@tearleads/client-sdk 0.1.24 → 0.1.25

package/internal/api-client/apiRequestRuntime.js.map

@@ -1 +1 @@
-{"version":3,"file":"apiRequestRuntime.js","sourceRoot":"","sources":["apiRequestRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,eAAe,GAChB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EAErB,YAAY,EACZ,SAAS,EACT,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAiBlE,MAAM,OAAO,iBAAiB;IACpB,SAAS,GAAkB,IAAI,CAAC;IAChC,cAAc,GAAwC,IAAI,CAAC;IAClD,OAAO,CAAS;IACzB,OAAO,GAAuC,IAAI,CAAC;IACnD,cAAc,GAAwB,IAAI,CAAC;IAC3C,gBAAgB,GAAwB,IAAI,CAAC;IAC7C,YAAY,GAAuC,IAAI,CAAC;IACxD,gBAAgB,GAA0B,IAAI,CAAC;IAC/C,iBAAiB,GAAkC,IAAI,CAAC;IAC/C,oBAAoB,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjE,OAAO,CAAqB;IAC5B,aAAa,CAA2B;IACxC,eAAe,CAA6B;IAErD,YAAY,OAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC5C,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC7D,aAAa,EAAE,IAAI,CAAC,4BAA4B;SACjD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,YAAoB,EAAE,WAAmB;QAC1D,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,mBAAmB,CAC7B,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAC7D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,yBAAyB,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,UAAU,CAAC,OAA2C;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,iBAAiB,CAAC,OAA4B;QAC5C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,mBAAmB,CAAC,OAA4B;QAC9C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,kEAAkE;IAClE,eAAe,CAAC,OAA2C;QACzD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,mBAAmB,CAAC,OAA8B;QAChD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,oBAAoB,CAAC,OAAsC;QACzD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC;IACnC,CAAC;IAED,YAAY,CAAC,KAAoB;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;QACzC,IAAI,OAAO;YAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,KAAK,CAAC,CAAC;QAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,OAAO,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE;YACtC,IAAI,CAAC,cAAc,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACrC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,iBAAiB,CAAC,KAA2C;QAC3D,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;IACzE,CAAC;IAEO,YAAY,CAClB,IAA6B,EAC7B,OAA2C,EAC3C,SAAwB;QAExB,OAAO;YACL,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC;gBACjE,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACxC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,IAAY,EACZ,SAAyC,EACzC,MAAkB,EAClB,IAA6B,EAC7B,OAAyC,EACzC,gBAAmD;QAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CACzC,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,gBAAgB,CACjB,CAAC;QACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAEO,cAAc,CAAC,KAWtB;QACC,MAAM,OAAO,GAAmB;YAC9B,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,GAAG,EAAE;gBACX,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;oBAAE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,mBAAmB;gBAC3B,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,oBAAoB;gBAC5B,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAC3B,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAC7D,OAAO,CACR,CAAC;QAEF,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,IAAY,EACZ,SAAyC,EACzC,MAAkB,EAClB,IAA6B,EAC7B,UAAgC,EAAE,EAClC,gBAAmD;QAEnD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACnD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,EAAE,EACF,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QAClD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAChE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,GAAG,MAAM,IAAI,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE;gBAChD,MAAM;gBACN,IAAI;gBACJ,YAAY;gBACZ,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,8BAA8B,IAAI,EAAE;gBAC7C,MAAM;gBACN,IAAI;gBACJ,YAAY;gBACZ,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,IAAY,EACZ,MAAkB,EAClB,IAA6B,EAC7B,UAAgC,EAAE,EAClC,yBAA4C,EAC5C,gBAA2D;QAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACpD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,CACV,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,IAAI,oBAAoB,CAAC,QAAQ,EAAE,yBAAyB,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACtE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAClD,QAAQ,EACR,gBAAgB,EAChB,OAAO,CAAC,qCAAqC,CAC9C,CAAC;QACF,IACE,MAAM,8BAA8B,CAAC;YACnC,SAAS;YACT,IAAI;YACJ,IAAI,EAAE,gBAAgB,CAAC,IAAI;YAC3B,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS;YACzC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAClC,IAAI,CAAC,cAAc,EAAE,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE;YACrE,OAAO;YACP,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE;YACzC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC;YACjD,cAAc,EAAE,QAAQ,CAAC,MAAM;SAChC,CAAC,EACF,CAAC;YACD,IAAI,OAAO,CAAC,qBAAqB,KAAK,YAAY;gBAChD,OAAO,IAAI,CAAC,WAAW,CAAC;oBACtB,gBAAgB;oBAChB,gBAAgB;oBAChB,MAAM;oBACN,OAAO,EAAE;wBACP,GAAG,OAAO;wBACV,YAAY,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;qBAC9D;oBACD,IAAI;oBACJ,QAAQ;iBACT,CAAC,CAAC;YACL,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACjD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,IAAI,CAAC,SAAS,CACf,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;gBACpB,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC;YACvC,IAAI,oBAAoB,CAAC,aAAa,EAAE,yBAAyB,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC3C,CAAC;YAED,OAAO,IAAI,CAAC,WAAW,CAAC;gBACtB,gBAAgB,EAAE,MAAM,qBAAqB,CAC3C,aAAa,EACb,gBAAgB,EAChB,OAAO,CAAC,qCAAqC,CAC9C;gBACD,gBAAgB;gBAChB,MAAM;gBACN,OAAO;gBACP,IAAI;gBACJ,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC;YACtB,gBAAgB;YAChB,gBAAgB;YAChB,MAAM;YACN,OAAO;YACP,IAAI;YACJ,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,IAAY,EACZ,MAAkB,EAClB,IAA6B,EAC7B,OAA6B,EAC7B,SAAwB;QAExB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QAClD,MAAM,IAAI,GAAsC;YAC9C,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC;YAC5D,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,IAAI,YAAY,cAAc,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;YACnD,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBACzC,OAAO,EAAE,GAAG,MAAM,IAAI,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE;gBACpD,MAAM;gBACN,IAAI;gBACJ,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;gBAC9C,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,EAAE;aACf,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,eAAe,CAChC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAC3C,CAAC;QACF,IAAI,UAAU,KAAK,IAAI;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAEO,WAAW,CAAC,KAOnB;QACC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;QACzD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QACxD,IACE,CAAC,SAAS;YACV,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;YAC7B,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC;YAC9C,KAAK,CAAC,gBAAgB,CAAC,6BAA6B,KAAK,SAAS;YAClE,KAAK,CAAC,gBAAgB,CAAC,6BAA6B;gBAClD,KAAK,CAAC,OAAO,CAAC,qCAAqC,EACrD,CAAC;YACD,IAAI,CAAC,iBAAiB,EAAE,CACtB,KAAK,CAAC,gBAAgB,CAAC,6BAA6B,CACrD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;YACzB,GAAG,CAAC,SAAS;gBACX,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBAC7B,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,IAAI;oBACpC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;YACtC,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE;YAC/H,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,CAAC,SAAS,IAAI,YAAY;YACxC,oBAAoB,EAAE,KAAK,CAAC,gBAAgB,CAAC,oBAAoB;YACjE,mBAAmB,EAAE,KAAK,CAAC,gBAAgB,CAAC,mBAAmB;YAC/D,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC7B,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;SACtC,CAAC,CAAC;IACL,CAAC;IAEO,4BAA4B,CAClC,KAA4C;QAE5C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;YACzB,GAAG,KAAK;YACR,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI;YACjD,mBAAmB,EAAE,SAAS;SAC/B,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import {\n  authChallengeSigningBytes,\n  canonicalAuthOrigin,\n} from \"@tearleads/crypto\";\nimport {\n  apiVersionHeaderName,\n  parseApiVersion,\n} from \"@tearleads/validators/operation\";\nimport {\n  bindPrototypeMethods,\n  describeErrorResponse,\n  type ErrorResponseDescription,\n  errorMessage,\n  hasHeader,\n  isSuccessfulResponse,\n  normalizeApiBaseUrl,\n  requestFailureKey,\n} from \"./requestInternals\";\nimport { responseBodyFailure } from \"./responseBodyFailure\";\nimport { shouldRetryAfterSessionExpired } from \"./sessionRefresh\";\nimport type {\n  HttpMethod,\n  OperationRequestFn,\n  OperationRequestResultFn,\n  OperationResponseRequestFn,\n  RequestBody,\n  RequestFailure,\n  RequestFailureKind,\n  RequestResult,\n  RequestResultOptions,\n  ResponseRequestValidationFailureInput,\n} from \"./types\";\n\ntype ExpiredHandler = () => boolean | Promise<boolean>;\ntype PaymentRequiredHandler = (organizationId: string | null) => void;\n\nexport class ApiRequestRuntime {\n  private authToken: string | null = null;\n  private sessionRenewal: { from: string; to: string } | null = null;\n  private readonly baseUrl: string;\n  private onError: ((message: string) => void) | null = null;\n  private onNetworkError: (() => void) | null = null;\n  private onNetworkSuccess: (() => void) | null = null;\n  private onApiVersion: ((version: number) => void) | null = null;\n  private onSessionExpired: ExpiredHandler | null = null;\n  private onPaymentRequired: PaymentRequiredHandler | null = null;\n  private readonly requestFailuresByKey = new Map<string, RequestFailure>();\n  readonly request: OperationRequestFn;\n  readonly requestResult: OperationRequestResultFn;\n  readonly responseRequest: OperationResponseRequestFn;\n\n  constructor(baseUrl?: string | null) {\n    this.baseUrl = normalizeApiBaseUrl(baseUrl);\n    bindPrototypeMethods(this, ApiRequestRuntime.prototype);\n    this.request = this.makeRequest;\n    this.requestResult = this.makeRequestResult;\n    this.responseRequest = Object.assign(this.makeResponseRequest, {\n      reportFailure: this.reportResponseRequestFailure,\n    });\n  }\n\n  /**\n   * The bytes a login challenge is signed as, bound to the API this client\n   * addresses. A relative base URL resolves against the page, as its requests\n   * do; with neither, there is no API origin to sign for.\n   */\n  authChallengeBytes(challengeHex: string, fingerprint: string): Uint8Array {\n    let apiOrigin: string;\n    try {\n      apiOrigin = canonicalAuthOrigin(\n        new URL(this.baseUrl || \"/\", globalThis.location?.href).href,\n      );\n    } catch {\n      throw new Error(\"The API origin is unavailable for authentication\");\n    }\n    return authChallengeSigningBytes({ apiOrigin, challengeHex, fingerprint });\n  }\n\n  setOnError(handler: ((message: string) => void) | null): void {\n    this.onError = handler;\n  }\n\n  setOnNetworkError(handler: (() => void) | null): void {\n    this.onNetworkError = handler;\n  }\n\n  setOnNetworkSuccess(handler: (() => void) | null): void {\n    this.onNetworkSuccess = handler;\n  }\n\n  /** Receives the build named by each response that carries one. */\n  setOnApiVersion(handler: ((version: number) => void) | null): void {\n    this.onApiVersion = handler;\n  }\n\n  setOnSessionExpired(handler: ExpiredHandler | null): void {\n    this.onSessionExpired = handler;\n  }\n\n  setOnPaymentRequired(handler: PaymentRequiredHandler | null): void {\n    this.onPaymentRequired = handler;\n  }\n\n  setAuthToken(token: string | null): boolean {\n    const changed = this.authToken !== token;\n    if (changed) this.sessionRenewal = null;\n    this.authToken = token;\n    return changed;\n  }\n\n  getAuthToken(): string | null {\n    return this.authToken;\n  }\n\n  private async renewSession(): Promise<boolean> {\n    const from = this.authToken;\n    const renewed = await (this.onSessionExpired?.() ?? false);\n    const to = this.authToken;\n    if (renewed && from && to && from !== to)\n      this.sessionRenewal = { from, to };\n    return renewed;\n  }\n\n  getRequestFailure(input: { method: HttpMethod; path: string }) {\n    return this.requestFailuresByKey.get(requestFailureKey(input)) ?? null;\n  }\n\n  private buildHeaders(\n    body: RequestBody | undefined,\n    headers: Record<string, string> | undefined,\n    authToken: string | null,\n  ): Record<string, string> {\n    return {\n      ...(authToken ? { Authorization: `Bearer ${authToken}` } : {}),\n      ...(typeof body === \"string\" && !hasHeader(headers, \"Content-Type\")\n        ? { \"Content-Type\": \"application/json\" }\n        : {}),\n      ...headers,\n    };\n  }\n\n  private async makeRequest<T>(\n    path: string,\n    validator: (value: unknown) => value is T,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions | undefined,\n    failureOperation: Parameters<OperationRequestFn>[5],\n  ): Promise<T | null> {\n    const result = await this.makeRequestResult(\n      path,\n      validator,\n      method,\n      body,\n      options,\n      failureOperation,\n    );\n    return result.ok ? result.data : null;\n  }\n\n  private requestFailure(input: {\n    code?: string | undefined;\n    kind: RequestFailureKind;\n    message: string;\n    method: HttpMethod;\n    path: string;\n    reportErrors: boolean;\n    requiredContainerIds?: RequestFailure[\"requiredContainerIds\"];\n    stalePrincipalHeads: RequestFailure[\"stalePrincipalHeads\"];\n    status: number | null;\n    statusText: string;\n  }): RequestFailure {\n    const failure: RequestFailure = {\n      ...(input.code === undefined ? {} : { code: input.code }),\n      kind: input.kind,\n      message: input.message,\n      method: input.method,\n      ok: false,\n      path: input.path,\n      report: () => {\n        if (input.kind !== \"cancelled\") this.onError?.(input.message);\n      },\n      status: input.status,\n      statusText: input.statusText,\n      ...(input.stalePrincipalHeads\n        ? { stalePrincipalHeads: input.stalePrincipalHeads }\n        : {}),\n      ...(input.requiredContainerIds\n        ? { requiredContainerIds: input.requiredContainerIds }\n        : {}),\n    };\n    this.requestFailuresByKey.set(\n      requestFailureKey({ method: input.method, path: input.path }),\n      failure,\n    );\n\n    if (input.reportErrors) {\n      failure.report();\n    }\n\n    return failure;\n  }\n\n  private async makeRequestResult<T>(\n    path: string,\n    validator: (value: unknown) => value is T,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions = {},\n    failureOperation: Parameters<OperationRequestFn>[5],\n  ): Promise<RequestResult<T>> {\n    const responseResult = await this.makeResponseRequest(\n      path,\n      method,\n      body,\n      options,\n      [],\n      failureOperation,\n    );\n    if (!responseResult.ok) {\n      return responseResult;\n    }\n\n    const response = responseResult.data;\n    const reportErrors = options.reportErrors ?? true;\n    let data: unknown;\n    try {\n      data = await response.json();\n    } catch (error) {\n      const failure = responseBodyFailure(error, errorMessage(error));\n      if (failure.kind === \"network\") {\n        this.onNetworkError?.