@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/data/trustedUserIdentity/trustDomain.js

@@ -0,0 +1,66 @@
+import { KeyingVerificationError } from "../../internal/crypto/index.js";
+function invalidTrustDomain(message) {
+    throw new KeyingVerificationError("invalid_domain", message);
+}
+function canonicalHttpUrl(value, base) {
+    let url;
+    try {
+        url = base ? new URL(value, base) : new URL(value);
+    }
+    catch {
+        return invalidTrustDomain("Identity trust domain must resolve to an absolute HTTP(S) URL");
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        return invalidTrustDomain("Identity trust domain must use the HTTP or HTTPS protocol");
+    }
+    if (url.username || url.password) {
+        return invalidTrustDomain("Identity trust domain must not contain URL credentials");
+    }
+    if (url.search || url.hash) {
+        return invalidTrustDomain("Identity trust domain must not contain a query or fragment");
+    }
+    // This uses the API base URL too; avoid backtracking over internal slash runs.
+    const pathname = url.pathname;
+    let end = pathname.length;
+    while (end > 0 && pathname[end - 1] === "/") {
+        end -= 1;
+    }
+    return `${url.origin}${pathname.slice(0, end)}`;
+}
+function readAmbientHref() {
+    if (typeof globalThis.location !== "object") {
+        return null;
+    }
+    return globalThis.location.href;
+}
+function isHttpUrl(value) {
+    try {
+        const url = new URL(value);
+        return url.protocol === "http:" || url.protocol === "https:";
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Resolve the stable host-controlled namespace used by durable identity pins.
+ * Relative API URLs require a browser origin or an explicit absolute override;
+ * a non-browser client without either remains unavailable and fails closed when
+ * remote identity material is requested.
+ */
+export function resolveIdentityTrustDomain(input) {
+    const override = input.identityTrustDomain?.trim();
+    if (override) {
+        return canonicalHttpUrl(override);
+    }
+    const apiBaseUrl = (input.apiBaseUrl ?? "").trim();
+    const ambientHref = input.ambientHref ?? readAmbientHref();
+    if (/^https?:\/\//iu.test(apiBaseUrl)) {
+        return canonicalHttpUrl(apiBaseUrl);
+    }
+    if (!ambientHref || !isHttpUrl(ambientHref)) {
+        return null;
+    }
+    return canonicalHttpUrl(apiBaseUrl || "/", ambientHref);
+}
+//# sourceMappingURL=trustDomain.js.map

package/data/trustedUserIdentity/trustDomain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustDomain.js","sourceRoot":"","sources":["trustDomain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAQ5D,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAa;IACpD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CACvB,+DAA+D,CAChE,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO,kBAAkB,CACvB,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,kBAAkB,CACvB,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,kBAAkB,CACvB,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,IAAI,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC1B,OAAO,GAAG,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QAC5C,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,eAAe;IACtB,IAAI,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;AAClC,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAA+B;IAE/B,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,eAAe,EAAE,CAAC;IAC3D,IAAI,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,gBAAgB,CAAC,UAAU,IAAI,GAAG,EAAE,WAAW,CAAC,CAAC;AAC1D,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\n\ninterface IdentityTrustDomainInput {\n  readonly apiBaseUrl: string | null | undefined;\n  readonly ambientHref?: string | null | undefined;\n  readonly identityTrustDomain?: string | null | undefined;\n}\n\nfunction invalidTrustDomain(message: string): never {\n  throw new KeyingVerificationError(\"invalid_domain\", message);\n}\n\nfunction canonicalHttpUrl(value: string, base?: string): string {\n  let url: URL;\n  try {\n    url = base ? new URL(value, base) : new URL(value);\n  } catch {\n    return invalidTrustDomain(\n      \"Identity trust domain must resolve to an absolute HTTP(S) URL\",\n    );\n  }\n\n  if (url.protocol !== \"http:\" && url.protocol !== \"https:\") {\n    return invalidTrustDomain(\n      \"Identity trust domain must use the HTTP or HTTPS protocol\",\n    );\n  }\n  if (url.username || url.password) {\n    return invalidTrustDomain(\n      \"Identity trust domain must not contain URL credentials\",\n    );\n  }\n  if (url.search || url.hash) {\n    return invalidTrustDomain(\n      \"Identity trust domain must not contain a query or fragment\",\n    );\n  }\n\n  // This uses the API base URL too; avoid backtracking over internal slash runs.\n  const pathname = url.pathname;\n  let end = pathname.length;\n  while (end > 0 && pathname[end - 1] === \"/\") {\n    end -= 1;\n  }\n  return `${url.origin}${pathname.slice(0, end)}`;\n}\n\nfunction readAmbientHref(): string | null {\n  if (typeof globalThis.location !== \"object\") {\n    return null;\n  }\n  return globalThis.location.href;\n}\n\nfunction isHttpUrl(value: string): boolean {\n  try {\n    const url = new URL(value);\n    return url.protocol === \"http:\" || url.protocol === \"https:\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Resolve the stable host-controlled namespace used by durable identity pins.\n * Relative API URLs require a browser origin or an explicit absolute override;\n * a non-browser client without either remains unavailable and fails closed when\n * remote identity material is requested.\n */\nexport function resolveIdentityTrustDomain(\n  input: IdentityTrustDomainInput,\n): string | null {\n  const override = input.identityTrustDomain?.trim();\n  if (override) {\n    return canonicalHttpUrl(override);\n  }\n\n  const apiBaseUrl = (input.apiBaseUrl ?? \"\").trim();\n  const ambientHref = input.ambientHref ?? readAmbientHref();\n  if (/^https?:\\/\\//iu.test(apiBaseUrl)) {\n    return canonicalHttpUrl(apiBaseUrl);\n  }\n  if (!ambientHref || !isHttpUrl(ambientHref)) {\n    return null;\n  }\n  return canonicalHttpUrl(apiBaseUrl || \"/\", ambientHref);\n}\n"]}

package/data/trustedUserIdentity/types.d.ts

@@ -0,0 +1,69 @@
+import type { ExecSql } from "../sqlite/sqlSchema.js";
+export declare const TRUSTED_USER_IDENTITY_FORMAT_VERSION = 1;
+export declare const TRUSTED_USER_IDENTITY_SIGNING_SUITE = "ML-DSA-87";
+export declare const TRUSTED_USER_IDENTITY_ENCAPSULATION_SUITE = "ML-KEM-1024";
+declare const trustedUserIdentityBrand: unique symbol;
+/**
+ * A complete user identity bundle that has passed strict key validation and
+ * the durable trust-on-first-use comparison for its trust domain.
+ *
+ * The nominal brand keeps raw API and organization response objects from being
+ * accepted at cryptographic boundaries by structural typing. Its private
+ * symbol and constructor remain package-private to the SDK trust gateway.
+ */
+export interface TrustedUserIdentity {
+    readonly [trustedUserIdentityBrand]: true;
+    readonly encapsulationKeyFingerprint: string;
+    readonly encapsulationPublicKey: Uint8Array;
+    readonly identityTrustDomain: string;
+    readonly signingKeyFingerprint: string;
+    readonly signingPublicKey: Uint8Array;
+    readonly userId: string;
+}
+/** Strictly decoded and self-consistent, but not yet accepted by durable TOFU. */
+export interface ValidatedUserIdentityCandidate {
+    readonly encapsulationKeyFingerprint: string;
+    readonly encapsulationPublicKey: Uint8Array;
+    readonly identityTrustDomain: string;
+    readonly signingKeyFingerprint: string;
+    readonly signingPublicKey: Uint8Array;
+    readonly userId: string;
+}
+export interface RemoteUserIdentityCandidate {
+    readonly encapsulationKeyFingerprint: string;
+    readonly encapsulationPublicKey: string;
+    readonly signingKeyFingerprint: string;
+    readonly signingPublicKey: string;
+    readonly userId: string;
+}
+export interface RemoteUserIdentitySource {
+    invalidate(userId: string): void;
+    /**
+     * `null` only when the server asserts the user does not exist. A transport
+     * or non-404 HTTP failure throws a retryable availability error instead.
+     */
+    load(userId: string): Promise<RemoteUserIdentityCandidate | null>;
+}
+export interface LocalUserIdentityCandidate {
+    readonly encapsulationPublicKey: Uint8Array;
+    readonly signingKeyFingerprint?: string | null | undefined;
+    readonly signingPublicKey: Uint8Array;
+}
+export interface TrustedUserIdentityService {
+    /** The user this device's trust store already binds a signing key to. */
+    boundUserId(signingKeyFingerprint: string): Promise<string | null>;
+    pinLocal(userId: string, candidate: LocalUserIdentityCandidate): Promise<TrustedUserIdentity>;
+    resolve(userId: string): Promise<TrustedUserIdentity | null>;
+}
+export type TrustedUserIdentityResolver = TrustedUserIdentityService["resolve"];
+export interface TrustedUserIdentityServiceDependencies {
+    readonly getExecSql: () => ExecSql | null;
+    readonly getLocalIdentity: (userId: string) => LocalUserIdentityCandidate | null;
+    readonly getLocalUserId: () => string | null;
+    readonly identityTrustDomain: string | null;
+    readonly now?: (() => Date) | undefined;
+    readonly remoteSource: RemoteUserIdentitySource;
+}
+export declare function brandTrustedUserIdentity(input: ValidatedUserIdentityCandidate): TrustedUserIdentity;
+export declare function isTrustedUserIdentity(value: unknown): value is TrustedUserIdentity;
+export {};

package/data/trustedUserIdentity/types.js

@@ -0,0 +1,18 @@
+export const TRUSTED_USER_IDENTITY_FORMAT_VERSION = 1;
+export const TRUSTED_USER_IDENTITY_SIGNING_SUITE = "ML-DSA-87";
+export const TRUSTED_USER_IDENTITY_ENCAPSULATION_SUITE = "ML-KEM-1024";
+const trustedUserIdentityBrand = Symbol("trustedUserIdentity");
+const trustedUserIdentityBrandValue = true;
+export function brandTrustedUserIdentity(input) {
+    return {
+        ...input,
+        [trustedUserIdentityBrand]: trustedUserIdentityBrandValue,
+    };
+}
+export function isTrustedUserIdentity(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        Reflect.get(value, trustedUserIdentityBrand) ===
+            trustedUserIdentityBrandValue);
+}
+//# sourceMappingURL=types.js.map

