@tearleads/client-sdk 0.1.14 → 0.1.16

package/internal/crypto/keying/principalPolicyCurrentMutation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalPolicyCurrentMutation.js","sourceRoot":"","sources":["principalPolicyCurrentMutation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uCAAuC,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EACL,mCAAmC,EACnC,iCAAiC,GAClC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8CAA8C,EAC9C,oCAAoC,EACpC,8CAA8C,GAC/C,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,oCAAoC,EAAE,MAAM,kCAAkC,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAKlF,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAG1D,qFAAqF;AACrF,MAAM,UAAU,oCAAoC,CAAC,KAKpD;IACC,OAAO,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5B,MAAM,KAAK,GAAG,iCAAiC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,iBAAiB,GAAG,eAAe,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,uCAAuC,CAAC;YAC1D,KAAK,EAAE,OAAO,CAAC,YAAY;YAC3B,UAAU,EAAE,OAAO,CAAC,iBAAiB;YACrC,MAAM,EAAE,OAAO,CAAC,aAAa;SAC9B,CAAC,CAAC;QACH,IACE,CAAC,oCAAoC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;YACtE,KAAK,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS;YAEtD,iBAAiB,CACf,eAAe,EACf,sDAAsD,CACvD,CAAC;QACJ,IAAI,KAAK,CAAC,KAAK,CAAC,aAAa,KAAK,OAAO;YACvC,iBAAiB,CACf,iBAAiB,EACjB,wCAAwC,CACzC,CAAC;QACJ,MAAM,4BAA4B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,MAAM,oCAAoC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CACpB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CACtE,EACD,CAAC;YACD,MAAM,SAAS,GAAG,8CAA8C,CAAC;gBAC/D,SAAS,EAAE,iBAAiB;aAC7B,CAAC,CAAC;YACH,SAAS,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;YAClD,MAAM,IAAI,GAAG;gBACX,KAAK,EAAE;oBACL,YAAY;oBACZ,iBAAiB,EAAE,iBAAiB,EAAE,WAAW,IAAI,IAAI;iBAC1D;aACF,CAAC;YACF,8CAA8C,CAAC;gBAC7C,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,SAAS;aACpB,CAAC,CAAC;YACH,IACE,CAAC,oCAAoC,CAAC;gBACpC,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,SAAS;aACpB,CAAC;gBAEF,iBAAiB,CACf,cAAc,EACd,iDAAiD,CAClD,CAAC;QACN,CAAC;QACD,OAAO,mCAAmC,CACxC,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,eAAe,CACtB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { normalizePrincipalPolicyStateChainEntry } from \"./principalPolicyChainEntry\";\nimport {\n  issueVerifiedPrincipalPolicyCurrent,\n  ownVerifiedPrincipalPolicyCurrent,\n} from \"./principalPolicyCurrentEvidence\";\nimport {\n  createPrincipalPolicyExternalAuthorityVerifier,\n  externalAuthorityIncludesAdminSigner,\n  verifyPrincipalPolicyExternalAuthorityProgress,\n} from \"./principalPolicyExternalAuthority\";\nimport type { PrincipalPolicyExternalAuthority } from \"./principalPolicyExternalAuthorityTypes\";\nimport { verifyPrincipalPolicyMemberEnvelopes } from \"./principalPolicyMemberEnvelopes\";\nimport { verifyPrincipalPolicyPayload } from \"./principalPolicyPayload\";\nimport { principalPolicyStateMatchesReference } from \"./principalPolicyReference\";\nimport type {\n  PrincipalPolicyCurrent,\n  VerifiedPrincipalPolicyCurrent,\n} from \"./principalPolicyTypes\";\nimport { runVerifier, throwVerification } from \"./shared\";\nimport type { KeyingVerificationResult } from \"./types\";\n\n/** Bind a group's current artifacts and next signer to privately issued evidence. */\nexport function verifyPrincipalPolicyCurrentMutation(input: {\n  readonly current: PrincipalPolicyCurrent;\n  readonly policy: VerifiedPrincipalPolicyCurrent;\n  readonly signerUserId: string;\n  readonly externalAuthority?: PrincipalPolicyExternalAuthority | undefined;\n}): Promise<KeyingVerificationResult<VerifiedPrincipalPolicyCurrent>> {\n  return runVerifier(async () => {\n    const prior = ownVerifiedPrincipalPolicyCurrent(input.policy);\n    const current = structuredClone(input.current);\n    const externalAuthority = structuredClone(input.externalAuthority);\n    const signerUserId = input.signerUserId;\n    const entry = await normalizePrincipalPolicyStateChainEntry({\n      state: current.currentState,\n      projection: current.currentProjection,\n      grants: current.currentGrants,\n    });\n    if (\n      !principalPolicyStateMatchesReference(entry.state, prior.policy.state) ||\n      entry.state.signature !== prior.policy.state.signature\n    )\n      throwVerification(\n        \"hash_mismatch\",\n        \"current artifacts differ from issued policy evidence\",\n      );\n    if (entry.state.principalType !== \"group\")\n      throwVerification(\n        \"object_mismatch\",\n        \"group mutation requires a group policy\",\n      );\n    await verifyPrincipalPolicyPayload({ bundle: current });\n    await verifyPrincipalPolicyMemberEnvelopes({ bundle: current });\n    if (\n      !entry.projection.some(\n        (member) => member.userId === signerUserId && member.role === \"admin\",\n      )\n    ) {\n      const authority = createPrincipalPolicyExternalAuthorityVerifier({\n        authority: externalAuthority,\n      });\n      authority.latestReference = prior.latestAuthority;\n      const next = {\n        state: {\n          signerUserId,\n          externalAuthority: externalAuthority?.currentHead ?? null,\n        },\n      };\n      verifyPrincipalPolicyExternalAuthorityProgress({\n        entry: next,\n        verifier: authority,\n      });\n      if (\n        !externalAuthorityIncludesAdminSigner({\n          entry: next,\n          verifier: authority,\n        })\n      )\n        throwVerification(\n          \"unauthorized\",\n          \"group mutation signer is not an authority admin\",\n        );\n    }\n    return issueVerifiedPrincipalPolicyCurrent(\n      prior.policy,\n      prior.latestAuthority,\n    );\n  });\n}\n"]}

package/internal/crypto/keying/principalPolicyCurrentSuccessor.d.ts

@@ -0,0 +1,10 @@
+import type { PrincipalPolicyExternalAuthority } from "./principalPolicyExternalAuthorityTypes.js";
+import type { PrincipalPolicyCurrent, VerifiedPrincipalPolicyCurrent } from "./principalPolicyTypes.js";
+import type { KeyingVerificationResult, PrincipalPolicySignerPublicKey } from "./types.js";
+/** Verify one successor of locally verified current evidence, retaining only that pair. */
+export declare function verifyPrincipalPolicyCurrentSuccessor(input: {
+    readonly previous: VerifiedPrincipalPolicyCurrent;
+    readonly current: PrincipalPolicyCurrent;
+    readonly signerPublicKeys: readonly PrincipalPolicySignerPublicKey[];
+    readonly externalAuthority?: PrincipalPolicyExternalAuthority | undefined;
+}): Promise<KeyingVerificationResult<VerifiedPrincipalPolicyCurrent>>;

package/internal/crypto/keying/principalPolicyCurrentSuccessor.js

@@ -0,0 +1,60 @@
+import { normalizePrincipalPolicyStateChainEntry } from "./principalPolicyChainEntry.js";
+import { issueVerifiedPrincipalPolicyCurrent, ownVerifiedPrincipalPolicyCurrent, } from "./principalPolicyCurrentEvidence.js";
+import { verifyPrincipalHistoryPage } from "./principalPolicyHistoryPage.js";
+import { verifyPrincipalPolicyMemberEnvelopes } from "./principalPolicyMemberEnvelopes.js";
+import { verifyPrincipalPolicyPayload } from "./principalPolicyPayload.js";
+import { runVerifier } from "./shared.js";
+/** Verify one successor of locally verified current evidence, retaining only that pair. */
+export function verifyPrincipalPolicyCurrentSuccessor(input) {
+    return runVerifier(async () => {
+        const prior = ownVerifiedPrincipalPolicyCurrent(input.previous);
+        const current = structuredClone(input.current);
+        const signerPublicKeys = structuredClone(input.signerPublicKeys);
+        const externalAuthority = structuredClone(input.externalAuthority);
+        const previous = await normalizePrincipalPolicyStateChainEntry({
+            state: prior.policy.state,
+            projection: prior.policy.projection,
+            grants: prior.policy.grants,
+        });
+        const checked = await verifyPrincipalHistoryPage({
+            principalId: prior.policy.principalId,
+            principalType: prior.policy.principalType,
+            previous,
+            latestAuthority: prior.latestAuthority,
+            references: [],
+            checkpoint: null,
+            page: {
+                entries: [
+                    {
+                        state: current.currentState,
+                        projection: current.currentProjection,
+                        grants: current.currentGrants,
+                    },
+                ],
+                signerPublicKeys,
+                ...(externalAuthority ? { externalAuthority } : {}),
+            },
+        });
+        await verifyPrincipalPolicyPayload({ bundle: current });
+        await verifyPrincipalPolicyMemberEnvelopes({ bundle: current });
+        const { state, projection, grants } = checked.last;
+        return issueVerifiedPrincipalPolicyCurrent({
+            principalId: state.principalId,
+            principalType: state.principalType,
+            version: state.version,
+            keyEpoch: state.keyEpoch,
+            stateHash: state.stateHash,
+            state,
+            projection,
+            grants,
+            retainedHistory: [previous, checked.last],
+            checkpoint: {
+                principalId: state.principalId,
+                principalType: state.principalType,
+                version: state.version,
+                stateHash: state.stateHash,
+            },
+        }, checked.latestAuthority);
+    });
+}
+//# sourceMappingURL=principalPolicyCurrentSuccessor.js.map

package/internal/crypto/keying/principalPolicyCurrentSuccessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principalPolicyCurrentSuccessor.js","sourceRoot":"","sources":["principalPolicyCurrentSuccessor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uCAAuC,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EACL,mCAAmC,EACnC,iCAAiC,GAClC,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,oCAAoC,EAAE,MAAM,kCAAkC,CAAC;AACxF,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AAKxE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAMvC,2FAA2F;AAC3F,MAAM,UAAU,qCAAqC,CAAC,KAKrD;IACC,OAAO,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5B,MAAM,KAAK,GAAG,iCAAiC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,gBAAgB,GAAG,eAAe,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACjE,MAAM,iBAAiB,GAAG,eAAe,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,uCAAuC,CAAC;YAC7D,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;YACzB,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;YACnC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;SAC5B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC;YAC/C,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;YACrC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa;YACzC,QAAQ;YACR,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,UAAU,EAAE,EAAE;YACd,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE;gBACJ,OAAO,EAAE;oBACP;wBACE,KAAK,EAAE,OAAO,CAAC,YAAY;wBAC3B,UAAU,EAAE,OAAO,CAAC,iBAAiB;wBACrC,MAAM,EAAE,OAAO,CAAC,aAAa;qBAC9B;iBACF;gBACD,gBAAgB;gBAChB,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD;SACF,CAAC,CAAC;QACH,MAAM,4BAA4B,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,MAAM,oCAAoC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QACnD,OAAO,mCAAmC,CACxC;YACE,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK;YACL,UAAU;YACV,MAAM;YACN,eAAe,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC;YACzC,UAAU,EAAE;gBACV,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B;SACF,EACD,OAAO,CAAC,eAAe,CACxB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { normalizePrincipalPolicyStateChainEntry } from \"./principalPolicyChainEntry\";\nimport {\n  issueVerifiedPrincipalPolicyCurrent,\n  ownVerifiedPrincipalPolicyCurrent,\n} from \"./principalPolicyCurrentEvidence\";\nimport type { PrincipalPolicyExternalAuthority } from \"./principalPolicyExternalAuthorityTypes\";\nimport { verifyPrincipalHistoryPage } from \"./principalPolicyHistoryPage\";\nimport { verifyPrincipalPolicyMemberEnvelopes } from \"./principalPolicyMemberEnvelopes\";\nimport { verifyPrincipalPolicyPayload } from \"./principalPolicyPayload\";\nimport type {\n  PrincipalPolicyCurrent,\n  VerifiedPrincipalPolicyCurrent,\n} from \"./principalPolicyTypes\";\nimport { runVerifier } from \"./shared\";\nimport type {\n  KeyingVerificationResult,\n  PrincipalPolicySignerPublicKey,\n} from \"./types\";\n\n/** Verify one successor of locally verified current evidence, retaining only that pair. */\nexport function verifyPrincipalPolicyCurrentSuccessor(input: {\n  readonly previous: VerifiedPrincipalPolicyCurrent;\n  readonly current: PrincipalPolicyCurrent;\n  readonly signerPublicKeys: readonly PrincipalPolicySignerPublicKey[];\n  readonly externalAuthority?: PrincipalPolicyExternalAuthority | undefined;\n}): Promise<KeyingVerificationResult<VerifiedPrincipalPolicyCurrent>> {\n  return runVerifier(async () => {\n    const prior = ownVerifiedPrincipalPolicyCurrent(input.previous);\n    const current = structuredClone(input.current);\n    const signerPublicKeys = structuredClone(input.signerPublicKeys);\n    const externalAuthority = structuredClone(input.externalAuthority);\n    const previous = await normalizePrincipalPolicyStateChainEntry({\n      state: prior.policy.state,\n      projection: prior.policy.projection,\n      grants: prior.policy.grants,\n    });\n    const checked = await verifyPrincipalHistoryPage({\n      principalId: prior.policy.principalId,\n      principalType: prior.policy.principalType,\n      previous,\n      latestAuthority: prior.latestAuthority,\n      references: [],\n      checkpoint: null,\n      page: {\n        entries: [\n          {\n            state: current.currentState,\n            projection: current.currentProjection,\n            grants: current.currentGrants,\n          },\n        ],\n        signerPublicKeys,\n        ...(externalAuthority ? { externalAuthority } : {}),\n      },\n    });\n    await verifyPrincipalPolicyPayload({ bundle: current });\n    await verifyPrincipalPolicyMemberEnvelopes({ bundle: current });\n    const { state, projection, grants } = checked.last;\n    return issueVerifiedPrincipalPolicyCurrent(\n      {\n        principalId: state.principalId,\n        principalType: state.principalType,\n        version: state.version,\n        keyEpoch: state.keyEpoch,\n        stateHash: state.stateHash,\n        state,\n        projection,\n        grants,\n        retainedHistory: [previous, checked.last],\n        checkpoint: {\n          principalId: state.principalId,\n          principalType: state.principalType,\n          version: state.version,\n          stateHash: state.stateHash,\n        },\n      },\n      checked.latestAuthority,\n    );\n  });\n}\n"]}

package/internal/crypto/keying/principalPolicyHistory.js

@@ -30,6 +30,9 @@ class PrincipalPolicyHistoryVerifierImpl {
                 this.#retained.set(entry.state.version, entry);
         }
     }
+    getExternalAuthorityReference() {
+        return this.#latestAuthority ? { ...this.#latestAuthority } : null;
+    }
     append(page) {
         return runVerifier(async () => {
             this.#assertIdle();
@@ -115,7 +118,10 @@ class PrincipalPolicyHistoryVerifierImpl {
                     stateHash: state.stateHash,
                 },
             });
-            return { ok: true, value: makeVerifiedPrincipalPolicyHistory(owned) };
+            return {
+                ok: true,
+                value: makeVerifiedPrincipalPolicyHistory(owned, this.#latestAuthority),
+            };
         }
         catch (error) {
             return toVerificationResult(error);
@@ -135,6 +141,7 @@ export function createPrincipalPolicyHistoryVerifier(input) {
 }
 function publicVerifier(verifier) {
     return {
+        getExternalAuthorityReference: () => verifier.getExternalAuthorityReference(),
         append: (page) => verifier.append(page),
         finish: (expectedHead) => verifier.finish(expectedHead),
         exportProgress: (options) => verifier.exportProgress(options),

