@tearleads/client-sdk 0.0.0-stage → 0.1.13

package/internal/api-client/projectionHistoryTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectionHistoryTransport.js","sourceRoot":"","sources":["projectionHistoryTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EAGxB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,kCAAkC,EAClC,+BAA+B,GAChC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AAEjF,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAC1C,MAAM,eAAe,GAAG,EAAE,CAAC;AAM3B,wFAAwF;AACxF,MAAM,OAAO,0BAA0B;IACpB,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IACvD,UAAU,GAAG,CAAC,CAAC;IACf,UAAU,GAAG,CAAC,CAAC;IAEvB,KAAK;QACH,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QACpB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAEO,QAAQ,CAAC,IAAY,EAAE,OAAoC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAClD,IAAI,UAAU,GAAG,sBAAsB;YAAE,OAAO;QAChD,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC;QAC9B,OACE,IAAI,CAAC,UAAU,GAAG,sBAAsB;YACxC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,eAAe,EACpC,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YACpD,IAAI,CAAC,MAAM;gBAAE,MAAM;YACnB,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAEO,OAAO,CACb,IAAY,EACZ,SAAyC,EACzC,MAAyC,EACzC,OAA0C,EAC1C,SAA4C;QAK5C,IACE,MAAM,KAAK,KAAK;YAChB,CAAC;gBACC,iCAAiC;gBACjC,gCAAgC;aACjC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAExB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,MAAM,SAAS,GAAG,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC;QACjD,MAAM,UAAU,GAAG,SAAS;YAC1B,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,SAAS,GAAgC,EAAE,CAAC;QAClD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClE,IAAI,CAAC,+BAA+B,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO;gBAC9D,SAAS;YACX,iEAAiE;YACjE,IACE,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;gBACnD,kCAAkC;gBAElC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM;YACrC,CAAC,CAAC;gBACE,GAAG,OAAO;gBACV,OAAO,EAAE,EAAE,sBAAsB,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE;aAC9D;YACH,CAAC,CAAC,OAAO,CAAC;QACZ,OAAO;YACL,OAAO,EAAE,cAAc;YACvB,SAAS,EAAE,CAAC,KAAc,EAAc,EAAE;gBACxC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACpC,IAAI,UAA6B,CAAC;gBAClC,IACE,mCAAmC,CAAC,KAAK,CAAC;oBAC1C,kCAAkC,CAAC,KAAK,CAAC;oBAEzC,UAAU,GAAG,KAAK,CAAC;;oBAChB,OAAO,KAAK,CAAC;gBAClB,qEAAqE;gBACrE,wEAAwE;gBACxE,IACE,CAAC,wBAAwB,CAAC,UAAU,EAAE,SAAS,CAAC;oBAChD,CAAC,SAAS,CAAC,KAAK,CAAC;oBAEjB,OAAO,KAAK,CAAC;gBACf,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAC7B,wBAAwB,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAClE,CAAC;gBACF,kCAAkC,CAAC,UAAU,EAAE,GAAG,EAAE;oBAClD,IAAI,CAAC,SAAS,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU;wBAAE,OAAO;oBACzD,mEAAmE;oBACnE,qEAAqE;oBACrE,MAAM,QAAQ,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;oBACtD,IACE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,QAAQ;wBAElE,OAAO;oBACT,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAChC,CAAC,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,OAA2B;QACrC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;YAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAC3B,IAAI,EACJ,SAAS,EACT,MAAM,EACN,OAAO,EACP,SAAS,CACV,CAAC;YACF,OAAO,OAAO,CACZ,IAAI,EACJ,QAAQ,CAAC,SAAS,EAClB,MAAM,EACN,IAAI,EACJ,QAAQ,CAAC,OAAO,EAChB,SAAS,CACV,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;IAED,iBAAiB,CACf,OAAiC;QAEjC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;YAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAC3B,IAAI,EACJ,SAAS,EACT,MAAM,EACN,OAAO,EACP,SAAS,CACV,CAAC;YACF,OAAO,OAAO,CACZ,IAAI,EACJ,QAAQ,CAAC,SAAS,EAClB,MAAM,EACN,IAAI,EACJ,QAAQ,CAAC,OAAO,EAChB,SAAS,CACV,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC;CACF","sourcesContent":["import {\n  captureProjectionHistory,\n  type HistoryProjection,\n  type RetainedProjectionHistory,\n  restoreProjectionHistory,\n} from \"@tearleads/crypto\";\nimport {\n  isContainerWriterProjectionResponse,\n  isDocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  PROJECTION_HISTORY_HINT_CHARACTERS,\n  ProjectionHistoryPrefixesSchema,\n} from \"@tearleads/validators/util\";\nimport type { OperationRequestFn, OperationRequestResultFn } from \"./types\";\nimport { registerProjectionHistoryAdmission } from \"./verifiedProjectionHistory\";\n\nconst MAX_HISTORY_CHARACTERS = 16_000_000;\nconst MAX_PROJECTIONS = 16;\ninterface RetainedHistory {\n  readonly entries: RetainedProjectionHistory[];\n  readonly characters: number;\n}\n\n/** Session-scoped evidence cache, independent of the short-lived current-head cache. */\nexport class ProjectionHistoryTransport {\n  private readonly retained = new Map<string, RetainedHistory>();\n  private characters = 0;\n  private generation = 0;\n\n  clear(): void {\n    this.generation += 1;\n    this.characters = 0;\n    this.retained.clear();\n  }\n\n  private remember(path: string, entries: RetainedProjectionHistory[]): void {\n    const characters = JSON.stringify(entries).length;\n    if (characters > MAX_HISTORY_CHARACTERS) return;\n    this.characters -= this.retained.get(path)?.characters ?? 0;\n    this.retained.delete(path);\n    this.retained.set(path, { entries, characters });\n    this.characters += characters;\n    while (\n      this.characters > MAX_HISTORY_CHARACTERS ||\n      this.retained.size > MAX_PROJECTIONS\n    ) {\n      const oldest = this.retained.entries().next().value;\n      if (!oldest) break;\n      this.characters -= oldest[1].characters;\n      this.retained.delete(oldest[0]);\n    }\n  }\n\n  private prepare<T>(\n    path: string,\n    validator: (value: unknown) => value is T,\n    method: Parameters<OperationRequestFn>[2],\n    options: Parameters<OperationRequestFn>[4],\n    operation: Parameters<OperationRequestFn>[5],\n  ): {\n    options: Parameters<OperationRequestFn>[4];\n    validator: (value: unknown) => value is T;\n  } {\n    if (\n      method !== \"GET\" ||\n      ![\n        \"containers.writerProjection.get\",\n        \"documents.writerProjection.get\",\n      ].includes(operation.id)\n    )\n      return { options, validator };\n    const generation = this.generation;\n    const mayRetain = options?.headers === undefined;\n    const candidates = mayRetain\n      ? (this.retained.get(path)?.entries ?? [])\n      : [];\n    const requested: RetainedProjectionHistory[] = [];\n    for (const entry of candidates) {\n      const prefixes = [...requested, entry].map((item) => item.prefix);\n      if (!ProjectionHistoryPrefixesSchema.safeParse(prefixes).success)\n        continue;\n      // Bound negotiation headers; deep paths merely omit fewer hints.\n      if (\n        encodeURIComponent(JSON.stringify(prefixes)).length <=\n        PROJECTION_HISTORY_HINT_CHARACTERS\n      )\n        requested.push(entry);\n    }\n    const hint = JSON.stringify(requested.map((entry) => entry.prefix));\n    const requestOptions = requested.length\n      ? {\n          ...options,\n          headers: { \"x-projection-history\": encodeURIComponent(hint) },\n        }\n      : options;\n    return {\n      options: requestOptions,\n      validator: (value: unknown): value is T => {\n        if (!validator(value)) return false;\n        let projection: HistoryProjection;\n        if (\n          isContainerWriterProjectionResponse(value) ||\n          isDocumentWriterProjectionResponse(value)\n        )\n          projection = value;\n        else return false;\n        // A transparent token-refresh retry still holds its requested bytes.\n        // Restore them here; the admission guard below preserves auth clearing.\n        if (\n          !restoreProjectionHistory(projection, requested) ||\n          !validator(value)\n        )\n          return false;\n        const captured = JSON.stringify(\n          captureProjectionHistory(projection).map((entry) => entry.prefix),\n        );\n        registerProjectionHistoryAdmission(projection, () => {\n          if (!mayRetain || generation !== this.generation) return;\n          // A consumer may mutate a decoded object. Never retain bytes other\n          // than the exact evidence that passed through the verification call.\n          const observed = captureProjectionHistory(projection);\n          if (\n            JSON.stringify(observed.map((entry) => entry.prefix)) !== captured\n          )\n            return;\n          this.remember(path, observed);\n        });\n        return true;\n      },\n    };\n  }\n\n  wrapRequest(request: OperationRequestFn): OperationRequestFn {\n    return (path, validator, method, body, options, operation) => {\n      const prepared = this.prepare(\n        path,\n        validator,\n        method,\n        options,\n        operation,\n      );\n      return request(\n        path,\n        prepared.validator,\n        method,\n        body,\n        prepared.options,\n        operation,\n      );\n    };\n  }\n\n  wrapRequestResult(\n    request: OperationRequestResultFn,\n  ): OperationRequestResultFn {\n    return (path, validator, method, body, options, operation) => {\n      const prepared = this.prepare(\n        path,\n        validator,\n        method,\n        options,\n        operation,\n      );\n      return request(\n        path,\n        prepared.validator,\n        method,\n        body,\n        prepared.options,\n        operation,\n      );\n    };\n  }\n}\n"]}