();\n      }\n      return this.requestFailure({\n        kind: failure.kind,\n        message: `${method} ${path}: ${failure.message}`,\n        method,\n        path,\n        reportErrors,\n        stalePrincipalHeads: undefined,\n        status: response.status,\n        statusText: response.statusText,\n      });\n    }\n\n    if (!validator(data)) {\n      return this.requestFailure({\n        kind: \"shape\",\n        message: `Invalid response shape for ${path}`,\n        method,\n        path,\n        reportErrors,\n        stalePrincipalHeads: undefined,\n        status: response.status,\n        statusText: response.statusText,\n      });\n    }\n\n    return { data, ok: true };\n  }\n\n  private async makeResponseRequest(\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions = {},\n    additionalSuccessStatuses: readonly number[],\n    failureOperation: Parameters<OperationResponseRequestFn>[5],\n  ): Promise<RequestResult<Response>> {\n    const authToken = this.authToken;\n    const responseResult = await this.fetchResponseRequest(\n      path,\n      method,\n      body,\n      options,\n      authToken,\n    );\n    if (!responseResult.ok) {\n      return responseResult;\n    }\n    const response = responseResult.data;\n    if (isSuccessfulResponse(response, additionalSuccessStatuses)) {\n      this.requestFailuresByKey.delete(requestFailureKey({ method, path }));\n      return { data: response, ok: true };\n    }\n\n    const errorDescription = await describeErrorResponse(\n      response,\n      failureOperation,\n      options.expectedPaymentRequiredOrganizationId,\n    );\n    if (\n      await shouldRetryAfterSessionExpired({\n        authToken,\n        body,\n        code: errorDescription.code,\n        getCurrentAuthToken: () => this.authToken,\n        isKnownSessionRenewal: (from, to) =>\n          this.sessionRenewal?.from === from && this.sessionRenewal.to === to,\n        options,\n        refreshSession: () => this.renewSession(),\n        reportError: (message) => this.onError?.(message),\n        responseStatus: response.status,\n      })\n    ) {\n      if (options.retryOnSessionExpired === \"renew-only\")\n        return this.httpFailure({\n          errorDescription,\n          failureOperation,\n          method,\n          options: {\n            ...options,\n            reportErrors: method === \"GET\" ? false : options.reportErrors,\n          },\n          path,\n          response,\n        });\n      const retryResult = await this.fetchResponseRequest(\n        path,\n        method,\n        body,\n        options,\n        this.authToken,\n      );\n      if (!retryResult.ok) {\n        return retryResult;\n      }\n      const retryResponse = retryResult.data;\n      if (isSuccessfulResponse(retryResponse, additionalSuccessStatuses)) {\n        this.requestFailuresByKey.delete(requestFailureKey({ method, path }));\n        return { data: retryResponse, ok: true };\n      }\n\n      return this.httpFailure({\n        errorDescription: await describeErrorResponse(\n          retryResponse,\n          failureOperation,\n          options.expectedPaymentRequiredOrganizationId,\n        ),\n        failureOperation,\n        method,\n        options,\n        path,\n        response: retryResponse,\n      });\n    }\n\n    return this.httpFailure({\n      errorDescription,\n      failureOperation,\n      method,\n      options,\n      path,\n      response,\n    });\n  }\n\n  private async fetchResponseRequest(\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions,\n    authToken: string | null,\n  ): Promise<RequestResult<Response>> {\n    const reportErrors = options.reportErrors ?? true;\n    const init: RequestInit & { duplex?: \"half\" } = {\n      method,\n      headers: this.buildHeaders(body, options.headers, authToken),\n      ...(options.signal ? { signal: options.signal } : {}),\n    };\n    if (body !== undefined) {\n      init.body = body;\n      if (body instanceof ReadableStream) {\n        init.duplex = \"half\";\n      }\n    }\n\n    let response: Response;\n    try {\n      response = await fetch(`${this.baseUrl}${path}`, init);\n    } catch (error) {\n      const cancelled = options.signal?.aborted === true;\n      if (!cancelled) this.onNetworkError?.();\n      return this.requestFailure({\n        ...(cancelled ? { code: \"request_aborted\" } : {}),\n        kind: cancelled ? \"cancelled\" : \"network\",\n        message: `${method} ${path}: ${errorMessage(error)}`,\n        method,\n        path,\n        reportErrors: cancelled ? false : reportErrors,\n        stalePrincipalHeads: undefined,\n        status: null,\n        statusText: \"\",\n      });\n    }\n\n    this.onNetworkSuccess?.();\n    const apiVersion = parseApiVersion(\n      response.headers.get(apiVersionHeaderName),\n    );\n    if (apiVersion !== null) this.onApiVersion?.(apiVersion);\n    return { data: response, ok: true };\n  }\n\n  private httpFailure(input: {\n    readonly errorDescription: ErrorResponseDescription;\n    readonly failureOperation: Parameters<OperationResponseRequestFn>[5];\n    readonly method: HttpMethod;\n    readonly options: RequestResultOptions;\n    readonly path: string;\n    readonly response: Response;\n  }): RequestFailure {\n    const cancelled = input.options.signal?.aborted === true;\n    const reportErrors = input.options.reportErrors ?? true;\n    if (\n      !cancelled &&\n      input.response.status === 402 &&\n      input.failureOperation.failureResponses?.[402] &&\n      input.errorDescription.paymentRequiredOrganizationId !== undefined &&\n      input.errorDescription.paymentRequiredOrganizationId ===\n        input.options.expectedPaymentRequiredOrganizationId\n    ) {\n      this.onPaymentRequired?.(\n        input.errorDescription.paymentRequiredOrganizationId,\n      );\n    }\n    return this.requestFailure({\n      ...(cancelled\n        ? { code: \"request_aborted\" }\n        : input.errorDescription.code === null\n          ? {}\n          : { code: input.errorDescription.code }),\n      kind: cancelled ? \"cancelled\" : \"http\",\n      message: `${input.method} ${input.path}: ${input.response.status} ${input.response.statusText}${input.errorDescription.detail}`,\n      method: input.method,\n      path: input.path,\n      reportErrors: !cancelled && reportErrors,\n      requiredContainerIds: input.errorDescription.requiredContainerIds,\n      stalePrincipalHeads: input.errorDescription.stalePrincipalHeads,\n      status: input.response.status,\n      statusText: input.response.statusText,\n    });\n  }\n\n  private reportResponseRequestFailure(\n    input: ResponseRequestValidationFailureInput,\n  ): RequestFailure {\n    if (input.kind === \"network\") {\n      this.onNetworkError?.();\n    }\n    return this.requestFailure({\n      ...input,\n      reportErrors: input.options?.reportErrors ?? true,\n      stalePrincipalHeads: undefined,\n    });\n  }\n}\n"]}
+{"version":3,"file":"apiRequestRuntime.js","sourceRoot":"","sources":["apiRequestRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,eAAe,GAChB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EAErB,YAAY,EACZ,SAAS,EACT,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAiBzD,MAAM,OAAO,iBAAiB;IACpB,SAAS,GAAkB,IAAI,CAAC;IACvB,eAAe,GAAG,IAAI,qBAAqB,CAC1D,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CACrB,CAAC;IACe,OAAO,CAAS;IACzB,OAAO,GAAuC,IAAI,CAAC;IACnD,cAAc,GAAwB,IAAI,CAAC;IAC3C,gBAAgB,GAAwB,IAAI,CAAC;IAC7C,YAAY,GAAuC,IAAI,CAAC;IACxD,gBAAgB,GAA0B,IAAI,CAAC;IAC/C,iBAAiB,GAAkC,IAAI,CAAC;IAC/C,oBAAoB,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjE,OAAO,CAAqB;IAC5B,aAAa,CAA2B;IACxC,eAAe,CAA6B;IAErD,YAAY,OAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC5C,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC7D,aAAa,EAAE,IAAI,CAAC,4BAA4B;SACjD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,YAAoB,EAAE,WAAmB;QAC1D,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,mBAAmB,CAC7B,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAC7D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,yBAAyB,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,UAAU,CAAC,OAA2C;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,iBAAiB,CAAC,OAA4B;QAC5C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,mBAAmB,CAAC,OAA4B;QAC9C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,kEAAkE;IAClE,eAAe,CAAC,OAA2C;QACzD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,mBAAmB,CAAC,OAA8B;QAChD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,oBAAoB,CAAC,OAAsC;QACzD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC;IACnC,CAAC;IAED,YAAY,CAAC,KAAoB;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;QACzC,IAAI,OAAO;YAAE,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,iBAAiB,CAAC,KAA2C;QAC3D,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;IACzE,CAAC;IAEO,YAAY,CAClB,IAA6B,EAC7B,OAA2C,EAC3C,SAAwB;QAExB,OAAO;YACL,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC;gBACjE,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACxC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,IAAY,EACZ,SAAyC,EACzC,MAAkB,EAClB,IAA6B,EAC7B,OAAyC,EACzC,gBAAmD;QAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CACzC,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,gBAAgB,CACjB,CAAC;QACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAEO,cAAc,CAAC,KAWtB;QACC,MAAM,OAAO,GAAmB;YAC9B,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,GAAG,EAAE;gBACX,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;oBAAE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,mBAAmB;gBAC3B,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,oBAAoB;gBAC5B,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAC3B,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAC7D,OAAO,CACR,CAAC;QAEF,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,IAAY,EACZ,SAAyC,EACzC,MAAkB,EAClB,IAA6B,EAC7B,UAAgC,EAAE,EAClC,gBAAmD;QAEnD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACnD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,EAAE,EACF,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QAClD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAChE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,GAAG,MAAM,IAAI,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE;gBAChD,MAAM;gBACN,IAAI;gBACJ,YAAY;gBACZ,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,8BAA8B,IAAI,EAAE;gBAC7C,MAAM;gBACN,IAAI;gBACJ,YAAY;gBACZ,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,IAAY,EACZ,MAAkB,EAClB,IAA6B,EAC7B,UAAgC,EAAE,EAClC,yBAA4C,EAC5C,gBAA2D;QAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACpD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,CACV,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,IAAI,oBAAoB,CAAC,QAAQ,EAAE,yBAAyB,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACtE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAClD,QAAQ,EACR,gBAAgB,EAChB,OAAO,CAAC,qCAAqC,CAC9C,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,8BAA8B,CAAC;YACvD,SAAS;YACT,IAAI;YACJ,IAAI,EAAE,gBAAgB,CAAC,IAAI;YAC3B,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS;YACzC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAClC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC;YACnE,OAAO;YACP,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC;YACvE,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC;YACjD,cAAc,EAAE,QAAQ,CAAC,MAAM;SAChC,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACpE,wEAAwE;QACxE,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;YAClC,IAAI,OAAO,CAAC,qBAAqB,KAAK,YAAY;gBAChD,OAAO,IAAI,CAAC,WAAW,CAAC;oBACtB,gBAAgB;oBAChB,gBAAgB;oBAChB,MAAM;oBACN,OAAO,EAAE;wBACP,GAAG,OAAO;wBACV,YAAY,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;qBAC9D;oBACD,IAAI;oBACJ,QAAQ;iBACT,CAAC,CAAC;YACL,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACjD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,cAAc,CACf,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;gBACpB,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC;YACvC,IAAI,oBAAoB,CAAC,aAAa,EAAE,yBAAyB,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC3C,CAAC;YAED,OAAO,IAAI,CAAC,WAAW,CAAC;gBACtB,gBAAgB,EAAE,MAAM,qBAAqB,CAC3C,aAAa,EACb,gBAAgB,EAChB,OAAO,CAAC,qCAAqC,CAC9C;gBACD,gBAAgB;gBAChB,MAAM;gBACN,OAAO;gBACP,IAAI;gBACJ,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC;YACtB,gBAAgB;YAChB,gBAAgB;YAChB,MAAM;YACN,OAAO;YACP,IAAI;YACJ,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,IAAY,EACZ,MAAkB,EAClB,IAA6B,EAC7B,OAA6B,EAC7B,SAAwB;QAExB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QAClD,MAAM,IAAI,GAAsC;YAC9C,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC;YAC5D,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,IAAI,YAAY,cAAc,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;YACnD,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBACzC,OAAO,EAAE,GAAG,MAAM,IAAI,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE;gBACpD,MAAM;gBACN,IAAI;gBACJ,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;gBAC9C,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,EAAE;aACf,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,eAAe,CAChC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAC3C,CAAC;QACF,IAAI,UAAU,KAAK,IAAI;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAEO,WAAW,CAAC,KAOnB;QACC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;QACzD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QACxD,IACE,CAAC,SAAS;YACV,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;YAC7B,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC;YAC9C,KAAK,CAAC,gBAAgB,CAAC,6BAA6B,KAAK,SAAS;YAClE,KAAK,CAAC,gBAAgB,CAAC,6BAA6B;gBAClD,KAAK,CAAC,OAAO,CAAC,qCAAqC,EACrD,CAAC;YACD,IAAI,CAAC,iBAAiB,EAAE,CACtB,KAAK,CAAC,gBAAgB,CAAC,6BAA6B,CACrD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;YACzB,GAAG,CAAC,SAAS;gBACX,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBAC7B,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,IAAI;oBACpC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;YACtC,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE;YAC/H,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,CAAC,SAAS,IAAI,YAAY;YACxC,oBAAoB,EAAE,KAAK,CAAC,gBAAgB,CAAC,oBAAoB;YACjE,mBAAmB,EAAE,KAAK,CAAC,gBAAgB,CAAC,mBAAmB;YAC/D,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC7B,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;SACtC,CAAC,CAAC;IACL,CAAC;IAEO,4BAA4B,CAClC,KAA4C;QAE5C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;YACzB,GAAG,KAAK;YACR,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI;YACjD,mBAAmB,EAAE,SAAS;SAC/B,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import {\n  authChallengeSigningBytes,\n  canonicalAuthOrigin,\n} from \"@tearleads/crypto\";\nimport {\n  apiVersionHeaderName,\n  parseApiVersion,\n} from \"@tearleads/validators/operation\";\nimport {\n  bindPrototypeMethods,\n  describeErrorResponse,\n  type ErrorResponseDescription,\n  errorMessage,\n  hasHeader,\n  isSuccessfulResponse,\n  normalizeApiBaseUrl,\n  requestFailureKey,\n} from \"./requestInternals\";\nimport { responseBodyFailure } from \"./responseBodyFailure\";\nimport { shouldRetryAfterSessionExpired } from \"./sessionRefresh\";\nimport { SessionRenewalTracker } from \"./sessionRenewal\";\nimport type {\n  HttpMethod,\n  OperationRequestFn,\n  OperationRequestResultFn,\n  OperationResponseRequestFn,\n  RequestBody,\n  RequestFailure,\n  RequestFailureKind,\n  RequestResult,\n  RequestResultOptions,\n  ResponseRequestValidationFailureInput,\n} from \"./types\";\n\ntype ExpiredHandler = () => boolean | Promise<boolean>;\ntype PaymentRequiredHandler = (organizationId: string | null) => void;\n\nexport class ApiRequestRuntime {\n  private authToken: string | null = null;\n  private readonly sessionRenewals = new SessionRenewalTracker(\n    () => this.authToken,\n  );\n  private readonly baseUrl: string;\n  private onError: ((message: string) => void) | null = null;\n  private onNetworkError: (() => void) | null = null;\n  private onNetworkSuccess: (() => void) | null = null;\n  private onApiVersion: ((version: number) => void) | null = null;\n  private onSessionExpired: ExpiredHandler | null = null;\n  private onPaymentRequired: PaymentRequiredHandler | null = null;\n  private readonly requestFailuresByKey = new Map<string, RequestFailure>();\n  readonly request: OperationRequestFn;\n  readonly requestResult: OperationRequestResultFn;\n  readonly responseRequest: OperationResponseRequestFn;\n\n  constructor(baseUrl?: string | null) {\n    this.baseUrl = normalizeApiBaseUrl(baseUrl);\n    bindPrototypeMethods(this, ApiRequestRuntime.prototype);\n    this.request = this.makeRequest;\n    this.requestResult = this.makeRequestResult;\n    this.responseRequest = Object.assign(this.makeResponseRequest, {\n      reportFailure: this.reportResponseRequestFailure,\n    });\n  }\n\n  /**\n   * The bytes a login challenge is signed as, bound to the API this client\n   * addresses. A relative base URL resolves against the page, as its requests\n   * do; with neither, there is no API origin to sign for.\n   */\n  authChallengeBytes(challengeHex: string, fingerprint: string): Uint8Array {\n    let apiOrigin: string;\n    try {\n      apiOrigin = canonicalAuthOrigin(\n        new URL(this.baseUrl || \"/\", globalThis.location?.href).href,\n      );\n    } catch {\n      throw new Error(\"The API origin is unavailable for authentication\");\n    }\n    return authChallengeSigningBytes({ apiOrigin, challengeHex, fingerprint });\n  }\n\n  setOnError(handler: ((message: string) => void) | null): void {\n    this.onError = handler;\n  }\n\n  setOnNetworkError(handler: (() => void) | null): void {\n    this.onNetworkError = handler;\n  }\n\n  setOnNetworkSuccess(handler: (() => void) | null): void {\n    this.onNetworkSuccess = handler;\n  }\n\n  /** Receives the build named by each response that carries one. */\n  setOnApiVersion(handler: ((version: number) => void) | null): void {\n    this.onApiVersion = handler;\n  }\n\n  setOnSessionExpired(handler: ExpiredHandler | null): void {\n    this.onSessionExpired = handler;\n  }\n\n  setOnPaymentRequired(handler: PaymentRequiredHandler | null): void {\n    this.onPaymentRequired = handler;\n  }\n\n  setAuthToken(token: string | null): boolean {\n    const changed = this.authToken !== token;\n    if (changed) this.sessionRenewals.tokenChanged();\n    this.authToken = token;\n    return changed;\n  }\n\n  getAuthToken(): string | null {\n    return this.authToken;\n  }\n\n  getRequestFailure(input: { method: HttpMethod; path: string }) {\n    return this.requestFailuresByKey.get(requestFailureKey(input)) ?? null;\n  }\n\n  private buildHeaders(\n    body: RequestBody | undefined,\n    headers: Record<string, string> | undefined,\n    authToken: string | null,\n  ): Record<string, string> {\n    return {\n      ...(authToken ? { Authorization: `Bearer ${authToken}` } : {}),\n      ...(typeof body === \"string\" && !hasHeader(headers, \"Content-Type\")\n        ? { \"Content-Type\": \"application/json\" }\n        : {}),\n      ...headers,\n    };\n  }\n\n  private async makeRequest<T>(\n    path: string,\n    validator: (value: unknown) => value is T,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions | undefined,\n    failureOperation: Parameters<OperationRequestFn>[5],\n  ): Promise<T | null> {\n    const result = await this.makeRequestResult(\n      path,\n      validator,\n      method,\n      body,\n      options,\n      failureOperation,\n    );\n    return result.ok ? result.data : null;\n  }\n\n  private requestFailure(input: {\n    code?: string | undefined;\n    kind: RequestFailureKind;\n    message: string;\n    method: HttpMethod;\n    path: string;\n    reportErrors: boolean;\n    requiredContainerIds?: RequestFailure[\"requiredContainerIds\"];\n    stalePrincipalHeads: RequestFailure[\"stalePrincipalHeads\"];\n    status: number | null;\n    statusText: string;\n  }): RequestFailure {\n    const failure: RequestFailure = {\n      ...(input.code === undefined ? {} : { code: input.code }),\n      kind: input.kind,\n      message: input.message,\n      method: input.method,\n      ok: false,\n      path: input.path,\n      report: () => {\n        if (input.kind !== \"cancelled\") this.onError?.(input.message);\n      },\n      status: input.status,\n      statusText: input.statusText,\n      ...(input.stalePrincipalHeads\n        ? { stalePrincipalHeads: input.stalePrincipalHeads }\n        : {}),\n      ...(input.requiredContainerIds\n        ? { requiredContainerIds: input.requiredContainerIds }\n        : {}),\n    };\n    this.requestFailuresByKey.set(\n      requestFailureKey({ method: input.method, path: input.path }),\n      failure,\n    );\n\n    if (input.reportErrors) {\n      failure.report();\n    }\n\n    return failure;\n  }\n\n  private async makeRequestResult<T>(\n    path: string,\n    validator: (value: unknown) => value is T,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions = {},\n    failureOperation: Parameters<OperationRequestFn>[5],\n  ): Promise<RequestResult<T>> {\n    const responseResult = await this.makeResponseRequest(\n      path,\n      method,\n      body,\n      options,\n      [],\n      failureOperation,\n    );\n    if (!responseResult.ok) {\n      return responseResult;\n    }\n\n    const response = responseResult.data;\n    const reportErrors = options.reportErrors ?? true;\n    let data: unknown;\n    try {\n      data = await response.json();\n    } catch (error) {\n      const failure = responseBodyFailure(error, errorMessage(error));\n      if (failure.kind === \"network\") {\n        this.onNetworkError?.();\n      }\n      return this.requestFailure({\n        kind: failure.kind,\n        message: `${method} ${path}: ${failure.message}`,\n        method,\n        path,\n        reportErrors,\n        stalePrincipalHeads: undefined,\n        status: response.status,\n        statusText: response.statusText,\n      });\n    }\n\n    if (!validator(data)) {\n      return this.requestFailure({\n        kind: \"shape\",\n        message: `Invalid response shape for ${path}`,\n        method,\n        path,\n        reportErrors,\n        stalePrincipalHeads: undefined,\n        status: response.status,\n        statusText: response.statusText,\n      });\n    }\n\n    return { data, ok: true };\n  }\n\n  private async makeResponseRequest(\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions = {},\n    additionalSuccessStatuses: readonly number[],\n    failureOperation: Parameters<OperationResponseRequestFn>[5],\n  ): Promise<RequestResult<Response>> {\n    const authToken = this.authToken;\n    const responseResult = await this.fetchResponseRequest(\n      path,\n      method,\n      body,\n      options,\n      authToken,\n    );\n    if (!responseResult.ok) {\n      return responseResult;\n    }\n    const response = responseResult.data;\n    if (isSuccessfulResponse(response, additionalSuccessStatuses)) {\n      this.requestFailuresByKey.delete(requestFailureKey({ method, path }));\n      return { data: response, ok: true };\n    }\n\n    const errorDescription = await describeErrorResponse(\n      response,\n      failureOperation,\n      options.expectedPaymentRequiredOrganizationId,\n    );\n    const shouldRetry = await shouldRetryAfterSessionExpired({\n      authToken,\n      body,\n      code: errorDescription.code,\n      getCurrentAuthToken: () => this.authToken,\n      isKnownSessionRenewal: (from, to) =>\n        this.sessionRenewals.isKnown(from, to),\n      pendingSessionRenewal: (from) => this.sessionRenewals.pending(from),\n      options,\n      refreshSession: () => this.sessionRenewals.renew(this.onSessionExpired),\n      reportError: (message) => this.onError?.(message),\n      responseStatus: response.status,\n    });\n    const retryAuthToken = this.sessionRenewals.currentToken(authToken);\n    // Recheck after the awaited helper and the host's renewal notification.\n    if (shouldRetry && retryAuthToken) {\n      if (options.retryOnSessionExpired === \"renew-only\")\n        return this.httpFailure({\n          errorDescription,\n          failureOperation,\n          method,\n          options: {\n            ...options,\n            reportErrors: method === \"GET\" ? false : options.reportErrors,\n          },\n          path,\n          response,\n        });\n      const retryResult = await this.fetchResponseRequest(\n        path,\n        method,\n        body,\n        options,\n        retryAuthToken,\n      );\n      if (!retryResult.ok) {\n        return retryResult;\n      }\n      const retryResponse = retryResult.data;\n      if (isSuccessfulResponse(retryResponse, additionalSuccessStatuses)) {\n        this.requestFailuresByKey.delete(requestFailureKey({ method, path }));\n        return { data: retryResponse, ok: true };\n      }\n\n      return this.httpFailure({\n        errorDescription: await describeErrorResponse(\n          retryResponse,\n          failureOperation,\n          options.expectedPaymentRequiredOrganizationId,\n        ),\n        failureOperation,\n        method,\n        options,\n        path,\n        response: retryResponse,\n      });\n    }\n\n    return this.httpFailure({\n      errorDescription,\n      failureOperation,\n      method,\n      options,\n      path,\n      response,\n    });\n  }\n\n  private async fetchResponseRequest(\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions,\n    authToken: string | null,\n  ): Promise<RequestResult<Response>> {\n    const reportErrors = options.reportErrors ?? true;\n    const init: RequestInit & { duplex?: \"half\" } = {\n      method,\n      headers: this.buildHeaders(body, options.headers, authToken),\n      ...(options.signal ? { signal: options.signal } : {}),\n    };\n    if (body !== undefined) {\n      init.body = body;\n      if (body instanceof ReadableStream) {\n        init.duplex = \"half\";\n      }\n    }\n\n    let response: Response;\n    try {\n      response = await fetch(`${this.baseUrl}${path}`, init);\n    } catch (error) {\n      const cancelled = options.signal?.aborted === true;\n      if (!cancelled) this.onNetworkError?.();\n      return this.requestFailure({\n        ...(cancelled ? { code: \"request_aborted\" } : {}),\n        kind: cancelled ? \"cancelled\" : \"network\",\n        message: `${method} ${path}: ${errorMessage(error)}`,\n        method,\n        path,\n        reportErrors: cancelled ? false : reportErrors,\n        stalePrincipalHeads: undefined,\n        status: null,\n        statusText: \"\",\n      });\n    }\n\n    this.onNetworkSuccess?.();\n    const apiVersion = parseApiVersion(\n      response.headers.get(apiVersionHeaderName),\n    );\n    if (apiVersion !== null) this.onApiVersion?.(apiVersion);\n    return { data: response, ok: true };\n  }\n\n  private httpFailure(input: {\n    readonly errorDescription: ErrorResponseDescription;\n    readonly failureOperation: Parameters<OperationResponseRequestFn>[5];\n    readonly method: HttpMethod;\n    readonly options: RequestResultOptions;\n    readonly path: string;\n    readonly response: Response;\n  }): RequestFailure {\n    const cancelled = input.options.signal?.aborted === true;\n    const reportErrors = input.options.reportErrors ?? true;\n    if (\n      !cancelled &&\n      input.response.status === 402 &&\n      input.failureOperation.failureResponses?.[402] &&\n      input.errorDescription.paymentRequiredOrganizationId !== undefined &&\n      input.errorDescription.paymentRequiredOrganizationId ===\n        input.options.expectedPaymentRequiredOrganizationId\n    ) {\n      this.onPaymentRequired?.(\n        input.errorDescription.paymentRequiredOrganizationId,\n      );\n    }\n    return this.requestFailure({\n      ...(cancelled\n        ? { code: \"request_aborted\" }\n        : input.errorDescription.code === null\n          ? {}\n          : { code: input.errorDescription.code }),\n      kind: cancelled ? \"cancelled\" : \"http\",\n      message: `${input.method} ${input.path}: ${input.response.status} ${input.response.statusText}${input.errorDescription.detail}`,\n      method: input.method,\n      path: input.path,\n      reportErrors: !cancelled && reportErrors,\n      requiredContainerIds: input.errorDescription.requiredContainerIds,\n      stalePrincipalHeads: input.errorDescription.stalePrincipalHeads,\n      status: input.response.status,\n      statusText: input.response.statusText,\n    });\n  }\n\n  private reportResponseRequestFailure(\n    input: ResponseRequestValidationFailureInput,\n  ): RequestFailure {\n    if (input.kind === \"network\") {\n      this.onNetworkError?.();\n    }\n    return this.requestFailure({\n      ...input,\n      reportErrors: input.options?.reportErrors ?? true,\n      stalePrincipalHeads: undefined,\n    });\n  }\n}\n"]}