package/data/trustedUserIdentity/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["types.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC;AACtD,MAAM,CAAC,MAAM,mCAAmC,GAAG,WAAW,CAAC;AAC/D,MAAM,CAAC,MAAM,yCAAyC,GAAG,aAAa,CAAC;AAEvE,MAAM,wBAAwB,GAAkB,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAC9E,MAAM,6BAA6B,GAAG,IAAI,CAAC;AA4E3C,MAAM,UAAU,wBAAwB,CACtC,KAAqC;IAErC,OAAO;QACL,GAAG,KAAK;QACR,CAAC,wBAAwB,CAAC,EAAE,6BAA6B;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,wBAAwB,CAAC;YAC1C,6BAA6B,CAChC,CAAC;AACJ,CAAC","sourcesContent":["import type { ExecSql } from \"../sqlite/sqlSchema\";\n\nexport const TRUSTED_USER_IDENTITY_FORMAT_VERSION = 1;\nexport const TRUSTED_USER_IDENTITY_SIGNING_SUITE = \"ML-DSA-87\";\nexport const TRUSTED_USER_IDENTITY_ENCAPSULATION_SUITE = \"ML-KEM-1024\";\n\nconst trustedUserIdentityBrand: unique symbol = Symbol(\"trustedUserIdentity\");\nconst trustedUserIdentityBrandValue = true;\n\n/**\n * A complete user identity bundle that has passed strict key validation and\n * the durable trust-on-first-use comparison for its trust domain.\n *\n * The nominal brand keeps raw API and organization response objects from being\n * accepted at cryptographic boundaries by structural typing. Its private\n * symbol and constructor remain package-private to the SDK trust gateway.\n */\nexport interface TrustedUserIdentity {\n  readonly [trustedUserIdentityBrand]: true;\n  readonly encapsulationKeyFingerprint: string;\n  readonly encapsulationPublicKey: Uint8Array;\n  readonly identityTrustDomain: string;\n  readonly signingKeyFingerprint: string;\n  readonly signingPublicKey: Uint8Array;\n  readonly userId: string;\n}\n\n/** Strictly decoded and self-consistent, but not yet accepted by durable TOFU. */\nexport interface ValidatedUserIdentityCandidate {\n  readonly encapsulationKeyFingerprint: string;\n  readonly encapsulationPublicKey: Uint8Array;\n  readonly identityTrustDomain: string;\n  readonly signingKeyFingerprint: string;\n  readonly signingPublicKey: Uint8Array;\n  readonly userId: string;\n}\n\nexport interface RemoteUserIdentityCandidate {\n  readonly encapsulationKeyFingerprint: string;\n  readonly encapsulationPublicKey: string;\n  readonly signingKeyFingerprint: string;\n  readonly signingPublicKey: string;\n  readonly userId: string;\n}\n\nexport interface RemoteUserIdentitySource {\n  invalidate(userId: string): void;\n  /**\n   * `null` only when the server asserts the user does not exist. A transport\n   * or non-404 HTTP failure throws a retryable availability error instead.\n   */\n  load(userId: string): Promise<RemoteUserIdentityCandidate | null>;\n}\n\nexport interface LocalUserIdentityCandidate {\n  readonly encapsulationPublicKey: Uint8Array;\n  readonly signingKeyFingerprint?: string | null | undefined;\n  readonly signingPublicKey: Uint8Array;\n}\n\nexport interface TrustedUserIdentityService {\n  /** The user this device's trust store already binds a signing key to. */\n  boundUserId(signingKeyFingerprint: string): Promise<string | null>;\n  pinLocal(\n    userId: string,\n    candidate: LocalUserIdentityCandidate,\n  ): Promise<TrustedUserIdentity>;\n  resolve(userId: string): Promise<TrustedUserIdentity | null>;\n}\n\nexport type TrustedUserIdentityResolver = TrustedUserIdentityService[\"resolve\"];\n\nexport interface TrustedUserIdentityServiceDependencies {\n  readonly getExecSql: () => ExecSql | null;\n  readonly getLocalIdentity: (\n    userId: string,\n  ) => LocalUserIdentityCandidate | null;\n  readonly getLocalUserId: () => string | null;\n  readonly identityTrustDomain: string | null;\n  readonly now?: (() => Date) | undefined;\n  readonly remoteSource: RemoteUserIdentitySource;\n}\n\nexport function brandTrustedUserIdentity(\n  input: ValidatedUserIdentityCandidate,\n): TrustedUserIdentity {\n  return {\n    ...input,\n    [trustedUserIdentityBrand]: trustedUserIdentityBrandValue,\n  };\n}\n\nexport function isTrustedUserIdentity(\n  value: unknown,\n): value is TrustedUserIdentity {\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    Reflect.get(value, trustedUserIdentityBrand) ===\n      trustedUserIdentityBrandValue\n  );\n}\n"]}

package/data/trustedUserIdentity/validation.d.ts

@@ -0,0 +1,16 @@
+import type { LocalUserIdentityCandidate, RemoteUserIdentityCandidate, ValidatedUserIdentityCandidate } from "./types.js";
+export declare function assertTrustedUserIdentityUserId(userId: string): void;
+export declare function validateUserIdentityKeys(input: {
+    readonly candidate: LocalUserIdentityCandidate;
+    readonly encapsulationKeyFingerprint?: string | null | undefined;
+}): Promise<Omit<ValidatedUserIdentityCandidate, "identityTrustDomain" | "userId">>;
+export declare function validateLocalUserIdentity(input: {
+    readonly candidate: LocalUserIdentityCandidate;
+    readonly identityTrustDomain: string;
+    readonly userId: string;
+}): Promise<ValidatedUserIdentityCandidate>;
+export declare function validateRemoteUserIdentity(input: {
+    readonly candidate: RemoteUserIdentityCandidate;
+    readonly identityTrustDomain: string;
+    readonly requestedUserId: string;
+}): Promise<ValidatedUserIdentityCandidate>;

package/data/trustedUserIdentity/validation.js

@@ -0,0 +1,109 @@
+import { KeyingVerificationError, ML_DSA87_PUBLIC_KEY_BYTES, ML_KEM1024_PUBLIC_KEY_BYTES, toFingerprint, } from "../../internal/crypto/index.js";
+import { base64ToBytes, bytesToBase64 } from "../../internal/encoding/index.js";
+import { isUuidV4String } from "../../internal/validators/util/index.js";
+export function assertTrustedUserIdentityUserId(userId) {
+    if (!isUuidV4String(userId) || userId !== userId.toLowerCase()) {
+        throw new KeyingVerificationError("invalid_shape", "Trusted user identity requires a canonical lowercase UUID v4 user id");
+    }
+}
+function decodeCanonicalPublicKey(input) {
+    let decoded;
+    try {
+        decoded = base64ToBytes(input.encoded);
+    }
+    catch {
+        throw new KeyingVerificationError("invalid_shape", `${input.label} must use canonical base64 encoding`);
+    }
+    if (bytesToBase64(decoded) !== input.encoded) {
+        throw new KeyingVerificationError("invalid_shape", `${input.label} must use canonical base64 encoding`);
+    }
+    return validatePublicKeyLength({
+        bytes: decoded,
+        expectedLength: input.expectedLength,
+        label: input.label,
+    });
+}
+function validatePublicKeyLength(input) {
+    if (input.bytes.length !== input.expectedLength) {
+        throw new KeyingVerificationError("invalid_shape", `${input.label} must contain exactly ${input.expectedLength} bytes`);
+    }
+    return new Uint8Array(input.bytes);
+}
+async function validateFingerprints(input) {
+    const [signingKeyFingerprint, encapsulationKeyFingerprint] = await Promise.all([
+        toFingerprint(input.signingPublicKey),
+        toFingerprint(input.encapsulationPublicKey),
+    ]);
+    if (input.signingKeyFingerprint !== undefined &&
+        input.signingKeyFingerprint !== null &&
+        input.signingKeyFingerprint !== signingKeyFingerprint) {
+        throw new KeyingVerificationError("hash_mismatch", "Trusted user identity signing fingerprint does not match its public key");
+    }
+    if (input.encapsulationKeyFingerprint !== undefined &&
+        input.encapsulationKeyFingerprint !== null &&
+        input.encapsulationKeyFingerprint !== encapsulationKeyFingerprint) {
+        throw new KeyingVerificationError("hash_mismatch", "Trusted user identity encapsulation fingerprint does not match its public key");
+    }
+    return { encapsulationKeyFingerprint, signingKeyFingerprint };
+}
+export async function validateUserIdentityKeys(input) {
+    const signingPublicKey = validatePublicKeyLength({
+        bytes: input.candidate.signingPublicKey,
+        expectedLength: ML_DSA87_PUBLIC_KEY_BYTES,
+        label: "Signing public key",
+    });
+    const encapsulationPublicKey = validatePublicKeyLength({
+        bytes: input.candidate.encapsulationPublicKey,
+        expectedLength: ML_KEM1024_PUBLIC_KEY_BYTES,
+        label: "Encapsulation public key",
+    });
+    const fingerprints = await validateFingerprints({
+        encapsulationKeyFingerprint: input.encapsulationKeyFingerprint,
+        encapsulationPublicKey,
+        signingKeyFingerprint: input.candidate.signingKeyFingerprint,
+        signingPublicKey,
+    });
+    return {
+        ...fingerprints,
+        encapsulationPublicKey,
+        signingPublicKey,
+    };
+}
+export async function validateLocalUserIdentity(input) {
+    assertTrustedUserIdentityUserId(input.userId);
+    return {
+        ...(await validateUserIdentityKeys(input)),
+        identityTrustDomain: input.identityTrustDomain,
+        userId: input.userId,
+    };
+}
+export async function validateRemoteUserIdentity(input) {
+    assertTrustedUserIdentityUserId(input.requestedUserId);
+    if (input.candidate.userId !== input.requestedUserId) {
+        throw new KeyingVerificationError("object_mismatch", "Trusted user identity response does not match the requested user");
+    }
+    const signingPublicKey = decodeCanonicalPublicKey({
+        encoded: input.candidate.signingPublicKey,
+        expectedLength: ML_DSA87_PUBLIC_KEY_BYTES,
+        label: "Signing public key",
+    });
+    const encapsulationPublicKey = decodeCanonicalPublicKey({
+        encoded: input.candidate.encapsulationPublicKey,
+        expectedLength: ML_KEM1024_PUBLIC_KEY_BYTES,
+        label: "Encapsulation public key",
+    });
+    const keys = await validateUserIdentityKeys({
+        candidate: {
+            encapsulationPublicKey,
+            signingKeyFingerprint: input.candidate.signingKeyFingerprint,
+            signingPublicKey,
+        },
+        encapsulationKeyFingerprint: input.candidate.encapsulationKeyFingerprint,
+    });
+    return {
+        ...keys,
+        identityTrustDomain: input.identityTrustDomain,
+        userId: input.requestedUserId,
+    };
+}
+//# sourceMappingURL=validation.js.map