package/internal/api-client/requestInternals.js

@@ -0,0 +1,294 @@
+import { CONTAINER_MUTATION_ERROR_CODES, ContainerMutationFailureResponseSchema, DocumentSyncErrorResponseSchema, isDocumentSyncStateStaleErrorResponse, isPaymentRequiredErrorResponse, isPrincipalPolicyStaleErrorResponse, PaymentRequiredErrorResponseSchema, SESSION_ERROR_CODES, } from "../validators/response/index.js";
+import { MAX_ROTATION_CONTAINER_REKEYS } from "../validators/util/index.js";
+/**
+ * True when a sync response advances the document's write material past what a
+ * cached/primed writer projection holds, so the projection must be re-fetched
+ * before the next write. Compares the content-key bundle and KEK target hashes
+ * the projection authorizes against the ones the server just committed.
+ */
+function documentSyncInvalidatesWriterProjection(projection, response) {
+    return (projection.contentKeyBundle?.contentKeyEpoch !==
+        response.contentKeyBundle?.contentKeyEpoch ||
+        projection.contentKeyBundle?.linkSetManifestHash !==
+            response.contentKeyBundle?.linkSetManifestHash ||
+        projection.contentKeyBundle?.targetHash !==
+            response.contentKeyBundle?.targetHash ||
+        projection.documentKekTargets?.linkSetManifestHash !==
+            response.documentKekTargets?.linkSetManifestHash ||
+        projection.documentKekTargets?.documentKeyTargetHash !==
+            response.documentKekTargets?.documentKeyTargetHash);
+}
+/**
+ * Evict a cached/primed document writer projection iff the just-committed sync
+ * response moved its write material. Re-checks the cache slot after awaiting so
+ * a concurrent invalidation or refetch is not clobbered. `onEvicted` fires
+ * whenever an invalidation is issued, so callers can invalidate parallel
+ * bookkeeping (e.g. an in-flight result fetch that predates the sync).
+ */
+export async function evictWriterProjectionIfSyncChanged(cache, documentId, response, onEvicted) {
+    const cached = cache.get(documentId);
+    if (!cached) {
+        // No cached projection to compare against, so whether the sync moved the
+        // write material is undecidable here — but a concurrent in-flight GET may
+        // still predate it. Invalidate conservatively: deleting the (absent) slot
+        // bumps the cache's eviction generation so such a fetch's success is not
+        // cached, and onEvicted drops a shared in-flight result entry. The cost
+        // when nothing is in flight is a skipped cache warm, never wrong data.
+        cache.delete(documentId);
+        onEvicted?.();
+        return;
+    }
+    const projection = await cached.catch(() => null);
+    if (cache.get(documentId) !== cached || !projection) {
+        return;
+    }
+    if (documentSyncInvalidatesWriterProjection(projection, response)) {
+        cache.delete(documentId);
+        onEvicted?.();
+    }
+}
+const emptyErrorResponseDescription = {
+    code: null,
+    detail: "",
+    error: null,
+};
+const invalidErrorResponseDescription = {
+    ...emptyErrorResponseDescription,
+    detail: ": Invalid failure response body",
+};
+function validatedFailureCode(value, schema) {
+    if (!schema ||
+        !("code" in value) ||
+        typeof value.code !== "string" ||
+        value.code.length === 0) {
+        return null;
+    }
+    // Loose object schemas retain extension keys. A code is behavior-bearing
+    // only when changing that field to an unregistered value breaks the selected
+    // status schema, proving that the schema constrains rather than merely
+    // preserves it.
+    const unregisteredCode = `${value.code}\u0000unregistered`;
+    return schema.safeParse({ ...value, code: unregisteredCode }).success
+        ? null
+        : value.code;
+}
+function parsedErrorResponseDescription(value, schema) {
+    if (!value ||
+        typeof value !== "object" ||
+        !("error" in value) ||
+        typeof value.error !== "string") {
+        return null;
+    }
+    const error = value.error.trim();
+    const code = validatedFailureCode(value, schema);
+    if (error.length === 0 && code === null) {
+        return null;
+    }
+    return {
+        code,
+        detail: error.length === 0 ? "" : `: ${error}`,
+        error: error.length === 0 ? null : error,
+        // Container mutations and document sync with inline container rekeys can
+        // carry signed policy bundles that make the failed write repairable.
+        ...(schema === ContainerMutationFailureResponseSchema &&
+            isPrincipalPolicyStaleErrorResponse(value)
+            ? { stalePrincipalPolicies: value.principalPolicies }
+            : schema === DocumentSyncErrorResponseSchema &&
+                isDocumentSyncStateStaleErrorResponse(value) &&
+                value.principalPolicies !== undefined
+                ? { stalePrincipalPolicies: value.principalPolicies }
+                : {}),
+        ...((code === CONTAINER_MUTATION_ERROR_CODES.descendantRekeysRequired ||
+            code === CONTAINER_MUTATION_ERROR_CODES.descendantRekeysInaccessible) &&
+            "requiredContainerIds" in value &&
+            Array.isArray(value.requiredContainerIds) &&
+            value.requiredContainerIds.length <= MAX_ROTATION_CONTAINER_REKEYS &&
+            value.requiredContainerIds.every((containerId) => typeof containerId === "string" && containerId.length > 0)
+            ? { requiredContainerIds: value.requiredContainerIds }
+            : {}),
+        // Sync-write 402s carry the target org for the billing prompt.
+        ...(schema === PaymentRequiredErrorResponseSchema &&
+            isPaymentRequiredErrorResponse(value)
+            ? { paymentRequiredOrganizationId: value.organizationId }
+            : {}),
+    };
+}
+export function bindPrototypeMethods(instance, prototype) {
+    for (const propertyName of Object.getOwnPropertyNames(prototype)) {
+        if (propertyName === "constructor") {
+            continue;
+        }
+        const property = Reflect.get(prototype, propertyName);
+        if (typeof property === "function") {
+            Reflect.set(instance, propertyName, property.bind(instance));
+        }
+    }
+}
+export function normalizeApiBaseUrl(baseUrl) {
+    const trimmed = (baseUrl ?? "").trim();
+    if (trimmed === "" || trimmed === "/") {
+        return "";
+    }
+    // Scan from the end to avoid regex backtracking over internal slash runs.
+    let end = trimmed.length;
+    while (end > 0 && trimmed[end - 1] === "/") {
+        end -= 1;
+    }
+    return trimmed.slice(0, end);
+}
+export function hasHeader(headers, name) {
+    const normalizedName = name.toLowerCase();
+    return Object.keys(headers ?? {}).some((headerName) => headerName.toLowerCase() === normalizedName);
+}
+export function requestFailureKey(input) {
+    return `${input.method}\u0000${input.path}`;
+}
+function syncWatermarkRequestKey(watermark) {
+    return watermark ? `${watermark.updatedAt}\u0000${watermark.id}` : "";
+}
+export function listContainerParentLanesRequestKey(input) {
+    return JSON.stringify(input.lanes.map((lane) => ({
+        laneId: lane.laneId,
+        limit: lane.limit ?? null,
+        parentId: lane.parentId,
+        watermark: syncWatermarkRequestKey(lane.watermark),
+    })));
+}
+export function listContainerDocumentsRequestKey(containerId, options = {}) {
+    const { watermark, ...rest } = options;
+    return JSON.stringify({
+        containerId,
+        ...rest,
+        watermark: syncWatermarkRequestKey(watermark),
+    });
+}
+export function cachedRequest(cache, cacheKey, request) {
+    const cached = cache.get(cacheKey);
+    if (cached) {
+        return cached;
+    }
+    let pending;
+    pending = request()
+        .then((response) => {
+        if (!response && cache.get(cacheKey) === pending) {
+            cache.delete(cacheKey);
+        }
+        return response;
+    })
+        .catch((error) => {
+        if (cache.get(cacheKey) === pending) {
+            cache.delete(cacheKey);
+        }
+        throw error;
+    });
+    cache.set(cacheKey, pending);
+    return pending;
+}
+export function dedupedRequest(cache, cacheKey, request) {
+    const cached = cache.get(cacheKey);
+    if (cached) {
+        return cached;
+    }
+    let pending;
+    pending = request().finally(() => {
+        if (cache.get(cacheKey) === pending) {
+            cache.delete(cacheKey);
+        }
+    });
+    cache.set(cacheKey, pending);
+    return pending;
+}
+export function isReplayableRequestBody(body) {
+    return !(typeof ReadableStream === "function" && body instanceof ReadableStream);
+}
+export function isSuccessfulResponse(response, additionalSuccessStatuses) {
+    return response.ok || additionalSuccessStatuses.includes(response.status);
+}
+function validatePaymentRequiredTarget(schema, parsed, expectedOrganizationId) {
+    if (schema !== PaymentRequiredErrorResponseSchema) {
+        return { invalid: false };
+    }
+    if (!isPaymentRequiredErrorResponse(parsed) ||
+        (expectedOrganizationId !== undefined &&
+            parsed.organizationId !== expectedOrganizationId)) {
+        return { invalid: true };
+    }
+    return { invalid: false, organizationId: parsed.organizationId };
+}
+function paymentRequiredDescription(organizationId) {
+    return organizationId === undefined
+        ? null
+        : {
+            ...emptyErrorResponseDescription,
+            paymentRequiredOrganizationId: organizationId,
+        };
+}
+export async function describeErrorResponse(response, operation, expectedPaymentRequiredOrganizationId) {
+    const schema = operation?.failureResponses?.[response.status];
+    if (operation && !schema) {
+        // A cloned response can wait for its other branch to finish cancelling.
+        // Cleanup must not delay reporting an already-invalid status.
+        void response.body?.cancel().catch(() => { });
+        return invalidErrorResponseDescription;
+    }
+    let responseText = "";
+    try {
+        responseText = (await response.text()).trim();
+    }
+    catch {
+        return operation
+            ? invalidErrorResponseDescription
+            : emptyErrorResponseDescription;
+    }
+    if (responseText.length === 0) {
+        return operation
+            ? invalidErrorResponseDescription
+            : emptyErrorResponseDescription;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(responseText);
+    }
+    catch {
+        return operation
+            ? invalidErrorResponseDescription
+            : { ...emptyErrorResponseDescription, detail: `: ${responseText}` };
+    }
+    if (schema) {
+        const result = schema.safeParse(parsed);
+        if (!result.success) {
+            return invalidErrorResponseDescription;
+        }
+        parsed = result.data;
+    }
+    const paymentTarget = validatePaymentRequiredTarget(schema, parsed, expectedPaymentRequiredOrganizationId);
+    if (paymentTarget.invalid) {
+        return invalidErrorResponseDescription;
+    }
+    const description = parsedErrorResponseDescription(parsed, schema) ??
+        paymentRequiredDescription(paymentTarget.organizationId);
+    if (description) {
+        return description;
+    }
+    return operation
+        ? emptyErrorResponseDescription
+        : { ...emptyErrorResponseDescription, detail: `: ${responseText}` };
+}
+export function isRefreshableSessionError(status, code) {
+    return status === 401 && code === SESSION_ERROR_CODES.refreshRequired;
+}
+export function errorMessage(error) {
+    if (error instanceof Error) {
+        return error.message;
+    }
+    // `instanceof Error` fails for errors thrown across realms (web workers,
+    // serialized payloads); fall back to a duck-typed string `message`.
+    if (typeof error === "object" &&
+        error !== null &&
+        "message" in error &&
+        typeof error.message === "string") {
+        return error.message;
+    }
+    return String(error);
+}
+//# sourceMappingURL=requestInternals.js.map