package/internal/api-client/routes/containers/mutations.js

@@ -1,4 +1,4 @@
-import { createContainerOperation, createContainerWithMetadataDocumentOperation, deleteContainerOperation, isContainerMutationOperationRequest, isContainerMutationOperationResponse, isContainerRotationOperationRequest, isContainerRotationOperationResponse, isCreateContainerWithMetadataDocumentOperationRequest, isCreateContainerWithMetadataDocumentOperationResponse, isDeleteContainerOperationResponse, moveContainerOperation, operationRequestPath, reciteContainerOperation, rekeyContainerOperation, revokeContainerOperation, shareContainerOperation, } from "../../../validators/operation/index.js";
+import { createContainerOperation, createContainerWithMetadataDocumentOperation, deleteContainerOperation, isContainerMutationOperationRequest, isContainerMutationOperationResponse, isContainerRotationOperationRequest, isContainerRotationOperationResponse, isCreateContainerWithMetadataDocumentOperationRequest, isCreateContainerWithMetadataDocumentOperationResponse, isDeleteContainerOperationResponse, moveContainerOperation, operationRequestPath, operationRequestPathWithQuery, reciteContainerOperation, rekeyContainerOperation, revokeContainerOperation, shareContainerOperation, } from "../../../validators/operation/index.js";
 import { isContainerReciteRequest } from "../../../validators/request/index.js";
 import { isContainerReciteResponse } from "../../../validators/response/index.js";
 export const containerRecite = {
@@ -49,6 +49,6 @@ export const containerMove = {
 export const containerDelete = {
     isResponse: isDeleteContainerOperationResponse,
     method: deleteContainerOperation.method,
-    path: (containerId) => operationRequestPath(deleteContainerOperation, { containerId }),
+    path: (containerId, requiredAncestorId) => operationRequestPathWithQuery(deleteContainerOperation, { containerId }, { requiredAncestorId }),
 };
 //# sourceMappingURL=mutations.js.map