package/data/trustedUserIdentity/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["validation.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,EAC3B,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAO5D,MAAM,UAAU,+BAA+B,CAAC,MAAc;IAC5D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/D,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,sEAAsE,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,KAIjC;IACC,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,GAAG,KAAK,CAAC,KAAK,qCAAqC,CACpD,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7C,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,GAAG,KAAK,CAAC,KAAK,qCAAqC,CACpD,CAAC;IACJ,CAAC;IACD,OAAO,uBAAuB,CAAC;QAC7B,KAAK,EAAE,OAAO;QACd,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,KAIhC;IACC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QAChD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,GAAG,KAAK,CAAC,KAAK,yBAAyB,KAAK,CAAC,cAAc,QAAQ,CACpE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAKnC;IAIC,MAAM,CAAC,qBAAqB,EAAE,2BAA2B,CAAC,GACxD,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,aAAa,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACrC,aAAa,CAAC,KAAK,CAAC,sBAAsB,CAAC;KAC5C,CAAC,CAAC;IAEL,IACE,KAAK,CAAC,qBAAqB,KAAK,SAAS;QACzC,KAAK,CAAC,qBAAqB,KAAK,IAAI;QACpC,KAAK,CAAC,qBAAqB,KAAK,qBAAqB,EACrD,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,2BAA2B,KAAK,SAAS;QAC/C,KAAK,CAAC,2BAA2B,KAAK,IAAI;QAC1C,KAAK,CAAC,2BAA2B,KAAK,2BAA2B,EACjE,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,+EAA+E,CAChF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAG9C;IAGC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;QAC/C,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,gBAAgB;QACvC,cAAc,EAAE,yBAAyB;QACzC,KAAK,EAAE,oBAAoB;KAC5B,CAAC,CAAC;IACH,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;QACrD,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,sBAAsB;QAC7C,cAAc,EAAE,2BAA2B;QAC3C,KAAK,EAAE,0BAA0B;KAClC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC;QAC9C,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;QAC9D,sBAAsB;QACtB,qBAAqB,EAAE,KAAK,CAAC,SAAS,CAAC,qBAAqB;QAC5D,gBAAgB;KACjB,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,YAAY;QACf,sBAAsB;QACtB,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAI/C;IACC,+BAA+B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO;QACL,GAAG,CAAC,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAC1C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAIhD;IACC,+BAA+B,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,eAAe,EAAE,CAAC;QACrD,MAAM,IAAI,uBAAuB,CAC/B,iBAAiB,EACjB,kEAAkE,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;QAChD,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,gBAAgB;QACzC,cAAc,EAAE,yBAAyB;QACzC,KAAK,EAAE,oBAAoB;KAC5B,CAAC,CAAC;IACH,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;QACtD,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,sBAAsB;QAC/C,cAAc,EAAE,2BAA2B;QAC3C,KAAK,EAAE,0BAA0B;KAClC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC;QAC1C,SAAS,EAAE;YACT,sBAAsB;YACtB,qBAAqB,EAAE,KAAK,CAAC,SAAS,CAAC,qBAAqB;YAC5D,gBAAgB;SACjB;QACD,2BAA2B,EAAE,KAAK,CAAC,SAAS,CAAC,2BAA2B;KACzE,CAAC,CAAC;IACH,OAAO;QACL,GAAG,IAAI;QACP,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,MAAM,EAAE,KAAK,CAAC,eAAe;KAC9B,CAAC;AACJ,CAAC","sourcesContent":["import {\n  KeyingVerificationError,\n  ML_DSA87_PUBLIC_KEY_BYTES,\n  ML_KEM1024_PUBLIC_KEY_BYTES,\n  toFingerprint,\n} from \"@tearleads/crypto\";\nimport { base64ToBytes, bytesToBase64 } from \"@tearleads/encoding\";\nimport { isUuidV4String } from \"@tearleads/validators/util\";\nimport type {\n  LocalUserIdentityCandidate,\n  RemoteUserIdentityCandidate,\n  ValidatedUserIdentityCandidate,\n} from \"./types\";\n\nexport function assertTrustedUserIdentityUserId(userId: string): void {\n  if (!isUuidV4String(userId) || userId !== userId.toLowerCase()) {\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      \"Trusted user identity requires a canonical lowercase UUID v4 user id\",\n    );\n  }\n}\n\nfunction decodeCanonicalPublicKey(input: {\n  readonly encoded: string;\n  readonly expectedLength: number;\n  readonly label: string;\n}): Uint8Array {\n  let decoded: Uint8Array;\n  try {\n    decoded = base64ToBytes(input.encoded);\n  } catch {\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      `${input.label} must use canonical base64 encoding`,\n    );\n  }\n\n  if (bytesToBase64(decoded) !== input.encoded) {\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      `${input.label} must use canonical base64 encoding`,\n    );\n  }\n  return validatePublicKeyLength({\n    bytes: decoded,\n    expectedLength: input.expectedLength,\n    label: input.label,\n  });\n}\n\nfunction validatePublicKeyLength(input: {\n  readonly bytes: Uint8Array;\n  readonly expectedLength: number;\n  readonly label: string;\n}): Uint8Array {\n  if (input.bytes.length !== input.expectedLength) {\n    throw new KeyingVerificationError(\n      \"invalid_shape\",\n      `${input.label} must contain exactly ${input.expectedLength} bytes`,\n    );\n  }\n  return new Uint8Array(input.bytes);\n}\n\nasync function validateFingerprints(input: {\n  readonly encapsulationKeyFingerprint?: string | null | undefined;\n  readonly encapsulationPublicKey: Uint8Array;\n  readonly signingKeyFingerprint?: string | null | undefined;\n  readonly signingPublicKey: Uint8Array;\n}): Promise<{\n  readonly encapsulationKeyFingerprint: string;\n  readonly signingKeyFingerprint: string;\n}> {\n  const [signingKeyFingerprint, encapsulationKeyFingerprint] =\n    await Promise.all([\n      toFingerprint(input.signingPublicKey),\n      toFingerprint(input.encapsulationPublicKey),\n    ]);\n\n  if (\n    input.signingKeyFingerprint !== undefined &&\n    input.signingKeyFingerprint !== null &&\n    input.signingKeyFingerprint !== signingKeyFingerprint\n  ) {\n    throw new KeyingVerificationError(\n      \"hash_mismatch\",\n      \"Trusted user identity signing fingerprint does not match its public key\",\n    );\n  }\n  if (\n    input.encapsulationKeyFingerprint !== undefined &&\n    input.encapsulationKeyFingerprint !== null &&\n    input.encapsulationKeyFingerprint !== encapsulationKeyFingerprint\n  ) {\n    throw new KeyingVerificationError(\n      \"hash_mismatch\",\n      \"Trusted user identity encapsulation fingerprint does not match its public key\",\n    );\n  }\n\n  return { encapsulationKeyFingerprint, signingKeyFingerprint };\n}\n\nexport async function validateUserIdentityKeys(input: {\n  readonly candidate: LocalUserIdentityCandidate;\n  readonly encapsulationKeyFingerprint?: string | null | undefined;\n}): Promise<\n  Omit<ValidatedUserIdentityCandidate, \"identityTrustDomain\" | \"userId\">\n> {\n  const signingPublicKey = validatePublicKeyLength({\n    bytes: input.candidate.signingPublicKey,\n    expectedLength: ML_DSA87_PUBLIC_KEY_BYTES,\n    label: \"Signing public key\",\n  });\n  const encapsulationPublicKey = validatePublicKeyLength({\n    bytes: input.candidate.encapsulationPublicKey,\n    expectedLength: ML_KEM1024_PUBLIC_KEY_BYTES,\n    label: \"Encapsulation public key\",\n  });\n  const fingerprints = await validateFingerprints({\n    encapsulationKeyFingerprint: input.encapsulationKeyFingerprint,\n    encapsulationPublicKey,\n    signingKeyFingerprint: input.candidate.signingKeyFingerprint,\n    signingPublicKey,\n  });\n\n  return {\n    ...fingerprints,\n    encapsulationPublicKey,\n    signingPublicKey,\n  };\n}\n\nexport async function validateLocalUserIdentity(input: {\n  readonly candidate: LocalUserIdentityCandidate;\n  readonly identityTrustDomain: string;\n  readonly userId: string;\n}): Promise<ValidatedUserIdentityCandidate> {\n  assertTrustedUserIdentityUserId(input.userId);\n  return {\n    ...(await validateUserIdentityKeys(input)),\n    identityTrustDomain: input.identityTrustDomain,\n    userId: input.userId,\n  };\n}\n\nexport async function validateRemoteUserIdentity(input: {\n  readonly candidate: RemoteUserIdentityCandidate;\n  readonly identityTrustDomain: string;\n  readonly requestedUserId: string;\n}): Promise<ValidatedUserIdentityCandidate> {\n  assertTrustedUserIdentityUserId(input.requestedUserId);\n  if (input.candidate.userId !== input.requestedUserId) {\n    throw new KeyingVerificationError(\n      \"object_mismatch\",\n      \"Trusted user identity response does not match the requested user\",\n    );\n  }\n\n  const signingPublicKey = decodeCanonicalPublicKey({\n    encoded: input.candidate.signingPublicKey,\n    expectedLength: ML_DSA87_PUBLIC_KEY_BYTES,\n    label: \"Signing public key\",\n  });\n  const encapsulationPublicKey = decodeCanonicalPublicKey({\n    encoded: input.candidate.encapsulationPublicKey,\n    expectedLength: ML_KEM1024_PUBLIC_KEY_BYTES,\n    label: \"Encapsulation public key\",\n  });\n\n  const keys = await validateUserIdentityKeys({\n    candidate: {\n      encapsulationPublicKey,\n      signingKeyFingerprint: input.candidate.signingKeyFingerprint,\n      signingPublicKey,\n    },\n    encapsulationKeyFingerprint: input.candidate.encapsulationKeyFingerprint,\n  });\n  return {\n    ...keys,\n    identityTrustDomain: input.identityTrustDomain,\n    userId: input.requestedUserId,\n  };\n}\n"]}

package/documents.d.ts

@@ -0,0 +1,7 @@
+export * from "./data/blobContracts.js";
+export * from "./data/documents/documentConstants.js";
+export * from "./data/documents/documentContent.js";
+export { createDocumentProjectorRegistry, type DocumentClientProjectionDefinition, type DocumentClientProjectionDeleteInput, type DocumentClientProjectionSaveInput, type DocumentFieldValidationIssue, type DocumentProjection, type DocumentProjectorDefinition, type DocumentProjectorInput, type DocumentProjectorRegistry, type DocumentProjectorRegistryInput, defaultDocumentProjectorRegistry, deriveStoredDocumentTitle, getDocumentClientProjectionTables, getStoredDocumentTypeLabel, getUntitledDocumentTitle, initializeStoredDocumentKind, projectStoredDocumentState, readStoredDocumentState, readStringDocumentField, type StoredDocumentKind, type StoredDocumentState, type StructuredDocumentMap, type StructuredDocumentShape, type StructuredDocumentText, type ValidatedDocumentFields, writeStoredDocumentFields, } from "./data/documents/documentKinds.js";
+export type { DocumentRow, DocumentRowSummary, } from "./data/documents/documentRowList.js";
+export * from "./data/documents/documentSummary.js";
+export { resolveOpIdAttribution, summarizeDocumentContributors, writerByPeerId, } from "./data/documents/editAttribution.js";

package/documents.js

@@ -0,0 +1,7 @@
+export * from "./data/blobContracts.js";
+export * from "./data/documents/documentConstants.js";
+export * from "./data/documents/documentContent.js";
+export { createDocumentProjectorRegistry, defaultDocumentProjectorRegistry, deriveStoredDocumentTitle, getDocumentClientProjectionTables, getStoredDocumentTypeLabel, getUntitledDocumentTitle, initializeStoredDocumentKind, projectStoredDocumentState, readStoredDocumentState, readStringDocumentField, writeStoredDocumentFields, } from "./data/documents/documentKinds.js";
+export * from "./data/documents/documentSummary.js";
+export { resolveOpIdAttribution, summarizeDocumentContributors, writerByPeerId, } from "./data/documents/editAttribution.js";
+//# sourceMappingURL=documents.js.map

package/documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"documents.js","sourceRoot":"","sources":["documents.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,oCAAoC,CAAC;AACnD,cAAc,kCAAkC,CAAC;AACjD,OAAO,EACL,+BAA+B,EAU/B,gCAAgC,EAChC,yBAAyB,EACzB,iCAAiC,EACjC,0BAA0B,EAC1B,wBAAwB,EACxB,4BAA4B,EAC5B,0BAA0B,EAC1B,uBAAuB,EACvB,uBAAuB,EAOvB,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AAKxC,cAAc,kCAAkC,CAAC;AACjD,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,cAAc,GACf,MAAM,kCAAkC,CAAC","sourcesContent":["export * from \"./data/blobContracts\";\nexport * from \"./data/documents/documentConstants\";\nexport * from \"./data/documents/documentContent\";\nexport {\n  createDocumentProjectorRegistry,\n  type DocumentClientProjectionDefinition,\n  type DocumentClientProjectionDeleteInput,\n  type DocumentClientProjectionSaveInput,\n  type DocumentFieldValidationIssue,\n  type DocumentProjection,\n  type DocumentProjectorDefinition,\n  type DocumentProjectorInput,\n  type DocumentProjectorRegistry,\n  type DocumentProjectorRegistryInput,\n  defaultDocumentProjectorRegistry,\n  deriveStoredDocumentTitle,\n  getDocumentClientProjectionTables,\n  getStoredDocumentTypeLabel,\n  getUntitledDocumentTitle,\n  initializeStoredDocumentKind,\n  projectStoredDocumentState,\n  readStoredDocumentState,\n  readStringDocumentField,\n  type StoredDocumentKind,\n  type StoredDocumentState,\n  type StructuredDocumentMap,\n  type StructuredDocumentShape,\n  type StructuredDocumentText,\n  type ValidatedDocumentFields,\n  writeStoredDocumentFields,\n} from \"./data/documents/documentKinds\";\nexport type {\n  DocumentRow,\n  DocumentRowSummary,\n} from \"./data/documents/documentRowList\";\nexport * from \"./data/documents/documentSummary\";\nexport {\n  resolveOpIdAttribution,\n  summarizeDocumentContributors,\n  writerByPeerId,\n} from \"./data/documents/editAttribution\";\n"]}