package/internal/api-client/requestInternals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestInternals.js","sourceRoot":"","sources":["requestInternals.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,8BAA8B,EAC9B,sCAAsC,EACtC,+BAA+B,EAC/B,qCAAqC,EACrC,8BAA8B,EAC9B,mCAAmC,EACnC,kCAAkC,EAClC,mBAAmB,GACpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAG3E;;;;;GAKG;AACH,SAAS,uCAAuC,CAC9C,UAA4C,EAC5C,QAA8B;IAE9B,OAAO,CACL,UAAU,CAAC,gBAAgB,EAAE,eAAe;QAC1C,QAAQ,CAAC,gBAAgB,EAAE,eAAe;QAC5C,UAAU,CAAC,gBAAgB,EAAE,mBAAmB;YAC9C,QAAQ,CAAC,gBAAgB,EAAE,mBAAmB;QAChD,UAAU,CAAC,gBAAgB,EAAE,UAAU;YACrC,QAAQ,CAAC,gBAAgB,EAAE,UAAU;QACvC,UAAU,CAAC,kBAAkB,EAAE,mBAAmB;YAChD,QAAQ,CAAC,kBAAkB,EAAE,mBAAmB;QAClD,UAAU,CAAC,kBAAkB,EAAE,qBAAqB;YAClD,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,CACrD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,KAAqD,EACrD,UAAkB,EAClB,QAA8B,EAC9B,SAAsB;IAEtB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzB,SAAS,EAAE,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACpD,OAAO;IACT,CAAC;IACD,IAAI,uCAAuC,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;QAClE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzB,SAAS,EAAE,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAaD,MAAM,6BAA6B,GAA6B;IAC9D,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,IAAI;CACZ,CAAC;AAEF,MAAM,+BAA+B,GAA6B;IAChE,GAAG,6BAA6B;IAChC,MAAM,EAAE,iCAAiC;CAC1C,CAAC;AAEF,SAAS,oBAAoB,CAC3B,KAAa,EACb,MAA0E;IAE1E,IACE,CAAC,MAAM;QACP,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EACvB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yEAAyE;IACzE,6EAA6E;IAC7E,uEAAuE;IACvE,gBAAgB;IAChB,MAAM,gBAAgB,GAAG,GAAG,KAAK,CAAC,IAAI,oBAAoB,CAAC;IAC3D,OAAO,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO;QACnE,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;AACjB,CAAC;AAED,SAAS,8BAA8B,CACrC,KAAc,EACd,MAA+D;IAE/D,IACE,CAAC,KAAK;QACN,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC;QACnB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAC/B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE;QAC9C,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;QACxC,yEAAyE;QACzE,qEAAqE;QACrE,GAAG,CAAC,MAAM,KAAK,sCAAsC;YACrD,mCAAmC,CAAC,KAAK,CAAC;YACxC,CAAC,CAAC,EAAE,sBAAsB,EAAE,KAAK,CAAC,iBAAiB,EAAE;YACrD,CAAC,CAAC,MAAM,KAAK,+BAA+B;gBACxC,qCAAqC,CAAC,KAAK,CAAC;gBAC5C,KAAK,CAAC,iBAAiB,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,sBAAsB,EAAE,KAAK,CAAC,iBAAiB,EAAE;gBACrD,CAAC,CAAC,EAAE,CAAC;QACT,GAAG,CAAC,CAAC,IAAI,KAAK,8BAA8B,CAAC,wBAAwB;YACnE,IAAI,KAAK,8BAA8B,CAAC,4BAA4B,CAAC;YACvE,sBAAsB,IAAI,KAAK;YAC/B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;YACzC,KAAK,CAAC,oBAAoB,CAAC,MAAM,IAAI,6BAA6B;YAClE,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAC9B,CAAC,WAAoB,EAAyB,EAAE,CAC9C,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAC5D;YACC,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;QACP,+DAA+D;QAC/D,GAAG,CAAC,MAAM,KAAK,kCAAkC;YACjD,8BAA8B,CAAC,KAAK,CAAC;YACnC,CAAC,CAAC,EAAE,6BAA6B,EAAE,KAAK,CAAC,cAAc,EAAE;YACzD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,SAAiB;IAEjB,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACtD,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAkC;IAElC,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,0EAA0E;IAC1E,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,OAAO,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QAC3C,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,OAA2C,EAC3C,IAAY;IAEZ,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CACpC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,cAAc,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAGjC;IACC,OAAO,GAAG,KAAK,CAAC,MAAM,SAAS,KAAK,CAAC,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,uBAAuB,CAC9B,SAA2C;IAE3C,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,SAAS,SAAS,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,KAAsC;IAEtC,OAAO,IAAI,CAAC,SAAS,CACnB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC;KACnD,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,WAAmB,EACnB,UAAyC,EAAE;IAE3C,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IACvC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,WAAW;QACX,GAAG,IAAI;QACP,SAAS,EAAE,uBAAuB,CAAC,SAAS,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAaD,MAAM,UAAU,aAAa,CAC3B,KAAsB,EACtB,QAAgB,EAChB,OAAgC;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,OAA0B,CAAC;IAC/B,OAAO,GAAG,OAAO,EAAE;SAChB,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACjB,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC;YACjD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACxB,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC;YACpC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACL,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,KAAsB,EACtB,QAAgB,EAChB,OAAgC;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,OAA0B,CAAC;IAC/B,OAAO,GAAG,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QAC/B,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC;YACpC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,IAA6B;IAE7B,OAAO,CAAC,CACN,OAAO,cAAc,KAAK,UAAU,IAAI,IAAI,YAAY,cAAc,CACvE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAkB,EAClB,yBAA4C;IAE5C,OAAO,QAAQ,CAAC,EAAE,IAAI,yBAAyB,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,6BAA6B,CACpC,MAA0E,EAC1E,MAAe,EACf,sBAA0C;IAE1C,IAAI,MAAM,KAAK,kCAAkC,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IACD,IACE,CAAC,8BAA8B,CAAC,MAAM,CAAC;QACvC,CAAC,sBAAsB,KAAK,SAAS;YACnC,MAAM,CAAC,cAAc,KAAK,sBAAsB,CAAC,EACnD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,0BAA0B,CACjC,cAAkC;IAElC,OAAO,cAAc,KAAK,SAAS;QACjC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC;YACE,GAAG,6BAA6B;YAChC,6BAA6B,EAAE,cAAc;SAC9C,CAAC;AACR,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAkB,EAClB,SAAyB,EACzB,qCAA8C;IAE9C,MAAM,MAAM,GAAG,SAAS,EAAE,gBAAgB,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,wEAAwE;QACxE,8DAA8D;QAC9D,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7C,OAAO,+BAA+B,CAAC;IACzC,CAAC;IACD,IAAI,YAAY,GAAG,EAAE,CAAC;IAEtB,IAAI,CAAC;QACH,YAAY,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS;YACd,CAAC,CAAC,+BAA+B;YACjC,CAAC,CAAC,6BAA6B,CAAC;IACpC,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,SAAS;YACd,CAAC,CAAC,+BAA+B;YACjC,CAAC,CAAC,6BAA6B,CAAC;IACpC,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS;YACd,CAAC,CAAC,+BAA+B;YACjC,CAAC,CAAC,EAAE,GAAG,6BAA6B,EAAE,MAAM,EAAE,KAAK,YAAY,EAAE,EAAE,CAAC;IACxE,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,+BAA+B,CAAC;QACzC,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,MAAM,aAAa,GAAG,6BAA6B,CACjD,MAAM,EACN,MAAM,EACN,qCAAqC,CACtC,CAAC;IACF,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,+BAA+B,CAAC;IACzC,CAAC;IAED,MAAM,WAAW,GACf,8BAA8B,CAAC,MAAM,EAAE,MAAM,CAAC;QAC9C,0BAA0B,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,OAAO,SAAS;QACd,CAAC,CAAC,6BAA6B;QAC/B,CAAC,CAAC,EAAE,GAAG,6BAA6B,EAAE,MAAM,EAAE,KAAK,YAAY,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAc,EACd,IAAmB;IAEnB,OAAO,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,mBAAmB,CAAC,eAAe,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,yEAAyE;IACzE,oEAAoE;IACpE,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,SAAS,IAAI,KAAK;QAClB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EACjC,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC","sourcesContent":["import