package/internal/crypto/keying/principalPolicyHistory.js.map

@@ -1 +1 @@
-{"version":3,"file":"principalPolicyHistory.js","sourceRoot":"","sources":["principalPolicyHistory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,GACjC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EACL,8CAA8C,GAE/C,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,gCAAgC,EAChC,oCAAoC,GACrC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EACrC,4BAA4B,GAC7B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,kCAAkC,GAMnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAOhF,MAAM,kCAAkC;IAG7B,MAAM,CAAoD;IACnE,SAAS,CAAuD;IAChE,gBAAgB,GAA2C,IAAI,CAAC;IAChE,eAAe,CAAqB;IACpC,cAAc,GAA+B,EAAE,CAAC;IAChD,cAAc,GAAkB,IAAI,CAAC;IAC5B,SAAS,GAAG,IAAI,GAAG,EAGzB,CAAC;IACJ,UAAU,GAAG,KAAK,CAAC;IAEnB,YACE,KAAkC,EAClC,QAAmC;QAEnC,IAAI,CAAC,MAAM,GAAG,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,QAAQ,IAAI,SAAS,CAAC;YAChD,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC,eAAe,CAAC;YACjD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,cAAc,IAAI,SAAS,CAAC;YAC5D,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,aAAa,CAAC;YAC7C,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,aAAa,CAAC;YAC7C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ;gBACnC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAgC;QACrC,OAAO,WAAW,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC;oBAChD,IAAI;oBACJ,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;oBACpC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;oBACxC,QAAQ,EAAE,IAAI,CAAC,SAAS;oBACxB,eAAe,EAAE,IAAI,CAAC,gBAAgB;oBACtC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;oBAClC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;iBACnC,CAAC,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAC7C,IAAI,CAAC,cAAc,EACnB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAC7C,CAAC;gBACF,yEAAyE;gBACzE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrC,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO;wBACzD,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;oBAC/C,IACE,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO;wBACvD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CACzB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO,CACzD;wBAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACnD,CAAC;gBACD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAC/B,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC,eAAe,CAAC;gBACjD,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACrC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACrC,OAAO;oBACL,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;oBAC3C,UAAU,EAAE,KAAK,CAAC,KAAK;iBACxB,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,WAAW;QACT,IAAI,IAAI,CAAC,UAAU;YACjB,iBAAiB,CACf,eAAe,EACf,sCAAsC,CACvC,CAAC;IACN,CAAC;IAED,cAAc,CAAC,OAA8C;QAC3D,OAAO,WAAW,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,qEAAqE;YACrE,wEAAwE;YACxE,MAAM,SAAS,GAAG,4BAA4B,CAC5C,2BAA2B,CACzB;gBACE,QAAQ,EAAE,IAAI,CAAC,SAAS;oBACtB,CAAC,CAAC,oCAAoC,CAAC,IAAI,CAAC,SAAS,CAAC;oBACtD,CAAC,CAAC,IAAI;gBACR,eAAe,EAAE,IAAI,CAAC,gBAAgB;oBACpC,CAAC,CAAC,gCAAgC,CAAC,IAAI,CAAC,gBAAgB,CAAC;oBACzD,CAAC,CAAC,IAAI;gBACR,cAAc,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI;gBAC5C,aAAa,EAAE,IAAI,CAAC,cAAc;gBAClC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CACxC,oCAAoC,CACrC;aACF,EACD,4BAA4B,CAC7B,CACF,CAAC;YACF,OAAO,4BAA4B,CACjC,SAAS,EACT,qCAAqC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAC5D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CACJ,YAAqC;QAErC,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,gCAAgC,CAAC,YAAY,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;YAChC,IACE,CAAC,QAAQ;gBACT,CAAC,IAAI,CAAC,cAAc;gBACpB,CAAC,oCAAoC,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;gBAEhE,iBAAiB,CACf,oBAAoB,EACpB,sDAAsD,CACvD,CAAC;YACJ,gCAAgC,CAC9B,QAAQ,CAAC,KAAK,EACd,IAAI,CAAC,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,eAAe,CACrB,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC9C,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;YAC/C,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;YACnD,MAAM,KAAK,GAAG,eAAe,CAAC;gBAC5B,aAAa,EAAE,IAAI,CAAC,cAAc;gBAClC,YAAY,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE;gBAC3C,eAAe,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACzC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAC1D;gBACD,UAAU,EAAE;oBACV,WAAW;oBACX,aAAa;oBACb,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B;aACF,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,kCAAkC,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oCAAoC,CAClD,KAAkC;IAElC,MAAM,QAAQ,GAAG,IAAI,kCAAkC,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CACrB,QAA4C;IAE5C,OAAO;QACL,MAAM,EAAE,CAAC,IAAgC,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACnE,MAAM,EAAE,CAAC,YAAqC,EAAE,EAAE,CAChD,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC;QAC/B,cAAc,EAAE,CAAC,OAA8C,EAAE,EAAE,CACjE,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,qCAAqC,CACnD,KAAkC,EAClC,QAAgB,EAChB,UAAiD;IAEjD,OAAO,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5B,MAAM,UAAU,GAAG,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,UAAU,GAAgC;YAC9C,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,eAAe,EAAE,UAAU,CAAC,UAAU;YACtC,kBAAkB,EAAE,UAAU,CAAC,UAAU;SAC1C,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAChD,QAAQ,EACR,qCAAqC,CAAC,UAAU,EAAE,UAAU,CAAC,CAC9D,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,8CAA8C,CACxE,OAAO,EACP,UAAU,CACX,CAAC;QACF,OAAO,cAAc,CACnB,IAAI,kCAAkC,CAAC,UAAU,EAAE,aAAa,CAAC,CAClE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { PrincipalStateExternalAuthority } from \"../principalState\";\nimport { normalizeReferencedPrincipalHead } from \"./accessEvent\";\nimport {\n  normalizeCanonicalJsonValue,\n  serializeKeyingCanonicalJson,\n} from \"./canonical\";\nimport {\n  normalizePrincipalHistoryInput,\n  verifyPrincipalHistoryCheckpoint,\n} from \"./principalPolicyHistoryChecks\";\nimport { appendPrincipalHistoryIndex } from \"./principalPolicyHistoryIndex\";\nimport { verifyPrincipalHistoryPage } from \"./principalPolicyHistoryPage\";\nimport {\n  normalizeAuthenticatedPrincipalHistoryProgress,\n  type PrincipalHistoryProgress,\n} from \"./principalPolicyHistoryProgress\";\nimport {\n  capturePrincipalHistoryAuthority,\n  capturePrincipalHistoryProgressEntry,\n} from \"./principalPolicyHistoryProgressEntry\";\nimport {\n  openPrincipalHistoryProgress,\n  ownPrincipalHistoryProgressProtection,\n  sealPrincipalHistoryProgress,\n} from \"./principalPolicyHistoryProgressProtection\";\nimport {\n  makeVerifiedPrincipalPolicyHistory,\n  type PrincipalPolicyHistoryInput,\n  type PrincipalPolicyHistoryPage,\n  type PrincipalPolicyHistoryProgressOptions,\n  type PrincipalPolicyHistoryVerifier,\n  type VerifiedPrincipalPolicyHistory,\n} from \"./principalPolicyHistoryTypes\";\nimport { principalPolicyStateMatchesReference } from \"./principalPolicyReference\";\nimport { runVerifier, throwVerification, toVerificationResult } from \"./shared\";\nimport type {\n  KeyingVerificationResult,\n  NormalizedPrincipalPolicyStateChainEntry,\n  ReferencedPrincipalHead,\n} from \"./types\";\n\nclass PrincipalPolicyHistoryVerifierImpl\n  implements PrincipalPolicyHistoryVerifier\n{\n  readonly #input: ReturnType<typeof normalizePrincipalHistoryInput>;\n  #previous: NormalizedPrincipalPolicyStateChainEntry | undefined;\n  #latestAuthority: PrincipalStateExternalAuthority | null = null;\n  #checkpointHash: string | undefined;\n  #indexFrontier: readonly (string | null)[] = [];\n  #indexRootHash: string | null = null;\n  readonly #retained = new Map<\n    number,\n    NormalizedPrincipalPolicyStateChainEntry\n  >();\n  #appending = false;\n\n  constructor(\n    input: PrincipalPolicyHistoryInput,\n    progress?: PrincipalHistoryProgress,\n  ) {\n    this.#input = normalizePrincipalHistoryInput(input);\n    if (progress) {\n      this.#previous = progress.previous ?? undefined;\n      this.#latestAuthority = progress.latestAuthority;\n      this.#checkpointHash = progress.checkpointHash ?? undefined;\n      this.#indexFrontier = progress.indexFrontier;\n      this.#indexRootHash = progress.indexRootHash;\n      for (const entry of progress.retained)\n        this.#retained.set(entry.state.version, entry);\n    }\n  }\n\n  append(page: PrincipalPolicyHistoryPage) {\n    return runVerifier(async () => {\n      this.#assertIdle();\n      this.#appending = true;\n      try {\n        const verified = await verifyPrincipalHistoryPage({\n          page,\n          principalId: this.#input.principalId,\n          principalType: this.#input.principalType,\n          previous: this.#previous,\n          latestAuthority: this.#latestAuthority,\n          references: this.#input.references,\n          checkpoint: this.#input.checkpoint,\n        });\n        const index = await appendPrincipalHistoryIndex(\n          this.#indexFrontier,\n          verified.entries.map((entry) => entry.state),\n        );\n        // Publish only after every check, including the final signature, passes.\n        for (const entry of verified.entries) {\n          if (entry.state.version === this.#input.checkpoint?.version)\n            this.#checkpointHash = entry.state.stateHash;\n          if (\n            entry.state.version === this.#input.checkpoint?.version ||\n            this.#input.references.some(\n              (reference) => reference.version === entry.state.version,\n            )\n          )\n            this.#retained.set(entry.state.version, entry);\n        }\n        this.#previous = verified.last;\n        this.#latestAuthority = verified.latestAuthority;\n        this.#indexFrontier = index.frontier;\n        this.#indexRootHash = index.rootHash;\n        return {\n          throughVersion: verified.last.state.version,\n          indexNodes: index.nodes,\n        };\n      } finally {\n        this.#appending = false;\n      }\n    });\n  }\n\n  #assertIdle(): void {\n    if (this.#appending)\n      throwVerification(\n        \"invalid_shape\",\n        \"principal history append in progress\",\n      );\n  }\n\n  exportProgress(options: PrincipalPolicyHistoryProgressOptions) {\n    return runVerifier(async () => {\n      this.#assertIdle();\n      // Capture a complete accepted prefix before the first yield. A later\n      // append cannot change this snapshot or publish a partial page into it.\n      const plaintext = serializeKeyingCanonicalJson(\n        normalizeCanonicalJsonValue(\n          {\n            previous: this.#previous\n              ? capturePrincipalHistoryProgressEntry(this.#previous)\n              : null,\n            latestAuthority: this.#latestAuthority\n              ? capturePrincipalHistoryAuthority(this.#latestAuthority)\n              : null,\n            checkpointHash: this.#checkpointHash ?? null,\n            indexFrontier: this.#indexFrontier,\n            retained: [...this.#retained.values()].map(\n              capturePrincipalHistoryProgressEntry,\n            ),\n          },\n          \"principal history progress\",\n        ),\n      );\n      return sealPrincipalHistoryProgress(\n        plaintext,\n        ownPrincipalHistoryProgressProtection(this.#input, options),\n      );\n    });\n  }\n\n  finish(\n    expectedHead: ReferencedPrincipalHead,\n  ): KeyingVerificationResult<VerifiedPrincipalPolicyHistory> {\n    try {\n      this.#assertIdle();\n      const reference = normalizeReferencedPrincipalHead(expectedHead);\n      const previous = this.#previous;\n      if (\n        !previous ||\n        !this.#indexRootHash ||\n        !principalPolicyStateMatchesReference(previous.state, reference)\n      )\n        throwVerification(\n          \"missing_dependency\",\n          \"principal history has not reached the requested head\",\n        );\n      verifyPrincipalHistoryCheckpoint(\n        previous.state,\n        this.#input.checkpoint,\n        this.#checkpointHash,\n      );\n      const history = new Map(this.#retained);\n      history.set(previous.state.version, previous);\n      const { state, projection, grants } = previous;\n      const { principalId, principalType } = this.#input;\n      const owned = structuredClone({\n        indexRootHash: this.#indexRootHash,\n        currentEntry: { state, projection, grants },\n        retainedEntries: [...history.values()].sort(\n          (left, right) => left.state.version - right.state.version,\n        ),\n        checkpoint: {\n          principalId,\n          principalType,\n          version: state.version,\n          stateHash: state.stateHash,\n        },\n      });\n      return { ok: true, value: makeVerifiedPrincipalPolicyHistory(owned) };\n    } catch (error) {\n      return toVerificationResult(error);\n    }\n  }\n}\n\n/**\n * Verify from genesis with bounded retained state. A rejected page cannot\n * advance authorization or continuity. Progress is local to this verifier;\n * a remote cursor/checkpoint is never accepted as verified history.\n * Callers bound serialized page bytes and authenticate external authority.\n * Throws KeyingVerificationError for invalid local scope, checkpoint or references.\n */\nexport function createPrincipalPolicyHistoryVerifier(\n  input: PrincipalPolicyHistoryInput,\n): PrincipalPolicyHistoryVerifier {\n  const verifier = new PrincipalPolicyHistoryVerifierImpl(input);\n  return publicVerifier(verifier);\n}\n\nfunction publicVerifier(\n  verifier: PrincipalPolicyHistoryVerifierImpl,\n): PrincipalPolicyHistoryVerifier {\n  return {\n    append: (page: PrincipalPolicyHistoryPage) => verifier.append(page),\n    finish: (expectedHead: ReferencedPrincipalHead) =>\n      verifier.finish(expectedHead),\n    exportProgress: (options: PrincipalPolicyHistoryProgressOptions) =>\n      verifier.exportProgress(options),\n  };\n}\n\n/** Restore only progress authenticated by this verifier's own local key. */\nexport function restorePrincipalPolicyHistoryVerifier(\n  input: PrincipalPolicyHistoryInput,\n  progress: string,\n  protection: PrincipalPolicyHistoryProgressOptions,\n): Promise<KeyingVerificationResult<PrincipalPolicyHistoryVerifier>> {\n  return runVerifier(async () => {\n    const normalized = normalizePrincipalHistoryInput(input);\n    const ownedInput: PrincipalPolicyHistoryInput = {\n      principalId: normalized.principalId,\n      principalType: normalized.principalType,\n      localCheckpoint: normalized.checkpoint,\n      retainedReferences: normalized.references,\n    };\n    const decoded = await openPrincipalHistoryProgress(\n      progress,\n      ownPrincipalHistoryProgressProtection(normalized, protection),\n    );\n    const authenticated = await normalizeAuthenticatedPrincipalHistoryProgress(\n      decoded,\n      normalized,\n    );\n    return publicVerifier(\n      new PrincipalPolicyHistoryVerifierImpl(ownedInput, authenticated),\n    );\n  });\n}\n"]}
+{"version":3,"file":"principalPolicyHistory.js","sourceRoot":"","sources":["principalPolicyHistory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,GACjC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EACL,8CAA8C,GAE/C,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,gCAAgC,EAChC,oCAAoC,GACrC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,4BAA4B,EAC5B,qCAAqC,EACrC,4BAA4B,GAC7B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EACL,kCAAkC,GAMnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAOhF,MAAM,kCAAkC;IAG7B,MAAM,CAAoD;IACnE,SAAS,CAAuD;IAChE,gBAAgB,GAA2C,IAAI,CAAC;IAChE,eAAe,CAAqB;IACpC,cAAc,GAA+B,EAAE,CAAC;IAChD,cAAc,GAAkB,IAAI,CAAC;IAC5B,SAAS,GAAG,IAAI,GAAG,EAGzB,CAAC;IACJ,UAAU,GAAG,KAAK,CAAC;IAEnB,YACE,KAAkC,EAClC,QAAmC;QAEnC,IAAI,CAAC,MAAM,GAAG,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,QAAQ,IAAI,SAAS,CAAC;YAChD,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC,eAAe,CAAC;YACjD,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,cAAc,IAAI,SAAS,CAAC;YAC5D,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,aAAa,CAAC;YAC7C,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC,aAAa,CAAC;YAC7C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ;gBACnC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,6BAA6B;QAC3B,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IAED,MAAM,CAAC,IAAgC;QACrC,OAAO,WAAW,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC;oBAChD,IAAI;oBACJ,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;oBACpC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;oBACxC,QAAQ,EAAE,IAAI,CAAC,SAAS;oBACxB,eAAe,EAAE,IAAI,CAAC,gBAAgB;oBACtC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;oBAClC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;iBACnC,CAAC,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAC7C,IAAI,CAAC,cAAc,EACnB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAC7C,CAAC;gBACF,yEAAyE;gBACzE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;oBACrC,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO;wBACzD,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;oBAC/C,IACE,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO;wBACvD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CACzB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO,CACzD;wBAED,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACnD,CAAC;gBACD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAC/B,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC,eAAe,CAAC;gBACjD,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACrC,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC;gBACrC,OAAO;oBACL,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;oBAC3C,UAAU,EAAE,KAAK,CAAC,KAAK;iBACxB,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,WAAW;QACT,IAAI,IAAI,CAAC,UAAU;YACjB,iBAAiB,CACf,eAAe,EACf,sCAAsC,CACvC,CAAC;IACN,CAAC;IAED,cAAc,CAAC,OAA8C;QAC3D,OAAO,WAAW,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,qEAAqE;YACrE,wEAAwE;YACxE,MAAM,SAAS,GAAG,4BAA4B,CAC5C,2BAA2B,CACzB;gBACE,QAAQ,EAAE,IAAI,CAAC,SAAS;oBACtB,CAAC,CAAC,oCAAoC,CAAC,IAAI,CAAC,SAAS,CAAC;oBACtD,CAAC,CAAC,IAAI;gBACR,eAAe,EAAE,IAAI,CAAC,gBAAgB;oBACpC,CAAC,CAAC,gCAAgC,CAAC,IAAI,CAAC,gBAAgB,CAAC;oBACzD,CAAC,CAAC,IAAI;gBACR,cAAc,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI;gBAC5C,aAAa,EAAE,IAAI,CAAC,cAAc;gBAClC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CACxC,oCAAoC,CACrC;aACF,EACD,4BAA4B,CAC7B,CACF,CAAC;YACF,OAAO,4BAA4B,CACjC,SAAS,EACT,qCAAqC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAC5D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CACJ,YAAqC;QAErC,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,MAAM,SAAS,GAAG,gCAAgC,CAAC,YAAY,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;YAChC,IACE,CAAC,QAAQ;gBACT,CAAC,IAAI,CAAC,cAAc;gBACpB,CAAC,oCAAoC,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;gBAEhE,iBAAiB,CACf,oBAAoB,EACpB,sDAAsD,CACvD,CAAC;YACJ,gCAAgC,CAC9B,QAAQ,CAAC,KAAK,EACd,IAAI,CAAC,MAAM,CAAC,UAAU,EACtB,IAAI,CAAC,eAAe,CACrB,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC9C,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;YAC/C,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;YACnD,MAAM,KAAK,GAAG,eAAe,CAAC;gBAC5B,aAAa,EAAE,IAAI,CAAC,cAAc;gBAClC,YAAY,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE;gBAC3C,eAAe,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACzC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAC1D;gBACD,UAAU,EAAE;oBACV,WAAW;oBACX,aAAa;oBACb,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;iBAC3B;aACF,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE,kCAAkC,CAAC,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC;aACxE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oCAAoC,CAClD,KAAkC;IAElC,MAAM,QAAQ,GAAG,IAAI,kCAAkC,CAAC,KAAK,CAAC,CAAC;IAC/D,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,cAAc,CACrB,QAA4C;IAE5C,OAAO;QACL,6BAA6B,EAAE,GAAG,EAAE,CAClC,QAAQ,CAAC,6BAA6B,EAAE;QAC1C,MAAM,EAAE,CAAC,IAAgC,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACnE,MAAM,EAAE,CAAC,YAAqC,EAAE,EAAE,CAChD,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC;QAC/B,cAAc,EAAE,CAAC,OAA8C,EAAE,EAAE,CACjE,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,qCAAqC,CACnD,KAAkC,EAClC,QAAgB,EAChB,UAAiD;IAEjD,OAAO,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5B,MAAM,UAAU,GAAG,8BAA8B,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,UAAU,GAAgC;YAC9C,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,eAAe,EAAE,UAAU,CAAC,UAAU;YACtC,kBAAkB,EAAE,UAAU,CAAC,UAAU;SAC1C,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAChD,QAAQ,EACR,qCAAqC,CAAC,UAAU,EAAE,UAAU,CAAC,CAC9D,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,8CAA8C,CACxE,OAAO,EACP,UAAU,CACX,CAAC;QACF,OAAO,cAAc,CACnB,IAAI,kCAAkC,CAAC,UAAU,EAAE,aAAa,CAAC,CAClE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { PrincipalStateExternalAuthority } from \"../principalState\";\nimport { normalizeReferencedPrincipalHead } from \"./accessEvent\";\nimport {\n  normalizeCanonicalJsonValue,\n  serializeKeyingCanonicalJson,\n} from \"./canonical\";\nimport {\n  normalizePrincipalHistoryInput,\n  verifyPrincipalHistoryCheckpoint,\n} from \"./principalPolicyHistoryChecks\";\nimport { appendPrincipalHistoryIndex } from \"./principalPolicyHistoryIndex\";\nimport { verifyPrincipalHistoryPage } from \"./principalPolicyHistoryPage\";\nimport {\n  normalizeAuthenticatedPrincipalHistoryProgress,\n  type PrincipalHistoryProgress,\n} from \"./principalPolicyHistoryProgress\";\nimport {\n  capturePrincipalHistoryAuthority,\n  capturePrincipalHistoryProgressEntry,\n} from \"./principalPolicyHistoryProgressEntry\";\nimport {\n  openPrincipalHistoryProgress,\n  ownPrincipalHistoryProgressProtection,\n  sealPrincipalHistoryProgress,\n} from \"./principalPolicyHistoryProgressProtection\";\nimport {\n  makeVerifiedPrincipalPolicyHistory,\n  type PrincipalPolicyHistoryInput,\n  type PrincipalPolicyHistoryPage,\n  type PrincipalPolicyHistoryProgressOptions,\n  type PrincipalPolicyHistoryVerifier,\n  type VerifiedPrincipalPolicyHistory,\n} from \"./principalPolicyHistoryTypes\";\nimport { principalPolicyStateMatchesReference } from \"./principalPolicyReference\";\nimport { runVerifier, throwVerification, toVerificationResult } from \"./shared\";\nimport type {\n  KeyingVerificationResult,\n  NormalizedPrincipalPolicyStateChainEntry,\n  ReferencedPrincipalHead,\n} from \"./types\";\n\nclass PrincipalPolicyHistoryVerifierImpl\n  implements PrincipalPolicyHistoryVerifier\n{\n  readonly #input: ReturnType<typeof normalizePrincipalHistoryInput>;\n  #previous: NormalizedPrincipalPolicyStateChainEntry | undefined;\n  #latestAuthority: PrincipalStateExternalAuthority | null = null;\n  #checkpointHash: string | undefined;\n  #indexFrontier: readonly (string | null)[] = [];\n  #indexRootHash: string | null = null;\n  readonly #retained = new Map<\n    number,\n    NormalizedPrincipalPolicyStateChainEntry\n  >();\n  #appending = false;\n\n  constructor(\n    input: PrincipalPolicyHistoryInput,\n    progress?: PrincipalHistoryProgress,\n  ) {\n    this.#input = normalizePrincipalHistoryInput(input);\n    if (progress) {\n      this.#previous = progress.previous ?? undefined;\n      this.#latestAuthority = progress.latestAuthority;\n      this.#checkpointHash = progress.checkpointHash ?? undefined;\n      this.#indexFrontier = progress.indexFrontier;\n      this.#indexRootHash = progress.indexRootHash;\n      for (const entry of progress.retained)\n        this.#retained.set(entry.state.version, entry);\n    }\n  }\n\n  getExternalAuthorityReference(): ReferencedPrincipalHead | null {\n    return this.#latestAuthority ? { ...this.#latestAuthority } : null;\n  }\n\n  append(page: PrincipalPolicyHistoryPage) {\n    return runVerifier(async () => {\n      this.#assertIdle();\n      this.#appending = true;\n      try {\n        const verified = await verifyPrincipalHistoryPage({\n          page,\n          principalId: this.#input.principalId,\n          principalType: this.#input.principalType,\n          previous: this.#previous,\n          latestAuthority: this.#latestAuthority,\n          references: this.#input.references,\n          checkpoint: this.#input.checkpoint,\n        });\n        const index = await appendPrincipalHistoryIndex(\n          this.#indexFrontier,\n          verified.entries.map((entry) => entry.state),\n        );\n        // Publish only after every check, including the final signature, passes.\n        for (const entry of verified.entries) {\n          if (entry.state.version === this.#input.checkpoint?.version)\n            this.#checkpointHash = entry.state.stateHash;\n          if (\n            entry.state.version === this.#input.checkpoint?.version ||\n            this.#input.references.some(\n              (reference) => reference.version === entry.state.version,\n            )\n          )\n            this.#retained.set(entry.state.version, entry);\n        }\n        this.#previous = verified.last;\n        this.#latestAuthority = verified.latestAuthority;\n        this.#indexFrontier = index.frontier;\n        this.#indexRootHash = index.rootHash;\n        return {\n          throughVersion: verified.last.state.version,\n          indexNodes: index.nodes,\n        };\n      } finally {\n        this.#appending = false;\n      }\n    });\n  }\n\n  #assertIdle(): void {\n    if (this.#appending)\n      throwVerification(\n        \"invalid_shape\",\n        \"principal history append in progress\",\n      );\n  }\n\n  exportProgress(options: PrincipalPolicyHistoryProgressOptions) {\n    return runVerifier(async () => {\n      this.#assertIdle();\n      // Capture a complete accepted prefix before the first yield. A later\n      // append cannot change this snapshot or publish a partial page into it.\n      const plaintext = serializeKeyingCanonicalJson(\n        normalizeCanonicalJsonValue(\n          {\n            previous: this.#previous\n              ? capturePrincipalHistoryProgressEntry(this.#previous)\n              : null,\n            latestAuthority: this.#latestAuthority\n              ? capturePrincipalHistoryAuthority(this.#latestAuthority)\n              : null,\n            checkpointHash: this.#checkpointHash ?? null,\n            indexFrontier: this.#indexFrontier,\n            retained: [...this.#retained.values()].map(\n              capturePrincipalHistoryProgressEntry,\n            ),\n          },\n          \"principal history progress\",\n        ),\n      );\n      return sealPrincipalHistoryProgress(\n        plaintext,\n        ownPrincipalHistoryProgressProtection(this.#input, options),\n      );\n    });\n  }\n\n  finish(\n    expectedHead: ReferencedPrincipalHead,\n  ): KeyingVerificationResult<VerifiedPrincipalPolicyHistory> {\n    try {\n      this.#assertIdle();\n      const reference = normalizeReferencedPrincipalHead(expectedHead);\n      const previous = this.#previous;\n      if (\n        !previous ||\n        !this.#indexRootHash ||\n        !principalPolicyStateMatchesReference(previous.state, reference)\n      )\n        throwVerification(\n          \"missing_dependency\",\n          \"principal history has not reached the requested head\",\n        );\n      verifyPrincipalHistoryCheckpoint(\n        previous.state,\n        this.#input.checkpoint,\n        this.#checkpointHash,\n      );\n      const history = new Map(this.#retained);\n      history.set(previous.state.version, previous);\n      const { state, projection, grants } = previous;\n      const { principalId, principalType } = this.#input;\n      const owned = structuredClone({\n        indexRootHash: this.#indexRootHash,\n        currentEntry: { state, projection, grants },\n        retainedEntries: [...history.values()].sort(\n          (left, right) => left.state.version - right.state.version,\n        ),\n        checkpoint: {\n          principalId,\n          principalType,\n          version: state.version,\n          stateHash: state.stateHash,\n        },\n      });\n      return {\n        ok: true,\n        value: makeVerifiedPrincipalPolicyHistory(owned, this.#latestAuthority),\n      };\n    } catch (error) {\n      return toVerificationResult(error);\n    }\n  }\n}\n\n/**\n * Verify from genesis with bounded retained state. A rejected page cannot\n * advance authorization or continuity. Progress is local to this verifier;\n * a remote cursor/checkpoint is never accepted as verified history.\n * Callers bound serialized page bytes and authenticate external authority.\n * Throws KeyingVerificationError for invalid local scope, checkpoint or references.\n */\nexport function createPrincipalPolicyHistoryVerifier(\n  input: PrincipalPolicyHistoryInput,\n): PrincipalPolicyHistoryVerifier {\n  const verifier = new PrincipalPolicyHistoryVerifierImpl(input);\n  return publicVerifier(verifier);\n}\n\nfunction publicVerifier(\n  verifier: PrincipalPolicyHistoryVerifierImpl,\n): PrincipalPolicyHistoryVerifier {\n  return {\n    getExternalAuthorityReference: () =>\n      verifier.getExternalAuthorityReference(),\n    append: (page: PrincipalPolicyHistoryPage) => verifier.append(page),\n    finish: (expectedHead: ReferencedPrincipalHead) =>\n      verifier.finish(expectedHead),\n    exportProgress: (options: PrincipalPolicyHistoryProgressOptions) =>\n      verifier.exportProgress(options),\n  };\n}\n\n/** Restore only progress authenticated by this verifier's own local key. */\nexport function restorePrincipalPolicyHistoryVerifier(\n  input: PrincipalPolicyHistoryInput,\n  progress: string,\n  protection: PrincipalPolicyHistoryProgressOptions,\n): Promise<KeyingVerificationResult<PrincipalPolicyHistoryVerifier>> {\n  return runVerifier(async () => {\n    const normalized = normalizePrincipalHistoryInput(input);\n    const ownedInput: PrincipalPolicyHistoryInput = {\n      principalId: normalized.principalId,\n      principalType: normalized.principalType,\n      localCheckpoint: normalized.checkpoint,\n      retainedReferences: normalized.references,\n    };\n    const decoded = await openPrincipalHistoryProgress(\n      progress,\n      ownPrincipalHistoryProgressProtection(normalized, protection),\n    );\n    const authenticated = await normalizeAuthenticatedPrincipalHistoryProgress(\n      decoded,\n      normalized,\n    );\n    return publicVerifier(\n      new PrincipalPolicyHistoryVerifierImpl(ownedInput, authenticated),\n    );\n  });\n}\n"]}