package/index.d.ts

@@ -0,0 +1,26 @@
+export type { AddOrganizationGroupUserInput, BlobInfo, BlobInfoAttachmentKind, BlobInfoDocumentReference, BlobInfoInput, BlobInfoList, BlobInfoSort, BlobInfoSortDirection, BlobInfoSortKey, BrowserLocalKeyringOptions, ClientDatabaseOptions, ContainerContents, ContainerContentsContextValue, ContainerContentsStore, ContainerContentsStoreOptions, ContainerDocumentLinkInput, ContainerDocumentLinks, ContainerDocumentObjectSyncState, ContainerDocumentObjectSyncStatus, ContainerDocumentQueries, ContainerDocumentSidebarRow, ContainerInfo, ContainerInfoInput, ContainerItemRow, ContainerItemSort, ContainerItemSortDirection, ContainerItemSortKey, ContainerNode, ContainerShareAccessLevel, CreateOrganizationOptions, DatabaseListener, DatabaseOptions, DatabaseSnapshot, DatabaseStatus, DeviceFirst, DeviceFirstContainerContents, DocumentAttachmentStatus, DocumentAttachmentUpload, DocumentAttributionRangesInput, DocumentAttributionRangesPage, DocumentContextValue, DocumentInfo, DocumentInfoInput, DocumentList, DocumentSort, DocumentSortDirection, DocumentSortKey, DocumentStore, DocumentSubscriptionOptions, Documents, DocumentsRuntime, DomainScope, FileSaver, Identity, IdentityGenerationResult, IdentityKeyPackage, IdentityListener, IdentityOptions, IdentitySnapshot, ImportedOrganizationUser, IndexedDbLocalKeyringManifestStoreOptions, IndexedDbWrappingKeyKeystoreOptions, LinkDocumentToContainerInput, ListDocumentsInput, LocalKeyPurpose, LocalKeyring, LocalKeyringManifest, LocalKeyringManifestFormat, LocalKeyringManifestStorage, LocalKeyringManifestStore, LocalKeyringOptions, LocalKeyringPinCode, LocalKeyringScope, LocalKeyringSession, LocalOrganizationSummary, LocalProjectionReconciledDelta, LocalProjectionSnapshot, LocalProjectionView, LocalSecretContext, LocalStorageLocalKeyringManifestStoreOptions, Logger, MergeDocumentSummary, MoveDocumentToContainerInput, NetworkListener, NetworkMode, NetworkStatusSource, NormalizedLocalKeyringScope, OpenContainerDocumentInput, OpenDocumentInput, OpenDocumentOptions, OrganizationBilling, OrganizationBillingHistory, OrganizationBillingHistoryEntry, OrganizationBillingManagementUrl, OrganizationBillingView, OrganizationContainerGrant, OrganizationContainerGrants, OrganizationDataUsage, OrganizationDirectory, OrganizationDirectoryAndGroups, OrganizationDirectoryUser, OrganizationGrantRef, OrganizationGroupContainer, OrganizationGroupContainers, OrganizationGroupDetails, OrganizationGroupMember, OrganizationGroupMembers, OrganizationGroupPolicyHistory, OrganizationGroupSummary, OrganizationPolicyGrantChange, OrganizationPolicyGroupChange, OrganizationPolicyHistory, OrganizationPolicyHistoryEntry, OrganizationProfile, Organizations, OrganizationUserDetail, PendingWriteQueueItem, PendingWriteQueueItemStatus, PendingWriteQueueObjectKind, PendingWriteQueueOperation, PendingWriteQueueOperationKind, PendingWriteQueueOperationStatus, PersistedDocumentListener, PinCodeBrowserLocalKeyringOptions, PinCodeWrappingKeyKeystoreOptions, PurgeDocumentInput, PurgeDocumentResult, ReconciliationService, RemoveOrganizationGroupUserInput, ResolvedUserIdentity, SaveFileRequest, SecurityIncident, SecurityIncidentListener, SecurityIncidentObjectKind, SecurityIncidents, Session, SessionContext, SessionCreateOrganizationResult, SessionListener, SessionRecoverOrganizationResult, SessionRegistrationRefusal, SessionRegistrationResult, SessionSnapshot, SetActiveDocumentContainerInput, SetLinkedContainerIdsForDocument, UnlinkDocumentFromContainerInput, UnwrapLocalSecretInput, UserIdentities, UserSession, WrapLocalSecretInput, WrappedLocalSecretEnvelope, WrappedLocalSecretFormat, WrappingKeyHandle, WrappingKeyKeystore, WrappingKeyMaterialStorage, } from "./client/index.js";
+export { type BlobStoreFactory, Blobs, type ClientOptions, createBrowserLocalKeyring, createBrowserLocalKeyringManifestStore, createBrowserNetworkStatusSource, createContainerDocumentObjectSyncState, createDomainScope, createIndexedDbLocalKeyringManifestStore, createIndexedDbWrappingKeyKeystore, createLocalKeyring, createLocalStorageLocalKeyringManifestStore, createMemoryLocalKeyringManifestStore, createMemoryWrappingKeyKeystore, createPinCodeBrowserLocalKeyring, createPinCodeWrappingKeyKeystore, createRevenueCatPurchases, createUnavailableDirectCheckout, createUnavailablePurchases, createWebViewLocalKeyring, Database, DEFAULT_DOCUMENT_ID, type DirectCheckoutAppearance, type DirectCheckoutCapability, type DirectCheckoutConfirmation, type DirectCheckoutSession, DirectCheckoutUnavailableError, decodeLocalKeyringSqliteKey, Events, type EventsListener, type EventsSnapshot, encodeLocalKeyringSqliteKey, enqueueReconciliationForEvents, IDENTITY_KEY_PACKAGE_FORMAT, isPinCodeWrappedLocalSecretEnvelope, LOCAL_KEYRING_MANIFEST_FORMAT, localKeyringScopeKey, Network, normalizeLocalKeyringScope, type PrincipalHistoryKeyProvider, type PrincipalHistoryKeyScope, PurchaseAbortedError, PurchaseAlreadyOwnedError, PurchaseCancelledError, PurchaseIdentityPendingError, PurchaseProviderStalledError, type PurchasesCapability, PurchasesUnavailableError, PurgedOrganizationRecoveryBillingRequiredError, parseLocalKeyringManifest, type RevenueCatBackend, type RevenueCatCustomerInfo, type RevenueCatPackage, type RevenueCatPurchasesConfig, SyncBillingGate, type SyncBillingGateListener, type SyncPurchaseResult, type SyncSubscriptionOption, serializeLocalKeyringManifest, Tearleads, WRAPPED_LOCAL_SECRET_FORMAT, } from "./client/index.js";
+export type { BlobByteSource, BlobByteSourceInput, BlobBytes, BlobStore, DiscoveredDocumentInput, DocumentAttachment, DocumentClientProjectionDefinition, DocumentClientProjectionDeleteInput, DocumentClientProjectionSaveInput, DocumentFieldValidationIssue, DocumentProjection, DocumentProjectorDefinition, DocumentProjectorInput, DocumentProjectorRegistry, DocumentProjectorRegistryInput, DocumentRow, DocumentRowSummary, DocumentSummary, StoredDocumentKind, StoredDocumentState, StructuredDocumentMap, StructuredDocumentShape, StructuredDocumentText, ValidatedDocumentFields, } from "./documents.js";
+export { addDocumentAttachments, blobByteSourceInputLength, createBlobByteSource, createDocumentProjectorRegistry, createDocumentSignerDeviceId, DEFAULT_DOCUMENT_ACCESS_EPOCH, DEFAULT_DOCUMENT_KIND, defaultDocumentProjectorRegistry, deriveStoredDocumentTitle, ensureDocumentAttachmentStructure, getDocumentAttachments, getDocumentClientProjectionTables, getStoredDocumentTypeLabel, getUntitledDocumentTitle, initializeStoredDocumentKind, projectStoredDocumentState, readBlobByteSource, readStoredDocumentState, readStringDocumentField, resolveOpIdAttribution, sameDocumentAttachments, summarizeDocumentContributors, writerByPeerId, writeStoredDocumentFields, } from "./documents.js";
+export type { ContainerContentsSnapshot, ContainerContentsStoreRuntime, ContainerContentsStoreState, ContainerContentsStoreSyncAgent, ContainerContentsStoreSyncState, ContainerState, PurgeOptions, PurgeProgress, } from "./stores/container-contents/index.js";
+export { createContainerContentsStore, createContainerContentsStoreState, createContainerContentsStoreSyncAgent, getOrCreateContainerContentsStore, isSystemContainerNode, requestContainerContentsDocumentPriming, subscribeToContainerContentsStore, updateContainerContentsSnapshot, updateContainerContentsStoreRuntime, } from "./stores/container-contents/index.js";
+export type { DocumentSnapshot, DocumentStoreFacade, DocumentStoreRelinkInput, DocumentStructuredFieldPatch, } from "./stores/documents/index.js";
+export { createDocumentStore, discardRegisteredDocumentLocalState, getOrCreateDocumentStore, openDocumentStore, requestDomainDocumentSync, subscribeToPersistedDocuments, } from "./stores/documents/index.js";
+export type { EncryptedBlobStoreCipher, EncryptedBlobStoreKey, EncryptedBlobStoreOptions, WrapEncryptedBlobStoreOptions, } from "./workflows/blobs/index.js";
+export { createBlobStore, createEncryptedBlobStore, createLazyEncryptedBlobStore, createMemoryBlobStore, decryptDocumentAttachmentBlob, hydrateDocumentAttachmentBlobs, purgeOpfsBlobStore, uploadDocumentAttachment, wrapEncryptedBlobStore, } from "./workflows/blobs/index.js";
+export type { ContainerContentsRootAdopter, ContainerContentsRootAdoptionInput, ContainerContentsStoreWorkflowRuntime, ContainerContentsWorkflowRuntime, ContainerDocumentLinkInput as ContainerDocumentQueriesLinkInput, ContainerSystemSlotDefinition, RecoveryFolder, } from "./workflows/container-contents/index.js";
+export { createContainerContentsDocumentsRuntime, createContainerContentsProjectionUserKeyResolver, createContainerContentsStoreWorkflowRuntime, createContainerContentsSyncLane, createContainerContentsWorkflowRuntime, createContainerParentSyncLane, createInitializedContainerMetadataDocument, defaultContainerContentsPersistence, deriveContainerSystemSlot, initializeDocumentLinksSchema, listBlobInfo, listDocumentLinkedContainerIds, loadContainerInfo, loadContainerSyncWatermark, loadDocumentAttributionRanges, loadDocumentInfo, replaceDocumentLinks, saveContainerSyncWatermark, syncedContainerDocumentObjectSyncState, } from "./workflows/container-contents/index.js";
+export type { AggregatedContainerKekLog, ContainerMutationAuthor, ContainerReciteApi, ContainerWriteRefusal, KeyringRebuildResult, MaterializedContainerRekeyPlan, } from "./workflows/containers/index.js";
+export { buildMaterializedContainerRekeyPlan, buildRootContainerCreatePlan, ContainerAuthorAccessError, ContainerKekRepairInaccessibleError, ContainerKekRepairRequiredError, ContainerKeyringOverrideStaleError, ContainerPathTooDeepError, classifyContainerWriteRefusal, containerWriterProjectionFromRekeyPlan, createRemoteContainer, fetchContainerKekLog, GroupShareNameMismatchError, HistoricalWrapUnavailableError, type HistoricalWrapUnavailableReason, isProjectionVerificationCancelledError, moveRemoteContainer, rebuildKeyringEntriesFromLog, recoverKeyringEntryFromWraps, rekeyRemoteContainer, revokeRemoteContainer, rootContainerWriterProjectionFromCreatePlan, shareRemoteContainer, shareRemoteContainerWithGroup, } from "./workflows/containers/index.js";
+export type { DocumentRecord, DocumentSyncContainerRekeyBuilder, DocumentSyncPullContinuation, DocumentSyncUpdateIsolationError, DocumentsPersistence, DocumentsWorkflowRuntime, DocumentsWorkflowRuntimeInput, IncomingDocumentSyncUpdateValidator, LocalAttachmentRecord, PendingAttachmentRecord, PendingUpdateInsert, PendingUpdateRecord, SyncRemoteDocumentInput, } from "./workflows/documents/index.js";
+export { buildMaterializedDocumentCreatePlan, createDocumentProjectionUserKeyResolver, createDocumentsWorkflowRuntime, createRemoteDocument, DOCUMENT_SYNC_TRACE_FRAGMENT, DOCUMENT_SYNC_TRACE_PATTERN, DOCUMENTS_APP_KIND, DocumentRawHistoryUnavailableError, defaultDocumentsPersistence, deletePersistedDocument, isDatabaseUnavailableError, isDocumentSyncUpdateIsolationError, persistedDocumentCreateStateFromResponse, readPullContinuation, syncRemoteDocument, unwrapContainerKekPath, unwrapDocumentContentKeyTarget, validateDocumentSyncUpdateImports, } from "./workflows/documents/index.js";
+export type { OrganizationGroupPolicyHistoryEntry, OrganizationNativePurchaseEligibility, OrganizationPrincipalMemberChange, OrganizationPrincipalMemberChangeType, OrganizationPrincipalPolicyHistory, OrganizationPrincipalPolicyHistoryEntry, ReconcileOrganizationDataUsageInput, } from "./workflows/organizations/index.js";
+export { addOrganizationGroupUser, buildInitialGroupPolicyRequest, buildInitialMemberGroupPolicyRequest, buildOrganizationGroupPolicyHistory, buildOrganizationProfileDocumentPatch, buildRosterProfileDocumentPatch, checkNativePurchaseEligibility, createInitializedRosterProfileDocument, createOrganizationGroup, DEFAULT_PERSONAL_ORGANIZATION_PROFILE_NAME, deriveOrganizationMetadataContainerSystemSlot, deriveOrganizationRosterProfileContainerSystemSlot, GroupMembershipNameMismatchError, getOrganizationProfileDocumentLocalId, getRosterProfileDocumentLocalId, importOrganizationUser, loadLocalOrganizationDataUsage, loadLocalOrganizationDirectoryAndGroups, loadOrganizationBilling, loadOrganizationBillingHistory, loadOrganizationBillingManagementUrl, ORGANIZATION_METADATA_CONTAINER_NAME, ORGANIZATION_PROFILE_DOCUMENT_KIND, ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME, ROSTER_PROFILE_DOCUMENT_KIND, readOrganizationProfileName, reconcileOrganizationDataUsage, reconcileOrganizationDirectoryAndGroups, removeOrganizationGroupUser, resolveOrganizationBillingView, revokeOrganizationContainerGrant, startOrganizationTrial, subscribeOrganizationReadModelInvalidation, updateOrganizationProfile, updateOrganizationRosterEntry, } from "./workflows/organizations/index.js";
+export type { CacheReferencedPrincipalPoliciesOptions, RecoveredPrincipalPolicyHistory, RecoveredScopedPrincipalPolicyHistory, RecoverPrincipalPolicyHistoryOptions, RecoverScopedPrincipalPolicyHistoryOptions, } from "./workflows/principals/index.js";
+export { cacheReferencedPrincipalPolicies, PrincipalPolicyHistoryReadError, recoverPrincipalPolicyHistory, recoverScopedPrincipalPolicyHistory, } from "./workflows/principals/index.js";
+export type { InitialRootMetadataBootstrap, ProvisionedSystemContainerSpec, RegisterIdentityInput, RegistrationApi, } from "./workflows/registration/index.js";
+export { bootstrapRootContainer, buildInitialOrganizationPolicyRequest, createInitialRootMetadataBootstrap, persistRegistrationBootstrap, registerIdentity, } from "./workflows/registration/index.js";
+export type { RootIdentitiesApi, RootIdentitiesPage, RootIdentitiesQueryInput, RootIdentity, RootIdentityDetail, RootIdentityOrganization, RootIdentitySession, RootRequestOutcome, } from "./workflows/root/index.js";
+export { listRootDataUsageReport, listRootIdentities, listRootIdentityOrganizations, listRootOrganizationIdentities, listRootOrganizations, loadRootIdentity, loadRootOrganization, loadRootOrganizationDataUsage, type RootDataUsageApi, type RootDataUsageReportPage, type RootOrganization, type RootOrganizationDetail, type RootOrganizationIdentitiesPage, type RootOrganizationIdentity, type RootOrganizationPageQueryInput, type RootOrganizationsApi, type RootOrganizationsPage, type RootOrganizationsQueryInput, } from "./workflows/root/index.js";
+export type { ClearRemoteSyncStateResult, DomainSyncCoordinator, DomainSyncSnapshot, RemoteResetInput, RemoteResetReplacement, SyncIdleOptions, SyncLane, SyncLaneConfig, SyncLaneLastAction, SyncLanePhase, SyncLaneSnapshot, SyncLaneStatus, } from "./workflows/sync/index.js";
+export { clearRemoteSyncState, getDomainSyncCoordinatorSnapshot, getOrCreateDomainSyncCoordinator, hasDomainSyncCoordinatorPendingWork, requestAllDomainSyncLanes, subscribeToDomainSyncCoordinator, waitForDomainSyncCoordinatorToSettle, } from "./workflows/sync/index.js";