type { HttpOperation } from \"@tearleads/validators/operation\";\nimport type { ListContainerParentLanesRequest } from \"@tearleads/validators/request\";\nimport type {\n  DocumentSyncResponse,\n  DocumentWriterProjectionResponse,\n  PrincipalPolicyBundleResponse,\n  SyncWatermark,\n} from \"@tearleads/validators/response\";\nimport {\n  CONTAINER_MUTATION_ERROR_CODES,\n  ContainerMutationFailureResponseSchema,\n  DocumentSyncErrorResponseSchema,\n  isDocumentSyncStateStaleErrorResponse,\n  isPaymentRequiredErrorResponse,\n  isPrincipalPolicyStaleErrorResponse,\n  PaymentRequiredErrorResponseSchema,\n  SESSION_ERROR_CODES,\n} from \"@tearleads/validators/response\";\nimport { MAX_ROTATION_CONTAINER_REKEYS } from \"@tearleads/validators/util\";\nimport type { ListContainerDocumentsOptions, RequestBody } from \"./types\";\n\n/**\n * True when a sync response advances the document's write material past what a\n * cached/primed writer projection holds, so the projection must be re-fetched\n * before the next write. Compares the content-key bundle and KEK target hashes\n * the projection authorizes against the ones the server just committed.\n */\nfunction documentSyncInvalidatesWriterProjection(\n  projection: DocumentWriterProjectionResponse,\n  response: DocumentSyncResponse,\n): boolean {\n  return (\n    projection.contentKeyBundle?.contentKeyEpoch !==\n      response.contentKeyBundle?.contentKeyEpoch ||\n    projection.contentKeyBundle?.linkSetManifestHash !==\n      response.contentKeyBundle?.linkSetManifestHash ||\n    projection.contentKeyBundle?.targetHash !==\n      response.contentKeyBundle?.targetHash ||\n    projection.documentKekTargets?.linkSetManifestHash !==\n      response.documentKekTargets?.linkSetManifestHash ||\n    projection.documentKekTargets?.documentKeyTargetHash !==\n      response.documentKekTargets?.documentKeyTargetHash\n  );\n}\n\n/**\n * Evict a cached/primed document writer projection iff the just-committed sync\n * response moved its write material. Re-checks the cache slot after awaiting so\n * a concurrent invalidation or refetch is not clobbered. `onEvicted` fires\n * whenever an invalidation is issued, so callers can invalidate parallel\n * bookkeeping (e.g. an in-flight result fetch that predates the sync).\n */\nexport async function evictWriterProjectionIfSyncChanged(\n  cache: RequestCache<DocumentWriterProjectionResponse>,\n  documentId: string,\n  response: DocumentSyncResponse,\n  onEvicted?: () => void,\n): Promise<void> {\n  const cached = cache.get(documentId);\n  if (!cached) {\n    // No cached projection to compare against, so whether the sync moved the\n    // write material is undecidable here — but a concurrent in-flight GET may\n    // still predate it. Invalidate conservatively: deleting the (absent) slot\n    // bumps the cache's eviction generation so such a fetch's success is not\n    // cached, and onEvicted drops a shared in-flight result entry. The cost\n    // when nothing is in flight is a skipped cache warm, never wrong data.\n    cache.delete(documentId);\n    onEvicted?.();\n    return;\n  }\n  const projection = await cached.catch(() => null);\n  if (cache.get(documentId) !== cached || !projection) {\n    return;\n  }\n  if (documentSyncInvalidatesWriterProjection(projection, response)) {\n    cache.delete(documentId);\n    onEvicted?.();\n  }\n}\n\nexport interface ErrorResponseDescription {\n  readonly code: string | null;\n  readonly detail: string;\n  readonly error: string | null;\n  readonly stalePrincipalPolicies?: PrincipalPolicyBundleResponse[] | undefined;\n  /** Descendant rekeys a refused rotation must carry, parent-first. */\n  readonly requiredContainerIds?: readonly string[] | undefined;\n  /** Set on a 402 body — the organization whose billing blocked the sync write. */\n  readonly paymentRequiredOrganizationId?: string | undefined;\n}\n\nconst emptyErrorResponseDescription: ErrorResponseDescription = {\n  code: null,\n  detail: \"\",\n  error: null,\n};\n\nconst invalidErrorResponseDescription: ErrorResponseDescription = {\n  ...emptyErrorResponseDescription,\n  detail: \": Invalid failure response body\",\n};\n\nfunction validatedFailureCode(\n  value: object,\n  schema: NonNullable<HttpOperation[\"failureResponses\"]>[number] | undefined,\n): string | null {\n  if (\n    !schema ||\n    !(\"code\" in value) ||\n    typeof value.code !== \"string\" ||\n    value.code.length === 0\n  ) {\n    return null;\n  }\n\n  // Loose object schemas retain extension keys. A code is behavior-bearing\n  // only when changing that field to an unregistered value breaks the selected\n  // status schema, proving that the schema constrains rather than merely\n  // preserves it.\n  const unregisteredCode = `${value.code}\\u0000unregistered`;\n  return schema.safeParse({ ...value, code: unregisteredCode }).success\n    ? null\n    : value.code;\n}\n\nfunction parsedErrorResponseDescription(\n  value: unknown,\n  schema?: NonNullable<HttpOperation[\"failureResponses\"]>[number],\n): ErrorResponseDescription | null {\n  if (\n    !value ||\n    typeof value !== \"object\" ||\n    !(\"error\" in value) ||\n    typeof value.error !== \"string\"\n  ) {\n    return null;\n  }\n\n  const error = value.error.trim();\n  const code = validatedFailureCode(value, schema);\n  if (error.length === 0 && code === null) {\n    return null;\n  }\n  return {\n    code,\n    detail: error.length === 0 ? \"\" : `: ${error}`,\n    error: error.length === 0 ? null : error,\n    // Container mutations and document sync with inline container rekeys can\n    // carry signed policy bundles that make the failed write repairable.\n    ...(schema === ContainerMutationFailureResponseSchema &&\n    isPrincipalPolicyStaleErrorResponse(value)\n      ? { stalePrincipalPolicies: value.principalPolicies }\n      : schema === DocumentSyncErrorResponseSchema &&\n          isDocumentSyncStateStaleErrorResponse(value) &&\n          value.principalPolicies !== undefined\n        ? { stalePrincipalPolicies: value.principalPolicies }\n        : {}),\n    ...((code === CONTAINER_MUTATION_ERROR_CODES.descendantRekeysRequired ||\n      code === CONTAINER_MUTATION_ERROR_CODES.descendantRekeysInaccessible) &&\n    \"requiredContainerIds\" in value &&\n    Array.isArray(value.requiredContainerIds) &&\n    value.requiredContainerIds.length <= MAX_ROTATION_CONTAINER_REKEYS &&\n    value.requiredContainerIds.every(\n      (containerId: unknown): containerId is string =>\n        typeof containerId === \"string\" && containerId.length > 0,\n    )\n      ? { requiredContainerIds: value.requiredContainerIds }\n      : {}),\n    // Sync-write 402s carry the target org for the billing prompt.\n    ...