package/internal/api-client/routes/containers/mutations.js.map

@@ -1 +1 @@
-{"version":3,"file":"mutations.js","sourceRoot":"","sources":["mutations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,4CAA4C,EAC5C,wBAAwB,EACxB,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,oCAAoC,EACpC,qDAAqD,EACrD,sDAAsD,EACtD,kCAAkC,EAClC,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,wBAAwB;IACnC,UAAU,EAAE,yBAAyB;IACrC,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,WAAW,EAAE,CAAC;CACzD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,CAAC;CAChD,CAAC;AAEX,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,SAAS,EAAE,qDAAqD;IAChE,UAAU,EAAE,sDAAsD;IAClE,MAAM,EAAE,4CAA4C,CAAC,MAAM;IAC3D,IAAI,EAAE,oBAAoB,CAAC,4CAA4C,EAAE,EAAE,CAAC;CACpE,CAAC;AAEX,SAAS,qBAAqB,CAC5B,SAIkC,EAClC,WAAmB;IAEnB,OAAO,oBAAoB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,uBAAuB,CAAC,MAAM;IACtC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,uBAAuB,EAAE,WAAW,CAAC;CACrD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,wBAAwB,EAAE,WAAW,CAAC;CACtD,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,uBAAuB,CAAC,MAAM;IACtC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,uBAAuB,EAAE,WAAW,CAAC;CACrD,CAAC;AAEX,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,sBAAsB,CAAC,MAAM;IACrC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,sBAAsB,EAAE,WAAW,CAAC;CACpD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,kCAAkC;IAC9C,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,WAAW,EAAE,CAAC;CACzD,CAAC","sourcesContent":["import {\n  createContainerOperation,\n  createContainerWithMetadataDocumentOperation,\n  deleteContainerOperation,\n  isContainerMutationOperationRequest,\n  isContainerMutationOperationResponse,\n  isContainerRotationOperationRequest,\n  isContainerRotationOperationResponse,\n  isCreateContainerWithMetadataDocumentOperationRequest,\n  isCreateContainerWithMetadataDocumentOperationResponse,\n  isDeleteContainerOperationResponse,\n  moveContainerOperation,\n  operationRequestPath,\n  reciteContainerOperation,\n  rekeyContainerOperation,\n  revokeContainerOperation,\n  shareContainerOperation,\n} from \"@tearleads/validators/operation\";\nimport { isContainerReciteRequest } from \"@tearleads/validators/request\";\nimport { isContainerReciteResponse } from \"@tearleads/validators/response\";\n\nexport const containerRecite = {\n  isRequest: isContainerReciteRequest,\n  isResponse: isContainerReciteResponse,\n  method: reciteContainerOperation.method,\n  path: (containerId: string) =>\n    operationRequestPath(reciteContainerOperation, { containerId }),\n} as const;\n\nexport const containerCreate = {\n  isRequest: isContainerMutationOperationRequest,\n  isResponse: isContainerMutationOperationResponse,\n  method: createContainerOperation.method,\n  path: operationRequestPath(createContainerOperation, {}),\n} as const;\n\nexport const containerCreateWithMetadataDocument = {\n  isRequest: isCreateContainerWithMetadataDocumentOperationRequest,\n  isResponse: isCreateContainerWithMetadataDocumentOperationResponse,\n  method: createContainerWithMetadataDocumentOperation.method,\n  path: operationRequestPath(createContainerWithMetadataDocumentOperation, {}),\n} as const;\n\nfunction containerMutationPath(\n  operation:\n    | typeof moveContainerOperation\n    | typeof rekeyContainerOperation\n    | typeof revokeContainerOperation\n    | typeof shareContainerOperation,\n  containerId: string,\n) {\n  return operationRequestPath(operation, { containerId });\n}\n\nexport const containerShare = {\n  isRequest: isContainerMutationOperationRequest,\n  isResponse: isContainerMutationOperationResponse,\n  method: shareContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(shareContainerOperation, containerId),\n} as const;\n\nexport const containerRevoke = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: revokeContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(revokeContainerOperation, containerId),\n} as const;\n\nexport const containerRekey = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: rekeyContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(rekeyContainerOperation, containerId),\n} as const;\n\nexport const containerMove = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: moveContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(moveContainerOperation, containerId),\n} as const;\n\nexport const containerDelete = {\n  isResponse: isDeleteContainerOperationResponse,\n  method: deleteContainerOperation.method,\n  path: (containerId: string) =>\n    operationRequestPath(deleteContainerOperation, { containerId }),\n} as const;\n"]}
+{"version":3,"file":"mutations.js","sourceRoot":"","sources":["mutations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,4CAA4C,EAC5C,wBAAwB,EACxB,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,oCAAoC,EACpC,qDAAqD,EACrD,sDAAsD,EACtD,kCAAkC,EAClC,sBAAsB,EACtB,oBAAoB,EACpB,6BAA6B,EAC7B,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,wBAAwB;IACnC,UAAU,EAAE,yBAAyB;IACrC,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,WAAW,EAAE,CAAC;CACzD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,CAAC;CAChD,CAAC;AAEX,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,SAAS,EAAE,qDAAqD;IAChE,UAAU,EAAE,sDAAsD;IAClE,MAAM,EAAE,4CAA4C,CAAC,MAAM;IAC3D,IAAI,EAAE,oBAAoB,CAAC,4CAA4C,EAAE,EAAE,CAAC;CACpE,CAAC;AAEX,SAAS,qBAAqB,CAC5B,SAIkC,EAClC,WAAmB;IAEnB,OAAO,oBAAoB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,uBAAuB,CAAC,MAAM;IACtC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,uBAAuB,EAAE,WAAW,CAAC;CACrD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,wBAAwB,EAAE,WAAW,CAAC;CACtD,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,uBAAuB,CAAC,MAAM;IACtC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,uBAAuB,EAAE,WAAW,CAAC;CACrD,CAAC;AAEX,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,sBAAsB,CAAC,MAAM;IACrC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,sBAAsB,EAAE,WAAW,CAAC;CACpD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,kCAAkC;IAC9C,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,kBAA2B,EAAE,EAAE,CACzD,6BAA6B,CAC3B,wBAAwB,EACxB,EAAE,WAAW,EAAE,EACf,EAAE,kBAAkB,EAAE,CACvB;CACK,CAAC","sourcesContent":["import {\n  createContainerOperation,\n  createContainerWithMetadataDocumentOperation,\n  deleteContainerOperation,\n  isContainerMutationOperationRequest,\n  isContainerMutationOperationResponse,\n  isContainerRotationOperationRequest,\n  isContainerRotationOperationResponse,\n  isCreateContainerWithMetadataDocumentOperationRequest,\n  isCreateContainerWithMetadataDocumentOperationResponse,\n  isDeleteContainerOperationResponse,\n  moveContainerOperation,\n  operationRequestPath,\n  operationRequestPathWithQuery,\n  reciteContainerOperation,\n  rekeyContainerOperation,\n  revokeContainerOperation,\n  shareContainerOperation,\n} from \"@tearleads/validators/operation\";\nimport { isContainerReciteRequest } from \"@tearleads/validators/request\";\nimport { isContainerReciteResponse } from \"@tearleads/validators/response\";\n\nexport const containerRecite = {\n  isRequest: isContainerReciteRequest,\n  isResponse: isContainerReciteResponse,\n  method: reciteContainerOperation.method,\n  path: (containerId: string) =>\n    operationRequestPath(reciteContainerOperation, { containerId }),\n} as const;\n\nexport const containerCreate = {\n  isRequest: isContainerMutationOperationRequest,\n  isResponse: isContainerMutationOperationResponse,\n  method: createContainerOperation.method,\n  path: operationRequestPath(createContainerOperation, {}),\n} as const;\n\nexport const containerCreateWithMetadataDocument = {\n  isRequest: isCreateContainerWithMetadataDocumentOperationRequest,\n  isResponse: isCreateContainerWithMetadataDocumentOperationResponse,\n  method: createContainerWithMetadataDocumentOperation.method,\n  path: operationRequestPath(createContainerWithMetadataDocumentOperation, {}),\n} as const;\n\nfunction containerMutationPath(\n  operation:\n    | typeof moveContainerOperation\n    | typeof rekeyContainerOperation\n    | typeof revokeContainerOperation\n    | typeof shareContainerOperation,\n  containerId: string,\n) {\n  return operationRequestPath(operation, { containerId });\n}\n\nexport const containerShare = {\n  isRequest: isContainerMutationOperationRequest,\n  isResponse: isContainerMutationOperationResponse,\n  method: shareContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(shareContainerOperation, containerId),\n} as const;\n\nexport const containerRevoke = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: revokeContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(revokeContainerOperation, containerId),\n} as const;\n\nexport const containerRekey = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: rekeyContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(rekeyContainerOperation, containerId),\n} as const;\n\nexport const containerMove = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: moveContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(moveContainerOperation, containerId),\n} as const;\n\nexport const containerDelete = {\n  isResponse: isDeleteContainerOperationResponse,\n  method: deleteContainerOperation.method,\n  path: (containerId: string, requiredAncestorId?: string) =>\n    operationRequestPathWithQuery(\n      deleteContainerOperation,\n      { containerId },\n      { requiredAncestorId },\n    ),\n} as const;\n"]}

package/internal/api-client/sessionRefresh.js

@@ -12,14 +12,21 @@ export async function shouldRetryAfterSessionExpired(input) {
         return false;
     }
     const currentAuthToken = input.getCurrentAuthToken();
-    if (currentAuthToken && currentAuthToken !== input.authToken) {
-        if (input.isKnownSessionRenewal(input.authToken, currentAuthToken))
+    let pending = null;
+    if (currentAuthToken !== input.authToken) {
+        const renewed = currentAuthToken !== null &&
+            input.isKnownSessionRenewal(input.authToken, currentAuthToken);
+        if (renewed) {
             input.options.onSessionRenewed?.();
-        return true;
+            return true;
+        }
+        pending = input.pendingSessionRenewal(input.authToken);
+        if (!currentAuthToken || !pending)
+            return false;
     }
     let refreshed = false;
     try {
-        refreshed = await input.refreshSession();
+        refreshed = await (pending ?? input.refreshSession());
     }
     catch (error) {
         if (error instanceof KeyingVerificationError) {
@@ -29,9 +36,10 @@ export async function shouldRetryAfterSessionExpired(input) {
             input.reportError(`Session refresh failed: ${errorMessage(error)}`);
         }
     }
+    const refreshedToken = input.getCurrentAuthToken();
     const renewed = Boolean(refreshed &&
-        input.getCurrentAuthToken() &&
-        input.getCurrentAuthToken() !== input.authToken);
+        refreshedToken &&
+        input.isKnownSessionRenewal(input.authToken, refreshedToken));
     if (renewed)
         input.options.onSessionRenewed?.();
     return renewed;

package/internal/api-client/sessionRefresh.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessionRefresh.js","sourceRoot":"","sources":["sessionRefresh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EACL,YAAY,EACZ,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAe5B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAA0B;IAE1B,IACE,KAAK,CAAC,OAAO,CAAC,qBAAqB,KAAK,KAAK;QAC7C,CAAC,KAAK,CAAC,SAAS;QAChB,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC;QACpC,CAAC,yBAAyB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,EAC5D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC;IACrD,IAAI,gBAAgB,IAAI,gBAAgB,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC7D,IAAI,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC;YAChE,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;YACvC,KAAK,CAAC,WAAW,CAAC,2BAA2B,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CACrB,SAAS;QACP,KAAK,CAAC,mBAAmB,EAAE;QAC3B,KAAK,CAAC,mBAAmB,EAAE,KAAK,KAAK,CAAC,SAAS,CAClD,CAAC;IACF,IAAI,OAAO;QAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;IAChD,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport {\n  errorMessage,\n  isRefreshableSessionError,\n  isReplayableRequestBody,\n} from \"./requestInternals\";\nimport type { RequestBody, RequestResultOptions } from \"./types\";\n\ninterface SessionRefreshInput {\n  readonly authToken: string | null;\n  readonly body: RequestBody | undefined;\n  readonly code: string | null;\n  readonly getCurrentAuthToken: () => string | null;\n  readonly isKnownSessionRenewal: (from: string, to: string) => boolean;\n  readonly options: RequestResultOptions;\n  readonly refreshSession: () => boolean | Promise<boolean>;\n  readonly reportError: (message: string) => void;\n  readonly responseStatus: number;\n}\n\n/**\n * Decides whether a failed request can be replayed after session renewal.\n * Identity-integrity failures are terminal and must retain their typed error.\n */\nexport async function shouldRetryAfterSessionExpired(\n  input: SessionRefreshInput,\n): Promise<boolean> {\n  if (\n    input.options.retryOnSessionExpired === false ||\n    !input.authToken ||\n    !isReplayableRequestBody(input.body) ||\n    !isRefreshableSessionError(input.responseStatus, input.code)\n  ) {\n    return false;\n  }\n\n  const currentAuthToken = input.getCurrentAuthToken();\n  if (currentAuthToken && currentAuthToken !== input.authToken) {\n    if (input.isKnownSessionRenewal(input.authToken, currentAuthToken))\n      input.options.onSessionRenewed?.();\n    return true;\n  }\n\n  let refreshed = false;\n  try {\n    refreshed = await input.refreshSession();\n  } catch (error: unknown) {\n    if (error instanceof KeyingVerificationError) {\n      throw error;\n    }\n    if (input.options.reportErrors ?? true) {\n      input.reportError(`Session refresh failed: ${errorMessage(error)}`);\n    }\n  }\n\n  const renewed = Boolean(\n    refreshed &&\n      input.getCurrentAuthToken() &&\n      input.getCurrentAuthToken() !== input.authToken,\n  );\n  if (renewed) input.options.onSessionRenewed?.();\n  return renewed;\n}\n"]}
+{"version":3,"file":"sessionRefresh.js","sourceRoot":"","sources":["sessionRefresh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EACL,YAAY,EACZ,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAgB5B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAA0B;IAE1B,IACE,KAAK,CAAC,OAAO,CAAC,qBAAqB,KAAK,KAAK;QAC7C,CAAC,KAAK,CAAC,SAAS;QAChB,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC;QACpC,CAAC,yBAAyB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,EAC5D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC;IACrD,IAAI,OAAO,GAA4B,IAAI,CAAC;IAC5C,IAAI,gBAAgB,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,OAAO,GACX,gBAAgB,KAAK,IAAI;YACzB,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACjE,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,GAAG,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;IAClD,CAAC;IAED,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;YACvC,KAAK,CAAC,WAAW,CAAC,2BAA2B,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,CACrB,SAAS;QACP,cAAc;QACd,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC,CAC/D,CAAC;IACF,IAAI,OAAO;QAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;IAChD,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport {\n  errorMessage,\n  isRefreshableSessionError,\n  isReplayableRequestBody,\n} from \"./requestInternals\";\nimport type { RequestBody, RequestResultOptions } from \"./types\";\n\ninterface SessionRefreshInput {\n  readonly authToken: string | null;\n  readonly body: RequestBody | undefined;\n  readonly code: string | null;\n  readonly getCurrentAuthToken: () => string | null;\n  readonly isKnownSessionRenewal: (from: string, to: string) => boolean;\n  readonly options: RequestResultOptions;\n  readonly pendingSessionRenewal: (from: string) => Promise<boolean> | null;\n  readonly refreshSession: () => boolean | Promise<boolean>;\n  readonly reportError: (message: string) => void;\n  readonly responseStatus: number;\n}\n\n/**\n * Decides whether a failed request can be replayed after session renewal.\n * Identity-integrity failures are terminal and must retain their typed error.\n */\nexport async function shouldRetryAfterSessionExpired(\n  input: SessionRefreshInput,\n): Promise<boolean> {\n  if (\n    input.options.retryOnSessionExpired === false ||\n    !input.authToken ||\n    !isReplayableRequestBody(input.body) ||\n    !isRefreshableSessionError(input.responseStatus, input.code)\n  ) {\n    return false;\n  }\n\n  const currentAuthToken = input.getCurrentAuthToken();\n  let pending: Promise<boolean> | null = null;\n  if (currentAuthToken !== input.authToken) {\n    const renewed =\n      currentAuthToken !== null &&\n      input.isKnownSessionRenewal(input.authToken, currentAuthToken);\n    if (renewed) {\n      input.options.onSessionRenewed?.();\n      return true;\n    }\n    pending = input.pendingSessionRenewal(input.authToken);\n    if (!currentAuthToken || !pending) return false;\n  }\n\n  let refreshed = false;\n  try {\n    refreshed = await (pending ?? input.refreshSession());\n  } catch (error: unknown) {\n    if (error instanceof KeyingVerificationError) {\n      throw error;\n    }\n    if (input.options.reportErrors ?? true) {\n      input.reportError(`Session refresh failed: ${errorMessage(error)}`);\n    }\n  }\n\n  const refreshedToken = input.getCurrentAuthToken();\n  const renewed = Boolean(\n    refreshed &&\n      refreshedToken &&\n      input.isKnownSessionRenewal(input.authToken, refreshedToken),\n  );\n  if (renewed) input.options.onSessionRenewed?.();\n  return renewed;\n}\n"]}

