target, `Document KEK target[${index}]`);
+    }));
+}
+export function targetEnvelopeReference(envelope) {
+    return {
+        containerId: envelope.containerId,
+        containerManifestHash: envelope.containerManifestHash,
+        containerKeyEpochId: envelope.containerKeyEpochId,
+        containerKeyEpoch: envelope.containerKeyEpoch,
+    };
+}
+function serializeState(value) {
+    return JSON.stringify(value);
+}
+export function serializedPersistedDocumentState(input) {
+    return {
+        documentId: input.documentId,
+        contentKeyBundle: serializeState(input.contentKeyBundle),
+        documentKekTargets: serializeState(input.documentKekTargets),
+        documentManifestBundle: serializeState(input.documentManifestBundle),
+    };
+}
+//# sourceMappingURL=readers.js.map

package/data/documents/shared/readers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readers.js","sourceRoot":"","sources":["readers.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,+BAA+B,EAE/B,uBAAuB,GAGxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAMrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,sCAAsC,EACtC,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AAEjC,SAAS,mBAAmB,CAC1B,KAAc;IAEd,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,UAAU,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,KAAa;IAC3D,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACnE,IAAI,eAAe,KAAK,+BAA+B,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACzD,CAAC;IAED,OAAO;QACL,OAAO,EAAE,CAAC;QACV,wBAAwB,EAAE,eAAe,CACvC,eAAe,CAAC,MAAM,EAAE,0BAA0B,CAAC,EACnD,GAAG,KAAK,2BAA2B,CACpC;QACD,cAAc,EAAE,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC;QACjE,UAAU;QACV,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC;QACrD,kBAAkB,EAAE,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,CAAC;QACzE,eAAe,EAAE,yBAAyB,CACxC,MAAM,EACN,iBAAiB,EACjB,KAAK,CACN;QACD,UAAU,EAAE,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC;QACzD,eAAe;QACf,eAAe,EAAE,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,CAAC;QACnE,eAAe,EAAE,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,CAAC;QACnE,YAAY,EAAE,gBAAgB,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC;QAC7D,cAAc,EAAE,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC;QACjE,YAAY,EAAE,gBAAgB,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC;QAC7D,cAAc,EAAE,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC;QACjE,oBAAoB,EAAE,gBAAgB,CACpC,MAAM,EACN,sBAAsB,EACtB,KAAK,CACN;QACD,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC;QACrD,SAAS,EAAE,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAyD;IAEzD,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;QAC7C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC;QAC1C,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAC9D,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAgC;IACxD,OAAO;QACL,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,qBAAqB;QAC5B,MAAM,CAAC,mBAAmB;QAC1B,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC;KACjC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,OAAqB,EACrB,KAA4B;IAE5B,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACvC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAqB;IAErB,OAAO,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAgC;IAEhC,OAAO,aAAa,MAAM,CAAC,WAAW,UAAU,MAAM,CAAC,mBAAmB,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAyB;IAC3D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC,CAAC,MAAM,YAAY,WAAW,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAA+B,EAC/B,WAAgC,EAChC,KAAa;IAEb,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAC/C,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAC/B,CAAC;IACF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACxC,MAAM,KAAK,GAAG,cAAc;SACzB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;SAC9C,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5C,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,yBAAyB,KAAK,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,SAAS,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACzF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,aAAa,GAAG,gBAAgB,CACpC,KAAK,EACL,eAAe,EACf,oBAAoB,CACrB,CAAC;IACF,IACE,aAAa,KAAK,MAAM;QACxB,aAAa,KAAK,OAAO;QACzB,aAAa,KAAK,WAAW,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,mBAAmB,EAAE,gBAAgB,CACnC,KAAK,EACL,qBAAqB,EACrB,oBAAoB,CACrB;QACD,aAAa;QACb,WAAW,EAAE,gBAAgB,CAAC,KAAK,EAAE,aAAa,EAAE,oBAAoB,CAAC;QACzE,mBAAmB,EAAE,gBAAgB,CACnC,KAAK,EACL,qBAAqB,EACrB,oBAAoB,CACrB;QACD,uBAAuB,EAAE,gBAAgB,CACvC,KAAK,EACL,yBAAyB,EACzB,oBAAoB,CACrB;QACD,aAAa,EAAE,gBAAgB,CAC7B,KAAK,EACL,eAAe,EACf,oBAAoB,CACrB;QACD,UAAU,EAAE,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,oBAAoB,CAAC;QACvE,gBAAgB,EAAE,gBAAgB,CAChC,KAAK,EACL,kBAAkB,EAClB,oBAAoB,CACrB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAgB,EAChB,KAAiB,EACjB,OAAe;IAEf,IAAI,QAAQ,GAAG,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,KAA8B,EAC9B,KAAa;IAEb,OAAO;QACL,WAAW,EAAE,gBAAgB,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC;QAC1D,qBAAqB,EAAE,gBAAgB,CACrC,KAAK,EACL,uBAAuB,EACvB,KAAK,CACN;QACD,mBAAmB,EAAE,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,EAAE,KAAK,CAAC;QAC1E,iBAAiB,EAAE,yBAAyB,CAC1C,KAAK,EACL,mBAAmB,EACnB,KAAK,CACN;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAAmD;IAEnD,OAAO,mBAAmB,CACxB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACpC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,cAAc,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,kBAAkB,CAAC,MAAM,EAAE,uBAAuB,KAAK,GAAG,CAAC,CAAC;IACrE,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAuE;IAEvE,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;QACrD,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAKhD;IAMC,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACxD,kBAAkB,EAAE,cAAc,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAC5D,sBAAsB,EAAE,cAAc,CAAC,KAAK,CAAC,sBAAsB,CAAC;KACrE,CAAC;AACJ,CAAC","sourcesContent":["export {\n  readRecordNullableString,\n  readRecordPositiveInteger,\n  readRecordString,\n} from \"../../recordReaders\";\n\nimport {\n  CONTENT_RECORD_ENCRYPTION_SUITE,\n  type ContainerKeyWrap,\n  compareCanonicalStrings,\n  type DocumentContentKeyTarget,\n  type WriteHeader,\n} from \"@tearleads/crypto\";\nimport { isPlainObject as isPlainRecord } from \"@tearleads/validators/isPlainObject\";\nimport type {\n  ContainerWriterProjectionResponse,\n  DocumentCreateResponse,\n  DocumentSyncResponse,\n} from \"@tearleads/validators/response\";\nimport { readCanonicalRecord } from \"../../keyingCanonicalJson\";\nimport {\n  readRecordInteger,\n  readRecordPositiveInteger,\n  readRecordString,\n  readRecordValue,\n  readStringArray,\n} from \"../../recordReaders\";\n\nexport {\n  assertDocumentManifestBundleConsistent,\n  serializeCanonical,\n} from \"./manifestBundleReaders\";\n\nfunction isContentObjectKind(\n  value: unknown,\n): value is WriteHeader[\"objectKind\"] {\n  return value === \"blob\" || value === \"document\";\n}\n\nexport function readWriteHeader(value: unknown, label: string): WriteHeader {\n  const record = readCanonicalRecord(value, label);\n  const objectKind = readRecordValue(record, \"objectKind\");\n  if (!isContentObjectKind(objectKind)) {\n    throw new Error(`${label}.objectKind is invalid`);\n  }\n  if (readRecordInteger(record, \"version\", label) !== 1) {\n    throw new Error(`${label}.version must be 1`);\n  }\n  const encryptionSuite = readRecordValue(record, \"encryptionSuite\");\n  if (encryptionSuite !