(schema === PaymentRequiredErrorResponseSchema &&\n    isPaymentRequiredErrorResponse(value)\n      ? { paymentRequiredOrganizationId: value.organizationId }\n      : {}),\n  };\n}\n\nexport function bindPrototypeMethods(\n  instance: object,\n  prototype: object,\n): void {\n  for (const propertyName of Object.getOwnPropertyNames(prototype)) {\n    if (propertyName === \"constructor\") {\n      continue;\n    }\n\n    const property = Reflect.get(prototype, propertyName);\n    if (typeof property === \"function\") {\n      Reflect.set(instance, propertyName, property.bind(instance));\n    }\n  }\n}\n\nexport function normalizeApiBaseUrl(\n  baseUrl: string | null | undefined,\n): string {\n  const trimmed = (baseUrl ?? \"\").trim();\n  if (trimmed === \"\" || trimmed === \"/\") {\n    return \"\";\n  }\n\n  // Scan from the end to avoid regex backtracking over internal slash runs.\n  let end = trimmed.length;\n  while (end > 0 && trimmed[end - 1] === \"/\") {\n    end -= 1;\n  }\n  return trimmed.slice(0, end);\n}\n\nexport function hasHeader(\n  headers: Record<string, string> | undefined,\n  name: string,\n): boolean {\n  const normalizedName = name.toLowerCase();\n  return Object.keys(headers ?? {}).some(\n    (headerName) => headerName.toLowerCase() === normalizedName,\n  );\n}\n\nexport function requestFailureKey(input: {\n  method: string;\n  path: string;\n}): string {\n  return `${input.method}\\u0000${input.path}`;\n}\n\nfunction syncWatermarkRequestKey(\n  watermark: SyncWatermark | null | undefined,\n): string {\n  return watermark ? `${watermark.updatedAt}\\u0000${watermark.id}` : \"\";\n}\n\nexport function listContainerParentLanesRequestKey(\n  input: ListContainerParentLanesRequest,\n): string {\n  return JSON.stringify(\n    input.lanes.map((lane) => ({\n      laneId: lane.laneId,\n      limit: lane.limit ?? null,\n      parentId: lane.parentId,\n      watermark: syncWatermarkRequestKey(lane.watermark),\n    })),\n  );\n}\n\nexport function listContainerDocumentsRequestKey(\n  containerId: string,\n  options: ListContainerDocumentsOptions = {},\n): string {\n  const { watermark, ...rest } = options;\n  return JSON.stringify({\n    containerId,\n    ...rest,\n    watermark: syncWatermarkRequestKey(watermark),\n  });\n}\n\n/**\n * Minimal cache surface shared by `Map` and `ApiCache.BoundedCache`, so the\n * request helpers work with either backing store.\n */\ninterface RequestCache<T> {\n  get(key: string): Promise<T | null> | undefined;\n  has(key: string): boolean;\n  set(key: string, value: Promise<T | null>): unknown;\n  delete(key: string): unknown;\n}\n\nexport function cachedRequest<T>(\n  cache: RequestCache<T>,\n  cacheKey: string,\n  request: () => Promise<T | null>,\n): Promise<T | null> {\n  const cached = cache.get(cacheKey);\n  if (cached) {\n    return cached;\n  }\n\n  let pending: Promise<T | null>;\n  pending = request()\n    .then((response) => {\n      if (!response && cache.get(cacheKey) === pending) {\n        cache.delete(cacheKey);\n      }\n      return response;\n    })\n    .catch((error: unknown) => {\n      if (cache.get(cacheKey) === pending) {\n        cache.delete(cacheKey);\n      }\n      throw error;\n    });\n  cache.set(cacheKey, pending);\n  return pending;\n}\n\nexport function dedupedRequest<T>(\n  cache: RequestCache<T>,\n  cacheKey: string,\n  request: () => Promise<T | null>,\n): Promise<T | null> {\n  const cached = cache.get(cacheKey);\n  if (cached) {\n    return cached;\n  }\n\n  let pending: Promise<T | null>;\n  pending = request().finally(() => {\n    if (cache.get(cacheKey) === pending) {\n      cache.delete(cacheKey);\n    }\n  });\n  cache.set(cacheKey, pending);\n  return pending;\n}\n\nexport function isReplayableRequestBody(\n  body: RequestBody | undefined,\n): boolean {\n  return !(\n    typeof ReadableStream === \"function\" && body instanceof ReadableStream\n  );\n}\n\nexport function isSuccessfulResponse(\n  response: Response,\n  additionalSuccessStatuses: readonly number[],\n): boolean {\n  return response.ok || additionalSuccessStatuses.includes(response.status);\n}\n\nfunction validatePaymentRequiredTarget(\n  schema: NonNullable<HttpOperation[\"failureResponses\"]>[number] | undefined,\n  parsed: unknown,\n  expectedOrganizationId: string | undefined,\n): { readonly invalid: boolean; readonly organizationId?: string } {\n  if (schema !== PaymentRequiredErrorResponseSchema) {\n    return { invalid: false };\n  }\n  if (\n    !isPaymentRequiredErrorResponse(parsed) ||\n    (expectedOrganizationId !== undefined &&\n      parsed.organizationId !== expectedOrganizationId)\n  ) {\n    return { invalid: true };\n  }\n  return { invalid: false, organizationId: parsed.organizationId };\n}\n\nfunction paymentRequiredDescription(\n  organizationId: string | undefined,\n): ErrorResponseDescription | null {\n  return organizationId === undefined\n    ? null\n    : {\n        ...emptyErrorResponseDescription,\n        paymentRequiredOrganizationId: organizationId,\n      };\n}\n\nexport async function describeErrorResponse(\n  response: Response,\n  operation?: HttpOperation,\n  expectedPaymentRequiredOrganizationId?: string,\n): Promise<ErrorResponseDescription> {\n  const schema = operation?.failureResponses?.[response.status];\n  if (operation && !schema) {\n    // A cloned response can wait for its other branch to finish cancelling.\n    // Cleanup must not delay reporting an already-invalid status.\n    void response.body?.cancel().catch(() => {});\n    return invalidErrorResponseDescription;\n  }\n  let responseText = \"\";\n\n  try {\n    responseText = (await response.text()).trim();\n  } catch {\n    return operation\n      ? invalidErrorResponseDescription\n      : emptyErrorResponseDescription;\n  }\n\n  if (responseText.length === 0) {\n    return operation\n      ? invalidErrorResponseDescription\n      : emptyErrorResponseDescription;\n  }\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(responseText);\n  } catch {\n    return operation\n      ? invalidErrorResponseDescription\n      : { ...emptyErrorResponseDescription, detail: `: ${responseText}` };\n  }\n\n  if (schema) {\n    const result = schema.safeParse(parsed);\n    if (!result.success) {\n      return invalidErrorResponseDescription;\n    }\n    parsed = result.data;\n  }\n\n  const paymentTarget = validatePaymentRequiredTarget(\n    schema,\n    parsed,\n    expectedPaymentRequiredOrganizationId,\n  );\n  if (paymentTarget.invalid) {\n    return invalidErrorResponseDescription;\n  }\n\n  const description =\n    parsedErrorResponseDescription(parsed, schema) ??\n    paymentRequiredDescription(paymentTarget.organizationId);\n  if (description) {\n    return description;\n  }\n\n  return operation\n    ? emptyErrorResponseDescription\n    : { ...emptyErrorResponseDescription, detail: `: ${responseText}` };\n}\n\nexport function isRefreshableSessionError(\n  status: number,\n  code: string | null,\n): boolean {\n  return status === 401 && code === SESSION_ERROR_CODES.refreshRequired;\n}\n\nexport function errorMessage(error: unknown): string {\n  if (error instanceof Error) {\n    return error.message;\n  }\n  // `instanceof Error` fails for errors thrown across realms (web workers,\n  // serialized payloads); fall back to a duck-typed string `message`.\n  if (\n    typeof error === \"object\" &&\n    error !== null &&\n    \"message\" in error &&\n    typeof error.message === \"string\"\n  ) {\n    return error.message;\n  }\n  return String(error);\n}\n"]}