package/internal/api-client/sessionRenewal.js

@@ -0,0 +1,54 @@
+/** An identity change invalidates renewal evidence, including an awaited callback. */
+export class SessionRenewalTracker {
+    readToken;
+    revision = 0;
+    known = null;
+    inFlight = null;
+    constructor(readToken) {
+        this.readToken = readToken;
+    }
+    tokenChanged() {
+        this.revision += 1;
+        this.known = null;
+    }
+    isKnown(from, to) {
+        return this.known?.from === from && this.known.to === to;
+    }
+    currentToken(from) {
+        const token = this.readToken();
+        return from && token && this.isKnown(from, token) ? token : null;
+    }
+    pending(from) {
+        return this.inFlight?.from === from ? this.inFlight.promise : null;
+    }
+    async renew(handler) {
+        const from = this.readToken();
+        if (!from)
+            return false;
+        const existing = this.pending(from);
+        if (existing)
+            return existing;
+        const pending = {
+            from,
+            promise: this.complete(from, this.revision, handler),
+        };
+        this.inFlight = pending;
+        try {
+            return await pending.promise;
+        }
+        finally {
+            if (this.inFlight === pending)
+                this.inFlight = null;
+        }
+    }
+    async complete(from, revision, handler) {
+        const renewed = await (handler?.() ?? false);
+        const to = this.readToken();
+        // The trusted callback authenticates the same identity and installs one
+        // replacement token. A second transition cannot borrow that renewal.
+        if (renewed && to && from !== to && this.revision === revision + 1)
+            this.known = { from, to };
+        return renewed;
+    }
+}
+//# sourceMappingURL=sessionRenewal.js.map

package/internal/api-client/sessionRenewal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionRenewal.js","sourceRoot":"","sources":["sessionRenewal.ts"],"names":[],"mappings":"AAEA,sFAAsF;AACtF,MAAM,OAAO,qBAAqB;IAKH;IAJrB,QAAQ,GAAG,CAAC,CAAC;IACb,KAAK,GAAwC,IAAI,CAAC;IAClD,QAAQ,GAAuD,IAAI,CAAC;IAE5E,YAA6B,SAA8B;QAA9B,cAAS,GAAT,SAAS,CAAqB;IAAG,CAAC;IAE/D,YAAY;QACV,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,OAAO,CAAC,IAAY,EAAE,EAAU;QAC9B,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC;IAED,YAAY,CAAC,IAAmB;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAqB;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,OAAO,GAAG;YACd,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;SACrD,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;gBAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACtD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,IAAY,EACZ,QAAgB,EAChB,OAAqB;QAErB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,KAAK,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,OAAO,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG,CAAC;YAChE,IAAI,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;CACF","sourcesContent":["type RenewSession = (() => boolean | Promise<boolean>) | null;\n\n/** An identity change invalidates renewal evidence, including an awaited callback. */\nexport class SessionRenewalTracker {\n  private revision = 0;\n  private known: { from: string; to: string } | null = null;\n  private inFlight: { from: string; promise: Promise<boolean> } | null = null;\n\n  constructor(private readonly readToken: () => string | null) {}\n\n  tokenChanged(): void {\n    this.revision += 1;\n    this.known = null;\n  }\n\n  isKnown(from: string, to: string): boolean {\n    return this.known?.from === from && this.known.to === to;\n  }\n\n  currentToken(from: string | null): string | null {\n    const token = this.readToken();\n    return from && token && this.isKnown(from, token) ? token : null;\n  }\n\n  pending(from: string): Promise<boolean> | null {\n    return this.inFlight?.from === from ? this.inFlight.promise : null;\n  }\n\n  async renew(handler: RenewSession): Promise<boolean> {\n    const from = this.readToken();\n    if (!from) return false;\n    const existing = this.pending(from);\n    if (existing) return existing;\n    const pending = {\n      from,\n      promise: this.complete(from, this.revision, handler),\n    };\n    this.inFlight = pending;\n    try {\n      return await pending.promise;\n    } finally {\n      if (this.inFlight === pending) this.inFlight = null;\n    }\n  }\n\n  private async complete(\n    from: string,\n    revision: number,\n    handler: RenewSession,\n  ): Promise<boolean> {\n    const renewed = await (handler?.() ?? false);\n    const to = this.readToken();\n    // The trusted callback authenticates the same identity and installs one\n    // replacement token. A second transition cannot borrow that renewal.\n    if (renewed && to && from !== to && this.revision === revision + 1)\n      this.known = { from, to };\n    return renewed;\n  }\n}\n"]}

package/internal/validators/operation/containerMutations.d.ts

@@ -6244,6 +6244,9 @@ export declare const deleteContainerOperation: Omit<{
         containerId: z.ZodString;
     }, z.core.$strict>;
     readonly path: "/containers/{containerId}";
+    readonly query: z.ZodObject<{
+        requiredAncestorId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
     readonly responses: {
         readonly 200: z.ZodType<{
             containerId: string;

package/internal/validators/operation/containerMutations.js

@@ -119,6 +119,7 @@ export const deleteContainerOperation = defineJsonOperation({
     method: "DELETE",
     params: ContainerMutationPathParamsSchema,
     path: "/containers/{containerId}",
+    query: z.strictObject({ requiredAncestorId: z.string().min(1).optional() }),
     responses: { 200: ContainerDeleteResponseSchema },
 });
 export const isContainerMutationOperationRequest = isContainerMutationRequest;