package/internal/crypto/keying/principalPolicyHistoryReferences.js

@@ -75,7 +75,7 @@ export function verifyPrincipalPolicyHistoryReferences(input) {
         return makeVerifiedPrincipalPolicyHistory({
             ...history,
             retainedEntries: [...entries.values()].sort((left, right) => left.state.version - right.state.version),
-        });
+        }, history.latestAuthority);
     });
 }
 //# sourceMappingURL=principalPolicyHistoryReferences.js.map

package/internal/crypto/keying/principalPolicyHistoryReferences.js.map

@@ -1 +1 @@
-{"version":3,"file":"principalPolicyHistoryReferences.js","sourceRoot":"","sources":["principalPolicyHistoryReferences.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uCAAuC,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EACL,kCAAkC,EAClC,iCAAiC,EACjC,kCAAkC,GAEnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC1D,OAAO,EACL,2BAA2B,EAC3B,mCAAmC,GACpC,MAAM,sBAAsB,CAAC;AAe9B,SAAS,iBAAiB,CACxB,UAA2D;IAE3D,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC1B,UAAU,CAAC,MAAM,GAAG,kCAAkC;QAEtD,iBAAiB,CAAC,eAAe,EAAE,mCAAmC,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC;IAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YAC1C,iBAAiB,CACf,eAAe,EACf,4CAA4C,CAC7C,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sCAAsC,CAAC,KAMtD;IACC,OAAO,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5B,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC;QAClC,MAAM,kBAAkB,GAAG,KAAK,CAAC,mBAAmB,CAAC;QACrD,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,kBAAkB,KAAK,SAAS;YAClC,iBAAiB,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAC;QACvD,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG;YACZ,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW;YACnD,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa;SACxD,CAAC;QACF,8BAA8B,CAAC;YAC7B,GAAG,KAAK;YACR,kBAAkB,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;SAC7D,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;QACjC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,iBAAiB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAChC,8BAA8B,CAAC;gBAC7B,GAAG,KAAK;gBACR,kBAAkB,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;aAC3C,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0C,CAAC;QAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,uCAAuC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9D,IACE,CAAC,oCAAoC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBAClE,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,QAAQ;gBAC9B,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC;gBAE3C,iBAAiB,CACf,iBAAiB,EACjB,4CAA4C,CAC7C,CAAC;YACJ,MAAM,2BAA2B,CAAC;gBAChC,QAAQ,EAAE,MAAM,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC;gBACtD,UAAU,EAAE;oBACV,KAAK,EAAE,mBAAmB;oBAC1B,QAAQ,EAAE,OAAO,CAAC,aAAa;oBAC/B,QAAQ;iBACT;gBACD,KAAK;aACN,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5C,OAAO,kCAAkC,CAAC;YACxC,GAAG,OAAO;YACV,eAAe,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACzC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAC1D;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { normalizePrincipalPolicyStateChainEntry } from \"./principalPolicyChainEntry\";\nimport { normalizePrincipalHistoryInput } from \"./principalPolicyHistoryChecks\";\nimport { principalHistoryIndexLeaf } from \"./principalPolicyHistoryIndex\";\nimport {\n  makeVerifiedPrincipalPolicyHistory,\n  ownVerifiedPrincipalPolicyHistory,\n  PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT,\n  type VerifiedPrincipalPolicyHistory,\n} from \"./principalPolicyHistoryTypes\";\nimport { principalPolicyStateMatchesReference } from \"./principalPolicyReference\";\nimport { runVerifier, throwVerification } from \"./shared\";\nimport {\n  assertTransparencyInclusion,\n  normalizeTransparencyInclusionProof,\n} from \"./transparencyProofs\";\nimport type {\n  KeyingVerificationResult,\n  PrincipalPolicyStateChainEntry,\n  ReferencedPrincipalHead,\n  TransparencyInclusionProof,\n} from \"./types\";\n\n/** Untrusted material to select an entry from a locally verified prefix. */\nexport interface PrincipalPolicyHistoryReferenceProof {\n  readonly reference: ReferencedPrincipalHead;\n  readonly entry: PrincipalPolicyStateChainEntry;\n  readonly proof: TransparencyInclusionProof;\n}\n\nfunction assertProofBudget(\n  references: readonly PrincipalPolicyHistoryReferenceProof[],\n): void {\n  if (\n    !Array.isArray(references) ||\n    references.length > PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT\n  )\n    throwVerification(\"invalid_shape\", \"too many principal history proofs\");\n  const count = references.length;\n  for (let index = 0; index < count; index += 1) {\n    const path = references[index]?.proof.auditPath;\n    if (!Array.isArray(path) || path.length > 53)\n      throwVerification(\n        \"invalid_shape\",\n        \"principal history proof exceeds its budget\",\n      );\n  }\n}\n\n/**\n * Select new retained references without replaying signatures. Inclusion is\n * checked against the private root owned by a local verifier, never a peer's\n * claimed root. Each leaf commits to the exact signed entry already accepted.\n * Replaces the retained selection; the current entry is always included.\n * A separate checkpoint proof preserves the full 128-citation selection budget.\n */\nexport function verifyPrincipalPolicyHistoryReferences(input: {\n  readonly history: VerifiedPrincipalPolicyHistory;\n  readonly references: readonly PrincipalPolicyHistoryReferenceProof[];\n  readonly checkpointReference?:\n    | PrincipalPolicyHistoryReferenceProof\n    | undefined;\n}): Promise<KeyingVerificationResult<VerifiedPrincipalPolicyHistory>> {\n  return runVerifier(async () => {\n    const history = ownVerifiedPrincipalPolicyHistory(input.history);\n    const supplied = input.references;\n    const suppliedCheckpoint = input.checkpointReference;\n    assertProofBudget(supplied);\n    if (suppliedCheckpoint !== undefined)\n      assertProofBudget([suppliedCheckpoint]);\n    const references = structuredClone(supplied);\n    const checkpoint = structuredClone(suppliedCheckpoint);\n    assertProofBudget(references);\n    const scope = {\n      principalId: history.currentEntry.state.principalId,\n      principalType: history.currentEntry.state.principalType,\n    };\n    normalizePrincipalHistoryInput({\n      ...scope,\n      retainedReferences: references.map((item) => item.reference),\n    });\n    const selected = [...references];\n    if (checkpoint !== undefined) {\n      assertProofBudget([checkpoint]);\n      normalizePrincipalHistoryInput({\n        ...scope,\n        retainedReferences: [checkpoint.reference],\n      });\n      selected.push(checkpoint);\n    }\n    const entries = new Map<number, PrincipalPolicyStateChainEntry>();\n    const treeSize = history.currentEntry.state.version;\n    for (const item of selected) {\n      const entry = await normalizePrincipalPolicyStateChainEntry(item.entry);\n      const proof = normalizeTransparencyInclusionProof(item.proof);\n      if (\n        !principalPolicyStateMatchesReference(entry.state, item.reference) ||\n        entry.state.version > treeSize ||\n        proof.leafIndex !== entry.state.version - 1\n      )\n        throwVerification(\n          \"object_mismatch\",\n          \"principal history proof reference mismatch\",\n        );\n      await assertTransparencyInclusion({\n        leafHash: await principalHistoryIndexLeaf(entry.state),\n        checkpoint: {\n          logId: \"principal-history\",\n          rootHash: history.indexRootHash,\n          treeSize,\n        },\n        proof,\n      });\n      entries.set(entry.state.version, entry);\n    }\n    entries.set(treeSize, history.currentEntry);\n    return makeVerifiedPrincipalPolicyHistory({\n      ...history,\n      retainedEntries: [...entries.values()].sort(\n        (left, right) => left.state.version - right.state.version,\n      ),\n    });\n  });\n}\n"]}
+{"version":3,"file":"principalPolicyHistoryReferences.js","sourceRoot":"","sources":["principalPolicyHistoryReferences.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uCAAuC,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EACL,kCAAkC,EAClC,iCAAiC,EACjC,kCAAkC,GAEnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oCAAoC,EAAE,MAAM,4BAA4B,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC1D,OAAO,EACL,2BAA2B,EAC3B,mCAAmC,GACpC,MAAM,sBAAsB,CAAC;AAe9B,SAAS,iBAAiB,CACxB,UAA2D;IAE3D,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC1B,UAAU,CAAC,MAAM,GAAG,kCAAkC;QAEtD,iBAAiB,CAAC,eAAe,EAAE,mCAAmC,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC;IAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE;YAC1C,iBAAiB,CACf,eAAe,EACf,4CAA4C,CAC7C,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sCAAsC,CAAC,KAMtD;IACC,OAAO,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5B,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC;QAClC,MAAM,kBAAkB,GAAG,KAAK,CAAC,mBAAmB,CAAC;QACrD,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,kBAAkB,KAAK,SAAS;YAClC,iBAAiB,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAC;QACvD,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG;YACZ,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW;YACnD,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa;SACxD,CAAC;QACF,8BAA8B,CAAC;YAC7B,GAAG,KAAK;YACR,kBAAkB,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;SAC7D,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;QACjC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,iBAAiB,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAChC,8BAA8B,CAAC;gBAC7B,GAAG,KAAK;gBACR,kBAAkB,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;aAC3C,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0C,CAAC;QAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,uCAAuC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9D,IACE,CAAC,oCAAoC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBAClE,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,QAAQ;gBAC9B,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC;gBAE3C,iBAAiB,CACf,iBAAiB,EACjB,4CAA4C,CAC7C,CAAC;YACJ,MAAM,2BAA2B,CAAC;gBAChC,QAAQ,EAAE,MAAM,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC;gBACtD,UAAU,EAAE;oBACV,KAAK,EAAE,mBAAmB;oBAC1B,QAAQ,EAAE,OAAO,CAAC,aAAa;oBAC/B,QAAQ;iBACT;gBACD,KAAK;aACN,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5C,OAAO,kCAAkC,CACvC;YACE,GAAG,OAAO;YACV,eAAe,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACzC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAC1D;SACF,EACD,OAAO,CAAC,eAAe,CACxB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { normalizePrincipalPolicyStateChainEntry } from \"./principalPolicyChainEntry\";\nimport { normalizePrincipalHistoryInput } from \"./principalPolicyHistoryChecks\";\nimport { principalHistoryIndexLeaf } from \"./principalPolicyHistoryIndex\";\nimport {\n  makeVerifiedPrincipalPolicyHistory,\n  ownVerifiedPrincipalPolicyHistory,\n  PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT,\n  type VerifiedPrincipalPolicyHistory,\n} from \"./principalPolicyHistoryTypes\";\nimport { principalPolicyStateMatchesReference } from \"./principalPolicyReference\";\nimport { runVerifier, throwVerification } from \"./shared\";\nimport {\n  assertTransparencyInclusion,\n  normalizeTransparencyInclusionProof,\n} from \"./transparencyProofs\";\nimport type {\n  KeyingVerificationResult,\n  PrincipalPolicyStateChainEntry,\n  ReferencedPrincipalHead,\n  TransparencyInclusionProof,\n} from \"./types\";\n\n/** Untrusted material to select an entry from a locally verified prefix. */\nexport interface PrincipalPolicyHistoryReferenceProof {\n  readonly reference: ReferencedPrincipalHead;\n  readonly entry: PrincipalPolicyStateChainEntry;\n  readonly proof: TransparencyInclusionProof;\n}\n\nfunction assertProofBudget(\n  references: readonly PrincipalPolicyHistoryReferenceProof[],\n): void {\n  if (\n    !Array.isArray(references) ||\n    references.length > PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT\n  )\n    throwVerification(\"invalid_shape\", \"too many principal history proofs\");\n  const count = references.length;\n  for (let index = 0; index < count; index += 1) {\n    const path = references[index]?.proof.auditPath;\n    if (!Array.isArray(path) || path.length > 53)\n      throwVerification(\n        \"invalid_shape\",\n        \"principal history proof exceeds its budget\",\n      );\n  }\n}\n\n/**\n * Select new retained references without replaying signatures. Inclusion is\n * checked against the private root owned by a local verifier, never a peer's\n * claimed root. Each leaf commits to the exact signed entry already accepted.\n * Replaces the retained selection; the current entry is always included.\n * A separate checkpoint proof preserves the full 128-citation selection budget.\n */\nexport function verifyPrincipalPolicyHistoryReferences(input: {\n  readonly history: VerifiedPrincipalPolicyHistory;\n  readonly references: readonly PrincipalPolicyHistoryReferenceProof[];\n  readonly checkpointReference?:\n    | PrincipalPolicyHistoryReferenceProof\n    | undefined;\n}): Promise<KeyingVerificationResult<VerifiedPrincipalPolicyHistory>> {\n  return runVerifier(async () => {\n    const history = ownVerifiedPrincipalPolicyHistory(input.history);\n    const supplied = input.references;\n    const suppliedCheckpoint = input.checkpointReference;\n    assertProofBudget(supplied);\n    if (suppliedCheckpoint !== undefined)\n      assertProofBudget([suppliedCheckpoint]);\n    const references = structuredClone(supplied);\n    const checkpoint = structuredClone(suppliedCheckpoint);\n    assertProofBudget(references);\n    const scope = {\n      principalId: history.currentEntry.state.principalId,\n      principalType: history.currentEntry.state.principalType,\n    };\n    normalizePrincipalHistoryInput({\n      ...scope,\n      retainedReferences: references.map((item) => item.reference),\n    });\n    const selected = [...references];\n    if (checkpoint !== undefined) {\n      assertProofBudget([checkpoint]);\n      normalizePrincipalHistoryInput({\n        ...scope,\n        retainedReferences: [checkpoint.reference],\n      });\n      selected.push(checkpoint);\n    }\n    const entries = new Map<number, PrincipalPolicyStateChainEntry>();\n    const treeSize = history.currentEntry.state.version;\n    for (const item of selected) {\n      const entry = await normalizePrincipalPolicyStateChainEntry(item.entry);\n      const proof = normalizeTransparencyInclusionProof(item.proof);\n      if (\n        !principalPolicyStateMatchesReference(entry.state, item.reference) ||\n        entry.state.version > treeSize ||\n        proof.leafIndex !== entry.state.version - 1\n      )\n        throwVerification(\n          \"object_mismatch\",\n          \"principal history proof reference mismatch\",\n        );\n      await assertTransparencyInclusion({\n        leafHash: await principalHistoryIndexLeaf(entry.state),\n        checkpoint: {\n          logId: \"principal-history\",\n          rootHash: history.indexRootHash,\n          treeSize,\n        },\n        proof,\n      });\n      entries.set(entry.state.version, entry);\n    }\n    entries.set(treeSize, history.currentEntry);\n    return makeVerifiedPrincipalPolicyHistory(\n      {\n        ...history,\n        retainedEntries: [...entries.values()].sort(\n          (left, right) => left.state.version - right.state.version,\n        ),\n      },\n      history.latestAuthority,\n    );\n  });\n}\n"]}

package/internal/crypto/keying/principalPolicyHistoryTypes.d.ts

@@ -1,3 +1,4 @@
+import type { PrincipalStateExternalAuthority } from "../principalState.js";
 import type { PrincipalPolicyExternalAuthority } from "./principalPolicyExternalAuthorityTypes.js";
 import type { PrincipalHistoryIndexNode } from "./principalPolicyHistoryIndex.js";
 import type { KeyingVerificationResult, PrincipalPolicyCheckpoint, PrincipalPolicySignerPublicKey, PrincipalPolicyStateChainEntry, ReferencedPrincipalHead } from "./types.js";
@@ -32,10 +33,14 @@ export interface VerifiedPrincipalPolicyHistory {
     /** Computed only from locally accepted entries; never supplied by a peer. */
     readonly indexRootHash: string;
 }
-type HistorySnapshot = Omit<VerifiedPrincipalPolicyHistory, typeof verifiedHistoryBrand>;
-export declare function makeVerifiedPrincipalPolicyHistory(value: Omit<VerifiedPrincipalPolicyHistory, typeof verifiedHistoryBrand>): VerifiedPrincipalPolicyHistory;
+type HistorySnapshot = Omit<VerifiedPrincipalPolicyHistory, typeof verifiedHistoryBrand> & {
+    readonly latestAuthority: PrincipalStateExternalAuthority | null;
+};
+export declare function makeVerifiedPrincipalPolicyHistory(value: Omit<VerifiedPrincipalPolicyHistory, typeof verifiedHistoryBrand>, latestAuthority: PrincipalStateExternalAuthority | null): VerifiedPrincipalPolicyHistory;
 export declare function ownVerifiedPrincipalPolicyHistory(history: VerifiedPrincipalPolicyHistory): HistorySnapshot;
 export interface PrincipalPolicyHistoryVerifier {
+    /** Owned copy of the latest accepted citation, including across uncited pages. */
+    getExternalAuthorityReference(): ReferencedPrincipalHead | null;
     append(page: PrincipalPolicyHistoryPage): Promise<KeyingVerificationResult<{
         readonly throughVersion: number;
         readonly indexNodes: readonly PrincipalHistoryIndexNode[];

package/internal/crypto/keying/principalPolicyHistoryTypes.js

@@ -4,12 +4,15 @@ const verifiedHistoryBrand = Symbol("verifiedPrincipalPolicyHistory");
 // Public copies are useful for inspection, but their fields are not authority.
 // A later verifier consumes the privately held snapshot issued by finish().
 const issuedHistories = new WeakMap();
-export function makeVerifiedPrincipalPolicyHistory(value) {
+export function makeVerifiedPrincipalPolicyHistory(value, latestAuthority) {
     const result = {
-        ...value,
+        currentEntry: value.currentEntry,
+        retainedEntries: value.retainedEntries,
+        checkpoint: value.checkpoint,
+        indexRootHash: value.indexRootHash,
         [verifiedHistoryBrand]: true,
     };
-    issuedHistories.set(result, structuredClone(value));
+    issuedHistories.set(result, structuredClone({ ...value, latestAuthority }));
     return result;
 }
 export function ownVerifiedPrincipalPolicyHistory(history) {