package/internal/api-client/responseBodyFailure.js

@@ -0,0 +1,13 @@
+/**
+ * Only a body that arrived and failed to parse is a malformed response. A
+ * connection dropped while the body streams rejects `response.json()` too, but
+ * says nothing about what the server sent, so it is a network failure. Every
+ * other rejection lands there too, including a misuse such as a body already
+ * read; none of them is evidence about the server.
+ */
+export function responseBodyFailure(error, message) {
+    return error instanceof SyntaxError
+        ? { kind: "json", message: `failed to parse JSON: ${message}` }
+        : { kind: "network", message: `failed to read the body: ${message}` };
+}
+//# sourceMappingURL=responseBodyFailure.js.map

package/internal/api-client/responseBodyFailure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"responseBodyFailure.js","sourceRoot":"","sources":["responseBodyFailure.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAc,EACd,OAAe;IAKf,OAAO,KAAK,YAAY,WAAW;QACjC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,OAAO,EAAE,EAAE;QAC/D,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,4BAA4B,OAAO,EAAE,EAAE,CAAC;AAC1E,CAAC","sourcesContent":["import type { RequestFailureKind } from \"./types\";\n\n/**\n * Only a body that arrived and failed to parse is a malformed response. A\n * connection dropped while the body streams rejects `response.json()` too, but\n * says nothing about what the server sent, so it is a network failure. Every\n * other rejection lands there too, including a misuse such as a body already\n * read; none of them is evidence about the server.\n */\nexport function responseBodyFailure(\n  error: unknown,\n  message: string,\n): {\n  readonly kind: Extract<RequestFailureKind, \"json\" | \"network\">;\n  readonly message: string;\n} {\n  return error instanceof SyntaxError\n    ? { kind: \"json\", message: `failed to parse JSON: ${message}` }\n    : { kind: \"network\", message: `failed to read the body: ${message}` };\n}\n"]}

package/internal/api-client/routes/auth/session.js

@@ -0,0 +1,31 @@
+import { destroySessionOperation, isDestroySessionOperationResponse, isListSessionsOperationResponse, isLogoutOperationResponse, isUserIdentityOperationResponse, isWebSocketTicketOperationResponse, listSessionsOperation, logoutOperation, operationRequestPath, userIdentityOperation, webSocketTicketOperation, } from "../../../validators/operation/index.js";
+export const destroySession = {
+    isResponse: isDestroySessionOperationResponse,
+    method: destroySessionOperation.method,
+    path(sessionId) {
+        return operationRequestPath(destroySessionOperation, { sessionId });
+    },
+};
+export const listSessions = {
+    isResponse: isListSessionsOperationResponse,
+    method: listSessionsOperation.method,
+    path: operationRequestPath(listSessionsOperation, {}),
+};
+export const logout = {
+    isResponse: isLogoutOperationResponse,
+    method: logoutOperation.method,
+    path: operationRequestPath(logoutOperation, {}),
+};
+export const userIdentity = {
+    isResponse: isUserIdentityOperationResponse,
+    method: userIdentityOperation.method,
+    path(userId) {
+        return operationRequestPath(userIdentityOperation, { userId });
+    },
+};
+export const webSocketTicket = {
+    isResponse: isWebSocketTicketOperationResponse,
+    method: webSocketTicketOperation.method,
+    path: operationRequestPath(webSocketTicketOperation, {}),
+};
+//# sourceMappingURL=session.js.map

package/internal/api-client/routes/auth/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["session.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,iCAAiC,EACjC,+BAA+B,EAC/B,yBAAyB,EACzB,+BAA+B,EAC/B,kCAAkC,EAClC,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,UAAU,EAAE,iCAAiC;IAC7C,MAAM,EAAE,uBAAuB,CAAC,MAAM;IACtC,IAAI,CAAC,SAAiB;QACpB,OAAO,oBAAoB,CAAC,uBAAuB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,UAAU,EAAE,+BAA+B;IAC3C,MAAM,EAAE,qBAAqB,CAAC,MAAM;IACpC,IAAI,EAAE,oBAAoB,CAAC,qBAAqB,EAAE,EAAE,CAAC;CACtD,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,UAAU,EAAE,yBAAyB;IACrC,MAAM,EAAE,eAAe,CAAC,MAAM;IAC9B,IAAI,EAAE,oBAAoB,CAAC,eAAe,EAAE,EAAE,CAAC;CAChD,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,UAAU,EAAE,+BAA+B;IAC3C,MAAM,EAAE,qBAAqB,CAAC,MAAM;IACpC,IAAI,CAAC,MAAc;QACjB,OAAO,oBAAoB,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,kCAAkC;IAC9C,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,CAAC;CACzD,CAAC","sourcesContent":["import {\n  destroySessionOperation,\n  isDestroySessionOperationResponse,\n  isListSessionsOperationResponse,\n  isLogoutOperationResponse,\n  isUserIdentityOperationResponse,\n  isWebSocketTicketOperationResponse,\n  listSessionsOperation,\n  logoutOperation,\n  operationRequestPath,\n  userIdentityOperation,\n  webSocketTicketOperation,\n} from \"@tearleads/validators/operation\";\n\nexport const destroySession = {\n  isResponse: isDestroySessionOperationResponse,\n  method: destroySessionOperation.method,\n  path(sessionId: string) {\n    return operationRequestPath(destroySessionOperation, { sessionId });\n  },\n};\n\nexport const listSessions = {\n  isResponse: isListSessionsOperationResponse,\n  method: listSessionsOperation.method,\n  path: operationRequestPath(listSessionsOperation, {}),\n};\n\nexport const logout = {\n  isResponse: isLogoutOperationResponse,\n  method: logoutOperation.method,\n  path: operationRequestPath(logoutOperation, {}),\n};\n\nexport const userIdentity = {\n  isResponse: isUserIdentityOperationResponse,\n  method: userIdentityOperation.method,\n  path(userId: string) {\n    return operationRequestPath(userIdentityOperation, { userId });\n  },\n};\n\nexport const webSocketTicket = {\n  isResponse: isWebSocketTicketOperationResponse,\n  method: webSocketTicketOperation.method,\n  path: operationRequestPath(webSocketTicketOperation, {}),\n};\n"]}

package/internal/api-client/routes/blobs/attachments.js

@@ -0,0 +1,21 @@
+import { bindBlobAttachmentOperation, detachBlobAttachmentOperation, isBindBlobAttachmentOperationRequest, isBindBlobAttachmentOperationResponse, isDetachBlobAttachmentOperationRequest, isDetachBlobAttachmentOperationResponse, operationRequestPath, } from "../../../validators/operation/index.js";
+export const bindBlobAttachment = {
+    isRequest: isBindBlobAttachmentOperationRequest,
+    isResponse: isBindBlobAttachmentOperationResponse,
+    method: bindBlobAttachmentOperation.method,
+    path(blobId) {
+        return operationRequestPath(bindBlobAttachmentOperation, { blobId });
+    },
+};
+export const detachBlobAttachment = {
+    isRequest: isDetachBlobAttachmentOperationRequest,
+    isResponse: isDetachBlobAttachmentOperationResponse,
+    method: detachBlobAttachmentOperation.method,
+    path(blobId, bindingId) {
+        return operationRequestPath(detachBlobAttachmentOperation, {
+            bindingId,
+            blobId,
+        });
+    },
+};
+//# sourceMappingURL=attachments.js.map

package/internal/api-client/routes/blobs/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["attachments.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,oCAAoC,EACpC,qCAAqC,EACrC,sCAAsC,EACtC,uCAAuC,EACvC,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,SAAS,EAAE,oCAAoC;IAC/C,UAAU,EAAE,qCAAqC;IACjD,MAAM,EAAE,2BAA2B,CAAC,MAAM;IAC1C,IAAI,CAAC,MAAc;QACjB,OAAO,oBAAoB,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,SAAS,EAAE,sCAAsC;IACjD,UAAU,EAAE,uCAAuC;IACnD,MAAM,EAAE,6BAA6B,CAAC,MAAM;IAC5C,IAAI,CAAC,MAAc,EAAE,SAAiB;QACpC,OAAO,oBAAoB,CAAC,6BAA6B,EAAE;YACzD,SAAS;YACT,MAAM;SACP,CAAC,CAAC;IACL,CAAC;CACF,CAAC","sourcesContent":["import {\n  bindBlobAttachmentOperation,\n  detachBlobAttachmentOperation,\n  isBindBlobAttachmentOperationRequest,\n  isBindBlobAttachmentOperationResponse,\n  isDetachBlobAttachmentOperationRequest,\n  isDetachBlobAttachmentOperationResponse,\n  operationRequestPath,\n} from \"@tearleads/validators/operation\";\n\nexport const bindBlobAttachment = {\n  isRequest: isBindBlobAttachmentOperationRequest,\n  isResponse: isBindBlobAttachmentOperationResponse,\n  method: bindBlobAttachmentOperation.method,\n  path(blobId: string) {\n    return operationRequestPath(bindBlobAttachmentOperation, { blobId });\n  },\n};\n\nexport const detachBlobAttachment = {\n  isRequest: isDetachBlobAttachmentOperationRequest,\n  isResponse: isDetachBlobAttachmentOperationResponse,\n  method: detachBlobAttachmentOperation.method,\n  path(blobId: string, bindingId: string) {\n    return operationRequestPath(detachBlobAttachmentOperation, {\n      bindingId,\n      blobId,\n    });\n  },\n};\n"]}

package/internal/api-client/routes/blobs/get.d.ts

@@ -0,0 +1,14 @@
+import type { BinaryResponseOperationTransport } from "../../binaryResponseOperationTransport.js";
+export interface BlobBytesResponse {
+    readonly blobId: string;
+    readonly byteLength: number;
+    readonly encryptedBytes: ReadableStream<Uint8Array>;
+    readonly sha256: string;
+}
+export interface UploadMultipartBlobPartBytesRequest {
+    readonly byteLength: number;
+    readonly encryptedBytes: Blob | BufferSource;
+    readonly sha256: string;
+    readonly uploadId: string;
+}
+export declare function getBlobBytes(transport: BinaryResponseOperationTransport, blobId: string): Promise<BlobBytesResponse | null>;