== CONTENT_RECORD_ENCRYPTION_SUITE) {\n    throw new Error(`${label}.encryptionSuite is invalid`);\n  }\n\n  return {\n    version: 1,\n    dependencyManifestHashes: readStringArray(\n      readRecordValue(record, \"dependencyManifestHashes\"),\n      `${label}.dependencyManifestHashes`,\n    ),\n    organizationId: readRecordString(record, \"organizationId\", label),\n    objectKind,\n    objectId: readRecordString(record, \"objectId\", label),\n    accessManifestHash: readRecordString(record, \"accessManifestHash\", label),\n    contentKeyEpoch: readRecordPositiveInteger(\n      record,\n      \"contentKeyEpoch\",\n      label,\n    ),\n    targetHash: readRecordString(record, \"targetHash\", label),\n    encryptionSuite,\n    contentRecordId: readRecordString(record, \"contentRecordId\", label),\n    nonceDomainHash: readRecordString(record, \"nonceDomainHash\", label),\n    metadataHash: readRecordString(record, \"metadataHash\", label),\n    ciphertextHash: readRecordString(record, \"ciphertextHash\", label),\n    writerUserId: readRecordString(record, \"writerUserId\", label),\n    writerDeviceId: readRecordString(record, \"writerDeviceId\", label),\n    writerKeyFingerprint: readRecordString(\n      record,\n      \"writerKeyFingerprint\",\n      label,\n    ),\n    signedAt: readRecordString(record, \"signedAt\", label),\n    signature: readRecordString(record, \"signature\", label),\n  };\n}\n\nexport function readManifestContainerId(\n  bundle: ContainerWriterProjectionResponse[\"path\"][number],\n): string | null {\n  const containerId = isPlainRecord(bundle.state)\n    ? Reflect.get(bundle.state, \"containerId\")\n    : undefined;\n\n  return typeof containerId === \"string\" && containerId.length > 0\n    ? containerId\n    : null;\n}\n\nexport function targetKey(target: DocumentContentKeyTarget): string {\n  return [\n    target.containerId,\n    target.containerManifestHash,\n    target.containerKeyEpochId,\n    String(target.containerKeyEpoch),\n  ].join(\":\");\n}\n\nexport function sortTargets<T>(\n  targets: readonly T[],\n  keyOf: (target: T) => string,\n): T[] {\n  return [...targets].sort((left, right) =>\n    compareCanonicalStrings(keyOf(left), keyOf(right)),\n  );\n}\n\nexport function sortDocumentTargets<T extends DocumentContentKeyTarget>(\n  targets: readonly T[],\n): T[] {\n  return sortTargets(targets, targetKey);\n}\n\nexport function describeDocumentTargetKek(\n  target: DocumentContentKeyTarget,\n): string {\n  return `container ${target.containerId} epoch ${target.containerKeyEpochId}`;\n}\n\nexport function uniqueSortedStrings(values: readonly string[]): string[] {\n  return [...new Set(values)].sort();\n}\n\nexport function asWebCryptoBytes(bytes: Uint8Array): Uint8Array<ArrayBuffer> {\n  const buffer = bytes.buffer;\n  if (!(buffer instanceof ArrayBuffer)) {\n    throw new Error(\"Document byte material must be ArrayBuffer-backed\");\n  }\n  return new Uint8Array(buffer, bytes.byteOffset, bytes.byteLength);\n}\n\nexport function assertOnlyRecordKeys(\n  record: Record<string, unknown>,\n  allowedKeys: ReadonlySet<string>,\n  label: string,\n): void {\n  const unexpectedKeys = Object.keys(record).filter(\n    (key) => !allowedKeys.has(key),\n  );\n  if (unexpectedKeys.length === 0) return;\n  const named = unexpectedKeys\n    .slice(0, 3)\n    .map((key) => JSON.stringify(key.slice(0, 32)))\n    .join(\",\");\n  const remaining = unexpectedKeys.length - 3;\n  throw new Error(\n    `${label} has unexpected keys: ${named}${remaining > 0 ? ` and ${remaining} more` : \"\"}`,\n  );\n}\n\nexport function normalizeContainerKeyWrap(value: unknown): ContainerKeyWrap {\n  if (!isPlainRecord(value)) {\n    throw new Error(\"Container writer projection KEK wrap is invalid\");\n  }\n\n  const recipientKind = readRecordString(\n    value,\n    \"recipientKind\",\n    \"container KEK wrap\",\n  );\n  if (\n    recipientKind !== \"user\" &&\n    recipientKind !== \"group\" &&\n    recipientKind !== \"container\"\n  ) {\n    throw new Error(\n      \"Container writer projection KEK wrap recipient is invalid\",\n    );\n  }\n\n  return {\n    containerKeyEpochId: readRecordString(\n      value,\n      \"containerKeyEpochId\",\n      \"container KEK wrap\",\n    ),\n    recipientKind,\n    recipientId: readRecordString(value, \"recipientId\", \"container KEK wrap\"),\n    recipientKeyEpochId: readRecordString(\n      value,\n      \"recipientKeyEpochId\",\n      \"container KEK wrap\",\n    ),\n    recipientKeyFingerprint: readRecordString(\n      value,\n      \"recipientKeyFingerprint\",\n      \"container KEK wrap\",\n    ),\n    kemCipherText: readRecordString(\n      value,\n      \"kemCipherText\",\n      \"container KEK wrap\",\n    ),\n    wrappedKey: readRecordString(value, \"wrappedKey\", \"container KEK wrap\"),\n    wrapManifestHash: readRecordString(\n      value,\n      \"wrapManifestHash\",\n      \"container KEK wrap\",\n    ),\n  };\n}\n\nexport function assertEqualBytes(\n  left: Uint8Array,\n  right: Uint8Array,\n  message: string,\n): void {\n  let mismatch = left.byteLength ^ right.byteLength;\n  const length = Math.max(left.byteLength, right.byteLength);\n  for (let index = 0; index < length; index += 1) {\n    mismatch |= (left[index] ?? 0) ^ (right[index] ?? 0);\n  }\n\n  if (mismatch !== 0) {\n    throw new Error(message);\n  }\n}\n\nfunction readDocumentTarget(\n  value: Record<string, unknown>,\n  label: string,\n): DocumentContentKeyTarget {\n  return {\n    containerId: readRecordString(value, \"containerId\", label),\n    containerManifestHash: readRecordString(\n      value,\n      \"containerManifestHash\",\n      label,\n    ),\n    containerKeyEpochId: readRecordString(value, \"containerKeyEpochId\", label),\n    containerKeyEpoch: readRecordPositiveInteger(\n      value,\n      \"containerKeyEpoch\",\n      label,\n    ),\n  };\n}\n\nexport function normalizeDocumentKekTargetResponse(\n  targets: DocumentSyncResponse[\"documentKekTargets\"],\n): DocumentContentKeyTarget[] {\n  return sortDocumentTargets(\n    targets.targets.map((target, index) => {\n      if (!isPlainRecord(target)) {\n        throw new Error(`Document KEK target[${index}] is invalid`);\n      }\n      return readDocumentTarget(target, `Document KEK target[${index}]`);\n    }),\n  );\n}\n\nexport function targetEnvelopeReference(\n  envelope: DocumentCreateResponse[\"contentKeyBundle\"][\"targets\"][number],\n): DocumentContentKeyTarget {\n  return {\n    containerId: envelope.containerId,\n    containerManifestHash: envelope.containerManifestHash,\n    containerKeyEpochId: envelope.containerKeyEpochId,\n    containerKeyEpoch: envelope.containerKeyEpoch,\n  };\n}\n\nfunction serializeState(value: unknown): string {\n  return JSON.stringify(value);\n}\n\nexport function serializedPersistedDocumentState(input: {\n  contentKeyBundle: unknown;\n  documentId: string;\n  documentKekTargets: unknown;\n  documentManifestBundle: unknown;\n}): {\n  contentKeyBundle: string;\n  documentId: string;\n  documentKekTargets: string;\n  documentManifestBundle: string;\n} {\n  return {\n    documentId: input.documentId,\n    contentKeyBundle: serializeState(input.contentKeyBundle),\n    documentKekTargets: serializeState(input.documentKekTargets),\n    documentManifestBundle: serializeState(input.documentManifestBundle),\n  };\n}\n"]}