package/internal/crypto/keying/principalPolicyHistoryTypes.js.map

@@ -1 +1 @@
-{"version":3,"file":"principalPolicyHistoryTypes.js","sourceRoot":"","sources":["principalPolicyHistoryTypes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAS7C,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AAyBtD,MAAM,oBAAoB,GAAkB,MAAM,CAChD,gCAAgC,CACjC,CAAC;AAiBF,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,eAAe,GAAG,IAAI,OAAO,EAGhC,CAAC;AAEJ,MAAM,UAAU,kCAAkC,CAChD,KAAwE;IAExE,MAAM,MAAM,GAAmC;QAC7C,GAAG,KAAK;QACR,CAAC,oBAAoB,CAAC,EAAE,IAAI;KAC7B,CAAC;IACF,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,OAAuC;IAEvC,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ;QACX,iBAAiB,CACf,eAAe,EACf,mDAAmD,CACpD,CAAC;IACJ,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC","sourcesContent":["import type { PrincipalPolicyExternalAuthority } from \"./principalPolicyExternalAuthorityTypes\";\nimport type { PrincipalHistoryIndexNode } from \"./principalPolicyHistoryIndex\";\nimport { throwVerification } from \"./shared\";\nimport type {\n  KeyingVerificationResult,\n  PrincipalPolicyCheckpoint,\n  PrincipalPolicySignerPublicKey,\n  PrincipalPolicyStateChainEntry,\n  ReferencedPrincipalHead,\n} from \"./types\";\n\nexport const PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT = 128;\n\n/** A crypto verification batch, not a wire-response DTO. */\nexport interface PrincipalPolicyHistoryPage {\n  readonly entries: readonly PrincipalPolicyStateChainEntry[];\n  /** Keys resolved through the caller's trusted user-identity mechanism. */\n  readonly signerPublicKeys: readonly PrincipalPolicySignerPublicKey[];\n  /** Already authenticated authority; never trust a server page directly. */\n  readonly externalAuthority?: PrincipalPolicyExternalAuthority;\n}\n\nexport interface PrincipalPolicyHistoryInput {\n  readonly principalId: string;\n  readonly principalType: ReferencedPrincipalHead[\"principalType\"];\n  readonly localCheckpoint?: PrincipalPolicyCheckpoint | null;\n  readonly retainedReferences?: readonly ReferencedPrincipalHead[];\n}\n\n/** Local verifier protection; never obtain this key from a remote API. */\nexport interface PrincipalPolicyHistoryProgressOptions {\n  readonly localKey: Uint8Array;\n  /** Stable local operation identity, bound into authenticated progress. */\n  readonly context: string;\n}\n\nconst verifiedHistoryBrand: unique symbol = Symbol(\n  \"verifiedPrincipalPolicyHistory\",\n);\n\n/** A verified prefix with explicitly retained references, not a full snapshot. */\nexport interface VerifiedPrincipalPolicyHistory {\n  readonly [verifiedHistoryBrand]: true;\n  readonly currentEntry: PrincipalPolicyStateChainEntry;\n  readonly retainedEntries: readonly PrincipalPolicyStateChainEntry[];\n  readonly checkpoint: PrincipalPolicyCheckpoint;\n  /** Computed only from locally accepted entries; never supplied by a peer. */\n  readonly indexRootHash: string;\n}\n\ntype HistorySnapshot = Omit<\n  VerifiedPrincipalPolicyHistory,\n  typeof verifiedHistoryBrand\n>;\n\n// Public copies are useful for inspection, but their fields are not authority.\n// A later verifier consumes the privately held snapshot issued by finish().\nconst issuedHistories = new WeakMap<\n  VerifiedPrincipalPolicyHistory,\n  HistorySnapshot\n>();\n\nexport function makeVerifiedPrincipalPolicyHistory(\n  value: Omit<VerifiedPrincipalPolicyHistory, typeof verifiedHistoryBrand>,\n): VerifiedPrincipalPolicyHistory {\n  const result: VerifiedPrincipalPolicyHistory = {\n    ...value,\n    [verifiedHistoryBrand]: true,\n  };\n  issuedHistories.set(result, structuredClone(value));\n  return result;\n}\n\nexport function ownVerifiedPrincipalPolicyHistory(\n  history: VerifiedPrincipalPolicyHistory,\n): HistorySnapshot {\n  const snapshot = issuedHistories.get(history);\n  if (!snapshot)\n    throwVerification(\n      \"invalid_shape\",\n      \"principal history must come from a local verifier\",\n    );\n  return structuredClone(snapshot);\n}\n\nexport interface PrincipalPolicyHistoryVerifier {\n  append(page: PrincipalPolicyHistoryPage): Promise<\n    KeyingVerificationResult<{\n      readonly throughVersion: number;\n      readonly indexNodes: readonly PrincipalHistoryIndexNode[];\n    }>\n  >;\n  finish(\n    expectedHead: ReferencedPrincipalHead,\n  ): KeyingVerificationResult<VerifiedPrincipalPolicyHistory>;\n  exportProgress(\n    options: PrincipalPolicyHistoryProgressOptions,\n  ): Promise<KeyingVerificationResult<string>>;\n}\n"]}
+{"version":3,"file":"principalPolicyHistoryTypes.js","sourceRoot":"","sources":["principalPolicyHistoryTypes.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAS7C,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AAyBtD,MAAM,oBAAoB,GAAkB,MAAM,CAChD,gCAAgC,CACjC,CAAC;AAiBF,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,eAAe,GAAG,IAAI,OAAO,EAGhC,CAAC;AAEJ,MAAM,UAAU,kCAAkC,CAChD,KAAwE,EACxE,eAAuD;IAEvD,MAAM,MAAM,GAAmC;QAC7C,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,CAAC,oBAAoB,CAAC,EAAE,IAAI;KAC7B,CAAC;IACF,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,OAAuC;IAEvC,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ;QACX,iBAAiB,CACf,eAAe,EACf,mDAAmD,CACpD,CAAC;IACJ,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC","sourcesContent":["import type { PrincipalStateExternalAuthority } from \"../principalState\";\nimport type { PrincipalPolicyExternalAuthority } from \"./principalPolicyExternalAuthorityTypes\";\nimport type { PrincipalHistoryIndexNode } from \"./principalPolicyHistoryIndex\";\nimport { throwVerification } from \"./shared\";\nimport type {\n  KeyingVerificationResult,\n  PrincipalPolicyCheckpoint,\n  PrincipalPolicySignerPublicKey,\n  PrincipalPolicyStateChainEntry,\n  ReferencedPrincipalHead,\n} from \"./types\";\n\nexport const PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT = 128;\n\n/** A crypto verification batch, not a wire-response DTO. */\nexport interface PrincipalPolicyHistoryPage {\n  readonly entries: readonly PrincipalPolicyStateChainEntry[];\n  /** Keys resolved through the caller's trusted user-identity mechanism. */\n  readonly signerPublicKeys: readonly PrincipalPolicySignerPublicKey[];\n  /** Already authenticated authority; never trust a server page directly. */\n  readonly externalAuthority?: PrincipalPolicyExternalAuthority;\n}\n\nexport interface PrincipalPolicyHistoryInput {\n  readonly principalId: string;\n  readonly principalType: ReferencedPrincipalHead[\"principalType\"];\n  readonly localCheckpoint?: PrincipalPolicyCheckpoint | null;\n  readonly retainedReferences?: readonly ReferencedPrincipalHead[];\n}\n\n/** Local verifier protection; never obtain this key from a remote API. */\nexport interface PrincipalPolicyHistoryProgressOptions {\n  readonly localKey: Uint8Array;\n  /** Stable local operation identity, bound into authenticated progress. */\n  readonly context: string;\n}\n\nconst verifiedHistoryBrand: unique symbol = Symbol(\n  \"verifiedPrincipalPolicyHistory\",\n);\n\n/** A verified prefix with explicitly retained references, not a full snapshot. */\nexport interface VerifiedPrincipalPolicyHistory {\n  readonly [verifiedHistoryBrand]: true;\n  readonly currentEntry: PrincipalPolicyStateChainEntry;\n  readonly retainedEntries: readonly PrincipalPolicyStateChainEntry[];\n  readonly checkpoint: PrincipalPolicyCheckpoint;\n  /** Computed only from locally accepted entries; never supplied by a peer. */\n  readonly indexRootHash: string;\n}\n\ntype HistorySnapshot = Omit<\n  VerifiedPrincipalPolicyHistory,\n  typeof verifiedHistoryBrand\n> & { readonly latestAuthority: PrincipalStateExternalAuthority | null };\n\n// Public copies are useful for inspection, but their fields are not authority.\n// A later verifier consumes the privately held snapshot issued by finish().\nconst issuedHistories = new WeakMap<\n  VerifiedPrincipalPolicyHistory,\n  HistorySnapshot\n>();\n\nexport function makeVerifiedPrincipalPolicyHistory(\n  value: Omit<VerifiedPrincipalPolicyHistory, typeof verifiedHistoryBrand>,\n  latestAuthority: PrincipalStateExternalAuthority | null,\n): VerifiedPrincipalPolicyHistory {\n  const result: VerifiedPrincipalPolicyHistory = {\n    currentEntry: value.currentEntry,\n    retainedEntries: value.retainedEntries,\n    checkpoint: value.checkpoint,\n    indexRootHash: value.indexRootHash,\n    [verifiedHistoryBrand]: true,\n  };\n  issuedHistories.set(result, structuredClone({ ...value, latestAuthority }));\n  return result;\n}\n\nexport function ownVerifiedPrincipalPolicyHistory(\n  history: VerifiedPrincipalPolicyHistory,\n): HistorySnapshot {\n  const snapshot = issuedHistories.get(history);\n  if (!snapshot)\n    throwVerification(\n      \"invalid_shape\",\n      \"principal history must come from a local verifier\",\n    );\n  return structuredClone(snapshot);\n}\n\nexport interface PrincipalPolicyHistoryVerifier {\n  /** Owned copy of the latest accepted citation, including across uncited pages. */\n  getExternalAuthorityReference(): ReferencedPrincipalHead | null;\n  append(page: PrincipalPolicyHistoryPage): Promise<\n    KeyingVerificationResult<{\n      readonly throughVersion: number;\n      readonly indexNodes: readonly PrincipalHistoryIndexNode[];\n    }>\n  >;\n  finish(\n    expectedHead: ReferencedPrincipalHead,\n  ): KeyingVerificationResult<VerifiedPrincipalPolicyHistory>;\n  exportProgress(\n    options: PrincipalPolicyHistoryProgressOptions,\n  ): Promise<KeyingVerificationResult<string>>;\n}\n"]}

package/internal/crypto/projectionHistorySlots.js

@@ -64,10 +64,6 @@ export function projectionHistoryArrays(projection) {
             manifests(`${name}:kek:${index}:${kek.containerId}`, kek.containerManifestHistory);
     };
     const evidence = projection.policyEvidence;
-    if (evidence.organization)
-        add(`organization:${evidence.organization.currentState.principalId}`, evidence.organization.previousStates);
-    for (const group of evidence.groups)
-        add(`group:${group.currentState.principalId}`, group.previousStates);
     add("organizationPayloads", evidence.organizationPayloads);
     if (!isDocumentProjection(projection))
         path("container", projection);

package/internal/crypto/projectionHistorySlots.js.map

@@ -1 +1 @@
-{"version":3,"file":"projectionHistorySlots.js","sourceRoot":"","sources":["projectionHistorySlots.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAe9D,SAAS,aAAa,CAAC,MAAwC;IAC7D,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAA6B;IAE7B,OAAO,YAAY,IAAI,UAAU,IAAI,kBAAkB,IAAI,UAAU,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAgC;IAEhC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM;QACxB,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,8EAA8E;IAC9E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAW,EACX,MAA0C,EAC1C,WAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8C,CAAC;IACrE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,GAAG;YACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO;QACL,GAAG;QACH,MAAM;QACN,YAAY,EAAE,WAAW;YACvB,CAAC,CAAC,GAAG,EAAE;gBACH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC;YACH,CAAC,CAAC,SAAS;QACb,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,GAAG,EAAE,KAAK;YACV,MAAM,EAAE,OAAO,CAAC,IAAI,CAClB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC;gBACnC,uBAAuB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAC1D;SACF,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,uBAAuB,CACrC,UAA6B;IAE7B,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,UAAU,CAAC;QAC/C,CAAC,CAAC;YACE,UAAU;YACV,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YACnE,UAAU,CAAC,UAAU;SACtB;QACH,CAAC,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,MAAiB,EAAE,EAAE;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAChB,IAAY,EACZ,MAA0C,EAC1C,WAAW,GAAG,KAAK,EACnB,EAAE;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAkC,EAAE,EAAE;QAChE,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE;YACtD,SAAS,CACP,GAAG,IAAI,QAAQ,KAAK,IAAI,GAAG,CAAC,WAAW,EAAE,EACzC,GAAG,CAAC,wBAAwB,CAC7B,CAAC;IACN,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC;IAC3C,IAAI,QAAQ,CAAC,YAAY;QACvB,GAAG,CACD,gBAAgB,QAAQ,CAAC,YAAY,CAAC,YAAY,CAAC,WAAW,EAAE,EAChE,QAAQ,CAAC,YAAY,CAAC,cAAc,CACrC,CAAC;IACJ,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM;QACjC,GAAG,CAAC,SAAS,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IACvE,GAAG,CAAC,sBAAsB,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC3D,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;SAChE,CAAC;QACJ,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,yBAAyB,CAAC,OAAO,EAAE;YACzE,IAAI,CAAC,QAAQ,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;QACpD,uEAAuE;QACvE,KAAK,MAAM,CACT,KAAK,EACL,MAAM,EACP,IAAI,UAAU,CAAC,8BAA8B,CAAC,OAAO,EAAE;YACtD,GAAG,CAAC,kCAAkC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QACzD,SAAS,CACP,kCAAkC,EAClC,UAAU,CAAC,gCAAgC,CAC5C,CAAC;QACF,SAAS,CACP,yBAAyB,EACzB,UAAU,CAAC,uBAAuB,EAClC,IAAI,CACL,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC","sourcesContent":["import type {\n  AccessManifestBundleWireResponse,\n  ContainerKeyingPathResponse,\n  ContainerWriterProjectionResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport { compareCanonicalStrings } from \"./canonicalOrdering\";\n\nexport type HistoryProjection =\n  | ContainerWriterProjectionResponse\n  | DocumentWriterProjectionResponse;\nexport interface ProjectionHistoryArray {\n  readonly key: string;\n  readonly values: unknown[];\n  readonly restoreOrder?: (() => void) | undefined;\n  readonly chains: readonly {\n    readonly key: string;\n    readonly values: unknown[];\n  }[];\n}\n\nfunction manifestEpoch(bundle: AccessManifestBundleWireResponse): number {\n  const epoch: unknown = Reflect.get(bundle.manifest, \"epoch\");\n  return typeof epoch === \"number\" && Number.isFinite(epoch) ? epoch : 0;\n}\n\nfunction isDocumentProjection(\n  projection: HistoryProjection,\n): projection is DocumentWriterProjectionResponse {\n  return \"documentId\" in projection && \"documentManifest\" in projection;\n}\n\nfunction unambiguousArrays(\n  arrays: ProjectionHistoryArray[],\n): ProjectionHistoryArray[] {\n  const occurrences = new Map<string, number>();\n  for (const array of arrays)\n    occurrences.set(array.key, (occurrences.get(array.key) ?? 0) + 1);\n  // Ambiguous locations cannot safely negotiate an omission. Deliver them full.\n  return arrays.filter((array) => occurrences.get(array.key) === 1);\n}\n\nfunction manifestHistoryArray(\n  key: string,\n  values: AccessManifestBundleWireResponse[],\n  newestFirst: boolean,\n): ProjectionHistoryArray {\n  const groups = new Map<string, AccessManifestBundleWireResponse[]>();\n  for (const value of values) {\n    const chain = JSON.stringify([\n      key,\n      Reflect.get(value.manifest, \"organizationId\"),\n      Reflect.get(value.manifest, \"objectKind\"),\n      Reflect.get(value.manifest, \"objectId\"),\n    ]);\n    const entries = groups.get(chain) ?? [];\n    entries.push(value);\n    groups.set(chain, entries);\n  }\n  return {\n    key,\n    values,\n    restoreOrder: newestFirst\n      ? () => {\n          values.sort((a, b) => manifestEpoch(b) - manifestEpoch(a));\n        }\n      : undefined,\n    chains: [...groups].map(([chain, entries]) => ({\n      key: chain,\n      values: entries.sort(\n        (a, b) =>\n          manifestEpoch(a) - manifestEpoch(b) ||\n          compareCanonicalStrings(a.manifestHash, b.manifestHash),\n      ),\n    })),\n  };\n}\n\n/** Only these evidence arrays can be omitted. Current heads and keys always travel. */\nexport function projectionHistoryArrays(\n  projection: HistoryProjection,\n): ProjectionHistoryArray[] {\n  const arrays: ProjectionHistoryArray[] = [];\n  const identity = isDocumentProjection(projection)\n    ? [\n        \"document\",\n        Reflect.get(projection.documentManifest.manifest, \"organizationId\"),\n        projection.documentId,\n      ]\n    : [\"container\", projection.organizationId, projection.containerId];\n  const add = (name: string, values: unknown[]) => {\n    const key = JSON.stringify([...identity, name]);\n    arrays.push({ key, values, chains: [{ key, values }] });\n  };\n  const manifests = (\n    name: string,\n    values: AccessManifestBundleWireResponse[],\n    newestFirst = false,\n  ) => {\n    const key = JSON.stringify([...identity, name]);\n    arrays.push(manifestHistoryArray(key, values, newestFirst));\n  };\n  const path = (name: string, value: ContainerKeyingPathResponse) => {\n    for (const [index, kek] of value.containerKeks.entries())\n      manifests(\n        `${name}:kek:${index}:${kek.containerId}`,\n        kek.containerManifestHistory,\n      );\n  };\n  const evidence = projection.policyEvidence;\n  if (evidence.organization)\n    add(\n      `organization:${evidence.organization.currentState.principalId}`,\n      evidence.organization.previousStates,\n    );\n  for (const group of evidence.groups)\n    add(`group:${group.currentState.principalId}`, group.previousStates);\n  add(\"organizationPayloads\", evidence.organizationPayloads);\n  if (!isDocumentProjection(projection)) path(\"container\", projection);\n  else {\n    for (const [index, value] of projection.authorizingContainerPaths.entries())\n      path(`path:${index}:${value.containerId}`, value);\n    // A dependency path is ordered root-to-leaf, not an unordered history.\n    for (const [\n      index,\n      values,\n    ] of projection.documentManifestContainerPaths.entries())\n      add(`documentManifestContainerPaths:${index}`, values);\n    manifests(\n      \"documentContainerManifestHistory\",\n      projection.documentContainerManifestHistory,\n    );\n    manifests(\n      \"documentManifestHistory\",\n      projection.documentManifestHistory,\n      true,\n    );\n  }\n  return unambiguousArrays(arrays);\n}\n"]}
+{"version":3,"file":"projectionHistorySlots.js","sourceRoot":"","sources":["projectionHistorySlots.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAe9D,SAAS,aAAa,CAAC,MAAwC;IAC7D,MAAM,KAAK,GAAY,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAA6B;IAE7B,OAAO,YAAY,IAAI,UAAU,IAAI,kBAAkB,IAAI,UAAU,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAgC;IAEhC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM;QACxB,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,8EAA8E;IAC9E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAW,EACX,MAA0C,EAC1C,WAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8C,CAAC;IACrE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,GAAG;YACH,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO;QACL,GAAG;QACH,MAAM;QACN,YAAY,EAAE,WAAW;YACvB,CAAC,CAAC,GAAG,EAAE;gBACH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC;YACH,CAAC,CAAC,SAAS;QACb,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,GAAG,EAAE,KAAK;YACV,MAAM,EAAE,OAAO,CAAC,IAAI,CAClB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC;gBACnC,uBAAuB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAC1D;SACF,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,uBAAuB,CACrC,UAA6B;IAE7B,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,UAAU,CAAC;QAC/C,CAAC,CAAC;YACE,UAAU;YACV,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YACnE,UAAU,CAAC,UAAU;SACtB;QACH,CAAC,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,cAAc,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,MAAiB,EAAE,EAAE;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAChB,IAAY,EACZ,MAA0C,EAC1C,WAAW,GAAG,KAAK,EACnB,EAAE;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAkC,EAAE,EAAE;QAChE,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE;YACtD,SAAS,CACP,GAAG,IAAI,QAAQ,KAAK,IAAI,GAAG,CAAC,WAAW,EAAE,EACzC,GAAG,CAAC,wBAAwB,CAC7B,CAAC;IACN,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC;IAC3C,GAAG,CAAC,sBAAsB,EAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC3D,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;SAChE,CAAC;QACJ,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,yBAAyB,CAAC,OAAO,EAAE;YACzE,IAAI,CAAC,QAAQ,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;QACpD,uEAAuE;QACvE,KAAK,MAAM,CACT,KAAK,EACL,MAAM,EACP,IAAI,UAAU,CAAC,8BAA8B,CAAC,OAAO,EAAE;YACtD,GAAG,CAAC,kCAAkC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QACzD,SAAS,CACP,kCAAkC,EAClC,UAAU,CAAC,gCAAgC,CAC5C,CAAC;QACF,SAAS,CACP,yBAAyB,EACzB,UAAU,CAAC,uBAAuB,EAClC,IAAI,CACL,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC","sourcesContent":["import type {\n  AccessManifestBundleWireResponse,\n  ContainerKeyingPathResponse,\n  ContainerWriterProjectionResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\nimport { compareCanonicalStrings } from \"./canonicalOrdering\";\n\nexport type HistoryProjection =\n  | ContainerWriterProjectionResponse\n  | DocumentWriterProjectionResponse;\nexport interface ProjectionHistoryArray {\n  readonly key: string;\n  readonly values: unknown[];\n  readonly restoreOrder?: (() => void) | undefined;\n  readonly chains: readonly {\n    readonly key: string;\n    readonly values: unknown[];\n  }[];\n}\n\nfunction manifestEpoch(bundle: AccessManifestBundleWireResponse): number {\n  const epoch: unknown = Reflect.get(bundle.manifest, \"epoch\");\n  return typeof epoch === \"number\" && Number.isFinite(epoch) ? epoch : 0;\n}\n\nfunction isDocumentProjection(\n  projection: HistoryProjection,\n): projection is DocumentWriterProjectionResponse {\n  return \"documentId\" in projection && \"documentManifest\" in projection;\n}\n\nfunction unambiguousArrays(\n  arrays: ProjectionHistoryArray[],\n): ProjectionHistoryArray[] {\n  const occurrences = new Map<string, number>();\n  for (const array of arrays)\n    occurrences.set(array.key, (occurrences.get(array.key) ?? 0) + 1);\n  // Ambiguous locations cannot safely negotiate an omission. Deliver them full.\n  return arrays.filter((array) => occurrences.get(array.key) === 1);\n}\n\nfunction manifestHistoryArray(\n  key: string,\n  values: AccessManifestBundleWireResponse[],\n  newestFirst: boolean,\n): ProjectionHistoryArray {\n  const groups = new Map<string, AccessManifestBundleWireResponse[]>();\n  for (const value of values) {\n    const chain = JSON.stringify([\n      key,\n      Reflect.get(value.manifest, \"organizationId\"),\n      Reflect.get(value.manifest, \"objectKind\"),\n      Reflect.get(value.manifest, \"objectId\"),\n    ]);\n    const entries = groups.get(chain) ?? [];\n    entries.push(value);\n    groups.set(chain, entries);\n  }\n  return {\n    key,\n    values,\n    restoreOrder: newestFirst\n      ? () => {\n          values.sort((a, b) => manifestEpoch(b) - manifestEpoch(a));\n        }\n      : undefined,\n    chains: [...groups].map(([chain, entries]) => ({\n      key: chain,\n      values: entries.sort(\n        (a, b) =>\n          manifestEpoch(a) - manifestEpoch(b) ||\n          compareCanonicalStrings(a.manifestHash, b.manifestHash),\n      ),\n    })),\n  };\n}\n\n/** Only these evidence arrays can be omitted. Current heads and keys always travel. */\nexport function projectionHistoryArrays(\n  projection: HistoryProjection,\n): ProjectionHistoryArray[] {\n  const arrays: ProjectionHistoryArray[] = [];\n  const identity = isDocumentProjection(projection)\n    ? [\n        \"document\",\n        Reflect.get(projection.documentManifest.manifest, \"organizationId\"),\n        projection.documentId,\n      ]\n    : [\"container\", projection.organizationId, projection.containerId];\n  const add = (name: string, values: unknown[]) => {\n    const key = JSON.stringify([...identity, name]);\n    arrays.push({ key, values, chains: [{ key, values }] });\n  };\n  const manifests = (\n    name: string,\n    values: AccessManifestBundleWireResponse[],\n    newestFirst = false,\n  ) => {\n    const key = JSON.stringify([...identity, name]);\n    arrays.push(manifestHistoryArray(key, values, newestFirst));\n  };\n  const path = (name: string, value: ContainerKeyingPathResponse) => {\n    for (const [index, kek] of value.containerKeks.entries())\n      manifests(\n        `${name}:kek:${index}:${kek.containerId}`,\n        kek.containerManifestHistory,\n      );\n  };\n  const evidence = projection.policyEvidence;\n  add(\"organizationPayloads\", evidence.organizationPayloads);\n  if (!isDocumentProjection(projection)) path(\"container\", projection);\n  else {\n    for (const [index, value] of projection.authorizingContainerPaths.entries())\n      path(`path:${index}:${value.containerId}`, value);\n    // A dependency path is ordered root-to-leaf, not an unordered history.\n    for (const [\n      index,\n      values,\n    ] of projection.documentManifestContainerPaths.entries())\n      add(`documentManifestContainerPaths:${index}`, values);\n    manifests(\n      \"documentContainerManifestHistory\",\n      projection.documentContainerManifestHistory,\n    );\n    manifests(\n      \"documentManifestHistory\",\n      projection.documentManifestHistory,\n      true,\n    );\n  }\n  return unambiguousArrays(arrays);\n}\n"]}

