@tearleads/client-sdk 0.1.15 → 0.1.16

package/workflows/principals/runtimePolicyRecovery.js

@@ -3,12 +3,16 @@ import { ProjectionDependencyUnavailableError } from "../../data/keyingProjectio
 import { runWithSecurityIncidentReporting } from "../../data/keyingProjectionVerification/error.js";
 import { assertProjectionVerificationCurrent, } from "../../data/keyingProjectionVerification/types.js";
 import { readPrincipalHistoryProtection } from "../../data/principals/principalHistoryRuntime.js";
+import { createPrincipalCurrentRecoveryBatch } from "./principalCurrentRecoveryBatch.js";
 import { PrincipalHistoryRecoveryRaceError, PrincipalPolicyHistoryReadError, } from "./principalHistoryRecoveryTypes.js";
-import { recoverWithPrincipalOutageFallback } from "./principalRecoveryOutage.js";
+import { recoverWithPrincipalLocalPreference } from "./principalRecoveryLocalPreference.js";
 import { queuePrincipalRecovery } from "./principalRecoveryQueue.js";
-import { createScopedPrincipalPolicyHistoryBatch, recoverScopedPrincipalPolicyHistory, } from "./recoverScopedPrincipalPolicyHistory.js";
-/** Keep the private recovery key inside its runtime lease throughout verification. */
+/** Keep the private recovery key inside its runtime lease while resolving cited evidence. */
 export function createRuntimePrincipalPolicyResolver(runtime) {
+    return createRuntimePrincipalPolicyCurrentResolver(runtime);
+}
+/** Keep current artifacts with their verified evidence and private runtime lifetime. */
+export function createRuntimePrincipalPolicyCurrentResolver(runtime) {
     const lease = readPrincipalHistoryProtection(runtime);
     const readPages = runtime.apiClient.getPrincipalPolicyPages?.bind(runtime.apiClient);
     if (!lease || !readPages)
@@ -16,16 +20,16 @@ export function createRuntimePrincipalPolicyResolver(runtime) {
     const batches = new WeakMap();
     const recoverFor = (batch) => {
         if (!batch)
-            return recoverScopedPrincipalPolicyHistory;
+            return createPrincipalCurrentRecoveryBatch();
         let recover = batches.get(batch);
         if (!recover) {
-            recover = createScopedPrincipalPolicyHistoryBatch();
+            recover = createPrincipalCurrentRecoveryBatch();
             batches.set(batch, recover);
         }
         return recover;
     };
     return (input) => queuePrincipalRecovery(runtime.infra.execSql, input.organizationId, () => runWithSecurityIncidentReporting(runtime.util.reportSecurityIncident, {
-        objectId: input.reference.principalId,
+        objectId: input.reference?.principalId ?? input.organizationId,
         objectKind: "principal",
         operation: "principal.policy.recover",
         organizationId: input.organizationId,
@@ -40,12 +44,14 @@ export function createRuntimePrincipalPolicyResolver(runtime) {
                 offline,
                 organizationId: input.organizationId,
                 protection,
-                reference: input.reference,
                 resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,
                 stillCurrent,
             };
-            const result = await recoverWithPrincipalOutageFallback(recoverFor(input.recoveryBatch), options);
+            const result = input.reference
+                ? await recoverWithPrincipalLocalPreference(recoverFor(input.recoveryBatch).recover, { ...options, reference: input.reference }, input.preferLocalCurrent === true)
+                : await recoverFor(input.recoveryBatch).discover(options);
             return {
+                current: result.current,
                 organizationId: input.organizationId,
                 policy: result.policy,
                 dependencies: result.dependencies,