package/internal/api-client/routes/blobs/get.js

@@ -0,0 +1,46 @@
+import { blobWireHeaderKeys, getBlobBytesOperation, } from "../../../validators/operation/index.js";
+export async function getBlobBytes(transport, blobId) {
+    const result = await transport.requestBinaryResponse(getBlobBytesOperation, {
+        params: { blobId },
+    });
+    if (!result) {
+        return null;
+    }
+    const { headers, response } = result;
+    const byteLength = Number(headers[blobWireHeaderKeys.blobByteLength]);
+    // On the browser / WKWebView-fetch path the body is streamed, so
+    // `response.body` is a live ReadableStream. Under a native HTTP bridge
+    // (CapacitorHttp — which the Capacitor iOS/Android builds enable so cross-origin
+    // API requests reach the backend at all; the WKWebView's own fetch fails from
+    // the app's https://localhost origin) the response is buffered natively and
+    // `response.body` is null even for a valid 200. So take the bytes either way:
+    // the stream when present, otherwise buffer the response and re-wrap it as a
+    // one-shot ReadableStream so callers keep a single streaming interface. This
+    // does not weaken validation — a truncated or corrupted body is still caught
+    // downstream by the X-Tearleads-Blob-Sha256 integrity check; it only stops a
+    // buffered-but-valid response from being rejected here as malformed.
+    const encryptedBytes = response.body ?? bufferedResponseBodyStream(await response.arrayBuffer());
+    return {
+        blobId: headers[blobWireHeaderKeys.blobId],
+        byteLength,
+        encryptedBytes,
+        sha256: headers[blobWireHeaderKeys.blobSha256],
+    };
+}
+// Wraps a fully-buffered response body as a single-chunk ReadableStream, so a
+// native HTTP bridge that only exposes the buffered bytes (no WHATWG
+// `response.body` stream) can still satisfy the streaming
+// `BlobBytesResponse.encryptedBytes` contract. An empty buffer yields an
+// immediately-closed, zero-chunk stream.
+function bufferedResponseBodyStream(buffer) {
+    const bytes = new Uint8Array(buffer);
+    return new ReadableStream({
+        start(controller) {
+            if (bytes.byteLength > 0) {
+                controller.enqueue(bytes);
+            }
+            controller.close();
+        },
+    });
+}
+//# sourceMappingURL=get.js.map

package/internal/api-client/routes/blobs/get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.js","sourceRoot":"","sources":["get.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAiBzC,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAA2C,EAC3C,MAAc;IAEd,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,qBAAqB,CAAC,qBAAqB,EAAE;QAC1E,MAAM,EAAE,EAAE,MAAM,EAAE;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IACrC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC;IAEtE,iEAAiE;IACjE,uEAAuE;IACvE,iFAAiF;IACjF,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,cAAc,GAClB,QAAQ,CAAC,IAAI,IAAI,0BAA0B,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAE5E,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC1C,UAAU;QACV,cAAc;QACd,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,UAAU,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,qEAAqE;AACrE,0DAA0D;AAC1D,yEAAyE;AACzE,yCAAyC;AACzC,SAAS,0BAA0B,CACjC,MAAmB;IAEnB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,IAAI,cAAc,CAAa;QACpC,KAAK,CAAC,UAAU;YACd,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;gBACzB,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,CAAC;YACD,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  blobWireHeaderKeys,\n  getBlobBytesOperation,\n} from \"@tearleads/validators/operation\";\nimport type { BinaryResponseOperationTransport } from \"../../binaryResponseOperationTransport\";\n\nexport interface BlobBytesResponse {\n  readonly blobId: string;\n  readonly byteLength: number;\n  readonly encryptedBytes: ReadableStream<Uint8Array>;\n  readonly sha256: string;\n}\n\nexport interface UploadMultipartBlobPartBytesRequest {\n  readonly byteLength: number;\n  readonly encryptedBytes: Blob | BufferSource;\n  readonly sha256: string;\n  readonly uploadId: string;\n}\n\nexport async function getBlobBytes(\n  transport: BinaryResponseOperationTransport,\n  blobId: string,\n): Promise<BlobBytesResponse | null> {\n  const result = await transport.requestBinaryResponse(getBlobBytesOperation, {\n    params: { blobId },\n  });\n  if (!result) {\n    return null;\n  }\n\n  const { headers, response } = result;\n  const byteLength = Number(headers[blobWireHeaderKeys.blobByteLength]);\n\n  // On the browser / WKWebView-fetch path the body is streamed, so\n  // `response.body` is a live ReadableStream. Under a native HTTP bridge\n  // (CapacitorHttp — which the Capacitor iOS/Android builds enable so cross-origin\n  // API requests reach the backend at all; the WKWebView's own fetch fails from\n  // the app's https://localhost origin) the response is buffered natively and\n  // `response.body` is null even for a valid 200. So take the bytes either way:\n  // the stream when present, otherwise buffer the response and re-wrap it as a\n  // one-shot ReadableStream so callers keep a single streaming interface. This\n  // does not weaken validation — a truncated or corrupted body is still caught\n  // downstream by the X-Tearleads-Blob-Sha256 integrity check; it only stops a\n  // buffered-but-valid response from being rejected here as malformed.\n  const encryptedBytes =\n    response.body ?? bufferedResponseBodyStream(await response.arrayBuffer());\n\n  return {\n    blobId: headers[blobWireHeaderKeys.blobId],\n    byteLength,\n    encryptedBytes,\n    sha256: headers[blobWireHeaderKeys.blobSha256],\n  };\n}\n\n// Wraps a fully-buffered response body as a single-chunk ReadableStream, so a\n// native HTTP bridge that only exposes the buffered bytes (no WHATWG\n// `response.body` stream) can still satisfy the streaming\n// `BlobBytesResponse.encryptedBytes` contract. An empty buffer yields an\n// immediately-closed, zero-chunk stream.\nfunction bufferedResponseBodyStream(\n  buffer: ArrayBuffer,\n): ReadableStream<Uint8Array> {\n  const bytes = new Uint8Array(buffer);\n  return new ReadableStream<Uint8Array>({\n    start(controller) {\n      if (bytes.byteLength > 0) {\n        controller.enqueue(bytes);\n      }\n      controller.close();\n    },\n  });\n}\n"]}

package/internal/api-client/routes/blobs/multipart.js

@@ -0,0 +1,25 @@
+import { completeMultipartBlobStageOperation, getMultipartBlobStageOperation, initiateMultipartBlobStageOperation, isCompleteMultipartBlobStageOperationRequest, isCompleteMultipartBlobStageOperationResponse, isGetMultipartBlobStageOperationResponse, isInitiateMultipartBlobStageOperationRequest, isInitiateMultipartBlobStageOperationResponse, operationRequestPath, } from "../../../validators/operation/index.js";
+export const initiateMultipartBlobStage = {
+    isRequest: isInitiateMultipartBlobStageOperationRequest,
+    isResponse: isInitiateMultipartBlobStageOperationResponse,
+    method: initiateMultipartBlobStageOperation.method,
+    path: operationRequestPath(initiateMultipartBlobStageOperation, {}),
+};
+export const getMultipartBlobStage = {
+    isResponse: isGetMultipartBlobStageOperationResponse,
+    method: getMultipartBlobStageOperation.method,
+    path(stageId) {
+        return operationRequestPath(getMultipartBlobStageOperation, { stageId });
+    },
+};
+export const completeMultipartBlobStage = {
+    isRequest: isCompleteMultipartBlobStageOperationRequest,
+    isResponse: isCompleteMultipartBlobStageOperationResponse,
+    method: completeMultipartBlobStageOperation.method,
+    path(stageId) {
+        return operationRequestPath(completeMultipartBlobStageOperation, {
+            stageId,
+        });
+    },
+};
+//# sourceMappingURL=multipart.js.map