package/internal/validators/operation/index.d.ts

@@ -18,6 +18,7 @@ export { getOrganizationPolicyHistoryOperation } from "./organizationPolicyHisto
 export { createOrganizationGroupOperation, createOrganizationOperation, deleteOrganizationGroupOperation, getOrganizationDataUsageOperation, getOrganizationReadModelOperation, isCreateOrganizationGroupOperationRequest, isCreateOrganizationGroupOperationResponse, isCreateOrganizationOperationRequest, isCreateOrganizationOperationResponse, isDeleteOrganizationGroupOperationResponse, isGetOrganizationDataUsageOperationResponse, isGetOrganizationReadModelOperationResponse, isListOrganizationGroupMembersOperationResponse, isUpdateOrganizationProfileOperationRequest, isUpdateOrganizationProfileOperationResponse, isUpdateOrganizationRosterEntryOperationRequest, isUpdateOrganizationRosterEntryOperationResponse, listOrganizationGroupMembersOperation, type OrganizationGroupPathParams, OrganizationGroupPathParamsSchema, type OrganizationPathParams, OrganizationPathParamsSchema, type OrganizationRosterPathParams, OrganizationRosterPathParamsSchema, updateOrganizationProfileOperation, updateOrganizationRosterEntryOperation, } from "./organizations.js";
 export { type PrincipalPolicyPageQuery, PrincipalPolicyPageQuerySchema, } from "./principalPolicyPageQuery.js";
 export { commitOrganizationGroupPolicyOperation, getPrincipalPolicyOperation, isCommitOrganizationGroupPolicyOperationRequest, isCommitOrganizationGroupPolicyOperationResponse, isGetPrincipalPolicyOperationResponse, isPutPrincipalPolicyOperationRequest, isPutPrincipalPolicyOperationResponse, type OrganizationGroupPolicyPathParams, OrganizationGroupPolicyPathParamsSchema, type PrincipalPolicyPathParams, PrincipalPolicyPathParamsSchema, putPrincipalPolicyOperation, } from "./principals.js";
+export { getProjectionPolicyHistoryOperation, type ProjectionPolicyHistoryQuery, ProjectionPolicyHistoryQuerySchema, } from "./projectionPolicyHistory.js";
 export { protocolOperations } from "./registry.js";
 export { getRootIdentityOperation, isGetRootIdentityOperationResponse, isListRootIdentitiesOperationResponse, isListRootIdentityOrganizationsOperationResponse, listRootIdentitiesOperation, listRootIdentityOrganizationsOperation, MAX_ROOT_IDENTITY_PAGE_SIZE, type RootIdentitiesQuery, RootIdentitiesQuerySchema, type RootIdentityPathParams, RootIdentityPathParamsSchema, } from "./root.js";
 export { getRootOrganizationDataUsageOperation, getRootOrganizationOperation, listRootDataUsageReportOperation, listRootOrganizationIdentitiesOperation, listRootOrganizationsOperation, type RootOrganizationPageQuery, type RootOrganizationsQuery, } from "./rootOrganizations.js";

package/internal/validators/operation/index.js

@@ -18,6 +18,7 @@ export { getOrganizationPolicyHistoryOperation } from "./organizationPolicyHisto
 export { createOrganizationGroupOperation, createOrganizationOperation, deleteOrganizationGroupOperation, getOrganizationDataUsageOperation, getOrganizationReadModelOperation, isCreateOrganizationGroupOperationRequest, isCreateOrganizationGroupOperationResponse, isCreateOrganizationOperationRequest, isCreateOrganizationOperationResponse, isDeleteOrganizationGroupOperationResponse, isGetOrganizationDataUsageOperationResponse, isGetOrganizationReadModelOperationResponse, isListOrganizationGroupMembersOperationResponse, isUpdateOrganizationProfileOperationRequest, isUpdateOrganizationProfileOperationResponse, isUpdateOrganizationRosterEntryOperationRequest, isUpdateOrganizationRosterEntryOperationResponse, listOrganizationGroupMembersOperation, OrganizationGroupPathParamsSchema, OrganizationPathParamsSchema, OrganizationRosterPathParamsSchema, updateOrganizationProfileOperation, updateOrganizationRosterEntryOperation, } from "./organizations.js";
 export { PrincipalPolicyPageQuerySchema, } from "./principalPolicyPageQuery.js";
 export { commitOrganizationGroupPolicyOperation, getPrincipalPolicyOperation, isCommitOrganizationGroupPolicyOperationRequest, isCommitOrganizationGroupPolicyOperationResponse, isGetPrincipalPolicyOperationResponse, isPutPrincipalPolicyOperationRequest, isPutPrincipalPolicyOperationResponse, OrganizationGroupPolicyPathParamsSchema, PrincipalPolicyPathParamsSchema, putPrincipalPolicyOperation, } from "./principals.js";
+export { getProjectionPolicyHistoryOperation, ProjectionPolicyHistoryQuerySchema, } from "./projectionPolicyHistory.js";
 export { protocolOperations } from "./registry.js";
 export { getRootIdentityOperation, isGetRootIdentityOperationResponse, isListRootIdentitiesOperationResponse, isListRootIdentityOrganizationsOperationResponse, listRootIdentitiesOperation, listRootIdentityOrganizationsOperation, MAX_ROOT_IDENTITY_PAGE_SIZE, RootIdentitiesQuerySchema, RootIdentityPathParamsSchema, } from "./root.js";
 export { getRootOrganizationDataUsageOperation, getRootOrganizationOperation, listRootDataUsageReportOperation, listRootOrganizationIdentitiesOperation, listRootOrganizationsOperation, } from "./rootOrganizations.js";