package/workflows/principals/runtimePolicyRecovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtimePolicyRecovery.js","sourceRoot":"","sources":["runtimePolicyRecovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,oCAAoC,EAAE,MAAM,+DAA+D,CAAC;AACrH,OAAO,EAAE,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,EACL,mCAAmC,GAEpC,MAAM,+CAA+C,CAAC;AAEvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAC;AAI/F,OAAO,EACL,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,kCAAkC,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EACL,uCAAuC,EACvC,mCAAmC,GACpC,MAAM,uCAAuC,CAAC;AAkB/C,sFAAsF;AACtF,MAAM,UAAU,oCAAoC,CAClD,OAAuC;IAEvC,MAAM,KAAK,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,CAC/D,OAAO,CAAC,SAAS,CAClB,CAAC;IACF,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,OAAO,EAGxB,CAAC;IACJ,MAAM,UAAU,GAAG,CAAC,KAAyB,EAAE,EAAE;QAC/C,IAAI,CAAC,KAAK;YAAE,OAAO,mCAAmC,CAAC;QACvD,IAAI,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,uCAAuC,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,OAAO,CAAC,KAAK,EAAE,EAAE,CACf,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,CACvE,gCAAgC,CAC9B,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;QACE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW;QACrC,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,0BAA0B;QACrC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,EACD,GAAG,EAAE,CACH,KAAK,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,EAAE;QACzD,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,YAAY,EAAE,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,CAAC;QACrD,mCAAmC,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,KAAK,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG;gBACd,SAAS,EAAE,EAAE,uBAAuB,EAAE,SAAS,EAAE;gBACjD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC9B,OAAO;gBACP,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,UAAU;gBACV,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;gBAC9D,YAAY;aACb,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,kCAAkC,CACrD,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,EAC/B,OAAO,CACR,CAAC;YACF,OAAO;gBACL,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,YAAY;aACb,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,mCAAmC,CAAC,YAAY,CAAC,CAAC;YAClD,IACE,KAAK,YAAY,+BAA+B;gBAChD,KAAK,YAAY,iCAAiC;gBAClD,CAAC,KAAK,YAAY,uBAAuB;oBACvC,KAAK,CAAC,IAAI,KAAK,oBAAoB,CAAC;gBAEtC,MAAM,IAAI,oCAAoC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CACL,CACF,CAAC;AACN,CAAC","sourcesContent":["import type { ApiClient } from \"@tearleads/api-client\";\nimport { KeyingVerificationError } from \"@tearleads/crypto\";\nimport { ProjectionDependencyUnavailableError } from \"../../data/keyingProjectionVerification/dependencyUnavailable\";\nimport { runWithSecurityIncidentReporting } from \"../../data/keyingProjectionVerification/error\";\nimport {\n  assertProjectionVerificationCurrent,\n  type ReferencedPrincipalPolicyWarmer,\n} from \"../../data/keyingProjectionVerification/types\";\nimport type { PrincipalHistoryProtectionLease } from \"../../data/principals/principalHistoryProtection\";\nimport { readPrincipalHistoryProtection } from \"../../data/principals/principalHistoryRuntime\";\nimport type { SecurityIncidentReporter } from \"../../data/securityIncidents\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport type { TrustedUserIdentityResolver } from \"../../data/trustedUserIdentity\";\nimport {\n  PrincipalHistoryRecoveryRaceError,\n  PrincipalPolicyHistoryReadError,\n} from \"./principalHistoryRecoveryTypes\";\nimport { recoverWithPrincipalOutageFallback } from \"./principalRecoveryOutage\";\nimport { queuePrincipalRecovery } from \"./principalRecoveryQueue\";\nimport {\n  createScopedPrincipalPolicyHistoryBatch,\n  recoverScopedPrincipalPolicyHistory,\n} from \"./recoverScopedPrincipalPolicyHistory\";\n\nexport interface PrincipalPolicyRecoveryRuntime {\n  readonly apiClient: Partial<\n    Pick<\n      ApiClient,\n      \"getPrincipalPolicyPages\" | \"getProjectionPolicyHistoryPages\"\n    >\n  >;\n  readonly infra: { readonly execSql: ExecSql };\n  readonly state?: { readonly online: boolean } | undefined;\n  readonly util: { readonly reportSecurityIncident: SecurityIncidentReporter };\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  readonly withPrincipalHistoryProtection?:\n    | PrincipalHistoryProtectionLease\n    | undefined;\n}\n\n/** Keep the private recovery key inside its runtime lease throughout verification. */\nexport function createRuntimePrincipalPolicyResolver(\n  runtime: PrincipalPolicyRecoveryRuntime,\n): ReferencedPrincipalPolicyWarmer[\"resolveReference\"] {\n  const lease = readPrincipalHistoryProtection(runtime);\n  const readPages = runtime.apiClient.getPrincipalPolicyPages?.bind(\n    runtime.apiClient,\n  );\n  if (!lease || !readPages) return undefined;\n  const batches = new WeakMap<\n    object,\n    typeof recoverScopedPrincipalPolicyHistory\n  >();\n  const recoverFor = (batch: object | undefined) => {\n    if (!batch) return recoverScopedPrincipalPolicyHistory;\n    let recover = batches.get(batch);\n    if (!recover) {\n      recover = createScopedPrincipalPolicyHistoryBatch();\n      batches.set(batch, recover);\n    }\n    return recover;\n  };\n  return (input) =>\n    queuePrincipalRecovery(runtime.infra.execSql, input.organizationId, () =>\n      runWithSecurityIncidentReporting(\n        runtime.util.reportSecurityIncident,\n        {\n          objectId: input.reference.principalId,\n          objectKind: \"principal\",\n          operation: \"principal.policy.recover\",\n          organizationId: input.organizationId,\n        },\n        () =>\n          lease(async ({ protection, stillCurrent: leaseCurrent }) => {\n            const stillCurrent = () =>\n              leaseCurrent() && input.stillCurrent?.() !== false;\n            assertProjectionVerificationCurrent(stillCurrent);\n            const offline = runtime.state?.online === false;\n            try {\n              const options = {\n                apiClient: { getPrincipalPolicyPages: readPages },\n                execSql: runtime.infra.execSql,\n                offline,\n                organizationId: input.organizationId,\n                protection,\n                reference: input.reference,\n                resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,\n                stillCurrent,\n              };\n              const result = await recoverWithPrincipalOutageFallback(\n                recoverFor(input.recoveryBatch),\n                options,\n              );\n              return {\n                organizationId: input.organizationId,\n                policy: result.policy,\n                dependencies: result.dependencies,\n                stillCurrent,\n              };\n            } catch (error) {\n              assertProjectionVerificationCurrent(stillCurrent);\n              if (\n                error instanceof PrincipalPolicyHistoryReadError ||\n                error instanceof PrincipalHistoryRecoveryRaceError ||\n                (error instanceof KeyingVerificationError &&\n                  error.code === \"missing_dependency\")\n              )\n                throw new ProjectionDependencyUnavailableError(error.message);\n              throw error;\n            }\n          }),\n      ),\n    );\n}\n"]}
+{"version":3,"file":"runtimePolicyRecovery.js","sourceRoot":"","sources":["runtimePolicyRecovery.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,oCAAoC,EAAE,MAAM,+DAA+D,CAAC;AACrH,OAAO,EAAE,gCAAgC,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,EACL,mCAAmC,GAIpC,MAAM,+CAA+C,CAAC;AAEvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAC;AAI/F,OAAO,EAAE,mCAAmC,EAAE,MAAM,iCAAiC,CAAC;AACtF,OAAO,EACL,iCAAiC,EACjC,+BAA+B,GAChC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,mCAAmC,EAAE,MAAM,oCAAoC,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAkBlE,6FAA6F;AAC7F,MAAM,UAAU,oCAAoC,CAClD,OAAuC;IAEvC,OAAO,2CAA2C,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC;AAcD,wFAAwF;AACxF,MAAM,UAAU,2CAA2C,CACzD,OAAuC;IAMvC,MAAM,KAAK,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,CAC/D,OAAO,CAAC,SAAS,CAClB,CAAC;IACF,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