package/data/documents/shared/responses.d.ts

@@ -0,0 +1,14 @@
+import type { DocumentCreateResponse, DocumentLinkSetMutationResponse, DocumentWriterProjectionResponse } from "../../../internal/validators/response/index.js";
+import type { DocumentCreatePlan, DocumentLinkSetMutationPlan, PersistedDocumentCreateState } from "./types.js";
+export { DocumentSyncResponseUpdateContentKeyError, isRetryableDocumentSyncConflict, isUpstreamDeletedDocumentSyncFailure, persistedDocumentSyncStateFromResponse, submitDocumentSync, } from "./syncResponses.js";
+export declare function assertDocumentCreateResponseMatchesPlan(plan: DocumentCreatePlan, response: DocumentCreateResponse): void;
+export declare function persistedDocumentCreateStateFromResponse(plan: DocumentCreatePlan, response: DocumentCreateResponse): PersistedDocumentCreateState;
+/**
+ * Builds the persisted create-state from a fetched writer projection, for the
+ * idempotent-create adopt path where the original create response (which
+ * `persistedDocumentCreateStateFromResponse` consumes) was lost. The projection
+ * carries the same committed manifest, content-key bundle and KEK targets — the
+ * caller must verify it with `assertDocumentWriterProjectionConsistent` first.
+ */
+export declare function persistedDocumentCreateStateFromWriterProjection(writerProjection: DocumentWriterProjectionResponse): PersistedDocumentCreateState;
+export declare function persistedDocumentLinkSetMutationStateFromResponse(plan: DocumentLinkSetMutationPlan, response: DocumentLinkSetMutationResponse): PersistedDocumentCreateState;

package/data/documents/shared/responses.js

@@ -0,0 +1,133 @@
+import { isPlainObject as isPlainRecord } from "../../../internal/validators/isPlainObject.js";
+import { readRecordString, serializeCanonical, serializedPersistedDocumentState, } from "./readers.js";
+export { DocumentSyncResponseUpdateContentKeyError, isRetryableDocumentSyncConflict, isUpstreamDeletedDocumentSyncFailure, persistedDocumentSyncStateFromResponse, submitDocumentSync, } from "./syncResponses.js";
+function assertDocumentMutationManifestMatchesPlan(input) {
+    const { label, plan, response } = input;
+    if (response.id !== plan.documentId) {
+        throw new Error(`${label} id mismatch`);
+    }
+    if (response.accessManifest.manifestHash !== plan.manifestHash) {
+        throw new Error(`${label} manifest hash mismatch`);
+    }
+    if (serializeCanonical(response.accessManifest.manifest, "manifest") !==
+        serializeCanonical(plan.manifest, "manifest")) {
+        throw new Error(`${label} manifest mismatch`);
+    }
+    const responseEvent = response.accessManifest.event;
+    if (!isPlainRecord(responseEvent)) {
+        throw new Error(`${label} event bundle is invalid`);
+    }
+    if (readRecordString(responseEvent, "eventHash", "event bundle") !==
+        plan.eventHash) {
+        throw new Error(`${label} event hash mismatch`);
+    }
+    if (serializeCanonical(Reflect.get(responseEvent, "event"), "event") !==
+        serializeCanonical(plan.event, "event")) {
+        throw new Error(`${label} event mismatch`);
+    }
+    if (serializeCanonical(Reflect.get(responseEvent, "body"), "event body") !==
+        serializeCanonical(plan.body, "event body")) {
+        throw new Error(`${label} event body mismatch`);
+    }
+    const responseState = response.accessManifest.state;
+    if (input.probeStateDocumentId) {
+        if (!isPlainRecord(responseState)) {
+            throw new Error(`${label} state is invalid`);
+        }
+        if (readRecordString(responseState, "documentId", "document state") !==
+            plan.documentId) {
+            throw new Error(`${label} document id mismatch`);
+        }
+    }
+    if (serializeCanonical(responseState, "state") !==
+        serializeCanonical(plan.state, "state")) {
+        throw new Error(`${label} state mismatch`);
+    }
+}
+function assertDocumentMutationKeyBundlesMatchPlan(input) {
+    const { label, plan, response } = input;
+    if (response.contentKeyBundle.documentId !== plan.documentId) {
+        throw new Error(`${label} content-key document mismatch`);
+    }
+    if (response.contentKeyBundle.contentKeyEpoch !== input.expectedContentKeyEpoch) {
+        throw new Error(`${label} content-key epoch mismatch`);
+    }
+    if (response.contentKeyBundle.linkSetManifestHash !== plan.manifestHash) {
+        throw new Error(`${label} link manifest mismatch`);
+    }
+    if (response.contentKeyBundle.targetHash !== plan.targetHash) {
+        throw new Error(`${label} target hash mismatch`);
+    }
+    if (serializeCanonical(response.contentKeyBundle.targets, "content-key targets") !==
+        serializeCanonical(input.expectedContentKeyTargets, "content-key targets")) {
+        throw new Error(`${label} content-key targets mismatch`);
+    }
+    if (response.documentKekTargets.documentId !== plan.documentId) {
+        throw new Error(`${label} target document mismatch`);
+    }
+    if (response.documentKekTargets.linkSetManifestHash !== plan.manifestHash) {
+        throw new Error(`${label} target manifest mismatch`);
+    }
+    if (response.documentKekTargets.documentKeyTargetHash !== plan.targetHash) {
+        throw new Error(`${label} document target hash mismatch`);
+    }
+    if (serializeCanonical(response.documentKekTargets.targets, "KEK targets") !==
+        serializeCanonical(plan.targets, "KEK targets")) {
+        throw new Error(`${label} KEK targets mismatch`);
+    }
+}
+function assertDocumentMutationResponseMatchesPlan(input) {
+    assertDocumentMutationManifestMatchesPlan(input);
+    assertDocumentMutationKeyBundlesMatchPlan(input);
+}
+export function assertDocumentCreateResponseMatchesPlan(plan, response) {
+    assertDocumentMutationResponseMatchesPlan({
+        expectedContentKeyEpoch: plan.request.contentKeyBundle.contentKeyEpoch,
+        expectedContentKeyTargets: plan.request.contentKeyBundle.targets,
+        label: "Document create response",
+        plan,
+        probeStateDocumentId: true,
+        response,
+    });
+}
+export function persistedDocumentCreateStateFromResponse(plan, response) {
+    assertDocumentCreateResponseMatchesPlan(plan, response);
+    return serializedPersistedDocumentState({
+        contentKeyBundle: response.contentKeyBundle,
+        documentId: response.id,
+        documentKekTargets: response.documentKekTargets,
+        documentManifestBundle: response.accessManifest,
+    });
+}
+/**
+ * Builds the persisted create-state from a fetched writer projection, for the
+ * idempotent-create adopt path where the original create response (which
+ * `persistedDocumentCreateStateFromResponse` consumes) was lost. The projection
+ * carries the same committed manifest, content-key bundle and KEK targets — the
+ * caller must verify it with `assertDocumentWriterProjectionConsistent` first.
+ */
+export function persistedDocumentCreateStateFromWriterProjection(writerProjection) {
+    return serializedPersistedDocumentState({
+        contentKeyBundle: writerProjection.contentKeyBundle,
+        documentId: writerProjection.documentId,
+        documentKekTargets: writerProjection.documentKekTargets,
+        documentManifestBundle: writerProjection.documentManifest,
+    });
+}
+export function persistedDocumentLinkSetMutationStateFromResponse(plan, response) {
+    assertDocumentMutationResponseMatchesPlan({
+        expectedContentKeyEpoch: plan.contentKeyEpoch,
+        expectedContentKeyTargets: plan.request.contentKeyBundle.targets,
+        label: "Document link-set response",
+        plan,
+        probeStateDocumentId: false,
+        response,
+    });
+    return serializedPersistedDocumentState({
+        contentKeyBundle: response.contentKeyBundle,
+        documentId: response.id,
+        documentKekTargets: response.documentKekTargets,
+        documentManifestBundle: response.accessManifest,
+    });
+}
+//# sourceMappingURL=responses.js.map