package/index.js

@@ -0,0 +1,14 @@
+export { Blobs, createBrowserLocalKeyring, createBrowserLocalKeyringManifestStore, createBrowserNetworkStatusSource, createContainerDocumentObjectSyncState, createDomainScope, createIndexedDbLocalKeyringManifestStore, createIndexedDbWrappingKeyKeystore, createLocalKeyring, createLocalStorageLocalKeyringManifestStore, createMemoryLocalKeyringManifestStore, createMemoryWrappingKeyKeystore, createPinCodeBrowserLocalKeyring, createPinCodeWrappingKeyKeystore, createRevenueCatPurchases, createUnavailableDirectCheckout, createUnavailablePurchases, createWebViewLocalKeyring, Database, DEFAULT_DOCUMENT_ID, DirectCheckoutUnavailableError, decodeLocalKeyringSqliteKey, Events, encodeLocalKeyringSqliteKey, enqueueReconciliationForEvents, IDENTITY_KEY_PACKAGE_FORMAT, isPinCodeWrappedLocalSecretEnvelope, LOCAL_KEYRING_MANIFEST_FORMAT, localKeyringScopeKey, Network, normalizeLocalKeyringScope, PurchaseAbortedError, PurchaseAlreadyOwnedError, PurchaseCancelledError, PurchaseIdentityPendingError, PurchaseProviderStalledError, PurchasesUnavailableError, PurgedOrganizationRecoveryBillingRequiredError, parseLocalKeyringManifest, SyncBillingGate, serializeLocalKeyringManifest, Tearleads, WRAPPED_LOCAL_SECRET_FORMAT, } from "./client/index.js";
+export { addDocumentAttachments, blobByteSourceInputLength, createBlobByteSource, createDocumentProjectorRegistry, createDocumentSignerDeviceId, DEFAULT_DOCUMENT_ACCESS_EPOCH, DEFAULT_DOCUMENT_KIND, defaultDocumentProjectorRegistry, deriveStoredDocumentTitle, ensureDocumentAttachmentStructure, getDocumentAttachments, getDocumentClientProjectionTables, getStoredDocumentTypeLabel, getUntitledDocumentTitle, initializeStoredDocumentKind, projectStoredDocumentState, readBlobByteSource, readStoredDocumentState, readStringDocumentField, resolveOpIdAttribution, sameDocumentAttachments, summarizeDocumentContributors, writerByPeerId, writeStoredDocumentFields, } from "./documents.js";
+export { createContainerContentsStore, createContainerContentsStoreState, createContainerContentsStoreSyncAgent, getOrCreateContainerContentsStore, isSystemContainerNode, requestContainerContentsDocumentPriming, subscribeToContainerContentsStore, updateContainerContentsSnapshot, updateContainerContentsStoreRuntime, } from "./stores/container-contents/index.js";
+export { createDocumentStore, discardRegisteredDocumentLocalState, getOrCreateDocumentStore, openDocumentStore, requestDomainDocumentSync, subscribeToPersistedDocuments, } from "./stores/documents/index.js";
+export { createBlobStore, createEncryptedBlobStore, createLazyEncryptedBlobStore, createMemoryBlobStore, decryptDocumentAttachmentBlob, hydrateDocumentAttachmentBlobs, purgeOpfsBlobStore, uploadDocumentAttachment, wrapEncryptedBlobStore, } from "./workflows/blobs/index.js";
+export { createContainerContentsDocumentsRuntime, createContainerContentsProjectionUserKeyResolver, createContainerContentsStoreWorkflowRuntime, createContainerContentsSyncLane, createContainerContentsWorkflowRuntime, createContainerParentSyncLane, createInitializedContainerMetadataDocument, defaultContainerContentsPersistence, deriveContainerSystemSlot, initializeDocumentLinksSchema, listBlobInfo, listDocumentLinkedContainerIds, loadContainerInfo, loadContainerSyncWatermark, loadDocumentAttributionRanges, loadDocumentInfo, replaceDocumentLinks, saveContainerSyncWatermark, syncedContainerDocumentObjectSyncState, } from "./workflows/container-contents/index.js";
+export { buildMaterializedContainerRekeyPlan, buildRootContainerCreatePlan, ContainerAuthorAccessError, ContainerKekRepairInaccessibleError, ContainerKekRepairRequiredError, ContainerKeyringOverrideStaleError, ContainerPathTooDeepError, classifyContainerWriteRefusal, containerWriterProjectionFromRekeyPlan, createRemoteContainer, fetchContainerKekLog, GroupShareNameMismatchError, HistoricalWrapUnavailableError, isProjectionVerificationCancelledError, moveRemoteContainer, rebuildKeyringEntriesFromLog, recoverKeyringEntryFromWraps, rekeyRemoteContainer, revokeRemoteContainer, rootContainerWriterProjectionFromCreatePlan, shareRemoteContainer, shareRemoteContainerWithGroup, } from "./workflows/containers/index.js";
+export { buildMaterializedDocumentCreatePlan, createDocumentProjectionUserKeyResolver, createDocumentsWorkflowRuntime, createRemoteDocument, DOCUMENT_SYNC_TRACE_FRAGMENT, DOCUMENT_SYNC_TRACE_PATTERN, DOCUMENTS_APP_KIND, DocumentRawHistoryUnavailableError, defaultDocumentsPersistence, deletePersistedDocument, isDatabaseUnavailableError, isDocumentSyncUpdateIsolationError, persistedDocumentCreateStateFromResponse, readPullContinuation, syncRemoteDocument, unwrapContainerKekPath, unwrapDocumentContentKeyTarget, validateDocumentSyncUpdateImports, } from "./workflows/documents/index.js";
+export { addOrganizationGroupUser, buildInitialGroupPolicyRequest, buildInitialMemberGroupPolicyRequest, buildOrganizationGroupPolicyHistory, buildOrganizationProfileDocumentPatch, buildRosterProfileDocumentPatch, checkNativePurchaseEligibility, createInitializedRosterProfileDocument, createOrganizationGroup, DEFAULT_PERSONAL_ORGANIZATION_PROFILE_NAME, deriveOrganizationMetadataContainerSystemSlot, deriveOrganizationRosterProfileContainerSystemSlot, GroupMembershipNameMismatchError, getOrganizationProfileDocumentLocalId, getRosterProfileDocumentLocalId, importOrganizationUser, loadLocalOrganizationDataUsage, loadLocalOrganizationDirectoryAndGroups, loadOrganizationBilling, loadOrganizationBillingHistory, loadOrganizationBillingManagementUrl, ORGANIZATION_METADATA_CONTAINER_NAME, ORGANIZATION_PROFILE_DOCUMENT_KIND, ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME, ROSTER_PROFILE_DOCUMENT_KIND, readOrganizationProfileName, reconcileOrganizationDataUsage, reconcileOrganizationDirectoryAndGroups, removeOrganizationGroupUser, resolveOrganizationBillingView, revokeOrganizationContainerGrant, startOrganizationTrial, subscribeOrganizationReadModelInvalidation, updateOrganizationProfile, updateOrganizationRosterEntry, } from "./workflows/organizations/index.js";
+export { cacheReferencedPrincipalPolicies, PrincipalPolicyHistoryReadError, recoverPrincipalPolicyHistory, recoverScopedPrincipalPolicyHistory, } from "./workflows/principals/index.js";
+export { bootstrapRootContainer, buildInitialOrganizationPolicyRequest, createInitialRootMetadataBootstrap, persistRegistrationBootstrap, registerIdentity, } from "./workflows/registration/index.js";
+export { listRootDataUsageReport, listRootIdentities, listRootIdentityOrganizations, listRootOrganizationIdentities, listRootOrganizations, loadRootIdentity, loadRootOrganization, loadRootOrganizationDataUsage, } from "./workflows/root/index.js";
+export { clearRemoteSyncState, getDomainSyncCoordinatorSnapshot, getOrCreateDomainSyncCoordinator, hasDomainSyncCoordinatorPendingWork, requestAllDomainSyncLanes, subscribeToDomainSyncCoordinator, waitForDomainSyncCoordinatorToSettle, } from "./workflows/sync/index.js";
+//# sourceMappingURL=index.js.map