,OAAO,EAGxB,CAAC;IACJ,MAAM,UAAU,GAAG,CAAC,KAAyB,EAAE,EAAE;QAC/C,IAAI,CAAC,KAAK;YAAE,OAAO,mCAAmC,EAAE,CAAC;QACzD,IAAI,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,mCAAmC,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,OAAO,CAAC,KAAK,EAAE,EAAE,CACf,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,GAAG,EAAE,CACvE,gCAAgC,CAC9B,OAAO,CAAC,IAAI,CAAC,sBAAsB,EACnC;QACE,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,IAAI,KAAK,CAAC,cAAc;QAC9D,UAAU,EAAE,WAAW;QACvB,SAAS,EAAE,0BAA0B;QACrC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,EACD,GAAG,EAAE,CACH,KAAK,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,EAAE;QACzD,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,YAAY,EAAE,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK,CAAC;QACrD,mCAAmC,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,KAAK,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG;gBACd,SAAS,EAAE,EAAE,uBAAuB,EAAE,SAAS,EAAE;gBACjD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC9B,OAAO;gBACP,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,UAAU;gBACV,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;gBAC9D,YAAY;aACb,CAAC;YACF,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS;gBAC5B,CAAC,CAAC,MAAM,mCAAmC,CACvC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,OAAO,EACvC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAC1C,KAAK,CAAC,kBAAkB,KAAK,IAAI,CAClC;gBACH,CAAC,CAAC,MAAM,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC5D,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,YAAY;aACb,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,mCAAmC,CAAC,YAAY,CAAC,CAAC;YAClD,IACE,KAAK,YAAY,+BAA+B;gBAChD,KAAK,YAAY,iCAAiC;gBAClD,CAAC,KAAK,YAAY,uBAAuB;oBACvC,KAAK,CAAC,IAAI,KAAK,oBAAoB,CAAC;gBAEtC,MAAM,IAAI,oCAAoC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CACL,CACF,CAAC;AACN,CAAC","sourcesContent":["import type {\n  ApiClient,\n  PrincipalPolicyPageCurrent,\n} from \"@tearleads/api-client\";\nimport { KeyingVerificationError } from \"@tearleads/crypto\";\nimport { ProjectionDependencyUnavailableError } from \"../../data/keyingProjectionVerification/dependencyUnavailable\";\nimport { runWithSecurityIncidentReporting } from \"../../data/keyingProjectionVerification/error\";\nimport {\n  assertProjectionVerificationCurrent,\n  type PrincipalPolicyResolveRequest,\n  type ReferencedPrincipalPolicyWarmer,\n  type ResolvedPrincipalPolicyEvidence,\n} from \"../../data/keyingProjectionVerification/types\";\nimport type { PrincipalHistoryProtectionLease } from \"../../data/principals/principalHistoryProtection\";\nimport { readPrincipalHistoryProtection } from \"../../data/principals/principalHistoryRuntime\";\nimport type { SecurityIncidentReporter } from \"../../data/securityIncidents\";\nimport type { ExecSql } from \"../../data/sqlite/sqlSchema\";\nimport type { TrustedUserIdentityResolver } from \"../../data/trustedUserIdentity\";\nimport { createPrincipalCurrentRecoveryBatch } from \"./principalCurrentRecoveryBatch\";\nimport {\n  PrincipalHistoryRecoveryRaceError,\n  PrincipalPolicyHistoryReadError,\n} from \"./principalHistoryRecoveryTypes\";\nimport { recoverWithPrincipalLocalPreference } from \"./principalRecoveryLocalPreference\";\nimport { queuePrincipalRecovery } from \"./principalRecoveryQueue\";\n\nexport interface PrincipalPolicyRecoveryRuntime {\n  readonly apiClient: Partial<\n    Pick<\n      ApiClient,\n      \"getPrincipalPolicyPages\" | \"getProjectionPolicyHistoryPages\"\n    >\n  >;\n  readonly infra: { readonly execSql: ExecSql };\n  readonly state?: { readonly online: boolean } | undefined;\n  readonly util: { readonly reportSecurityIncident: SecurityIncidentReporter };\n  readonly resolveTrustedUserIdentity: TrustedUserIdentityResolver;\n  readonly withPrincipalHistoryProtection?:\n    | PrincipalHistoryProtectionLease\n    | undefined;\n}\n\n/** Keep the private recovery key inside its runtime lease while resolving cited evidence. */\nexport function