package/data/documents/shared/responses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses.js","sourceRoot":"","sources":["responses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAMrF,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,gCAAgC,GACjC,MAAM,WAAW,CAAC;AAOnB,OAAO,EACL,yCAAyC,EACzC,+BAA+B,EAC/B,oCAAoC,EACpC,sCAAsC,EACtC,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAkBzB,SAAS,yCAAyC,CAAC,KAKlD;IACC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACxC,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,CAAC,cAAc,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;IACrD,CAAC;IACD,IACE,kBAAkB,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC;QAChE,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAC7C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC;IACpD,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IACtD,CAAC;IACD,IACE,gBAAgB,CAAC,aAAa,EAAE,WAAW,EAAE,cAAc,CAAC;QAC5D,IAAI,CAAC,SAAS,EACd,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAClD,CAAC;IACD,IACE,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAChE,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;IAC7C,CAAC;IACD,IACE,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC;QACpE,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC;IACpD,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;QAC/B,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;QAC/C,CAAC;QACD,IACE,gBAAgB,CAAC,aAAa,EAAE,YAAY,EAAE,gBAAgB,CAAC;YAC/D,IAAI,CAAC,UAAU,EACf,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,IACE,kBAAkB,CAAC,aAAa,EAAE,OAAO,CAAC;QAC1C,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,yCAAyC,CAAC,KAMlD;IACC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACxC,IAAI,QAAQ,CAAC,gBAAgB,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC5D,CAAC;IACD,IACE,QAAQ,CAAC,gBAAgB,CAAC,eAAe,KAAK,KAAK,CAAC,uBAAuB,EAC3E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,QAAQ,CAAC,gBAAgB,CAAC,mBAAmB,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,QAAQ,CAAC,gBAAgB,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IACnD,CAAC;IACD,IACE,kBAAkB,CAChB,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EACjC,qBAAqB,CACtB;QACD,kBAAkB,CAAC,KAAK,CAAC,yBAAyB,EAAE,qBAAqB,CAAC,EAC1E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,QAAQ,CAAC,kBAAkB,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,QAAQ,CAAC,kBAAkB,CAAC,mBAAmB,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,QAAQ,CAAC,kBAAkB,CAAC,qBAAqB,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC5D,CAAC;IACD,IACE,kBAAkB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC;QACtE,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAC/C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,yCAAyC,CAAC,KAOlD;IACC,yCAAyC,CAAC,KAAK,CAAC,CAAC;IACjD,yCAAyC,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,IAAwB,EACxB,QAAgC;IAEhC,yCAAyC,CAAC;QACxC,uBAAuB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,eAAe;QACtE,yBAAyB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO;QAChE,KAAK,EAAE,0BAA0B;QACjC,IAAI;QACJ,oBAAoB,EAAE,IAAI;QAC1B,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wCAAwC,CACtD,IAAwB,EACxB,QAAgC;IAEhC,uCAAuC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAExD,OAAO,gCAAgC,CAAC;QACtC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;QAC/C,sBAAsB,EAAE,QAAQ,CAAC,cAAc;KAChD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gDAAgD,CAC9D,gBAAkD;IAElD,OAAO,gCAAgC,CAAC;QACtC,gBAAgB,EAAE,gBAAgB,CAAC,gBAAgB;QACnD,UAAU,EAAE,gBAAgB,CAAC,UAAU;QACvC,kBAAkB,EAAE,gBAAgB,CAAC,kBAAkB;QACvD,sBAAsB,EAAE,gBAAgB,CAAC,gBAAgB;KAC1D,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iDAAiD,CAC/D,IAAiC,EACjC,QAAyC;IAEzC,yCAAyC,CAAC;QACxC,uBAAuB,EAAE,IAAI,CAAC,eAAe;QAC7C,yBAAyB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO;QAChE,KAAK,EAAE,4BAA4B;QACnC,IAAI;QACJ,oBAAoB,EAAE,KAAK;QAC3B,QAAQ;KACT,CAAC,CAAC;IAEH,OAAO,gCAAgC,CAAC;QACtC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;QAC/C,sBAAsB,EAAE,QAAQ,CAAC,cAAc;KAChD,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { isPlainObject as isPlainRecord } from \"@tearleads/validators/isPlainObject\";\nimport type {\n  DocumentCreateResponse,\n  DocumentLinkSetMutationResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  readRecordString,\n  serializeCanonical,\n  serializedPersistedDocumentState,\n} from \"./readers\";\nimport type {\n  DocumentCreatePlan,\n  DocumentLinkSetMutationPlan,\n  PersistedDocumentCreateState,\n} from \"./types\";\n\nexport {\n  DocumentSyncResponseUpdateContentKeyError,\n  isRetryableDocumentSyncConflict,\n  isUpstreamDeletedDocumentSyncFailure,\n  persistedDocumentSyncStateFromResponse,\n  submitDocumentSync,\n} from \"./syncResponses\";\n\ntype DocumentMutationPlan = Pick<\n  DocumentCreatePlan,\n  | \"documentId\"\n  | \"event\"\n  | \"eventHash\"\n  | \"manifest\"\n  | \"manifestHash\"\n  | \"state\"\n  | \"targetHash\"\n  | \"targets\"\n> & {\n  // Link and unlink bodies are both serialized canonically, so the shared\n  // matcher does not care which event body shape the plan carries.\n  body: unknown;\n};\n\nfunction assertDocumentMutationManifestMatchesPlan(input: {\n  label: string;\n  plan: DocumentMutationPlan;\n  probeStateDocumentId: boolean;\n  response: DocumentCreateResponse | DocumentLinkSetMutationResponse;\n}): void {\n  const { label, plan, response } = input;\n  if (response.id !== plan.documentId) {\n    throw new Error(`${label} id mismatch`);\n  }\n  if (response.accessManifest.manifestHash !== plan.manifestHash) {\n    throw new Error(`${label} manifest hash mismatch`);\n  }\n  if (\n    serializeCanonical(response.accessManifest.manifest, \"manifest\") !==\n    serializeCanonical(plan.manifest, \"manifest\")\n  ) {\n    throw new Error(`${label} manifest mismatch`);\n  }\n\n  const responseEvent = response.accessManifest.event;\n  if (!isPlainRecord(responseEvent)) {\n    throw new Error(`${label} event bundle is invalid`);\n  }\n  if (\n    readRecordString(responseEvent, \"eventHash\", \"event bundle\") !==\n    plan.eventHash\n  ) {\n    throw new Error(`${label} event hash mismatch`);\n  }\n  if (\n    serializeCanonical(Reflect.get(responseEvent, \"event\"), \"event\") !==\n    serializeCanonical(plan.event, \"event\")\n  ) {\n    throw new Error(`${label} event mismatch`);\n  }\n  if (\n    serializeCanonical(Reflect.get(responseEvent, \"body\"), \"event body\") !==\n    serializeCanonical(plan.body, \"event body\")\n  ) {\n    throw new Error(`${label} event body mismatch`);\n  }\n\n  const responseState = response.accessManifest.state;\n  if (input.probeStateDocumentId) {\n    if (!isPlainRecord(responseState)) {\n      throw new Error(`${label} state is invalid`);\n    }\n    if (\n      readRecordString(responseState, \"documentId\", \"document state\") !==\n      plan.documentId\n    ) {\n      throw new Error(`${label} document id mismatch`);\n    }\n  }\n  if (\n    serializeCanonical(responseState, \"state\") !==\n    serializeCanonical(plan.state, \"state\")\n  ) {\n    throw new Error(`${label} state mismatch`);\n  }\n}\n\nfunction assertDocumentMutationKeyBundlesMatchPlan(input: {\n  expectedContentKeyEpoch: number;\n  expectedContentKeyTargets: unknown;\n  label: string;\n  plan: DocumentMutationPlan;\n  response: DocumentCreateResponse | DocumentLinkSetMutationResponse;\n}): void {\n  const { label, plan, response } = input;\n  if (response.contentKeyBundle.documentId !== plan.documentId) {\n    throw new Error(`${label} content-key document mismatch`);\n  }\n  if (\n    response.contentKeyBundle.contentKeyEpoch !== input.expectedContentKeyEpoch\n  ) {\n    throw new Error(`${label} content-key epoch mismatch`);\n  }\n  if (response.contentKeyBundle.linkSetManifestHash !== plan.manifestHash) {\n    throw new Error(`${label} link manifest mismatch`);\n  }\n  if (response.contentKeyBundle.targetHash !== plan.targetHash) {\n    throw new Error(`${label} target hash mismatch`);\n  }\n  if (\n    serializeCanonical(\n      response.contentKeyBundle.targets,\n      \"content-key targets\",\n    ) !==\n    serializeCanonical(input.expectedContentKeyTargets, \"content-key targets\")\n  ) {\n    throw new Error(`${label} content-key targets mismatch`);\n  }\n  if (response.documentKekTargets.documentId !== plan.documentId) {\n    throw new Error(`${label} target document mismatch`);\n  }\n  if (response.documentKekTargets.linkSetManifestHash !== plan.manifestHash) {\n    throw new Error(`${label} target manifest mismatch`);\n  }\n  if (response.documentKekTargets.documentKeyTargetHash !== plan.targetHash) {\n    throw new Error(`${label} document target hash mismatch`);\n  }\n  if (\n    serializeCanonical(response.documentKekTargets.targets, \"KEK targets\") !==\n    serializeCanonical(plan.targets, \"KEK targets\")\n  ) {\n    throw new Error(`${label} KEK targets mismatch`);\n  }\n}\n\nfunction assertDocumentMutationResponseMatchesPlan(input: {\n  expectedContentKeyEpoch: number;\n  expectedContentKeyTargets: unknown;\n  label: string;\n  plan: DocumentMutationPlan;\n  probeStateDocumentId: boolean;\n  response: DocumentCreateResponse | DocumentLinkSetMutationResponse;\n}): void {\n  assertDocumentMutationManifestMatchesPlan(input);\n  assertDocumentMutationKeyBundlesMatchPlan(input);\n}\n\nexport function assertDocumentCreateResponseMatchesPlan(\n  plan: DocumentCreatePlan,\n  response: DocumentCreateResponse,\n): void {\n  assertDocumentMutationResponseMatchesPlan({\n    expectedContentKeyEpoch: plan.request.contentKeyBundle.contentKeyEpoch,\n    expectedContentKeyTargets: plan.request.contentKeyBundle.targets,\n    label: \"Document create response\",\n    plan,\n    probeStateDocumentId: true,\n    response,\n  });\n}\n\nexport function persistedDocumentCreateStateFromResponse(\n  plan: DocumentCreatePlan,\n  response: DocumentCreateResponse,\n): PersistedDocumentCreateState {\n  assertDocumentCreateResponseMatchesPlan(plan, response);\n\n  return serializedPersistedDocumentState({\n    contentKeyBundle: response.contentKeyBundle,\n    documentId: response.id,\n    documentKekTargets: response.documentKekTargets,\n    documentManifestBundle: response.accessManifest,\n  });\n}\n\n/**\n * Builds the persisted create-state from a fetched writer projection, for the\n * idempotent-create adopt path where the original create response (which\n * `persistedDocumentCreateStateFromResponse` consumes) was lost. The projection\n * carries the same committed manifest, content-key bundle and KEK targets — the\n * caller must verify it with `assertDocumentWriterProjectionConsistent` first.\n */\nexport function persistedDocumentCreateStateFromWriterProjection(\n  writerProjection: DocumentWriterProjectionResponse,\n): PersistedDocumentCreateState {\n  return serializedPersistedDocumentState({\n    contentKeyBundle: writerProjection.contentKeyBundle,\n    documentId: writerProjection.documentId,\n    documentKekTargets: writerProjection.documentKekTargets,\n    documentManifestBundle: writerProjection.documentManifest,\n  });\n}\n\nexport function persistedDocumentLinkSetMutationStateFromResponse(\n  plan: DocumentLinkSetMutationPlan,\n  response: DocumentLinkSetMutationResponse,\n): PersistedDocumentCreateState {\n  assertDocumentMutationResponseMatchesPlan({\n    expectedContentKeyEpoch: plan.contentKeyEpoch,\n    expectedContentKeyTargets: plan.request.contentKeyBundle.targets,\n    label: \"Document link-set response\",\n    plan,\n    probeStateDocumentId: false,\n    response,\n  });\n\n  return serializedPersistedDocumentState({\n    contentKeyBundle: response.contentKeyBundle,\n    documentId: response.id,\n    documentKekTargets: response.documentKekTargets,\n    documentManifestBundle: response.accessManifest,\n  });\n}\n"]}