package/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAiKA,OAAO,EAEL,KAAK,EAEL,yBAAyB,EACzB,sCAAsC,EACtC,gCAAgC,EAChC,sCAAsC,EACtC,iBAAiB,EACjB,wCAAwC,EACxC,kCAAkC,EAClC,kBAAkB,EAClB,2CAA2C,EAC3C,qCAAqC,EACrC,+BAA+B,EAC/B,gCAAgC,EAChC,gCAAgC,EAChC,yBAAyB,EACzB,+BAA+B,EAC/B,0BAA0B,EAC1B,yBAAyB,EACzB,QAAQ,EACR,mBAAmB,EAKnB,8BAA8B,EAC9B,2BAA2B,EAC3B,MAAM,EAGN,2BAA2B,EAC3B,8BAA8B,EAC9B,2BAA2B,EAC3B,mCAAmC,EACnC,6BAA6B,EAC7B,oBAAoB,EACpB,OAAO,EACP,0BAA0B,EAG1B,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAE5B,yBAAyB,EACzB,8CAA8C,EAC9C,yBAAyB,EAKzB,eAAe,EAIf,6BAA6B,EAC7B,SAAS,EACT,2BAA2B,GAC5B,MAAM,UAAU,CAAC;AA2BlB,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EACpB,+BAA+B,EAC/B,4BAA4B,EAC5B,6BAA6B,EAC7B,qBAAqB,EACrB,gCAAgC,EAChC,yBAAyB,EACzB,iCAAiC,EACjC,sBAAsB,EACtB,iCAAiC,EACjC,0BAA0B,EAC1B,wBAAwB,EACxB,4BAA4B,EAC5B,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,cAAc,EACd,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AAWrB,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,qCAAqC,EACrC,iCAAiC,EACjC,qBAAqB,EACrB,uCAAuC,EACvC,iCAAiC,EACjC,+BAA+B,EAC/B,mCAAmC,GACpC,MAAM,6BAA6B,CAAC;AAOrC,OAAO,EACL,mBAAmB,EACnB,mCAAmC,EACnC,wBAAwB,EACxB,iBAAiB,EACjB,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC;AAO5B,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,4BAA4B,EAC5B,qBAAqB,EACrB,6BAA6B,EAC7B,8BAA8B,EAC9B,kBAAkB,EAClB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAa3B,OAAO,EACL,uCAAuC,EACvC,gDAAgD,EAChD,2CAA2C,EAC3C,+BAA+B,EAC/B,sCAAsC,EACtC,6BAA6B,EAC7B,0CAA0C,EAC1C,mCAAmC,EACnC,yBAAyB,EACzB,6BAA6B,EAC7B,YAAY,EACZ,8BAA8B,EAC9B,iBAAiB,EACjB,0BAA0B,EAC1B,6BAA6B,EAC7B,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,sCAAsC,GACvC,MAAM,gCAAgC,CAAC;AASxC,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,0BAA0B,EAC1B,mCAAmC,EACnC,+BAA+B,EAC/B,kCAAkC,EAClC,yBAAyB,EACzB,6BAA6B,EAC7B,sCAAsC,EACtC,qBAAqB,EACrB,oBAAoB,EACpB,2BAA2B,EAC3B,8BAA8B,EAE9B,sCAAsC,EACtC,mBAAmB,EACnB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,EACpB,qBAAqB,EACrB,2CAA2C,EAC3C,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAgBhC,OAAO,EACL,mCAAmC,EACnC,uCAAuC,EACvC,8BAA8B,EAC9B,oBAAoB,EACpB,4BAA4B,EAC5B,2BAA2B,EAC3B,kBAAkB,EAClB,kCAAkC,EAClC,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,kCAAkC,EAClC,wCAAwC,EACxC,oBAAoB,EACpB,kBAAkB,EAClB,sBAAsB,EACtB,8BAA8B,EAC9B,iCAAiC,GAClC,MAAM,uBAAuB,CAAC;AAY/B,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,oCAAoC,EACpC,mCAAmC,EACnC,qCAAqC,EACrC,+BAA+B,EAC/B,8BAA8B,EAC9B,sCAAsC,EACtC,uBAAuB,EACvB,0CAA0C,EAC1C,6CAA6C,EAC7C,kDAAkD,EAClD,gCAAgC,EAChC,qCAAqC,EACrC,+BAA+B,EAC/B,sBAAsB,EACtB,8BAA8B,EAC9B,uCAAuC,EACvC,uBAAuB,EACvB,8BAA8B,EAC9B,oCAAoC,EACpC,oCAAoC,EACpC,kCAAkC,EAClC,0CAA0C,EAC1C,4BAA4B,EAC5B,2BAA2B,EAC3B,8BAA8B,EAC9B,uCAAuC,EACvC,2BAA2B,EAC3B,8BAA8B,EAC9B,gCAAgC,EAChC,sBAAsB,EACtB,0CAA0C,EAC1C,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AAQnC,OAAO,EACL,gCAAgC,EAChC,+BAA+B,EAC/B,6BAA6B,EAC7B,mCAAmC,GACpC,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EACL,sBAAsB,EACtB,qCAAqC,EACrC,kCAAkC,EAClC,4BAA4B,EAC5B,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAWlC,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,6BAA6B,EAC7B,8BAA8B,EAC9B,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,6BAA6B,GAW9B,MAAM,kBAAkB,CAAC;AAe1B,OAAO,EACL,oBAAoB,EACpB,gCAAgC,EAChC,gCAAgC,EAChC,mCAAmC,EACnC,yBAAyB,EACzB,gCAAgC,EAChC,oCAAoC,GACrC,MAAM,kBAAkB,CAAC","sourcesContent":["// This is the current SDK contract: unified device-first handles and atomic,\n// revision-checked host adapters. Obsolete aliases and adapter fallbacks are not\n// part of this surface; see workflows/README.md for the required host contract.\nexport type {\n  AddOrganizationGroupUserInput,\n  BlobInfo,\n  BlobInfoAttachmentKind,\n  BlobInfoDocumentReference,\n  BlobInfoInput,\n  BlobInfoList,\n  BlobInfoSort,\n  BlobInfoSortDirection,\n  BlobInfoSortKey,\n  BrowserLocalKeyringOptions,\n  ClientDatabaseOptions,\n  ContainerContents,\n  ContainerContentsContextValue,\n  ContainerContentsStore,\n  ContainerContentsStoreOptions,\n  ContainerDocumentLinkInput,\n  ContainerDocumentLinks,\n  ContainerDocumentObjectSyncState,\n  ContainerDocumentObjectSyncStatus,\n  ContainerDocumentQueries,\n  ContainerDocumentSidebarRow,\n  ContainerInfo,\n  ContainerInfoInput,\n  ContainerItemRow,\n  ContainerItemSort,\n  ContainerItemSortDirection,\n  ContainerItemSortKey,\n  ContainerNode,\n  ContainerShareAccessLevel,\n  CreateOrganizationOptions,\n  DatabaseListener,\n  DatabaseOptions,\n  DatabaseSnapshot,\n  DatabaseStatus,\n  DeviceFirst,\n  DeviceFirstContainerContents,\n  DocumentAttachmentStatus,\n  DocumentAttachmentUpload,\n  DocumentAttributionRangesInput,\n  DocumentAttributionRangesPage,\n  DocumentContextValue,\n  DocumentInfo,\n  DocumentInfoInput,\n  DocumentList,\n  DocumentSort,\n  DocumentSortDirection,\n  DocumentSortKey,\n  DocumentStore,\n  DocumentSubscriptionOptions,\n  Documents,\n  DocumentsRuntime,\n  DomainScope,\n  FileSaver,\n  Identity,\n  IdentityGenerationResult,\n  IdentityKeyPackage,\n  IdentityListener,\n  IdentityOptions,\n  IdentitySnapshot,\n  ImportedOrganizationUser,\n  IndexedDbLocalKeyringManifestStoreOptions,\n  IndexedDbWrappingKeyKeystoreOptions,\n  LinkDocumentToContainerInput,\n  ListDocumentsInput,\n  LocalKeyPurpose,\n  LocalKeyring,\n  LocalKeyringManifest,\n  LocalKeyringManifestFormat,\n  LocalKeyringManifestStorage,\n  LocalKeyringManifestStore,\n  LocalKeyringOptions,\n  LocalKeyringPinCode,\n  LocalKeyringScope,\n  LocalKeyringSession,\n  LocalOrganizationSummary,\n  LocalProjectionReconciledDelta,\n  LocalProjectionSnapshot,\n  LocalProjectionView,\n  LocalSecretContext,\n  LocalStorageLocalKeyringManifestStoreOptions,\n  Logger,\n  MergeDocumentSummary,\n  MoveDocumentToContainerInput,\n  NetworkListener,\n  NetworkMode,\n  NetworkStatusSource,\n  NormalizedLocalKeyringScope,\n  OpenContainerDocumentInput,\n  OpenDocumentInput,\n  OpenDocumentOptions,\n  OrganizationBilling,\n  OrganizationBillingHistory,\n  OrganizationBillingHistoryEntry,\n  OrganizationBillingManagementUrl,\n  OrganizationBillingView,\n  OrganizationContainerGrant,\n  OrganizationContainerGrants,\n  OrganizationDataUsage,\n  OrganizationDirectory,\n  OrganizationDirectoryAndGroups,\n  OrganizationDirectoryUser,\n  OrganizationGrantRef,\n  OrganizationGroupContainer,\n  OrganizationGroupContainers,\n  OrganizationGroupDetails,\n  OrganizationGroupMember,\n  OrganizationGroupMembers,\n  OrganizationGroupPolicyHistory,\n  OrganizationGroupSummary,\n  OrganizationPolicyGrantChange,\n  OrganizationPolicyGroupChange,\n  OrganizationPolicyHistory,\n  OrganizationPolicyHistoryEntry,\n  OrganizationProfile,\n  Organizations,\n  OrganizationUserDetail,\n  PendingWriteQueueItem,\n  PendingWriteQueueItemStatus,\n  PendingWriteQueueObjectKind,\n  PendingWriteQueueOperation,\n  PendingWriteQueueOperationKind,\n  PendingWriteQueueOperationStatus,\n  // Persistence notifications distinguish placement changes from content saves.\n  PersistedDocumentListener,\n  PinCodeBrowserLocalKeyringOptions,\n  PinCodeWrappingKeyKeystoreOptions,\n  PurgeDocumentInput,\n  PurgeDocumentResult,\n  ReconciliationService,\n  RemoveOrganizationGroupUserInput,\n  ResolvedUserIdentity,\n  SaveFileRequest,\n  SecurityIncident,\n  SecurityIncidentListener,\n  SecurityIncidentObjectKind,\n  SecurityIncidents,\n  Session,\n  SessionContext,\n  SessionCreateOrganizationResult,\n  SessionListener,\n  SessionRecoverOrganizationResult,\n  SessionRegistrationRefusal,\n  SessionRegistrationResult,\n  SessionSnapshot,\n  SetActiveDocumentContainerInput,\n  SetLinkedContainerIdsForDocument,\n  UnlinkDocumentFromContainerInput,\n  UnwrapLocalSecretInput,\n  UserIdentities,\n  UserSession,\n  WrapLocalSecretInput,\n  WrappedLocalSecretEnvelope,\n  WrappedLocalSecretFormat,\n  WrappingKeyHandle,\n  WrappingKeyKeystore,\n  WrappingKeyMaterialStorage,\n} from \"./client\";\nexport {\n  type BlobStoreFactory,\n  Blobs,\n  type ClientOptions,\n  createBrowserLocalKeyring,\n  createBrowserLocalKeyringManifestStore,\n  createBrowserNetworkStatusSource,\n  createContainerDocumentObjectSyncState,\n  createDomainScope,\n  createIndexedDbLocalKeyringManifestStore,\n  createIndexedDbWrappingKeyKeystore,\n  createLocalKeyring,\n  createLocalStorageLocalKeyringManifestStore,\n  createMemoryLocalKeyringManifestStore,\n  createMemoryWrappingKeyKeystore,\n  createPinCodeBrowserLocalKeyring,\n  createPinCodeWrappingKeyKeystore,\n  createRevenueCatPurchases,\n  createUnavailableDirectCheckout,\n  createUnavailablePurchases,\n  createWebViewLocalKeyring,\n  Database,\n  DEFAULT_DOCUMENT_ID,\n  type DirectCheckoutAppearance,\n  type DirectCheckoutCapability,\n  type DirectCheckoutConfirmation,\n  type DirectCheckoutSession,\n  DirectCheckoutUnavailableError,\n  decodeLocalKeyringSqliteKey,\n  Events,\n  type EventsListener,\n  type EventsSnapshot,\n  encodeLocalKeyringSqliteKey,\n  enqueueReconciliationForEvents,\n  IDENTITY_KEY_PACKAGE_FORMAT,\n  isPinCodeWrappedLocalSecretEnvelope,\n  LOCAL_KEYRING_MANIFEST_FORMAT,\n  localKeyringScopeKey,\n  Network,\n  normalizeLocalKeyringScope,\n  type PrincipalHistoryKeyProvider,\n  type PrincipalHistoryKeyScope,\n  PurchaseAbortedError,\n  PurchaseAlreadyOwnedError,\n  PurchaseCancelledError,\n  PurchaseIdentityPendingError,\n  PurchaseProviderStalledError,\n  type PurchasesCapability,\n  PurchasesUnavailableError,\n  PurgedOrganizationRecoveryBillingRequiredError,\n  parseLocalKeyringManifest,\n  type RevenueCatBackend,\n  type RevenueCatCustomerInfo,\n  type RevenueCatPackage,\n  type RevenueCatPurchasesConfig,\n  SyncBillingGate,\n  type SyncBillingGateListener,\n  type SyncPurchaseResult,\n  type SyncSubscriptionOption,\n  serializeLocalKeyringManifest,\n  Tearleads,\n  WRAPPED_LOCAL_SECRET_FORMAT,\n} from \"./client\";\nexport type {\n  BlobByteSource,\n  BlobByteSourceInput,\n  BlobBytes,\n  BlobStore,\n  DiscoveredDocumentInput,\n  DocumentAttachment,\n  DocumentClientProjectionDefinition,\n  DocumentClientProjectionDeleteInput,\n  DocumentClientProjectionSaveInput,\n  DocumentFieldValidationIssue,\n  