createRuntimePrincipalPolicyResolver(\n  runtime: PrincipalPolicyRecoveryRuntime,\n): ReferencedPrincipalPolicyWarmer[\"resolveReference\"] {\n  return createRuntimePrincipalPolicyCurrentResolver(runtime);\n}\n\nexport interface ResolvedPrincipalPolicyCurrent\n  extends ResolvedPrincipalPolicyEvidence {\n  readonly current: PrincipalPolicyPageCurrent;\n}\n\ninterface PrincipalPolicyCurrentRequest\n  extends Omit<PrincipalPolicyResolveRequest, \"reference\"> {\n  readonly reference?: PrincipalPolicyResolveRequest[\"reference\"] | undefined;\n  /** A read-model caller has selected this exact signed head; not a freshness read. */\n  readonly preferLocalCurrent?: boolean | undefined;\n}\n\n/** Keep current artifacts with their verified evidence and private runtime lifetime. */\nexport function createRuntimePrincipalPolicyCurrentResolver(\n  runtime: PrincipalPolicyRecoveryRuntime,\n):\n  | ((\n      input: PrincipalPolicyCurrentRequest,\n    ) => Promise<ResolvedPrincipalPolicyCurrent>)\n  | undefined {\n  const lease = readPrincipalHistoryProtection(runtime);\n  const readPages = runtime.apiClient.getPrincipalPolicyPages?.bind(\n    runtime.apiClient,\n  );\n  if (!lease || !readPages) return undefined;\n  const batches = new WeakMap<\n    object,\n    ReturnType<typeof createPrincipalCurrentRecoveryBatch>\n  >();\n  const recoverFor = (batch: object | undefined) => {\n    if (!batch) return createPrincipalCurrentRecoveryBatch();\n    let recover = batches.get(batch);\n    if (!recover) {\n      recover = createPrincipalCurrentRecoveryBatch();\n      batches.set(batch, recover);\n    }\n    return recover;\n  };\n  return (input) =>\n    queuePrincipalRecovery(runtime.infra.execSql, input.organizationId, () =>\n      runWithSecurityIncidentReporting(\n        runtime.util.reportSecurityIncident,\n        {\n          objectId: input.reference?.principalId ?? input.organizationId,\n          objectKind: \"principal\",\n          operation: \"principal.policy.recover\",\n          organizationId: input.organizationId,\n        },\n        () =>\n          lease(async ({ protection, stillCurrent: leaseCurrent }) => {\n            const stillCurrent = () =>\n              leaseCurrent() && input.stillCurrent?.() !== false;\n            assertProjectionVerificationCurrent(stillCurrent);\n            const offline = runtime.state?.online === false;\n            try {\n              const options = {\n                apiClient: { getPrincipalPolicyPages: readPages },\n                execSql: runtime.infra.execSql,\n                offline,\n                organizationId: input.organizationId,\n                protection,\n                resolveTrustedUserIdentity: runtime.resolveTrustedUserIdentity,\n                stillCurrent,\n              };\n              const result = input.reference\n                ? await recoverWithPrincipalLocalPreference(\n                    recoverFor(input.recoveryBatch).recover,\n                    { ...options, reference: input.reference },\n                    input.preferLocalCurrent === true,\n                  )\n                : await recoverFor(input.recoveryBatch).discover(options);\n              return {\n                current: result.current,\n                organizationId: input.organizationId,\n                policy: result.policy,\n                dependencies: result.dependencies,\n                stillCurrent,\n              };\n            } catch (error) {\n              assertProjectionVerificationCurrent(stillCurrent);\n              if (\n                error instanceof PrincipalPolicyHistoryReadError ||\n                error instanceof PrincipalHistoryRecoveryRaceError ||\n                (error instanceof KeyingVerificationError &&\n                  error.code === \"missing_dependency\")\n              )\n                throw new ProjectionDependencyUnavailableError(error.message);\n              throw error;\n            }\n          }),\n      ),\n    );\n}\n"]}