package/data/documents/shared/stableDocumentId.js

@@ -0,0 +1,20 @@
+import { deriveStableUuidV4Shaped } from "../../stableUuid.js";
+// A namespace distinct from every other stable-id namespace (e.g. the system
+// container namespace) so a document id derived from a local id never collides
+// with an id derived from the same string in another domain.
+const STABLE_DOCUMENT_ID_NAMESPACE_BYTES = new Uint8Array([
+    0x7a, 0x1c, 0x94, 0xe0, 0x5b, 0x63, 0x4e, 0x11, 0x9f, 0x2d, 0xa8, 0x74, 0x36,
+    0xc1, 0x0e, 0x52,
+]);
+/**
+ * Derives the remote document id for a local document from its stable `localId`.
+ *
+ * Deriving (rather than generating a fresh `crypto.randomUUID()` per attempt)
+ * makes the first remote create idempotent: if the server commits the create but
+ * the response is lost, the retry re-sends the same id and the server reports a
+ * conflict the client can adopt, instead of creating a second orphan document.
+ */
+export function deriveStableDocumentId(localId) {
+    return deriveStableUuidV4Shaped(STABLE_DOCUMENT_ID_NAMESPACE_BYTES, localId);
+}
+//# sourceMappingURL=stableDocumentId.js.map

package/data/documents/shared/stableDocumentId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stableDocumentId.js","sourceRoot":"","sources":["stableDocumentId.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAE5D,6EAA6E;AAC7E,+EAA+E;AAC/E,6DAA6D;AAC7D,MAAM,kCAAkC,GAAG,IAAI,UAAU,CAAC;IACxD,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC5E,IAAI,EAAE,IAAI,EAAE,IAAI;CACjB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,wBAAwB,CAAC,kCAAkC,EAAE,OAAO,CAAC,CAAC;AAC/E,CAAC","sourcesContent":["import { deriveStableUuidV4Shaped } from \"../../stableUuid\";\n\n// A namespace distinct from every other stable-id namespace (e.g. the system\n// container namespace) so a document id derived from a local id never collides\n// with an id derived from the same string in another domain.\nconst STABLE_DOCUMENT_ID_NAMESPACE_BYTES = new Uint8Array([\n  0x7a, 0x1c, 0x94, 0xe0, 0x5b, 0x63, 0x4e, 0x11, 0x9f, 0x2d, 0xa8, 0x74, 0x36,\n  0xc1, 0x0e, 0x52,\n]);\n\n/**\n * Derives the remote document id for a local document from its stable `localId`.\n *\n * Deriving (rather than generating a fresh `crypto.randomUUID()` per attempt)\n * makes the first remote create idempotent: if the server commits the create but\n * the response is lost, the retry re-sends the same id and the server reports a\n * conflict the client can adopt, instead of creating a second orphan document.\n */\nexport function deriveStableDocumentId(localId: string): Promise<string> {\n  return deriveStableUuidV4Shaped(STABLE_DOCUMENT_ID_NAMESPACE_BYTES, localId);\n}\n"]}