package/internal/validators/operation/containerMutations.js.map

@@ -1 +1 @@
-{"version":3,"file":"containerMutations.js","sourceRoot":"","sources":["containerMutations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kDAAkD,EAAE,MAAM,wCAAwC,CAAC;AAC5G,OAAO,EACL,gDAAgD,EAChD,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,EAC9B,4CAA4C,EAC5C,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iDAAiD,EACjD,6BAA6B,EAC7B,sCAAsC,EACtC,+BAA+B,EAC/B,oCAAoC,EACpC,6BAA6B,EAC7B,+BAA+B,EAC/B,mBAAmB,EACnB,6CAA6C,EAC7C,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,sCAAsC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAMH,MAAM,iCAAiC,GAAG;IACxC,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,kCAAkC;IACvC,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,sCAAsC;IAC3C,GAAG,EAAE,mBAAmB;CAChB,CAAC;AAEX,MAAM,gCAAgC,GAAG;IACvC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;CACzB,CAAC;AAEX,MAAM,mCAAmC,GAAG;IAC1C,kDAAkD;CAC1C,CAAC;AAEX,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,8BAA8B;IACpC,gBAAgB,EAAE,iCAAiC;IACnD,eAAe,EAAE,gCAAgC;IACjD,EAAE,EAAE,mBAAmB;IACvB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,sCAAsC;IAC9C,IAAI,EAAE,aAAa;IACnB,SAAS,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE;IACnD,kBAAkB,EAAE,mCAAmC;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4CAA4C,GAAG,mBAAmB,CAC7E;IACE,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,gDAAgD;IACtD,gBAAgB,EAAE;QAChB,GAAG,iCAAiC;QACpC,GAAG,EAAE,mBAAmB;KACzB;IACD,eAAe,EAAE,CAAC,GAAG,gCAAgC,EAAE,GAAG,CAAC;IAC3D,EAAE,EAAE,wCAAwC;IAC5C,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,sCAAsC;IAC9C,IAAI,EAAE,oCAAoC;IAC1C,SAAS,EAAE,EAAE,GAAG,EAAE,iDAAiD,EAAE;IACrE,kBAAkB,EAAE,mCAAmC;CACxD,CACF,CAAC;AAEF,SAAS,gCAAgC,CAGvC,KAA+C;IAC/C,OAAO,mBAAmB,CAAC;QACzB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,8BAA8B;QACpC,gBAAgB,EAAE,iCAAiC;QACnD,eAAe,EAAE,gCAAgC;QACjD,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,iCAAiC;QACzC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE;QACnD,kBAAkB,EAAE,mCAAmC;KACxD,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,gCAAgC,CAGvC,KAA+C;IAC/C,OAAO,mBAAmB,CAAC;QACzB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,8BAA8B;QACpC,gBAAgB,EAAE,iCAAiC;QACnD,eAAe,EAAE,gCAAgC;QACjD,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,iCAAiC;QACzC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE;QACnD,kBAAkB,EAAE,mCAAmC;KACxD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,gCAAgC,CAAC;IACtE,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,iCAAiC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,4BAA4B;IAClC,gBAAgB,EAAE,iCAAiC;IACnD,eAAe,EAAE,gCAAgC;IACjD,EAAE,EAAE,mBAAmB;IACvB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,iCAAiC;IACzC,IAAI,EAAE,kCAAkC;IACxC,SAAS,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;IACvE,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,kCAAkC;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gCAAgC,CAAC;IACtE,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,iCAAiC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,gCAAgC,CAAC;IACrE,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,gCAAgC;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE;QAChB,GAAG,iCAAiC;QACpC,GAAG,EAAE,oCAAoC;KAC1C;IACD,eAAe,EAAE,gCAAgC;IACjD,EAAE,EAAE,mBAAmB;IACvB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,iCAAiC;IACzC,IAAI,EAAE,2BAA2B;IACjC,SAAS,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mCAAmC,GAAG,0BAA0B,CAAC;AAC9E,MAAM,CAAC,MAAM,oCAAoC,GAAG,2BAA2B,CAAC;AAChF,MAAM,CAAC,MAAM,mCAAmC,GAAG,0BAA0B,CAAC;AAC9E,MAAM,CAAC,MAAM,oCAAoC,GAAG,2BAA2B,CAAC;AAChF,MAAM,CAAC,MAAM,qDAAqD,GAChE,4CAA4C,CAAC;AAC/C,MAAM,CAAC,MAAM,sDAAsD,GACjE,6CAA6C,CAAC;AAChD,MAAM,CAAC,MAAM,kCAAkC,GAAG,yBAAyB,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { organizationProvisioningContainerKeyringRefinement } from \"../organizationProvisioningRefinements\";\nimport {\n  ContainerCreateWithMetadataDocumentRequestSchema,\n  ContainerMutationRequestSchema,\n  ContainerReciteRequestSchema,\n  ContainerRotationRequestSchema,\n  isContainerCreateWithMetadataDocumentRequest,\n  isContainerMutationRequest,\n  isContainerRotationRequest,\n} from \"../request\";\nimport {\n  ContainerCreateWithMetadataDocumentResponseSchema,\n  ContainerDeleteResponseSchema,\n  ContainerMutationFailureResponseSchema,\n  ContainerMutationResponseSchema,\n  ContainerNotFoundErrorResponseSchema,\n  ContainerReciteResponseSchema,\n  ContainerRotationResponseSchema,\n  ErrorResponseSchema,\n  isContainerCreateWithMetadataDocumentResponse,\n  isContainerDeleteResponse,\n  isContainerMutationResponse,\n  isContainerRotationResponse,\n  PaymentRequiredErrorResponseSchema,\n  SessionFailureResponseSchema,\n} from \"../response\";\nimport { defineJsonOperation } from \"./definition\";\n\nconst EmptyContainerMutationPathParamsSchema = z.strictObject({});\n\nexport const ContainerMutationPathParamsSchema = z.strictObject({\n  containerId: z.string(),\n});\n\nexport type ContainerMutationPathParams = z.infer<\n  typeof ContainerMutationPathParamsSchema\n>;\n\nconst containerMutationFailureResponses = {\n  400: ErrorResponseSchema,\n  401: SessionFailureResponseSchema,\n  402: PaymentRequiredErrorResponseSchema,\n  403: ErrorResponseSchema,\n  404: ErrorResponseSchema,\n  409: ContainerMutationFailureResponseSchema,\n  500: ErrorResponseSchema,\n} as const;\n\nconst containerMutationFailureStatuses = [\n  400, 401, 402, 403, 404, 409, 500,\n] as const;\n\nconst containerMutationRuntimeRefinements = [\n  organizationProvisioningContainerKeyringRefinement,\n] as const;\n\nexport const createContainerOperation = defineJsonOperation({\n  auth: \"session\",\n  body: ContainerMutationRequestSchema,\n  failureResponses: containerMutationFailureResponses,\n  failureStatuses: containerMutationFailureStatuses,\n  id: \"containers.create\",\n  method: \"POST\",\n  params: EmptyContainerMutationPathParamsSchema,\n  path: \"/containers\",\n  responses: { 200: ContainerMutationResponseSchema },\n  runtimeRefinements: containerMutationRuntimeRefinements,\n});\n\nexport const createContainerWithMetadataDocumentOperation = defineJsonOperation(\n  {\n    auth: \"session\",\n    body: ContainerCreateWithMetadataDocumentRequestSchema,\n    failureResponses: {\n      ...containerMutationFailureResponses,\n      503: ErrorResponseSchema,\n    },\n    failureStatuses: [...containerMutationFailureStatuses, 503],\n    id: \"containers.withMetadataDocument.create\",\n    method: \"POST\",\n    params: EmptyContainerMutationPathParamsSchema,\n    path: \"/containers/with-metadata-document\",\n    responses: { 200: ContainerCreateWithMetadataDocumentResponseSchema },\n    runtimeRefinements: containerMutationRuntimeRefinements,\n  },\n);\n\nfunction defineContainerMutationOperation<\n  const Id extends string,\n  const Path extends `/${string}`,\n>(input: { readonly id: Id; readonly path: Path }) {\n  return defineJsonOperation({\n    auth: \"session\",\n    body: ContainerMutationRequestSchema,\n    failureResponses: containerMutationFailureResponses,\n    failureStatuses: containerMutationFailureStatuses,\n    id: input.id,\n    method: \"POST\",\n    params: ContainerMutationPathParamsSchema,\n    path: input.path,\n    responses: { 200: ContainerMutationResponseSchema },\n    runtimeRefinements: containerMutationRuntimeRefinements,\n  });\n}\n\n/**\n * Rekey, revoke, and move mint a new key epoch, so they alone may carry the\n * descendant rekeys that must commit with them.\n */\nfunction defineContainerRotationOperation<\n  const Id extends string,\n  const Path extends `/${string}`,\n>(input: { readonly id: Id; readonly path: Path }) {\n  return defineJsonOperation({\n    auth: \"session\",\n    body: ContainerRotationRequestSchema,\n    failureResponses: containerMutationFailureResponses,\n    failureStatuses: containerMutationFailureStatuses,\n    id: input.id,\n    method: \"POST\",\n    params: ContainerMutationPathParamsSchema,\n    path: input.path,\n    responses: { 200: ContainerRotationResponseSchema },\n    runtimeRefinements: containerMutationRuntimeRefinements,\n  });\n}\n\nexport const shareContainerOperation = defineContainerMutationOperation({\n  id: \"containers.share\",\n  path: \"/containers/{containerId}/share\",\n});\n\nexport const reciteContainerOperation = defineJsonOperation({\n  auth: \"session\",\n  body: ContainerReciteRequestSchema,\n  failureResponses: containerMutationFailureResponses,\n  failureStatuses: containerMutationFailureStatuses,\n  id: \"containers.recite\",\n  method: \"POST\",\n  params: ContainerMutationPathParamsSchema,\n  path: \"/containers/{containerId}/recite\",\n  responses: { 200: ContainerReciteResponseSchema },\n});\n\nexport const revokeContainerOperation = defineContainerRotationOperation({\n  id: \"containers.revoke\",\n  path: \"/containers/{containerId}/revoke\",\n});\n\nexport const rekeyContainerOperation = defineContainerRotationOperation({\n  id: \"containers.rekey\",\n  path: \"/containers/{containerId}/rekey\",\n});\n\nexport const moveContainerOperation = defineContainerRotationOperation({\n  id: \"containers.move\",\n  path: \"/containers/{containerId}/move\",\n});\n\nexport const deleteContainerOperation = defineJsonOperation({\n  auth: \"session\",\n  failureResponses: {\n    ...containerMutationFailureResponses,\n    404: ContainerNotFoundErrorResponseSchema,\n  },\n  failureStatuses: containerMutationFailureStatuses,\n  id: \"containers.delete\",\n  method: \"DELETE\",\n  params: ContainerMutationPathParamsSchema,\n  path: \"/containers/{containerId}\",\n  responses: { 200: ContainerDeleteResponseSchema },\n});\n\nexport const isContainerMutationOperationRequest = isContainerMutationRequest;\nexport const isContainerMutationOperationResponse = isContainerMutationResponse;\nexport const isContainerRotationOperationRequest = isContainerRotationRequest;\nexport const isContainerRotationOperationResponse = isContainerRotationResponse;\nexport const isCreateContainerWithMetadataDocumentOperationRequest =\n  isContainerCreateWithMetadataDocumentRequest;\nexport const isCreateContainerWithMetadataDocumentOperationResponse =\n  isContainerCreateWithMetadataDocumentResponse;\nexport const isDeleteContainerOperationResponse = isContainerDeleteResponse;\n"]}
+{"version":3,"file":"containerMutations.js","sourceRoot":"","sources":["containerMutations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kDAAkD,EAAE,MAAM,wCAAwC,CAAC;AAC5G,OAAO,EACL,gDAAgD,EAChD,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,EAC9B,4CAA4C,EAC5C,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iDAAiD,EACjD,6BAA6B,EAC7B,sCAAsC,EACtC,+BAA+B,EAC/B,oCAAoC,EACpC,6BAA6B,EAC7B,+BAA+B,EAC/B,mBAAmB,EACnB,6CAA6C,EAC7C,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,sCAAsC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAMH,MAAM,iCAAiC,GAAG;IACxC,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,kCAAkC;IACvC,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,sCAAsC;IAC3C,GAAG,EAAE,mBAAmB;CAChB,CAAC;AAEX,MAAM,gCAAgC,GAAG;IACvC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;CACzB,CAAC;AAEX,MAAM,mCAAmC,GAAG;IAC1C,kDAAkD;CAC1C,CAAC;AAEX,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,8BAA8B;IACpC,gBAAgB,EAAE,iCAAiC;IACnD,eAAe,EAAE,gCAAgC;IACjD,EAAE,EAAE,mBAAmB;IACvB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,sCAAsC;IAC9C,IAAI,EAAE,aAAa;IACnB,SAAS,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE;IACnD,kBAAkB,EAAE,mCAAmC;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4CAA4C,GAAG,mBAAmB,CAC7E;IACE,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,gDAAgD;IACtD,gBAAgB,EAAE;QAChB,GAAG,iCAAiC;QACpC,GAAG,EAAE,mBAAmB;KACzB;IACD,eAAe,EAAE,CAAC,GAAG,gCAAgC,EAAE,GAAG,CAAC;IAC3D,EAAE,EAAE,wCAAwC;IAC5C,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,sCAAsC;IAC9C,IAAI,EAAE,oCAAoC;IAC1C,SAAS,EAAE,EAAE,GAAG,EAAE,iDAAiD,EAAE;IACrE,kBAAkB,EAAE,mCAAmC;CACxD,CACF,CAAC;AAEF,SAAS,gCAAgC,CAGvC,KAA+C;IAC/C,OAAO,mBAAmB,CAAC;QACzB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,8BAA8B;QACpC,gBAAgB,EAAE,iCAAiC;QACnD,eAAe,EAAE,gCAAgC;QACjD,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,iCAAiC;QACzC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE;QACnD,kBAAkB,EAAE,mCAAmC;KACxD,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,gCAAgC,CAGvC,KAA+C;IAC/C,OAAO,mBAAmB,CAAC;QACzB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,8BAA8B;QACpC,gBAAgB,EAAE,iCAAiC;QACnD,eAAe,EAAE,gCAAgC;QACjD,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,iCAAiC;QACzC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE;QACnD,kBAAkB,EAAE,mCAAmC;KACxD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,gCAAgC,CAAC;IACtE,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,iCAAiC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,4BAA4B;IAClC,gBAAgB,EAAE,iCAAiC;IACnD,eAAe,EAAE,gCAAgC;IACjD,EAAE,EAAE,mBAAmB;IACvB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,iCAAiC;IACzC,IAAI,EAAE,kCAAkC;IACxC,SAAS,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;IACvE,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,kCAAkC;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gCAAgC,CAAC;IACtE,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,iCAAiC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,gCAAgC,CAAC;IACrE,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,gCAAgC;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE;QAChB,GAAG,iCAAiC;QACpC,GAAG,EAAE,oCAAoC;KAC1C;IACD,eAAe,EAAE,gCAAgC;IACjD,EAAE,EAAE,mBAAmB;IACvB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,iCAAiC;IACzC,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC3E,SAAS,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mCAAmC,GAAG,0BAA0B,CAAC;AAC9E,MAAM,CAAC,MAAM,oCAAoC,GAAG,2BAA2B,CAAC;AAChF,MAAM,CAAC,MAAM,mCAAmC,GAAG,0BAA0B,CAAC;AAC9E,MAAM,CAAC,MAAM,oCAAoC,GAAG,2BAA2B,CAAC;AAChF,MAAM,CAAC,MAAM,qDAAqD,GAChE,4CAA4C,CAAC;AAC/C,MAAM,CAAC,MAAM,sDAAsD,GACjE,6CAA6C,CAAC;AAChD,MAAM,CAAC,MAAM,kCAAkC,GAAG,yBAAyB,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { organizationProvisioningContainerKeyringRefinement } from \"../organizationProvisioningRefinements\";\nimport {\n  ContainerCreateWithMetadataDocumentRequestSchema,\n  ContainerMutationRequestSchema,\n  ContainerReciteRequestSchema,\n  ContainerRotationRequestSchema,\n  isContainerCreateWithMetadataDocumentRequest,\n  isContainerMutationRequest,\n  isContainerRotationRequest,\n} from \"../request\";\nimport {\n  ContainerCreateWithMetadataDocumentResponseSchema,\n  ContainerDeleteResponseSchema,\n  ContainerMutationFailureResponseSchema,\n  ContainerMutationResponseSchema,\n  ContainerNotFoundErrorResponseSchema,\n  ContainerReciteResponseSchema,\n  ContainerRotationResponseSchema,\n  ErrorResponseSchema,\n  isContainerCreateWithMetadataDocumentResponse,\n  isContainerDeleteResponse,\n  isContainerMutationResponse,\n  isContainerRotationResponse,\n  PaymentRequiredErrorResponseSchema,\n  SessionFailureResponseSchema,\n} from \"../response\";\nimport { defineJsonOperation } from \"./definition\";\n\nconst EmptyContainerMutationPathParamsSchema = z.strictObject({});\n\nexport const ContainerMutationPathParamsSchema = z.strictObject({\n  containerId: z.string(),\n});\n\nexport type ContainerMutationPathParams = z.infer<\n  typeof ContainerMutationPathParamsSchema\n>;\n\nconst containerMutationFailureResponses = {\n  400: ErrorResponseSchema,\n  401: SessionFailureResponseSchema,\n  402: PaymentRequiredErrorResponseSchema,\n  403: ErrorResponseSchema,\n  404: ErrorResponseSchema,\n  409: ContainerMutationFailureResponseSchema,\n  500: ErrorResponseSchema,\n} as const;\n\nconst containerMutationFailureStatuses = [\n  400, 401, 402, 403, 404, 409, 500,\n] as const;\n\nconst containerMutationRuntimeRefinements = [\n  organizationProvisioningContainerKeyringRefinement,\n] as const;\n\nexport const createContainerOperation = defineJsonOperation({\n  auth: \"session\",\n  body: ContainerMutationRequestSchema,\n  failureResponses: containerMutationFailureResponses,\n  failureStatuses: containerMutationFailureStatuses,\n  id: \"containers.create\",\n  method: \"POST\",\n  params: EmptyContainerMutationPathParamsSchema,\n  path: \"/containers\",\n  responses: { 200: ContainerMutationResponseSchema },\n  runtimeRefinements: containerMutationRuntimeRefinements,\n});\n\nexport const createContainerWithMetadataDocumentOperation = defineJsonOperation(\n  {\n    auth: \"session\",\n    body: ContainerCreateWithMetadataDocumentRequestSchema,\n    failureResponses: {\n      ...containerMutationFailureResponses,\n      503: ErrorResponseSchema,\n    },\n    failureStatuses: [...containerMutationFailureStatuses, 503],\n    id: \"containers.withMetadataDocument.create\",\n    method: \"POST\",\n    params: EmptyContainerMutationPathParamsSchema,\n    path: \"/containers/with-metadata-document\",\n    responses: { 200: ContainerCreateWithMetadataDocumentResponseSchema },\n    runtimeRefinements: containerMutationRuntimeRefinements,\n  },\n);\n\nfunction defineContainerMutationOperation<\n  const Id extends string,\n  const Path extends `/${string}`,\n>(input: { readonly id: Id; readonly path: Path }) {\n  return defineJsonOperation({\n    auth: \"session\",\n    body: ContainerMutationRequestSchema,\n    failureResponses: containerMutationFailureResponses,\n    failureStatuses: containerMutationFailureStatuses,\n    id: input.id,\n    method: \"POST\",\n    params: ContainerMutationPathParamsSchema,\n    path: input.path,\n    responses: { 200: ContainerMutationResponseSchema },\n    runtimeRefinements: containerMutationRuntimeRefinements,\n  });\n}\n\n/**\n * Rekey, revoke, and move mint a new key epoch, so they alone may carry the\n * descendant rekeys that must commit with them.\n */\nfunction defineContainerRotationOperation<\n  const Id extends string,\n  const Path extends `/${string}`,\n>(input: { readonly id: Id; readonly path: Path }) {\n  return defineJsonOperation({\n    auth: \"session\",\n    body: ContainerRotationRequestSchema,\n    failureResponses: containerMutationFailureResponses,\n    failureStatuses: containerMutationFailureStatuses,\n    id: input.id,\n    method: \"POST\",\n    params: ContainerMutationPathParamsSchema,\n    path: input.path,\n    responses: { 200: ContainerRotationResponseSchema },\n    runtimeRefinements: containerMutationRuntimeRefinements,\n  });\n}\n\nexport const shareContainerOperation = defineContainerMutationOperation({\n  id: \"containers.share\",\n  path: \"/containers/{containerId}/share\",\n});\n\nexport const reciteContainerOperation = defineJsonOperation({\n  auth: \"session\",\n  body: ContainerReciteRequestSchema,\n  failureResponses: containerMutationFailureResponses,\n  failureStatuses: containerMutationFailureStatuses,\n  id: \"containers.recite\",\n  method: \"POST\",\n  params: ContainerMutationPathParamsSchema,\n  path: \"/containers/{containerId}/recite\",\n  responses: { 200: ContainerReciteResponseSchema },\n});\n\nexport const revokeContainerOperation = defineContainerRotationOperation({\n  id: \"containers.revoke\",\n  path: \"/containers/{containerId}/revoke\",\n});\n\nexport const rekeyContainerOperation = defineContainerRotationOperation({\n  id: \"containers.rekey\",\n  path: \"/containers/{containerId}/rekey\",\n});\n\nexport const moveContainerOperation = defineContainerRotationOperation({\n  id: \"containers.move\",\n  path: \"/containers/{containerId}/move\",\n});\n\nexport const deleteContainerOperation = defineJsonOperation({\n  auth: \"session\",\n  failureResponses: {\n    ...containerMutationFailureResponses,\n    404: ContainerNotFoundErrorResponseSchema,\n  },\n  failureStatuses: containerMutationFailureStatuses,\n  id: \"containers.delete\",\n  method: \"DELETE\",\n  params: ContainerMutationPathParamsSchema,\n  path: \"/containers/{containerId}\",\n  query: z.strictObject({ requiredAncestorId: z.string().min(1).optional() }),\n  responses: { 200: ContainerDeleteResponseSchema },\n});\n\nexport const isContainerMutationOperationRequest = isContainerMutationRequest;\nexport const isContainerMutationOperationResponse = isContainerMutationResponse;\nexport const isContainerRotationOperationRequest = isContainerRotationRequest;\nexport const isContainerRotationOperationResponse = isContainerRotationResponse;\nexport const isCreateContainerWithMetadataDocumentOperationRequest =\n  isContainerCreateWithMetadataDocumentRequest;\nexport const isCreateContainerWithMetadataDocumentOperationResponse =\n  isContainerCreateWithMetadataDocumentResponse;\nexport const isDeleteContainerOperationResponse = isContainerDeleteResponse;\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tearleads/client-sdk",
-  "version": "0.1.24",
+  "version": "0.1.25",
   "description": "React-free Tearleads client runtime: local SQLite persistence, keys, sync, encrypted blobs, and domain workflows.",
   "license": "UNLICENSED",
   "repository": {