package/internal/validators/operation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAEL,qCAAqC,EAErC,8BAA8B,EAC9B,2BAA2B,EAE3B,mCAAmC,EACnC,6BAA6B,EAC7B,oCAAoC,EACpC,qCAAqC,EACrC,sCAAsC,EACtC,uCAAuC,EACvC,0CAA0C,EAC1C,gCAAgC,GACjC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,2BAA2B,EAC3B,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,EAC/B,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,+BAA+B,EAC/B,wBAAwB,EACxB,yBAAyB,EACzB,kCAAkC,EAClC,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,wBAAwB,GACzB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,0CAA0C,EAC1C,2CAA2C,EAC3C,sCAAsC,EACtC,uCAAuC,EAEvC,8BAA8B,EAC9B,iCAAiC,EACjC,6BAA6B,EAE7B,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gBAAgB,EAEhB,yBAAyB,EAEzB,8BAA8B,EAC9B,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,+CAA+C,EAE/C,8BAA8B,EAE9B,iCAAiC,EACjC,qCAAqC,GACtC,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,iCAAiC,EACjC,wBAAwB,EACxB,4CAA4C,EAC5C,wBAAwB,EACxB,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,oCAAoC,EACpC,qDAAqD,EACrD,sDAAsD,EACtD,kCAAkC,EAClC,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,0BAA0B,EAE1B,6BAA6B,EAC7B,2BAA2B,EAC3B,qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,2CAA2C,EAE3C,iCAAiC,EACjC,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,gDAAgD,EAChD,8CAA8C,GAC/C,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EAQnB,oBAAoB,EACpB,4BAA4B,EAC5B,6BAA6B,EAC7B,kBAAkB,GAEnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAEL,mCAAmC,EAEnC,oCAAoC,EAEpC,uCAAuC,EACvC,iCAAiC,EACjC,kCAAkC,EAClC,+BAA+B,EAC/B,yCAAyC,EACzC,gDAAgD,EAChD,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAEvB,gCAAgC,EAEhC,6BAA6B,EAC7B,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,yCAAyC,EACzC,0CAA0C,EAC1C,wCAAwC,EACxC,+BAA+B,EAC/B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,4BAA4B,GAC7B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,mCAAmC,EACnC,8BAA8B,EAC9B,mCAAmC,EACnC,4CAA4C,EAC5C,6CAA6C,EAC7C,wCAAwC,EACxC,4CAA4C,EAC5C,6CAA6C,EAE7C,kCAAkC,GACnC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,4CAA4C,EAC5C,sCAAsC,EACtC,4CAA4C,EAC5C,+BAA+B,EAC/B,iDAAiD,EACjD,sDAAsD,EACtD,gDAAgD,EAChD,sDAAsD,EACtD,yCAAyC,EACzC,2DAA2D,EAC3D,yCAAyC,EAEzC,8CAA8C,EAE9C,+CAA+C,EAE/C,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qCAAqC,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,EACL,gCAAgC,EAChC,2BAA2B,EAC3B,gCAAgC,EAChC,iCAAiC,EACjC,iCAAiC,EACjC,yCAAyC,EACzC,0CAA0C,EAC1C,oCAAoC,EACpC,qCAAqC,EACrC,0CAA0C,EAC1C,2CAA2C,EAC3C,2CAA2C,EAC3C,+CAA+C,EAC/C,2CAA2C,EAC3C,4CAA4C,EAC5C,+CAA+C,EAC/C,gDAAgD,EAChD,qCAAqC,EAErC,iCAAiC,EAEjC,4BAA4B,EAE5B,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,GACvC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sCAAsC,EACtC,2BAA2B,EAC3B,+CAA+C,EAC/C,gDAAgD,EAChD,qCAAqC,EACrC,oCAAoC,EACpC,qCAAqC,EAErC,uCAAuC,EAEvC,+BAA+B,EAC/B,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EACL,wBAAwB,EACxB,kCAAkC,EAClC,qCAAqC,EACrC,gDAAgD,EAChD,2BAA2B,EAC3B,sCAAsC,EACtC,2BAA2B,EAE3B,yBAAyB,EAEzB,4BAA4B,GAC7B,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,qCAAqC,EACrC,4BAA4B,EAC5B,gCAAgC,EAChC,uCAAuC,EACvC,8BAA8B,GAG/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,oCAAoC,EACpC,2BAA2B,EAC3B,iCAAiC,EACjC,2CAA2C,EAC3C,uCAAuC,EACvC,6CAA6C,EAC7C,8CAA8C,EAC9C,oCAAoC,EACpC,qCAAqC,EACrC,2CAA2C,EAE3C,8BAA8B,GAC/B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,yCAAyC,EAEzC,wCAAwC,EACxC,qCAAqC,EACrC,oCAAoC,EACpC,+CAA+C,EAC/C,8CAA8C,GAC/C,MAAM,qBAAqB,CAAC","sourcesContent":["export { apiVersionHeaderName, parseApiVersion } from \"./apiVersion\";\nexport {\n  type BlobAttachmentBindingPathParams,\n  BlobAttachmentBindingPathParamsSchema,\n  type BlobAttachmentPathParams,\n  BlobAttachmentPathParamsSchema,\n  bindBlobAttachmentOperation,\n  type DocumentAttachmentsPathParams,\n  DocumentAttachmentsPathParamsSchema,\n  detachBlobAttachmentOperation,\n  isBindBlobAttachmentOperationRequest,\n  isBindBlobAttachmentOperationResponse,\n  isDetachBlobAttachmentOperationRequest,\n  isDetachBlobAttachmentOperationResponse,\n  isListDocumentAttachmentsOperationResponse,\n  listDocumentAttachmentsOperation,\n} from \"./attachments\";\nexport {\n  challengeOperation,\n  destroySessionOperation,\n  isChallengeOperationRequest,\n  isChallengeOperationResponse,\n  isDestroySessionOperationResponse,\n  isListSessionsOperationResponse,\n  isLogoutOperationResponse,\n  isRegistrationOperationRequest,\n  isRegistrationOperationResponse,\n  isUserIdentityOperationResponse,\n  isVerifyOperationRequest,\n  isVerifyOperationResponse,\n  isWebSocketTicketOperationResponse,\n  listSessionsOperation,\n  logoutOperation,\n  registerOperation,\n  userIdentityOperation,\n  verifyOperation,\n  webSocketTicketOperation,\n} from \"./auth\";\nexport {\n  billingWebhookWireHeaderKeys,\n  billingWebhookWireHeaderNames,\n  isReceiveRevenueCatWebhookOperationRequest,\n  isReceiveRevenueCatWebhookOperationResponse,\n  isReceiveStripeWebhookOperationRequest,\n  isReceiveStripeWebhookOperationResponse,\n  type RevenueCatWebhookHeaders,\n  RevenueCatWebhookHeadersSchema,\n  receiveRevenueCatWebhookOperation,\n  receiveStripeWebhookOperation,\n  type StripeWebhookHeaders,\n  StripeWebhookHeadersSchema,\n} from \"./billingWebhooks\";\nexport {\n  BinaryBodySchema,\n  type BlobBytesPathParams,\n  BlobBytesPathParamsSchema,\n  type BlobBytesResponseHeaders,\n  BlobBytesResponseHeadersSchema,\n  blobWireHeaderKeys,\n  blobWireHeaderNames,\n  getBlobBytesOperation,\n  isUploadMultipartBlobPartBytesOperationResponse,\n  type MultipartBlobPartHeaders,\n  MultipartBlobPartHeadersSchema,\n  type MultipartBlobPartPathParams,\n  MultipartBlobPartPathParamsSchema,\n  uploadMultipartBlobPartBytesOperation,\n} from \"./blobBytes\";\nexport {\n  type ContainerMutationPathParams,\n  ContainerMutationPathParamsSchema,\n  createContainerOperation,\n  createContainerWithMetadataDocumentOperation,\n  deleteContainerOperation,\n  isContainerMutationOperationRequest,\n  isContainerMutationOperationResponse,\n  isContainerRotationOperationRequest,\n  isContainerRotationOperationResponse,\n  isCreateContainerWithMetadataDocumentOperationRequest,\n  isCreateContainerWithMetadataDocumentOperationResponse,\n  isDeleteContainerOperationResponse,\n  moveContainerOperation,\n  reciteContainerOperation,\n  rekeyContainerOperation,\n  revokeContainerOperation,\n  shareContainerOperation,\n} from \"./containerMutations\";\nexport {\n  type ContainerKekLogQuery,\n  ContainerKekLogQuerySchema,\n  type ContainerReadPathParams,\n  ContainerReadPathParamsSchema,\n  getContainerKekLogOperation,\n  isGetContainerKekLogOperationResponse,\n  isListContainerDocumentsOperationResponse,\n  isListContainerParentLanesOperationRequest,\n  isListContainerParentLanesOperationResponse,\n  type ListContainerDocumentsQuery,\n  ListContainerDocumentsQuerySchema,\n  listContainerDocumentsOperation,\n  listContainerParentLanesOperation,\n} from \"./containerReads\";\nexport {\n  type ContainerReplacementAuthorizationsResponse,\n  ContainerReplacementAuthorizationsResponseSchema,\n  getContainerReplacementAuthorizationsOperation,\n} from \"./containerReplacement\";\nexport {\n  defineHttpOperation,\n  defineJsonOperation,\n  type HttpOperation,\n  type HttpOperationMediaType,\n  type HttpOperationMethod,\n  type JsonOperation,\n  type JsonOperationMethod,\n  type OperationSchemaInput,\n  type OperationSchemaOutput,\n  operationRequestPath,\n  operationRequestPathForInput,\n  operationRequestPathWithQuery,\n  operationRoutePath,\n  type RuntimeRefinement,\n} from \"./definition\";\nexport {\n  type DocumentAttributionPathParams,\n  DocumentAttributionPathParamsSchema,\n  type DocumentAttributionRangesQuery,\n  DocumentAttributionRangesQuerySchema,\n  type DocumentAttributionRequestHeaders,\n  DocumentAttributionRequestHeadersSchema,\n  documentAttributionWireHeaderKeys,\n  documentAttributionWireHeaderNames,\n  getDocumentAttributionOperation,\n  isGetDocumentAttributionOperationResponse,\n  isListDocumentAttributionRangesOperationResponse,\n  listDocumentAttributionRangesOperation,\n} from \"./documentAttribution\";\nexport {\n  createDocumentOperation,\n  type DocumentMutationPathParams,\n  DocumentMutationPathParamsSchema,\n  type DocumentPurgeProofQuery,\n  DocumentPurgeProofQuerySchema,\n  getDocumentPurgeProofOperation,\n  isCreateDocumentOperationRequest,\n  isCreateDocumentOperationResponse,\n  isDocumentLinkSetMutationOperationRequest,\n  isDocumentLinkSetMutationOperationResponse,\n  isGetDocumentPurgeProofOperationResponse,\n  isPurgeDocumentOperationRequest,\n  isPurgeDocumentOperationResponse,\n  linkDocumentOperation,\n  purgeDocumentOperation,\n  unlinkDocumentOperation,\n} from \"./documentMutations\";\nexport {\n  type DocumentSyncPathParams,\n  DocumentSyncPathParamsSchema,\n  documentSyncOperation,\n  isDocumentSyncOperationRequest,\n  isDocumentSyncOperationResponse,\n} from \"./documentSync\";\nexport {\n  operationRequestHeaderNames,\n  operationResponseHeaderNames,\n} from \"./headerNames\";\nexport {\n  getHealthOperation,\n  isGetHealthOperationResponse,\n} from \"./health\";\nexport {\n  completeMultipartBlobStageOperation,\n  getMultipartBlobStageOperation,\n  initiateMultipartBlobStageOperation,\n  isCompleteMultipartBlobStageOperationRequest,\n  isCompleteMultipartBlobStageOperationResponse,\n  isGetMultipartBlobStageOperationResponse,\n  isInitiateMultipartBlobStageOperationRequest,\n  isInitiateMultipartBlobStageOperationResponse,\n  type MultipartBlobStagePathParams,\n  MultipartBlobStagePathParamsSchema,\n} from \"./multipartBlobs\";\nexport {\n  claimNativeOrganizationSubscriptionOperation,\n  getOrganizationBillingHistoryOperation,\n  getOrganizationBillingManagementUrlOperation,\n  getOrganizationBillingOperation,\n  getOrganizationNativePurchaseEligibilityOperation,\n  isClaimNativeOrganizationSubscriptionOperationResponse,\n  isGetOrganizationBillingHistoryOperationResponse,\n  isGetOrganizationBillingManagementUrlOperationResponse,\n  isGetOrganizationBillingOperationResponse,\n  isGetOrganizationNativePurchaseEligibilityOperationResponse,\n  isStartOrganizationTrialOperationResponse,\n  type OrganizationBillingNativeClaimPathParams,\n  OrganizationBillingNativeClaimPathParamsSchema,\n  type OrganizationBillingNativeEligibilityQuery,\n  OrganizationBillingNativeEligibilityQuerySchema,\n  type OrganizationBillingPathParams,\n  OrganizationBillingPathParamsSchema,\n  startOrganizationTrialOperation,\n} from \"./organizationBilling\";\nexport { getOrganizationPolicyHistoryOperation } from \"./organizationPolicyHistory\";\nexport {\n  createOrganizationGroupOperation,\n  createOrganizationOperation,\n  deleteOrganizationGroupOperation,\n  getOrganizationDataUsageOperation,\n  getOrganizationReadModelOperation,\n  isCreateOrganizationGroupOperationRequest,\n  isCreateOrganizationGroupOperationResponse,\n  isCreateOrganizationOperationRequest,\n  isCreateOrganizationOperationResponse,\n  isDeleteOrganizationGroupOperationResponse,\n  isGetOrganizationDataUsageOperationResponse,\n  isGetOrganizationReadModelOperationResponse,\n  isListOrganizationGroupMembersOperationResponse,\n  isUpdateOrganizationProfileOperationRequest,\n  isUpdateOrganizationProfileOperationResponse,\n  isUpdateOrganizationRosterEntryOperationRequest,\n  isUpdateOrganizationRosterEntryOperationResponse,\n  listOrganizationGroupMembersOperation,\n  type OrganizationGroupPathParams,\n  OrganizationGroupPathParamsSchema,\n  type OrganizationPathParams,\n  OrganizationPathParamsSchema,\n  type OrganizationRosterPathParams,\n  OrganizationRosterPathParamsSchema,\n  updateOrganizationProfileOperation,\n  updateOrganizationRosterEntryOperation,\n} from \"./organizations\";\nexport {\n  type PrincipalPolicyPageQuery,\n  PrincipalPolicyPageQuerySchema,\n} from \"./principalPolicyPageQuery\";\nexport {\n  commitOrganizationGroupPolicyOperation,\n  getPrincipalPolicyOperation,\n  isCommitOrganizationGroupPolicyOperationRequest,\n  isCommitOrganizationGroupPolicyOperationResponse,\n  isGetPrincipalPolicyOperationResponse,\n  isPutPrincipalPolicyOperationRequest,\n  isPutPrincipalPolicyOperationResponse,\n  type OrganizationGroupPolicyPathParams,\n  OrganizationGroupPolicyPathParamsSchema,\n  type PrincipalPolicyPathParams,\n  PrincipalPolicyPathParamsSchema,\n  putPrincipalPolicyOperation,\n} from \"./principals\";\nexport { protocolOperations } from \"./registry\";\nexport {\n  getRootIdentityOperation,\n  isGetRootIdentityOperationResponse,\n  isListRootIdentitiesOperationResponse,\n  isListRootIdentityOrganizationsOperationResponse,\n  listRootIdentitiesOperation,\n  listRootIdentityOrganizationsOperation,\n  MAX_ROOT_IDENTITY_PAGE_SIZE,\n  type RootIdentitiesQuery,\n  RootIdentitiesQuerySchema,\n  type RootIdentityPathParams,\n  RootIdentityPathParamsSchema,\n} from \"./root\";\nexport {\n  getRootOrganizationDataUsageOperation,\n  getRootOrganizationOperation,\n  listRootDataUsageReportOperation,\n  listRootOrganizationIdentitiesOperation,\n  listRootOrganizationsOperation,\n  type RootOrganizationPageQuery,\n  type RootOrganizationsQuery,\n} from \"./rootOrganizations\";\nexport {\n  cancelStripeSubscriptionOperation,\n  createStripeCheckoutOperation,\n  createStripeCheckoutSessionOperation,\n  createStripePortalOperation,\n  getStripeCheckoutOptionsOperation,\n  isCancelStripeSubscriptionOperationResponse,\n  isCreateStripeCheckoutOperationResponse,\n  isCreateStripeCheckoutSessionOperationRequest,\n  isCreateStripeCheckoutSessionOperationResponse,\n  isCreateStripePortalOperationRequest,\n  isCreateStripePortalOperationResponse,\n  isGetStripeCheckoutOptionsOperationResponse,\n  type StripeCheckoutPathParams,\n  StripeCheckoutPathParamsSchema,\n} from \"./stripeCheckout\";\nexport {\n  type ContainerWriterProjectionPathParams,\n  ContainerWriterProjectionPathParamsSchema,\n  type DocumentWriterProjectionPathParams,\n  DocumentWriterProjectionPathParamsSchema,\n  getContainerWriterProjectionOperation,\n  getDocumentWriterProjectionOperation,\n  isGetContainerWriterProjectionOperationResponse,\n  isGetDocumentWriterProjectionOperationResponse,\n} from \"./writerProjections\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAEL,qCAAqC,EAErC,8BAA8B,EAC9B,2BAA2B,EAE3B,mCAAmC,EACnC,6BAA6B,EAC7B,oCAAoC,EACpC,qCAAqC,EACrC,sCAAsC,EACtC,uCAAuC,EACvC,0CAA0C,EAC1C,gCAAgC,GACjC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,2BAA2B,EAC3B,4BAA4B,EAC5B,iCAAiC,EACjC,+BAA+B,EAC/B,yBAAyB,EACzB,8BAA8B,EAC9B,+BAA+B,EAC/B,+BAA+B,EAC/B,wBAAwB,EACxB,yBAAyB,EACzB,kCAAkC,EAClC,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,wBAAwB,GACzB,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,EAC7B,0CAA0C,EAC1C,2CAA2C,EAC3C,sCAAsC,EACtC,uCAAuC,EAEvC,8BAA8B,EAC9B,iCAAiC,EACjC,6BAA6B,EAE7B,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gBAAgB,EAEhB,yBAAyB,EAEzB,8BAA8B,EAC9B,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,+CAA+C,EAE/C,8BAA8B,EAE9B,iCAAiC,EACjC,qCAAqC,GACtC,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,iCAAiC,EACjC,wBAAwB,EACxB,4CAA4C,EAC5C,wBAAwB,EACxB,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,oCAAoC,EACpC,qDAAqD,EACrD,sDAAsD,EACtD,kCAAkC,EAClC,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAEL,0BAA0B,EAE1B,6BAA6B,EAC7B,2BAA2B,EAC3B,qCAAqC,EACrC,yCAAyC,EACzC,0CAA0C,EAC1C,2CAA2C,EAE3C,iCAAiC,EACjC,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,gDAAgD,EAChD,8CAA8C,GAC/C,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EAQnB,oBAAoB,EACpB,4BAA4B,EAC5B,6BAA6B,EAC7B,kBAAkB,GAEnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAEL,mCAAmC,EAEnC,oCAAoC,EAEpC,uCAAuC,EACvC,iCAAiC,EACjC,kCAAkC,EAClC,+BAA+B,EAC/B,yCAAyC,EACzC,gDAAgD,EAChD,sCAAsC,GACvC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAEvB,gCAAgC,EAEhC,6BAA6B,EAC7B,8BAA8B,EAC9B,gCAAgC,EAChC,iCAAiC,EACjC,yCAAyC,EACzC,0CAA0C,EAC1C,wCAAwC,EACxC,+BAA+B,EAC/B,gCAAgC,EAChC,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,4BAA4B,GAC7B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,mCAAmC,EACnC,8BAA8B,EAC9B,mCAAmC,EACnC,4CAA4C,EAC5C,6CAA6C,EAC7C,wCAAwC,EACxC,4CAA4C,EAC5C,6CAA6C,EAE7C,kCAAkC,GACnC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,4CAA4C,EAC5C,sCAAsC,EACtC,4CAA4C,EAC5C,+BAA+B,EAC/B,iDAAiD,EACjD,sDAAsD,EACtD,gDAAgD,EAChD,sDAAsD,EACtD,yCAAyC,EACzC,2DAA2D,EAC3D,yCAAyC,EAEzC,8CAA8C,EAE9C,+CAA+C,EAE/C,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qCAAqC,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,EACL,gCAAgC,EAChC,2BAA2B,EAC3B,gCAAgC,EAChC,iCAAiC,EACjC,iCAAiC,EACjC,yCAAyC,EACzC,0CAA0C,EAC1C,oCAAoC,EACpC,qCAAqC,EACrC,0CAA0C,EAC1C,2CAA2C,EAC3C,2CAA2C,EAC3C,+CAA+C,EAC/C,2CAA2C,EAC3C,4CAA4C,EAC5C,+CAA+C,EAC/C,gDAAgD,EAChD,qCAAqC,EAErC,iCAAiC,EAEjC,4BAA4B,EAE5B,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,GACvC,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,8BAA8B,GAC/B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,sCAAsC,EACtC,2BAA2B,EAC3B,+CAA+C,EAC/C,gDAAgD,EAChD,qCAAqC,EACrC,oCAAoC,EACpC,qCAAqC,EAErC,uCAAuC,EAEvC,+BAA+B,EAC/B,2BAA2B,GAC5B,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,mCAAmC,EAEnC,kCAAkC,GACnC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EACL,wBAAwB,EACxB,kCAAkC,EAClC,qCAAqC,EACrC,gDAAgD,EAChD,2BAA2B,EAC3B,sCAAsC,EACtC,2BAA2B,EAE3B,yBAAyB,EAEzB,4BAA4B,GAC7B,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,qCAAqC,EACrC,4BAA4B,EAC5B,gCAAgC,EAChC,uCAAuC,EACvC,8BAA8B,GAG/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,iCAAiC,EACjC,6BAA6B,EAC7B,oCAAoC,EACpC,2BAA2B,EAC3B,iCAAiC,EACjC,2CAA2C,EAC3C,uCAAuC,EACvC,6CAA6C,EAC7C,8CAA8C,EAC9C,oCAAoC,EACpC,qCAAqC,EACrC,2CAA2C,EAE3C,8BAA8B,GAC/B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,yCAAyC,EAEzC,wCAAwC,EACxC,qCAAqC,EACrC,oCAAoC,EACpC,+CAA+C,EAC/C,8CAA8C,GAC/C,MAAM,qBAAqB,CAAC","sourcesContent":["export { apiVersionHeaderName, parseApiVersion } from \"./apiVersion\";\nexport {\n  type BlobAttachmentBindingPathParams,\n  BlobAttachmentBindingPathParamsSchema,\n  type BlobAttachmentPathParams,\n  BlobAttachmentPathParamsSchema,\n  bindBlobAttachmentOperation,\n  type DocumentAttachmentsPathParams,\n  DocumentAttachmentsPathParamsSchema,\n  detachBlobAttachmentOperation,\n  isBindBlobAttachmentOperationRequest,\n  isBindBlobAttachmentOperationResponse,\n  isDetachBlobAttachmentOperationRequest,\n  isDetachBlobAttachmentOperationResponse,\n  isListDocumentAttachmentsOperationResponse,\n  listDocumentAttachmentsOperation,\n} from \"./attachments\";\nexport {\n  challengeOperation,\n  destroySessionOperation,\n  isChallengeOperationRequest,\n  isChallengeOperationResponse,\n  isDestroySessionOperationResponse,\n  isListSessionsOperationResponse,\n  isLogoutOperationResponse,\n  isRegistrationOperationRequest,\n  isRegistrationOperationResponse,\n  isUserIdentityOperationResponse,\n  isVerifyOperationRequest,\n  isVerifyOperationResponse,\n  isWebSocketTicketOperationResponse,\n  listSessionsOperation,\n  logoutOperation,\n  registerOperation,\n  userIdentityOperation,\n  verifyOperation,\n  webSocketTicketOperation,\n} from \"./auth\";\nexport {\n  billingWebhookWireHeaderKeys,\n  billingWebhookWireHeaderNames,\n  isReceiveRevenueCatWebhookOperationRequest,\n  isReceiveRevenueCatWebhookOperationResponse,\n  isReceiveStripeWebhookOperationRequest,\n  isReceiveStripeWebhookOperationResponse,\n  type RevenueCatWebhookHeaders,\n  RevenueCatWebhookHeadersSchema,\n  receiveRevenueCatWebhookOperation,\n  receiveStripeWebhookOperation,\n  type StripeWebhookHeaders,\n  StripeWebhookHeadersSchema,\n} from \"./billingWebhooks\";\nexport {\n  BinaryBodySchema,\n  type BlobBytesPathParams,\n  BlobBytesPathParamsSchema,\n  type BlobBytesResponseHeaders,\n  BlobBytesResponseHeadersSchema,\n  blobWireHeaderKeys,\n  blobWireHeaderNames,\n  getBlobBytesOperation,\n  isUploadMultipartBlobPartBytesOperationResponse,\n  type MultipartBlobPartHeaders,\n  MultipartBlobPartHeadersSchema,\n  type MultipartBlobPartPathParams,\n  MultipartBlobPartPathParamsSchema,\n  uploadMultipartBlobPartBytesOperation,\n} from \"./blobBytes\";\nexport {\n  type ContainerMutationPathParams,\n  ContainerMutationPathParamsSchema,\n  createContainerOperation,\n  createContainerWithMetadataDocumentOperation,\n  deleteContainerOperation,\n  isContainerMutationOperationRequest,\n  isContainerMutationOperationResponse,\n  isContainerRotationOperationRequest,\n  isContainerRotationOperationResponse,\n  isCreateContainerWithMetadataDocumentOperationRequest,\n  isCreateContainerWithMetadataDocumentOperationResponse,\n  isDeleteContainerOperationResponse,\n  moveContainerOperation,\n  reciteContainerOperation,\n  rekeyContainerOperation,\n  revokeContainerOperation,\n  shareContainerOperation,\n} from \"./containerMutations\";\nexport {\n  type ContainerKekLogQuery,\n  ContainerKekLogQuerySchema,\n  type ContainerReadPathParams,\n  ContainerReadPathParamsSchema,\n  getContainerKekLogOperation,\n  isGetContainerKekLogOperationResponse,\n  isListContainerDocumentsOperationResponse,\n  isListContainerParentLanesOperationRequest,\n  isListContainerParentLanesOperationResponse,\n  type ListContainerDocumentsQuery,\n  ListContainerDocumentsQuerySchema,\n  listContainerDocumentsOperation,\n  listContainerParentLanesOperation,\n} from \"./containerReads\";\nexport {\n  type ContainerReplacementAuthorizationsResponse,\n  ContainerReplacementAuthorizationsResponseSchema,\n  getContainerReplacementAuthorizationsOperation,\n} from \"./containerReplacement\";\nexport {\n  defineHttpOperation,\n  defineJsonOperation,\n  type HttpOperation,\n  type HttpOperationMediaType,\n  type HttpOperationMethod,\n  type JsonOperation,\n  type JsonOperationMethod,\n  type OperationSchemaInput,\n  type OperationSchemaOutput,\n  operationRequestPath,\n  operationRequestPathForInput,\n  operationRequestPathWithQuery,\n  operationRoutePath,\n  type RuntimeRefinement,\n} from \"./definition\";\nexport {\n  type DocumentAttributionPathParams,\n  DocumentAttributionPathParamsSchema,\n  type DocumentAttributionRangesQuery,\n  DocumentAttributionRangesQuerySchema,\n  type DocumentAttributionRequestHeaders,\n  DocumentAttributionRequestHeadersSchema,\n  documentAttributionWireHeaderKeys,\n  documentAttributionWireHeaderNames,\n  getDocumentAttributionOperation,\n  isGetDocumentAttributionOperationResponse,\n  isListDocumentAttributionRangesOperationResponse,\n  listDocumentAttributionRangesOperation,\n} from \"./documentAttribution\";\nexport {\n  createDocumentOperation,\n  type DocumentMutationPathParams,\n  DocumentMutationPathParamsSchema,\n  type DocumentPurgeProofQuery,\n  DocumentPurgeProofQuerySchema,\n  getDocumentPurgeProofOperation,\n  isCreateDocumentOperationRequest,\n  isCreateDocumentOperationResponse,\n  isDocumentLinkSetMutationOperationRequest,\n  isDocumentLinkSetMutationOperationResponse,\n  isGetDocumentPurgeProofOperationResponse,\n  isPurgeDocumentOperationRequest,\n  isPurgeDocumentOperationResponse,\n  linkDocumentOperation,\n  purgeDocumentOperation,\n  unlinkDocumentOperation,\n} from \"./documentMutations\";\nexport {\n  type DocumentSyncPathParams,\n  DocumentSyncPathParamsSchema,\n  documentSyncOperation,\n  isDocumentSyncOperationRequest,\n  isDocumentSyncOperationResponse,\n} from \"./documentSync\";\nexport {\n  operationRequestHeaderNames,\n  operationResponseHeaderNames,\n} from \"./headerNames\";\nexport {\n  getHealthOperation,\n  isGetHealthOperationResponse,\n} from \"./health\";\nexport {\n  completeMultipartBlobStageOperation,\n  getMultipartBlobStageOperation,\n  initiateMultipartBlobStageOperation,\n  isCompleteMultipartBlobStageOperationRequest,\n  isCompleteMultipartBlobStageOperationResponse,\n  isGetMultipartBlobStageOperationResponse,\n  isInitiateMultipartBlobStageOperationRequest,\n  isInitiateMultipartBlobStageOperationResponse,\n  type MultipartBlobStagePathParams,\n  MultipartBlobStagePathParamsSchema,\n} from \"./multipartBlobs\";\nexport {\n  claimNativeOrganizationSubscriptionOperation,\n  getOrganizationBillingHistoryOperation,\n  getOrganizationBillingManagementUrlOperation,\n  getOrganizationBillingOperation,\n  getOrganizationNativePurchaseEligibilityOperation,\n  isClaimNativeOrganizationSubscriptionOperationResponse,\n  isGetOrganizationBillingHistoryOperationResponse,\n  isGetOrganizationBillingManagementUrlOperationResponse,\n  isGetOrganizationBillingOperationResponse,\n  isGetOrganizationNativePurchaseEligibilityOperationResponse,\n  isStartOrganizationTrialOperationResponse,\n  type OrganizationBillingNativeClaimPathParams,\n  OrganizationBillingNativeClaimPathParamsSchema,\n  type OrganizationBillingNativeEligibilityQuery,\n  OrganizationBillingNativeEligibilityQuerySchema,\n  type OrganizationBillingPathParams,\n  OrganizationBillingPathParamsSchema,\n  startOrganizationTrialOperation,\n} from \"./organizationBilling\";\nexport { getOrganizationPolicyHistoryOperation } from \"./organizationPolicyHistory\";\nexport {\n  createOrganizationGroupOperation,\n  createOrganizationOperation,\n  deleteOrganizationGroupOperation,\n  getOrganizationDataUsageOperation,\n  getOrganizationReadModelOperation,\n  isCreateOrganizationGroupOperationRequest,\n  isCreateOrganizationGroupOperationResponse,\n  isCreateOrganizationOperationRequest,\n  isCreateOrganizationOperationResponse,\n  isDeleteOrganizationGroupOperationResponse,\n  isGetOrganizationDataUsageOperationResponse,\n  isGetOrganizationReadModelOperationResponse,\n  isListOrganizationGroupMembersOperationResponse,\n  isUpdateOrganizationProfileOperationRequest,\n  isUpdateOrganizationProfileOperationResponse,\n  isUpdateOrganizationRosterEntryOperationRequest,\n  isUpdateOrganizationRosterEntryOperationResponse,\n  listOrganizationGroupMembersOperation,\n  type OrganizationGroupPathParams,\n  OrganizationGroupPathParamsSchema,\n  type OrganizationPathParams,\n  OrganizationPathParamsSchema,\n  type OrganizationRosterPathParams,\n  OrganizationRosterPathParamsSchema,\n  updateOrganizationProfileOperation,\n  updateOrganizationRosterEntryOperation,\n} from \"./organizations\";\nexport {\n  type PrincipalPolicyPageQuery,\n  PrincipalPolicyPageQuerySchema,\n} from \"./principalPolicyPageQuery\";\nexport {\n  commitOrganizationGroupPolicyOperation,\n  getPrincipalPolicyOperation,\n  isCommitOrganizationGroupPolicyOperationRequest,\n  isCommitOrganizationGroupPolicyOperationResponse,\n  isGetPrincipalPolicyOperationResponse,\n  isPutPrincipalPolicyOperationRequest,\n  isPutPrincipalPolicyOperationResponse,\n  type OrganizationGroupPolicyPathParams,\n  OrganizationGroupPolicyPathParamsSchema,\n  type PrincipalPolicyPathParams,\n  PrincipalPolicyPathParamsSchema,\n  putPrincipalPolicyOperation,\n} from \"./principals\";\nexport {\n  getProjectionPolicyHistoryOperation,\n  type ProjectionPolicyHistoryQuery,\n  ProjectionPolicyHistoryQuerySchema,\n} from \"./projectionPolicyHistory\";\nexport { protocolOperations } from \"./registry\";\nexport {\n  getRootIdentityOperation,\n  isGetRootIdentityOperationResponse,\n  isListRootIdentitiesOperationResponse,\n  isListRootIdentityOrganizationsOperationResponse,\n  listRootIdentitiesOperation,\n  listRootIdentityOrganizationsOperation,\n  MAX_ROOT_IDENTITY_PAGE_SIZE,\n  type RootIdentitiesQuery,\n  RootIdentitiesQuerySchema,\n  type RootIdentityPathParams,\n  RootIdentityPathParamsSchema,\n} from \"./root\";\nexport {\n  getRootOrganizationDataUsageOperation,\n  getRootOrganizationOperation,\n  listRootDataUsageReportOperation,\n  listRootOrganizationIdentitiesOperation,\n  listRootOrganizationsOperation,\n  type RootOrganizationPageQuery,\n  type RootOrganizationsQuery,\n} from \"./rootOrganizations\";\nexport {\n  cancelStripeSubscriptionOperation,\n  createStripeCheckoutOperation,\n  createStripeCheckoutSessionOperation,\n  createStripePortalOperation,\n  getStripeCheckoutOptionsOperation,\n  isCancelStripeSubscriptionOperationResponse,\n  isCreateStripeCheckoutOperationResponse,\n  isCreateStripeCheckoutSessionOperationRequest,\n  isCreateStripeCheckoutSessionOperationResponse,\n  isCreateStripePortalOperationRequest,\n  isCreateStripePortalOperationResponse,\n  isGetStripeCheckoutOptionsOperationResponse,\n  type StripeCheckoutPathParams,\n  StripeCheckoutPathParamsSchema,\n} from \"./stripeCheckout\";\nexport {\n  type ContainerWriterProjectionPathParams,\n  ContainerWriterProjectionPathParamsSchema,\n  type DocumentWriterProjectionPathParams,\n  DocumentWriterProjectionPathParamsSchema,\n  getContainerWriterProjectionOperation,\n  getDocumentWriterProjectionOperation,\n  isGetContainerWriterProjectionOperationResponse,\n  isGetDocumentWriterProjectionOperationResponse,\n} from \"./writerProjections\";\n"]}