package/data/documents/shared/syncPagination.d.ts

@@ -0,0 +1,20 @@
+import type { DocumentSyncResponse } from "../../../internal/validators/response/index.js";
+import type { DocumentSyncCommitLsnMode, DocumentSyncPullContinuation } from "./pullContinuation.js";
+import type { DocumentSyncApi, DocumentSyncPlan, DocumentSyncSubmitFailure } from "./types.js";
+export type { DocumentSyncCommitLsnMode, DocumentSyncPullContinuation, } from "./pullContinuation.js";
+export { documentSyncPullContinuationsEqual } from "./pullContinuation.js";
+export declare class InvalidDocumentSyncPullContinuationError extends Error {
+    constructor(message: string);
+}
+type DocumentSyncSubmission = {
+    readonly ok: true;
+    readonly pullComplete: boolean;
+    readonly response: DocumentSyncResponse;
+} | DocumentSyncSubmitFailure | null;
+export declare function readPullContinuation(response: DocumentSyncResponse): DocumentSyncPullContinuation | null;
+export declare function resolvePullContinuationMinLsn(continuation: DocumentSyncPullContinuation | undefined, fallback: string | undefined): string | undefined;
+export declare function submitDocumentSync(input: {
+    apiClient: DocumentSyncApi;
+    expectedCommitLsnMode?: DocumentSyncCommitLsnMode | undefined;
+    plan: DocumentSyncPlan;
+}): Promise<DocumentSyncSubmission>;

package/data/documents/shared/syncPagination.js

@@ -0,0 +1,109 @@
+import { parseWalLsn } from "../../../internal/validators/util/index.js";
+export { documentSyncPullContinuationsEqual } from "./pullContinuation.js";
+export class InvalidDocumentSyncPullContinuationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "InvalidDocumentSyncPullContinuationError";
+    }
+}
+export function readPullContinuation(response) {
+    const cursor = requirePullPage(response).nextCursor;
+    if (cursor === null)
+        return null;
+    if (response.commitLsn === null) {
+        throw new Error("Document sync pull continuation is missing its checkpoint");
+    }
+    return {
+        commitLsn: response.commitLsn,
+        commitLsnMode: response.commitLsnMode,
+        cursor,
+    };
+}
+export function resolvePullContinuationMinLsn(continuation, fallback) {
+    if (!continuation)
+        return fallback;
+    if (continuation.commitLsnMode === "untracked" || fallback === undefined) {
+        return continuation.commitLsn;
+    }
+    return parseWalLsn(continuation.commitLsn) >= parseWalLsn(fallback)
+        ? continuation.commitLsn
+        : fallback;
+}
+function assertPageCheckpoint(input) {
+    if (input.response.commitLsnMode === "untracked") {
+        if (input.response.commitLsn !== "0/0") {
+            throw new InvalidDocumentSyncPullContinuationError("Document sync continuation untracked LSN is invalid");
+        }
+        return;
+    }
+    if (input.response.commitLsn === null) {
+        if (input.minLsn === undefined && input.nextCursor === null)
+            return;
+        throw new InvalidDocumentSyncPullContinuationError("Document sync pull continuation is missing its checkpoint");
+    }
+    let responseLsn;
+    try {
+        responseLsn = parseWalLsn(input.response.commitLsn);
+    }
+    catch {
+        throw new InvalidDocumentSyncPullContinuationError("Document sync continuation commit LSN is invalid");
+    }
+    if (input.minLsn === undefined)
+        return;
+    let minimumLsn;
+    try {
+        minimumLsn = parseWalLsn(input.minLsn);
+    }
+    catch {
+        throw new InvalidDocumentSyncPullContinuationError("Document sync minimum commit LSN is invalid");
+    }
+    if (responseLsn < minimumLsn) {
+        throw new InvalidDocumentSyncPullContinuationError("Document sync continuation commit LSN regressed");
+    }
+}
+function requirePullPage(response) {
+    if (response.pullPage === undefined) {
+        throw new Error("Document sync response is missing pull page metadata");
+    }
+    return response.pullPage;
+}
+async function submitDocumentSyncPage(input) {
+    const page = await input.submit();
+    if (!page?.ok)
+        return page;
+    if (input.expectedCommitLsnMode !== undefined &&
+        page.response.commitLsnMode !== input.expectedCommitLsnMode) {
+        throw new InvalidDocumentSyncPullContinuationError("Document sync continuation commit LSN mode changed");
+    }
+    const nextCursor = requirePullPage(page.response).nextCursor;
+    assertPageCheckpoint({
+        minLsn: input.plan.request.minLsn,
+        nextCursor,
+        response: page.response,
+    });
+    if (nextCursor !== null && page.response.commitLsn === null) {
+        throw new InvalidDocumentSyncPullContinuationError("Document sync pull continuation is missing its checkpoint");
+    }
+    if (nextCursor !== null && nextCursor === input.plan.request.pullCursor) {
+        throw new InvalidDocumentSyncPullContinuationError("Document sync continuation cursor did not advance");
+    }
+    return {
+        ok: true,
+        pullComplete: nextCursor === null,
+        response: page.response,
+    };
+}
+export async function submitDocumentSync(input) {
+    return submitDocumentSyncPage({
+        expectedCommitLsnMode: input.expectedCommitLsnMode,
+        plan: input.plan,
+        submit: async () => {
+            const result = await input.apiClient.syncDocumentResult(input.plan.documentId, input.plan.request, {
+                expectedPaymentRequiredOrganizationId: input.plan.organizationId,
+                reportErrors: false,
+            });
+            return result.ok ? { ok: true, response: result.data } : result;
+        },
+    });
+}
+//# sourceMappingURL=syncPagination.js.map