package/internal/api-client/routes/blobs/multipart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipart.js","sourceRoot":"","sources":["multipart.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mCAAmC,EACnC,8BAA8B,EAC9B,mCAAmC,EACnC,4CAA4C,EAC5C,6CAA6C,EAC7C,wCAAwC,EACxC,4CAA4C,EAC5C,6CAA6C,EAC7C,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,SAAS,EAAE,4CAA4C;IACvD,UAAU,EAAE,6CAA6C;IACzD,MAAM,EAAE,mCAAmC,CAAC,MAAM;IAClD,IAAI,EAAE,oBAAoB,CAAC,mCAAmC,EAAE,EAAE,CAAC;CACpE,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU,EAAE,wCAAwC;IACpD,MAAM,EAAE,8BAA8B,CAAC,MAAM;IAC7C,IAAI,CAAC,OAAe;QAClB,OAAO,oBAAoB,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,SAAS,EAAE,4CAA4C;IACvD,UAAU,EAAE,6CAA6C;IACzD,MAAM,EAAE,mCAAmC,CAAC,MAAM;IAClD,IAAI,CAAC,OAAe;QAClB,OAAO,oBAAoB,CAAC,mCAAmC,EAAE;YAC/D,OAAO;SACR,CAAC,CAAC;IACL,CAAC;CACF,CAAC","sourcesContent":["import {\n  completeMultipartBlobStageOperation,\n  getMultipartBlobStageOperation,\n  initiateMultipartBlobStageOperation,\n  isCompleteMultipartBlobStageOperationRequest,\n  isCompleteMultipartBlobStageOperationResponse,\n  isGetMultipartBlobStageOperationResponse,\n  isInitiateMultipartBlobStageOperationRequest,\n  isInitiateMultipartBlobStageOperationResponse,\n  operationRequestPath,\n} from \"@tearleads/validators/operation\";\n\nexport const initiateMultipartBlobStage = {\n  isRequest: isInitiateMultipartBlobStageOperationRequest,\n  isResponse: isInitiateMultipartBlobStageOperationResponse,\n  method: initiateMultipartBlobStageOperation.method,\n  path: operationRequestPath(initiateMultipartBlobStageOperation, {}),\n};\n\nexport const getMultipartBlobStage = {\n  isResponse: isGetMultipartBlobStageOperationResponse,\n  method: getMultipartBlobStageOperation.method,\n  path(stageId: string) {\n    return operationRequestPath(getMultipartBlobStageOperation, { stageId });\n  },\n};\n\nexport const completeMultipartBlobStage = {\n  isRequest: isCompleteMultipartBlobStageOperationRequest,\n  isResponse: isCompleteMultipartBlobStageOperationResponse,\n  method: completeMultipartBlobStageOperation.method,\n  path(stageId: string) {\n    return operationRequestPath(completeMultipartBlobStageOperation, {\n      stageId,\n    });\n  },\n};\n"]}

package/internal/api-client/routes/containers/mutations.js

@@ -0,0 +1,54 @@
+import { createContainerOperation, createContainerWithMetadataDocumentOperation, deleteContainerOperation, isContainerMutationOperationRequest, isContainerMutationOperationResponse, isContainerRotationOperationRequest, isContainerRotationOperationResponse, isCreateContainerWithMetadataDocumentOperationRequest, isCreateContainerWithMetadataDocumentOperationResponse, isDeleteContainerOperationResponse, moveContainerOperation, operationRequestPath, reciteContainerOperation, rekeyContainerOperation, revokeContainerOperation, shareContainerOperation, } from "../../../validators/operation/index.js";
+import { isContainerReciteRequest } from "../../../validators/request/index.js";
+import { isContainerReciteResponse } from "../../../validators/response/index.js";
+export const containerRecite = {
+    isRequest: isContainerReciteRequest,
+    isResponse: isContainerReciteResponse,
+    method: reciteContainerOperation.method,
+    path: (containerId) => operationRequestPath(reciteContainerOperation, { containerId }),
+};
+export const containerCreate = {
+    isRequest: isContainerMutationOperationRequest,
+    isResponse: isContainerMutationOperationResponse,
+    method: createContainerOperation.method,
+    path: operationRequestPath(createContainerOperation, {}),
+};
+export const containerCreateWithMetadataDocument = {
+    isRequest: isCreateContainerWithMetadataDocumentOperationRequest,
+    isResponse: isCreateContainerWithMetadataDocumentOperationResponse,
+    method: createContainerWithMetadataDocumentOperation.method,
+    path: operationRequestPath(createContainerWithMetadataDocumentOperation, {}),
+};
+function containerMutationPath(operation, containerId) {
+    return operationRequestPath(operation, { containerId });
+}
+export const containerShare = {
+    isRequest: isContainerMutationOperationRequest,
+    isResponse: isContainerMutationOperationResponse,
+    method: shareContainerOperation.method,
+    path: (containerId) => containerMutationPath(shareContainerOperation, containerId),
+};
+export const containerRevoke = {
+    isRequest: isContainerRotationOperationRequest,
+    isResponse: isContainerRotationOperationResponse,
+    method: revokeContainerOperation.method,
+    path: (containerId) => containerMutationPath(revokeContainerOperation, containerId),
+};
+export const containerRekey = {
+    isRequest: isContainerRotationOperationRequest,
+    isResponse: isContainerRotationOperationResponse,
+    method: rekeyContainerOperation.method,
+    path: (containerId) => containerMutationPath(rekeyContainerOperation, containerId),
+};
+export const containerMove = {
+    isRequest: isContainerRotationOperationRequest,
+    isResponse: isContainerRotationOperationResponse,
+    method: moveContainerOperation.method,
+    path: (containerId) => containerMutationPath(moveContainerOperation, containerId),
+};
+export const containerDelete = {
+    isResponse: isDeleteContainerOperationResponse,
+    method: deleteContainerOperation.method,
+    path: (containerId) => operationRequestPath(deleteContainerOperation, { containerId }),
+};
+//# sourceMappingURL=mutations.js.map

package/internal/api-client/routes/containers/mutations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutations.js","sourceRoot":"","sources":["mutations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,4CAA4C,EAC5C,wBAAwB,EACxB,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,oCAAoC,EACpC,qDAAqD,EACrD,sDAAsD,EACtD,kCAAkC,EAClC,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,wBAAwB;IACnC,UAAU,EAAE,yBAAyB;IACrC,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,WAAW,EAAE,CAAC;CACzD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,CAAC;CAChD,CAAC;AAEX,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,SAAS,EAAE,qDAAqD;IAChE,UAAU,EAAE,sDAAsD;IAClE,MAAM,EAAE,4CAA4C,CAAC,MAAM;IAC3D,IAAI,EAAE,oBAAoB,CAAC,4CAA4C,EAAE,EAAE,CAAC;CACpE,CAAC;AAEX,SAAS,qBAAqB,CAC5B,SAIkC,EAClC,WAAmB;IAEnB,OAAO,oBAAoB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,uBAAuB,CAAC,MAAM;IACtC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,uBAAuB,EAAE,WAAW,CAAC;CACrD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,wBAAwB,EAAE,WAAW,CAAC;CACtD,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,uBAAuB,CAAC,MAAM;IACtC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,uBAAuB,EAAE,WAAW,CAAC;CACrD,CAAC;AAEX,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,sBAAsB,CAAC,MAAM;IACrC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,sBAAsB,EAAE,WAAW,CAAC;CACpD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,kCAAkC;IAC9C,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,WAAW,EAAE,CAAC;CACzD,CAAC","sourcesContent":["import {\n  createContainerOperation,\n  createContainerWithMetadataDocumentOperation,\n  deleteContainerOperation,\n  isContainerMutationOperationRequest,\n  isContainerMutationOperationResponse,\n  isContainerRotationOperationRequest,\n  isContainerRotationOperationResponse,\n  isCreateContainerWithMetadataDocumentOperationRequest,\n  isCreateContainerWithMetadataDocumentOperationResponse,\n  isDeleteContainerOperationResponse,\n  moveContainerOperation,\n  operationRequestPath,\n  reciteContainerOperation,\n  rekeyContainerOperation,\n  revokeContainerOperation,\n  shareContainerOperation,\n} from \"@tearleads/validators/operation\";\nimport { isContainerReciteRequest } from \"@tearleads/validators/request\";\nimport { isContainerReciteResponse } from \"@tearleads/validators/response\";\n\nexport const containerRecite = {\n  isRequest: isContainerReciteRequest,\n  isResponse: isContainerReciteResponse,\n  method: reciteContainerOperation.method,\n  path: (containerId: string) =>\n    operationRequestPath(reciteContainerOperation, { containerId }),\n} as const;\n\nexport const containerCreate = {\n  isRequest: isContainerMutationOperationRequest,\n  isResponse: isContainerMutationOperationResponse,\n  method: createContainerOperation.method,\n  path: operationRequestPath(createContainerOperation, {}),\n} as const;\n\nexport const containerCreateWithMetadataDocument = {\n  isRequest: isCreateContainerWithMetadataDocumentOperationRequest,\n  isResponse: isCreateContainerWithMetadataDocumentOperationResponse,\n  method: createContainerWithMetadataDocumentOperation.method,\n  path: operationRequestPath(createContainerWithMetadataDocumentOperation, {}),\n} as const;\n\nfunction containerMutationPath(\n  operation:\n    | typeof moveContainerOperation\n    | typeof rekeyContainerOperation\n    | typeof revokeContainerOperation\n    | typeof shareContainerOperation,\n  containerId: string,\n) {\n  return operationRequestPath(operation, { containerId });\n}\n\nexport const containerShare = {\n  isRequest: isContainerMutationOperationRequest,\n  isResponse: isContainerMutationOperationResponse,\n  method: shareContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(shareContainerOperation, containerId),\n} as const;\n\nexport const containerRevoke = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: revokeContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(revokeContainerOperation, containerId),\n} as const;\n\nexport const containerRekey = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: rekeyContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(rekeyContainerOperation, containerId),\n} as const;\n\nexport const containerMove = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: moveContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(moveContainerOperation, containerId),\n} as const;\n\nexport const containerDelete = {\n  isResponse: isDeleteContainerOperationResponse,\n  method: deleteContainerOperation.method,\n  path: (containerId: string) =>\n    operationRequestPath(deleteContainerOperation, { containerId }),\n} as const;\n"]}