DocumentProjection,\n  DocumentProjectorDefinition,\n  DocumentProjectorInput,\n  DocumentProjectorRegistry,\n  DocumentProjectorRegistryInput,\n  DocumentRow,\n  DocumentRowSummary,\n  DocumentSummary,\n  StoredDocumentKind,\n  StoredDocumentState,\n  StructuredDocumentMap,\n  StructuredDocumentShape,\n  StructuredDocumentText,\n  ValidatedDocumentFields,\n} from \"./documents\";\nexport {\n  addDocumentAttachments,\n  blobByteSourceInputLength,\n  createBlobByteSource,\n  createDocumentProjectorRegistry,\n  createDocumentSignerDeviceId,\n  DEFAULT_DOCUMENT_ACCESS_EPOCH,\n  DEFAULT_DOCUMENT_KIND,\n  defaultDocumentProjectorRegistry,\n  deriveStoredDocumentTitle,\n  ensureDocumentAttachmentStructure,\n  getDocumentAttachments,\n  getDocumentClientProjectionTables,\n  getStoredDocumentTypeLabel,\n  getUntitledDocumentTitle,\n  initializeStoredDocumentKind,\n  projectStoredDocumentState,\n  readBlobByteSource,\n  readStoredDocumentState,\n  readStringDocumentField,\n  resolveOpIdAttribution,\n  sameDocumentAttachments,\n  summarizeDocumentContributors,\n  writerByPeerId,\n  writeStoredDocumentFields,\n} from \"./documents\";\nexport type {\n  ContainerContentsSnapshot,\n  ContainerContentsStoreRuntime,\n  ContainerContentsStoreState,\n  ContainerContentsStoreSyncAgent,\n  ContainerContentsStoreSyncState,\n  ContainerState,\n  PurgeOptions,\n  PurgeProgress,\n} from \"./stores/container-contents\";\nexport {\n  createContainerContentsStore,\n  createContainerContentsStoreState,\n  createContainerContentsStoreSyncAgent,\n  getOrCreateContainerContentsStore,\n  isSystemContainerNode,\n  requestContainerContentsDocumentPriming,\n  subscribeToContainerContentsStore,\n  updateContainerContentsSnapshot,\n  updateContainerContentsStoreRuntime,\n} from \"./stores/container-contents\";\nexport type {\n  DocumentSnapshot,\n  DocumentStoreFacade,\n  DocumentStoreRelinkInput,\n  DocumentStructuredFieldPatch,\n} from \"./stores/documents\";\nexport {\n  createDocumentStore,\n  discardRegisteredDocumentLocalState,\n  getOrCreateDocumentStore,\n  openDocumentStore,\n  requestDomainDocumentSync,\n  subscribeToPersistedDocuments,\n} from \"./stores/documents\";\nexport type {\n  EncryptedBlobStoreCipher,\n  EncryptedBlobStoreKey,\n  EncryptedBlobStoreOptions,\n  WrapEncryptedBlobStoreOptions,\n} from \"./workflows/blobs\";\nexport {\n  createBlobStore,\n  createEncryptedBlobStore,\n  createLazyEncryptedBlobStore,\n  createMemoryBlobStore,\n  decryptDocumentAttachmentBlob,\n  hydrateDocumentAttachmentBlobs,\n  purgeOpfsBlobStore,\n  uploadDocumentAttachment,\n  wrapEncryptedBlobStore,\n} from \"./workflows/blobs\";\nexport type {\n  ContainerContentsRootAdopter,\n  ContainerContentsRootAdoptionInput,\n  ContainerContentsStoreWorkflowRuntime,\n  ContainerContentsWorkflowRuntime,\n  // Distinct from the canonical `ContainerDocumentLinkInput` (./client); the\n  // documentQueries variant has a different shape, so it keeps a disambiguating\n  // alias on the public surface.\n  ContainerDocumentLinkInput as ContainerDocumentQueriesLinkInput,\n  ContainerSystemSlotDefinition,\n  RecoveryFolder,\n} from \"./workflows/container-contents\";\nexport {\n  createContainerContentsDocumentsRuntime,\n  createContainerContentsProjectionUserKeyResolver,\n  createContainerContentsStoreWorkflowRuntime,\n  createContainerContentsSyncLane,\n  createContainerContentsWorkflowRuntime,\n  createContainerParentSyncLane,\n  createInitializedContainerMetadataDocument,\n  defaultContainerContentsPersistence,\n  deriveContainerSystemSlot,\n  initializeDocumentLinksSchema,\n  listBlobInfo,\n  listDocumentLinkedContainerIds,\n  loadContainerInfo,\n  loadContainerSyncWatermark,\n  loadDocumentAttributionRanges,\n  loadDocumentInfo,\n  replaceDocumentLinks,\n  saveContainerSyncWatermark,\n  syncedContainerDocumentObjectSyncState,\n} from \"./workflows/container-contents\";\nexport type {\n  AggregatedContainerKekLog,\n  ContainerMutationAuthor,\n  ContainerReciteApi,\n  ContainerWriteRefusal,\n  KeyringRebuildResult,\n  MaterializedContainerRekeyPlan,\n} from \"./workflows/containers\";\nexport {\n  buildMaterializedContainerRekeyPlan,\n  buildRootContainerCreatePlan,\n  ContainerAuthorAccessError,\n  ContainerKekRepairInaccessibleError,\n  ContainerKekRepairRequiredError,\n  ContainerKeyringOverrideStaleError,\n  ContainerPathTooDeepError,\n  classifyContainerWriteRefusal,\n  containerWriterProjectionFromRekeyPlan,\n  createRemoteContainer,\n  fetchContainerKekLog,\n  GroupShareNameMismatchError,\n  HistoricalWrapUnavailableError,\n  type HistoricalWrapUnavailableReason,\n  isProjectionVerificationCancelledError,\n  moveRemoteContainer,\n  rebuildKeyringEntriesFromLog,\n  recoverKeyringEntryFromWraps,\n  rekeyRemoteContainer,\n  revokeRemoteContainer,\n  rootContainerWriterProjectionFromCreatePlan,\n  shareRemoteContainer,\n  shareRemoteContainerWithGroup,\n} from \"./workflows/containers\";\nexport type {\n  DocumentRecord,\n  DocumentSyncContainerRekeyBuilder,\n  DocumentSyncPullContinuation,\n  DocumentSyncUpdateIsolationError,\n  DocumentsPersistence,\n  DocumentsWorkflowRuntime,\n  DocumentsWorkflowRuntimeInput,\n  IncomingDocumentSyncUpdateValidator,\n  LocalAttachmentRecord,\n  PendingAttachmentRecord,\n  PendingUpdateInsert,\n  PendingUpdateRecord,\n  SyncRemoteDocumentInput,\n} from \"./workflows/documents\";\nexport {\n  buildMaterializedDocumentCreatePlan,\n  createDocumentProjectionUserKeyResolver,\n  createDocumentsWorkflowRuntime,\n  createRemoteDocument,\n  DOCUMENT_SYNC_TRACE_FRAGMENT,\n  DOCUMENT_SYNC_TRACE_PATTERN,\n  DOCUMENTS_APP_KIND,\n  DocumentRawHistoryUnavailableError,\n  defaultDocumentsPersistence,\n  deletePersistedDocument,\n  isDatabaseUnavailableError,\n  isDocumentSyncUpdateIsolationError,\n  persistedDocumentCreateStateFromResponse,\n  readPullContinuation,\n  syncRemoteDocument,\n  unwrapContainerKekPath,\n  unwrapDocumentContentKeyTarget,\n  validateDocumentSyncUpdateImports,\n} from \"./workflows/documents\";\n// Nominal identity constructors are deliberately absent here. Integration\n// tests that compose low-level runtimes use the testing package subpath.\nexport type {\n  OrganizationGroupPolicyHistoryEntry,\n  OrganizationNativePurchaseEligibility,\n  OrganizationPrincipalMemberChange,\n  OrganizationPrincipalMemberChangeType,\n  OrganizationPrincipalPolicyHistory,\n  OrganizationPrincipalPolicyHistoryEntry,\n  ReconcileOrganizationDataUsageInput,\n} from \"./workflows/organizations\";\nexport {\n  addOrganizationGroupUser,\n  buildInitialGroupPolicyRequest,\n  buildInitialMemberGroupPolicyRequest,\n  buildOrganizationGroupPolicyHistory,\n  buildOrganizationProfileDocumentPatch,\n  buildRosterProfileDocumentPatch,\n  checkNativePurchaseEligibility,\n  createInitializedRosterProfileDocument,\n  createOrganizationGroup,\n  DEFAULT_PERSONAL_ORGANIZATION_PROFILE_NAME,\n  deriveOrganizationMetadataContainerSystemSlot,\n  deriveOrganizationRosterProfileContainerSystemSlot,\n  GroupMembershipNameMismatchError,\n  getOrganizationProfileDocumentLocalId,\n  getRosterProfileDocumentLocalId,\n  importOrganizationUser,\n  loadLocalOrganizationDataUsage,\n  loadLocalOrganizationDirectoryAndGroups,\n  loadOrganizationBilling,\n  loadOrganizationBillingHistory,\n  loadOrganizationBillingManagementUrl,\n  ORGANIZATION_METADATA_CONTAINER_NAME,\n  ORGANIZATION_PROFILE_DOCUMENT_KIND,\n  ORGANIZATION_ROSTER_PROFILE_CONTAINER_NAME,\n  ROSTER_PROFILE_DOCUMENT_KIND,\n  readOrganizationProfileName,\n  reconcileOrganizationDataUsage,\n  reconcileOrganizationDirectoryAndGroups,\n  removeOrganizationGroupUser,\n  resolveOrganizationBillingView,\n  revokeOrganizationContainerGrant,\n  startOrganizationTrial,\n  subscribeOrganizationReadModelInvalidation,\n  updateOrganizationProfile,\n  updateOrganizationRosterEntry,\n} from \"./workflows/organizations\";\nexport type {\n  CacheReferencedPrincipalPoliciesOptions,\n  RecoveredPrincipalPolicyHistory,\n  RecoveredScopedPrincipalPolicyHistory,\n  RecoverPrincipalPolicyHistoryOptions,\n  RecoverScopedPrincipalPolicyHistoryOptions,\n} from \"./workflows/principals\";\nexport {\n  cacheReferencedPrincipalPolicies,\n  PrincipalPolicyHistoryReadError,\n  recoverPrincipalPolicyHistory,\n  recoverScopedPrincipalPolicyHistory,\n} from \"./workflows/principals\";\nexport type {\n  InitialRootMetadataBootstrap,\n  ProvisionedSystemContainerSpec,\n  RegisterIdentityInput,\n  RegistrationApi,\n} from \"./workflows/registration\";\nexport {\n  bootstrapRootContainer,\n  buildInitialOrganizationPolicyRequest,\n  createInitialRootMetadataBootstrap,\n  persistRegistrationBootstrap,\n  registerIdentity,\n} from \"./workflows/registration\";\nexport type {\n  RootIdentitiesApi,\n  RootIdentitiesPage,\n  RootIdentitiesQueryInput,\n  RootIdentity,\n  RootIdentityDetail,\n  RootIdentityOrganization,\n  RootIdentitySession,\n  RootRequestOutcome,\n} from \"./workflows/root\";\nexport {\n  listRootDataUsageReport,\n  listRootIdentities,\n  listRootIdentityOrganizations,\n  listRootOrganizationIdentities,\n  listRootOrganizations,\n  loadRootIdentity,\n  loadRootOrganization,\n  loadRootOrganizationDataUsage,\n  type RootDataUsageApi,\n  type RootDataUsageReportPage,\n  type RootOrganization,\n  type RootOrganizationDetail,\n  type RootOrganizationIdentitiesPage,\n  type RootOrganizationIdentity,\n  type RootOrganizationPageQueryInput,\n  type RootOrganizationsApi,\n  type RootOrganizationsPage,\n  type RootOrganizationsQueryInput,\n} from \"./workflows/root\";\nexport type {\n  ClearRemoteSyncStateResult,\n  DomainSyncCoordinator,\n  DomainSyncSnapshot,\n  RemoteResetInput,\n  RemoteResetReplacement,\n  SyncIdleOptions,\n  SyncLane,\n  SyncLaneConfig,\n  SyncLaneLastAction,\n  SyncLanePhase,\n  SyncLaneSnapshot,\n  SyncLaneStatus,\n} from \"./workflows/sync\";\nexport {\n  clearRemoteSyncState,\n  getDomainSyncCoordinatorSnapshot,\n  getOrCreateDomainSyncCoordinator,\n  hasDomainSyncCoordinatorPendingWork,\n  requestAllDomainSyncLanes,\n  subscribeToDomainSyncCoordinator,\n  waitForDomainSyncCoordinatorToSettle,\n} from \"./workflows/sync\";\n"]}