package/data/documents/shared/syncPagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncPagination.js","sourceRoot":"","sources":["syncPagination.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAezD,OAAO,EAAE,kCAAkC,EAAE,MAAM,oBAAoB,CAAC;AAExE,MAAM,OAAO,wCAAyC,SAAQ,KAAK;IACjE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,0CAA0C,CAAC;IACzD,CAAC;CACF;AAmBD,MAAM,UAAU,oBAAoB,CAClC,QAA8B;IAE9B,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC;IACpD,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,YAAsD,EACtD,QAA4B;IAE5B,IAAI,CAAC,YAAY;QAAE,OAAO,QAAQ,CAAC;IACnC,IAAI,YAAY,CAAC,aAAa,KAAK,WAAW,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,YAAY,CAAC,SAAS,CAAC;IAChC,CAAC;IACD,OAAO,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC;QACjE,CAAC,CAAC,YAAY,CAAC,SAAS;QACxB,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAI7B;IACC,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YACvC,MAAM,IAAI,wCAAwC,CAChD,qDAAqD,CACtD,CAAC;QACJ,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO;QACpE,MAAM,IAAI,wCAAwC,CAChD,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,wCAAwC,CAChD,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO;IACvC,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,wCAAwC,CAChD,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,GAAG,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,wCAAwC,CAChD,iDAAiD,CAClD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAA8B;IACrD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAIrC;IACC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI,EAAE,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3B,IACE,KAAK,CAAC,qBAAqB,KAAK,SAAS;QACzC,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,KAAK,CAAC,qBAAqB,EAC3D,CAAC;QACD,MAAM,IAAI,wCAAwC,CAChD,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC;IAC7D,oBAAoB,CAAC;QACnB,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;QACjC,UAAU;QACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,IAAI,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,wCAAwC,CAChD,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxE,MAAM,IAAI,wCAAwC,CAChD,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,YAAY,EAAE,UAAU,KAAK,IAAI;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAIxC;IACC,OAAO,sBAAsB,CAAC;QAC5B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,kBAAkB,CACrD,KAAK,CAAC,IAAI,CAAC,UAAU,EACrB,KAAK,CAAC,IAAI,CAAC,OAAO,EAClB;gBACE,qCAAqC,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc;gBAChE,YAAY,EAAE,KAAK;aACpB,CACF,CAAC;YACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAClE,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { DocumentSyncResponse } from \"@tearleads/validators/response\";\nimport { parseWalLsn } from \"@tearleads/validators/util\";\nimport type {\n  DocumentSyncCommitLsnMode,\n  DocumentSyncPullContinuation,\n} from \"./pullContinuation\";\nimport type {\n  DocumentSyncApi,\n  DocumentSyncPlan,\n  DocumentSyncSubmitFailure,\n} from \"./types\";\n\nexport type {\n  DocumentSyncCommitLsnMode,\n  DocumentSyncPullContinuation,\n} from \"./pullContinuation\";\nexport { documentSyncPullContinuationsEqual } from \"./pullContinuation\";\n\nexport class InvalidDocumentSyncPullContinuationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"InvalidDocumentSyncPullContinuationError\";\n  }\n}\n\ntype DocumentSyncPageSubmission =\n  | {\n      readonly ok: true;\n      readonly response: DocumentSyncResponse;\n    }\n  | DocumentSyncSubmitFailure\n  | null;\n\ntype DocumentSyncSubmission =\n  | {\n      readonly ok: true;\n      readonly pullComplete: boolean;\n      readonly response: DocumentSyncResponse;\n    }\n  | DocumentSyncSubmitFailure\n  | null;\n\nexport function readPullContinuation(\n  response: DocumentSyncResponse,\n): DocumentSyncPullContinuation | null {\n  const cursor = requirePullPage(response).nextCursor;\n  if (cursor === null) return null;\n  if (response.commitLsn === null) {\n    throw new Error(\n      \"Document sync pull continuation is missing its checkpoint\",\n    );\n  }\n  return {\n    commitLsn: response.commitLsn,\n    commitLsnMode: response.commitLsnMode,\n    cursor,\n  };\n}\n\nexport function resolvePullContinuationMinLsn(\n  continuation: DocumentSyncPullContinuation | undefined,\n  fallback: string | undefined,\n): string | undefined {\n  if (!continuation) return fallback;\n  if (continuation.commitLsnMode === \"untracked\" || fallback === undefined) {\n    return continuation.commitLsn;\n  }\n  return parseWalLsn(continuation.commitLsn) >= parseWalLsn(fallback)\n    ? continuation.commitLsn\n    : fallback;\n}\n\nfunction assertPageCheckpoint(input: {\n  readonly minLsn: string | undefined;\n  readonly nextCursor: string | null;\n  readonly response: DocumentSyncResponse;\n}): void {\n  if (input.response.commitLsnMode === \"untracked\") {\n    if (input.response.commitLsn !== \"0/0\") {\n      throw new InvalidDocumentSyncPullContinuationError(\n        \"Document sync continuation untracked LSN is invalid\",\n      );\n    }\n    return;\n  }\n  if (input.response.commitLsn === null) {\n    if (input.minLsn === undefined && input.nextCursor === null) return;\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync pull continuation is missing its checkpoint\",\n    );\n  }\n  let responseLsn: bigint;\n  try {\n    responseLsn = parseWalLsn(input.response.commitLsn);\n  } catch {\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync continuation commit LSN is invalid\",\n    );\n  }\n  if (input.minLsn === undefined) return;\n  let minimumLsn: bigint;\n  try {\n    minimumLsn = parseWalLsn(input.minLsn);\n  } catch {\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync minimum commit LSN is invalid\",\n    );\n  }\n  if (responseLsn < minimumLsn) {\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync continuation commit LSN regressed\",\n    );\n  }\n}\n\nfunction requirePullPage(response: DocumentSyncResponse) {\n  if (response.pullPage === undefined) {\n    throw new Error(\"Document sync response is missing pull page metadata\");\n  }\n  return response.pullPage;\n}\n\nasync function submitDocumentSyncPage(input: {\n  readonly expectedCommitLsnMode?: DocumentSyncCommitLsnMode | undefined;\n  readonly plan: DocumentSyncPlan;\n  readonly submit: () => Promise<DocumentSyncPageSubmission>;\n}): Promise<DocumentSyncSubmission> {\n  const page = await input.submit();\n  if (!page?.ok) return page;\n  if (\n    input.expectedCommitLsnMode !== undefined &&\n    page.response.commitLsnMode !== input.expectedCommitLsnMode\n  ) {\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync continuation commit LSN mode changed\",\n    );\n  }\n  const nextCursor = requirePullPage(page.response).nextCursor;\n  assertPageCheckpoint({\n    minLsn: input.plan.request.minLsn,\n    nextCursor,\n    response: page.response,\n  });\n  if (nextCursor !== null && page.response.commitLsn === null) {\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync pull continuation is missing its checkpoint\",\n    );\n  }\n  if (nextCursor !== null && nextCursor === input.plan.request.pullCursor) {\n    throw new InvalidDocumentSyncPullContinuationError(\n      \"Document sync continuation cursor did not advance\",\n    );\n  }\n  return {\n    ok: true,\n    pullComplete: nextCursor === null,\n    response: page.response,\n  };\n}\n\nexport async function submitDocumentSync(input: {\n  apiClient: DocumentSyncApi;\n  expectedCommitLsnMode?: DocumentSyncCommitLsnMode | undefined;\n  plan: DocumentSyncPlan;\n}): Promise<DocumentSyncSubmission> {\n  return submitDocumentSyncPage({\n    expectedCommitLsnMode: input.expectedCommitLsnMode,\n    plan: input.plan,\n    submit: async () => {\n      const result = await input.apiClient.syncDocumentResult(\n        input.plan.documentId,\n        input.plan.request,\n        {\n          expectedPaymentRequiredOrganizationId: input.plan.organizationId,\n          reportErrors: false,\n        },\n      );\n      return result.ok ? { ok: true, response: result.data } : result;\n    },\n  });\n}\n"]}