package/internal/validators/operation/principals.d.ts

@@ -1032,16 +1032,20 @@ export declare const putPrincipalPolicyOperation: Omit<{
         }>>;
         readonly 503: z.ZodType<{
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, z.core.$ZodTypeInternals<{
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }>>;
     };
     readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503];
@@ -1550,6 +1554,9 @@ export declare const putPrincipalPolicyOperation: Omit<{
     readonly runtimeRefinements: readonly [{
         readonly description: "a container response keyring is null exactly for container key epoch 1";
         readonly id: "response.organization-provisioning-container-keyring";
+    }, {
+        readonly id: "response.principal-history-preparation-rollback";
+        readonly description: "A 503 with code principal_history_preparation_unavailable requires committed:false; other 503 responses do not guarantee rollback.";
     }];
 }, "failureResponses" | "failureStatuses"> & {
     readonly failureResponses: {
@@ -1646,16 +1653,20 @@ export declare const putPrincipalPolicyOperation: Omit<{
         }>>;
         readonly 503: z.ZodType<{
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, z.core.$ZodTypeInternals<{
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }>>;
     } & {
         readonly 503: typeof ErrorResponseSchema;
@@ -2523,16 +2534,20 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
         }>>;
         readonly 503: z.ZodType<{
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, z.core.$ZodTypeInternals<{
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }>>;
     };
     readonly failureStatuses: readonly [400, 401, 402, 403, 404, 409, 500, 503];
@@ -3537,6 +3552,9 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
     readonly runtimeRefinements: readonly [{
         readonly description: "a container response keyring is null exactly for container key epoch 1";
         readonly id: "response.organization-provisioning-container-keyring";
+    }, {
+        readonly id: "response.principal-history-preparation-rollback";
+        readonly description: "A 503 with code principal_history_preparation_unavailable requires committed:false; other 503 responses do not guarantee rollback.";
     }];
 }, "failureResponses" | "failureStatuses"> & {
     readonly failureResponses: {
@@ -3649,16 +3667,20 @@ export declare const commitOrganizationGroupPolicyOperation: Omit<{
         }>>;
         readonly 503: z.ZodType<{
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, z.core.$ZodTypeInternals<{
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }, {
             error: string;
-            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | undefined;
+            code?: "billing_checkout_no_active_members" | "billing_roster_over_capacity" | "principal_history_preparation_unavailable" | undefined;
+            committed?: boolean | undefined;
         }>>;
     } & {
         readonly 503: typeof ErrorResponseSchema;