package/internal/api-client/ApiCache.js

@@ -0,0 +1,112 @@
+/**
+ * Bounded cache exposing the subset of the `Map` surface the request helpers
+ * in `requestInternals` rely on (`get`, `has`, `set`, `delete`, `clear`), plus
+ * `keys` for targeted eviction. The persistent request caches in `ApiClient`
+ * retain one entry per unique container/document/user id read for the
+ * lifetime of the client; without a bound a long-lived client accumulates
+ * unbounded entries.
+ *
+ * Eviction is by insertion recency: (re)writing an entry marks it newest, and
+ * inserting past `maxEntries` evicts the oldest-written entry. Crucially `get`
+ * is SIDE-EFFECT-FREE — it does not re-order — because the request helpers
+ * compare the stored promise by reference (`cache.get(key) === pending`) to
+ * decide whether to invalidate it; a read that mutated ordering would make
+ * eviction timing depend on read interleaving and could surprise those guards.
+ * This is deliberately a freshness/coalescing cache, not a correctness
+ * boundary: entries are still invalidated explicitly on mutation and auth
+ * change, and a returned promise is held by its awaiter, so an evicted entry
+ * at worst costs a missed coalesce / re-fetch, never wrong data.
+ */
+export class BoundedCache {
+    entries = new Map();
+    invalidationStampsByKey = new Map();
+    maxEntries;
+    invalidationTick = 0;
+    prunedInvalidationFloor = 0;
+    constructor(maxEntries = 256) {
+        if (maxEntries < 1) {
+            throw new RangeError("BoundedCache maxEntries must be at least 1");
+        }
+        this.maxEntries = maxEntries;
+    }
+    get size() {
+        return this.entries.size;
+    }
+    /**
+     * Monotonic stamp of the key's most recent explicit invalidation (`delete`,
+     * including of an absent key, or `clear`). A fetch that snapshots it before
+     * running and re-checks after can tell that an invalidation of ITS key
+     * happened mid-flight even when the slot was empty both times — the case a
+     * slot-identity comparison alone cannot see — while invalidations of other
+     * keys leave the stamp alone, so they never break unrelated coalescing.
+     * Deliberately unaffected by `set` and by recency overflow: those are not
+     * invalidation signals. Stamp bookkeeping is bounded; pruned stamps fold
+     * into a shared floor, which can only over-invalidate (skip a cache warm or
+     * a coalesce), never under-invalidate.
+     */
+    invalidationStamp(key) {
+        return Math.max(this.invalidationStampsByKey.get(key) ?? 0, this.prunedInvalidationFloor);
+    }
+    get(key) {
+        return this.entries.get(key);
+    }
+    has(key) {
+        return this.entries.has(key);
+    }
+    keys() {
+        return this.entries.keys();
+    }
+    set(key, value) {
+        // Delete first so an overwrite refreshes recency rather than keeping the
+        // original insertion position.
+        this.entries.delete(key);
+        this.entries.set(key, value);
+        this.evictOverflow();
+        return this;
+    }
+    delete(key) {
+        // Stamp even when the key is absent: an eviction of an empty slot still
+        // expresses that whatever is in flight for the id is invalid. Re-insert
+        // so the newest stamp sits last and pruning drops the oldest first.
+        this.invalidationTick += 1;
+        this.invalidationStampsByKey.delete(key);
+        this.invalidationStampsByKey.set(key, this.invalidationTick);
+        this.pruneInvalidationStamps();
+        return this.entries.delete(key);
+    }
+    /**
+     * Invalidates every fetch in flight without dropping cached entries: every
+     * key's stamp rises, so a fetch that snapshotted one never publishes.
+     */
+    invalidateInFlight() {
+        this.invalidationTick += 1;
+        this.prunedInvalidationFloor = this.invalidationTick;
+        this.invalidationStampsByKey.clear();
+    }
+    clear() {
+        this.invalidationTick += 1;
+        this.prunedInvalidationFloor = this.invalidationTick;
+        this.invalidationStampsByKey.clear();
+        this.entries.clear();
+    }
+    pruneInvalidationStamps() {
+        while (this.invalidationStampsByKey.size > this.maxEntries) {
+            const oldest = this.invalidationStampsByKey.entries().next().value;
+            if (oldest === undefined) {
+                return;
+            }
+            this.invalidationStampsByKey.delete(oldest[0]);
+            this.prunedInvalidationFloor = Math.max(this.prunedInvalidationFloor, oldest[1]);
+        }
+    }
+    evictOverflow() {
+        while (this.entries.size > this.maxEntries) {
+            const oldest = this.entries.keys().next().value;
+            if (oldest === undefined) {
+                return;
+            }
+            this.entries.delete(oldest);
+        }
+    }
+}
+//# sourceMappingURL=ApiCache.js.map

package/internal/api-client/ApiCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiCache.js","sourceRoot":"","sources":["ApiCache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,YAAY;IACN,OAAO,GAAG,IAAI,GAAG,EAAa,CAAC;IAC/B,uBAAuB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,UAAU,CAAS;IAC5B,gBAAgB,GAAG,CAAC,CAAC;IACrB,uBAAuB,GAAG,CAAC,CAAC;IAEpC,YAAY,UAAU,GAAG,GAAG;QAC1B,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;;OAWG;IACH,iBAAiB,CAAC,GAAW;QAC3B,OAAO,IAAI,CAAC,GAAG,CACb,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAC1C,IAAI,CAAC,uBAAuB,CAC7B,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,GAAG,CAAC,GAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAQ;QACvB,yEAAyE;QACzE,+BAA+B;QAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,wEAAwE;QACxE,wEAAwE;QACxE,oEAAoE;QACpE,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7D,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,kBAAkB;QAChB,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QACrD,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,CAAC;IACvC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC,gBAAgB,CAAC;QACrD,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,uBAAuB;QAC7B,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YACnE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC,GAAG,CACrC,IAAI,CAAC,uBAAuB,EAC5B,MAAM,CAAC,CAAC,CAAC,CACV,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF","sourcesContent":["/**\n * Bounded cache exposing the subset of the `Map` surface the request helpers\n * in `requestInternals` rely on (`get`, `has`, `set`, `delete`, `clear`), plus\n * `keys` for targeted eviction. The persistent request caches in `ApiClient`\n * retain one entry per unique container/document/user id read for the\n * lifetime of the client; without a bound a long-lived client accumulates\n * unbounded entries.\n *\n * Eviction is by insertion recency: (re)writing an entry marks it newest, and\n * inserting past `maxEntries` evicts the oldest-written entry. Crucially `get`\n * is SIDE-EFFECT-FREE — it does not re-order — because the request helpers\n * compare the stored promise by reference (`cache.get(key) === pending`) to\n * decide whether to invalidate it; a read that mutated ordering would make\n * eviction timing depend on read interleaving and could surprise those guards.\n * This is deliberately a freshness/coalescing cache, not a correctness\n * boundary: entries are still invalidated explicitly on mutation and auth\n * change, and a returned promise is held by its awaiter, so an evicted entry\n * at worst costs a missed coalesce / re-fetch, never wrong data.\n */\nexport class BoundedCache<V> {\n  private readonly entries = new Map<string, V>();\n  private readonly invalidationStampsByKey = new Map<string, number>();\n  private readonly maxEntries: number;\n  private invalidationTick = 0;\n  private prunedInvalidationFloor = 0;\n\n  constructor(maxEntries = 256) {\n    if (maxEntries < 1) {\n      throw new RangeError(\"BoundedCache maxEntries must be at least 1\");\n    }\n    this.maxEntries = maxEntries;\n  }\n\n  get size(): number {\n    return this.entries.size;\n  }\n\n  /**\n   * Monotonic stamp of the key's most recent explicit invalidation (`delete`,\n   * including of an absent key, or `clear`). A fetch that snapshots it before\n   * running and re-checks after can tell that an invalidation of ITS key\n   * happened mid-flight even when the slot was empty both times — the case a\n   * slot-identity comparison alone cannot see — while invalidations of other\n   * keys leave the stamp alone, so they never break unrelated coalescing.\n   * Deliberately unaffected by `set` and by recency overflow: those are not\n   * invalidation signals. Stamp bookkeeping is bounded; pruned stamps fold\n   * into a shared floor, which can only over-invalidate (skip a cache warm or\n   * a coalesce), never under-invalidate.\n   */\n  invalidationStamp(key: string): number {\n    return Math.max(\n      this.invalidationStampsByKey.get(key) ?? 0,\n      this.prunedInvalidationFloor,\n    );\n  }\n\n  get(key: string): V | undefined {\n    return this.entries.get(key);\n  }\n\n  has(key: string): boolean {\n    return this.entries.has(key);\n  }\n\n  keys(): IterableIterator<string> {\n    return this.entries.keys();\n  }\n\n  set(key: string, value: V): this {\n    // Delete first so an overwrite refreshes recency rather than keeping the\n    // original insertion position.\n    this.entries.delete(key);\n    this.entries.set(key, value);\n    this.evictOverflow();\n    return this;\n  }\n\n  delete(key: string): boolean {\n    // Stamp even when the key is absent: an eviction of an empty slot still\n    // expresses that whatever is in flight for the id is invalid. Re-insert\n    // so the newest stamp sits last and pruning drops the oldest first.\n    this.invalidationTick += 1;\n    this.invalidationStampsByKey.delete(key);\n    this.invalidationStampsByKey.set(key, this.invalidationTick);\n    this.pruneInvalidationStamps();\n    return this.entries.delete(key);\n  }\n\n  /**\n   * Invalidates every fetch in flight without dropping cached entries: every\n   * key's stamp rises, so a fetch that snapshotted one never publishes.\n   */\n  invalidateInFlight(): void {\n    this.invalidationTick += 1;\n    this.prunedInvalidationFloor = this.invalidationTick;\n    this.invalidationStampsByKey.clear();\n  }\n\n  clear(): void {\n    this.invalidationTick += 1;\n    this.prunedInvalidationFloor = this.invalidationTick;\n    this.invalidationStampsByKey.clear();\n    this.entries.clear();\n  }\n\n  private pruneInvalidationStamps(): void {\n    while (this.invalidationStampsByKey.size > this.maxEntries) {\n      const oldest = this.invalidationStampsByKey.entries().next().value;\n      if (oldest === undefined) {\n        return;\n      }\n      this.invalidationStampsByKey.delete(oldest[0]);\n      this.prunedInvalidationFloor = Math.max(\n        this.prunedInvalidationFloor,\n        oldest[1],\n      );\n    }\n  }\n\n  private evictOverflow(): void {\n    while (this.entries.size > this.maxEntries) {\n      const oldest = this.entries.keys().next().value;\n      if (oldest === undefined) {\n        return;\n      }\n      this.entries.delete(oldest);\n    }\n  }\n}\n"]}