package/data/documents/shared/syncResponseAuthorization.js

@@ -0,0 +1,63 @@
+import { computeDocumentContentKeyTargetHash, makeVerifiedDocumentKekTargets, } from "../../../internal/crypto/index.js";
+import { resolveEventContainerPaths } from "../../keyingProjectionVerification/documentDependencyPaths.js";
+import { sortDocumentTargets } from "./readers.js";
+export async function documentWriteAuthorizationForHeader(input) {
+    const source = input.plan.documentWriterAuthorization;
+    if (!source) {
+        if (input.allowMissingAuthorization) {
+            return null;
+        }
+        throw new Error("Document sync response lacks verified writer-authorization material");
+    }
+    const documentManifest = source.documentManifestByHash.get(input.manifestHash);
+    if (!documentManifest) {
+        throw new Error("Document sync response write manifest is not in verified history");
+    }
+    if (input.contentKeyBundle.documentId !== input.plan.documentId) {
+        throw new Error("Document sync response content-key bundle belongs to another document");
+    }
+    const targets = sortDocumentTargets(input.authorizationTargets);
+    if ((await computeDocumentContentKeyTargetHash(targets)) !== input.targetHash) {
+        throw new Error("Document sync response write targets are not canonical");
+    }
+    const linkedContainerIds = new Set(documentManifest.state.linkedContainerIds);
+    if (targets.length !== linkedContainerIds.size ||
+        targets.some((target) => !linkedContainerIds.has(target.containerId))) {
+        throw new Error("Document sync response write targets do not match the signed link set");
+    }
+    const { dependencyContainerPaths } = resolveEventContainerPaths({
+        containerPathByManifestHash: source.containerPathByManifestHash,
+        dependencyManifestHashes: input.dependencyManifestHashes,
+    });
+    // A writer needs one committed target, and can be unable to read another
+    // linked container. Validate the targets that are cited without inventing
+    // paths for uncited targets or dropping signed ancestor evidence.
+    for (const target of targets) {
+        const path = dependencyContainerPaths.find((candidate) => candidate.at(-1)?.manifestHash === target.containerManifestHash);
+        if (!path)
+            continue;
+        const leaf = path.at(-1);
+        if (!leaf ||
+            leaf.state.containerId !== target.containerId ||
+            leaf.state.organizationId !== input.plan.organizationId ||
+            leaf.state.containerKeyEpochId !== target.containerKeyEpochId) {
+            throw new Error("Document sync response write target lacks a verified container path");
+        }
+    }
+    const authorizingContainerPaths = dependencyContainerPaths;
+    const documentKekTargets = makeVerifiedDocumentKekTargets({
+        documentId: input.contentKeyBundle.documentId,
+        documentKeyTargetHash: input.targetHash,
+        linkedContainerKeyEpochIds: targets.map((target) => target.containerKeyEpochId),
+        linkedContainerManifestHashes: targets.map((target) => target.containerManifestHash),
+        linkSetManifestHash: input.manifestHash,
+        targets,
+    });
+    return {
+        authorizingContainerPaths,
+        documentKekTargets,
+        documentManifest,
+        principalPolicies: source.principalPolicies,
+    };
+}
+//# sourceMappingURL=syncResponseAuthorization.js.map

package/data/documents/shared/syncResponseAuthorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncResponseAuthorization.js","sourceRoot":"","sources":["syncResponseAuthorization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mCAAmC,EAEnC,8BAA8B,GAC/B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,4DAA4D,CAAC;AACxG,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAGhD,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,KAWzD;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC;IACtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,KAAK,CAAC,yBAAyB,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,CAAC,sBAAsB,CAAC,GAAG,CACxD,KAAK,CAAC,YAAY,CACnB,CAAC;IACF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAChE,IACE,CAAC,MAAM,mCAAmC,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,UAAU,EACzE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC9E,IACE,OAAO,CAAC,MAAM,KAAK,kBAAkB,CAAC,IAAI;QAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EACrE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,wBAAwB,EAAE,GAAG,0BAA0B,CAAC;QAC9D,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;QAC/D,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;KACzD,CAAC,CAAC;IACH,yEAAyE;IACzE,0EAA0E;IAC1E,kEAAkE;IAClE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CACxC,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,KAAK,MAAM,CAAC,qBAAqB,CAClE,CAAC;QACF,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,IACE,CAAC,IAAI;YACL,IAAI,CAAC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;YAC7C,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,IAAI,CAAC,cAAc;YACvD,IAAI,CAAC,KAAK,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,EAC7D,CAAC;YACD,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,yBAAyB,GAAG,wBAAwB,CAAC;IAC3D,MAAM,kBAAkB,GAAG,8BAA8B,CAAC;QACxD,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,UAAU;QAC7C,qBAAqB,EAAE,KAAK,CAAC,UAAU;QACvC,0BAA0B,EAAE,OAAO,CAAC,GAAG,CACrC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CACvC;QACD,6BAA6B,EAAE,OAAO,CAAC,GAAG,CACxC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,qBAAqB,CACzC;QACD,mBAAmB,EAAE,KAAK,CAAC,YAAY;QACvC,OAAO;KACR,CAAC,CAAC;IACH,OAAO;QACL,yBAAyB;QACzB,kBAAkB;QAClB,gBAAgB;QAChB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC;AACJ,CAAC","sourcesContent":["import {\n  computeDocumentContentKeyTargetHash,\n  type DocumentContentKeyTarget,\n  makeVerifiedDocumentKekTargets,\n} from \"@tearleads/crypto\";\nimport type { DocumentSyncResponse } from \"@tearleads/validators/response\";\nimport { resolveEventContainerPaths } from \"../../keyingProjectionVerification/documentDependencyPaths\";\nimport { sortDocumentTargets } from \"./readers\";\nimport type { DocumentSyncPlan } from \"./types\";\n\nexport async function documentWriteAuthorizationForHeader(input: {\n  readonly allowMissingAuthorization: boolean;\n  readonly dependencyManifestHashes: readonly string[];\n  readonly authorizationTargets: readonly DocumentContentKeyTarget[];\n  readonly contentKeyBundle: DocumentSyncResponse[\"contentKeyBundle\"];\n  readonly manifestHash: string;\n  readonly plan: Pick<\n    DocumentSyncPlan,\n    \"documentId\" | \"organizationId\" | \"documentWriterAuthorization\"\n  >;\n  readonly targetHash: string;\n}) {\n  const source = input.plan.documentWriterAuthorization;\n  if (!source) {\n    if (input.allowMissingAuthorization) {\n      return null;\n    }\n    throw new Error(\n      \"Document sync response lacks verified writer-authorization material\",\n    );\n  }\n  const documentManifest = source.documentManifestByHash.get(\n    input.manifestHash,\n  );\n  if (!documentManifest) {\n    throw new Error(\n      \"Document sync response write manifest is not in verified history\",\n    );\n  }\n  if (input.contentKeyBundle.documentId !== input.plan.documentId) {\n    throw new Error(\n      \"Document sync response content-key bundle belongs to another document\",\n    );\n  }\n\n  const targets = sortDocumentTargets(input.authorizationTargets);\n  if (\n    (await computeDocumentContentKeyTargetHash(targets)) !== input.targetHash\n  ) {\n    throw new Error(\"Document sync response write targets are not canonical\");\n  }\n  const linkedContainerIds = new Set(documentManifest.state.linkedContainerIds);\n  if (\n    targets.length !== linkedContainerIds.size ||\n    targets.some((target) => !linkedContainerIds.has(target.containerId))\n  ) {\n    throw new Error(\n      \"Document sync response write targets do not match the signed link set\",\n    );\n  }\n\n  const { dependencyContainerPaths } = resolveEventContainerPaths({\n    containerPathByManifestHash: source.containerPathByManifestHash,\n    dependencyManifestHashes: input.dependencyManifestHashes,\n  });\n  // A writer needs one committed target, and can be unable to read another\n  // linked container. Validate the targets that are cited without inventing\n  // paths for uncited targets or dropping signed ancestor evidence.\n  for (const target of targets) {\n    const path = dependencyContainerPaths.find(\n      (candidate) =>\n        candidate.at(-1)?.manifestHash === target.containerManifestHash,\n    );\n    if (!path) continue;\n    const leaf = path.at(-1);\n    if (\n      !leaf ||\n      leaf.state.containerId !== target.containerId ||\n      leaf.state.organizationId !== input.plan.organizationId ||\n      leaf.state.containerKeyEpochId !== target.containerKeyEpochId\n    ) {\n      throw new Error(\n        \"Document sync response write target lacks a verified container path\",\n      );\n    }\n  }\n  const authorizingContainerPaths = dependencyContainerPaths;\n  const documentKekTargets = makeVerifiedDocumentKekTargets({\n    documentId: input.contentKeyBundle.documentId,\n    documentKeyTargetHash: input.targetHash,\n    linkedContainerKeyEpochIds: targets.map(\n      (target) => target.containerKeyEpochId,\n    ),\n    linkedContainerManifestHashes: targets.map(\n      (target) => target.containerManifestHash,\n    ),\n    linkSetManifestHash: input.manifestHash,\n    targets,\n  });\n  return {\n    authorizingContainerPaths,\n    documentKekTargets,\n    documentManifest,\n    principalPolicies: source.principalPolicies,\n  };\n}\n"]}