package/workflows/container-contents/container-state/delete.js

@@ -5,6 +5,7 @@ export async function deleteContainerState(input) {
     if (isRemoteContainer) {
         const deletedRemoteContainer = await deleteRemoteContainer({
             containerId: input.containerState.container.id,
+            requiredAncestorId: input.requiredAncestorId,
             organizationId: input.containerState.container.organizationId,
             runtime: input.runtime,
         });
@@ -22,6 +23,7 @@ export async function deleteContainerState(input) {
             updatedAt: deletedAt ?? new Date().toISOString(),
         },
     ], {
+        beforeDeleteInTransaction: input.beforeDeleteInTransaction,
         expectedContainers: [
             { containerId, expectedContainer: input.containerState.container },
         ],

package/workflows/container-contents/container-state/delete.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.js","sourceRoot":"","sources":["delete.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AASjD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAK1C;IACC,MAAM,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAI,SAA6B,CAAC;IAElC,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,sBAAsB,GAAG,MAAM,qBAAqB,CAAC;YACzD,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE;YAC9C,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,cAAc;YAC7D,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,SAAS,GAAG,sBAAsB,CAAC,SAAS,CAAC;IAC/C,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;IACtD,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAClE,OAAO,EACP;QACE;YACE,WAAW;YACX,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACjD;KACF,EACD;QACE,kBAAkB,EAAE;YAClB,EAAE,WAAW,EAAE,iBAAiB,EAAE,KAAK,CAAC,cAAc,CAAC,SAAS,EAAE;SACnE;QACD,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CACF,CAAC;IACF,IAAI,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,OAAO,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACjE,CAAC","sourcesContent":["import type { ContainerContentsPersistence } from \"../containerPersistence\";\nimport type { ContainerState } from \"../remoteHydration\";\nimport { deleteRemoteContainer } from \"./remote\";\nimport type { ContainerWorkflowRuntime } from \"./types\";\n\ntype DeleteContainerStateResult =\n  | \"deleted\"\n  | \"local-conflict\"\n  | \"remote-deleted\"\n  | \"remote-failed\";\n\nexport async function deleteContainerState(input: {\n  containerState: ContainerState;\n  persistence: ContainerContentsPersistence;\n  runtime: ContainerWorkflowRuntime;\n  stillCurrent?: (() => boolean) | undefined;\n}): Promise<DeleteContainerStateResult> {\n  const isRemoteContainer = Boolean(input.containerState.record.documentId);\n  let deletedAt: string | undefined;\n\n  if (isRemoteContainer) {\n    const deletedRemoteContainer = await deleteRemoteContainer({\n      containerId: input.containerState.container.id,\n      organizationId: input.containerState.container.organizationId,\n      runtime: input.runtime,\n    });\n    if (!deletedRemoteContainer) {\n      return \"remote-failed\";\n    }\n    deletedAt = deletedRemoteContainer.deletedAt;\n  }\n  const execSql = input.runtime.infra.execSql;\n  const containerId = input.containerState.container.id;\n  const deletedContainerIds = await input.persistence.deleteContainers(\n    execSql,\n    [\n      {\n        containerId,\n        reason: \"deleted\",\n        updatedAt: deletedAt ?? new Date().toISOString(),\n      },\n    ],\n    {\n      expectedContainers: [\n        { containerId, expectedContainer: input.containerState.container },\n      ],\n      stillCurrent: input.stillCurrent,\n    },\n  );\n  if (deletedContainerIds.includes(containerId)) return \"deleted\";\n  return isRemoteContainer ? \"remote-deleted\" : \"local-conflict\";\n}\n"]}
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["delete.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AASjD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAS1C;IACC,MAAM,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAI,SAA6B,CAAC;IAElC,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,sBAAsB,GAAG,MAAM,qBAAqB,CAAC;YACzD,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE;YAC9C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,cAAc;YAC7D,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC5B,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,SAAS,GAAG,sBAAsB,CAAC,SAAS,CAAC;IAC/C,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;IAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;IACtD,MAAM,mBAAmB,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,gBAAgB,CAClE,OAAO,EACP;QACE;YACE,WAAW;YACX,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACjD;KACF,EACD;QACE,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,kBAAkB,EAAE;YAClB,EAAE,WAAW,EAAE,iBAAiB,EAAE,KAAK,CAAC,cAAc,CAAC,SAAS,EAAE;SACnE;QACD,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CACF,CAAC;IACF,IAAI,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,OAAO,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACjE,CAAC","sourcesContent":["import type { ContainerContentsPersistence } from \"../containerPersistence\";\nimport type { ContainerState } from \"../remoteHydration\";\nimport { deleteRemoteContainer } from \"./remote\";\nimport type { ContainerWorkflowRuntime } from \"./types\";\n\ntype DeleteContainerStateResult =\n  | \"deleted\"\n  | \"local-conflict\"\n  | \"remote-deleted\"\n  | \"remote-failed\";\n\nexport async function deleteContainerState(input: {\n  beforeDeleteInTransaction?: NonNullable<\n    Parameters<ContainerContentsPersistence[\"deleteContainers\"]>[2]\n  >[\"beforeDeleteInTransaction\"];\n  containerState: ContainerState;\n  persistence: ContainerContentsPersistence;\n  requiredAncestorId?: string | undefined;\n  runtime: ContainerWorkflowRuntime;\n  stillCurrent?: (() => boolean) | undefined;\n}): Promise<DeleteContainerStateResult> {\n  const isRemoteContainer = Boolean(input.containerState.record.documentId);\n  let deletedAt: string | undefined;\n\n  if (isRemoteContainer) {\n    const deletedRemoteContainer = await deleteRemoteContainer({\n      containerId: input.containerState.container.id,\n      requiredAncestorId: input.requiredAncestorId,\n      organizationId: input.containerState.container.organizationId,\n      runtime: input.runtime,\n    });\n    if (!deletedRemoteContainer) {\n      return \"remote-failed\";\n    }\n    deletedAt = deletedRemoteContainer.deletedAt;\n  }\n  const execSql = input.runtime.infra.execSql;\n  const containerId = input.containerState.container.id;\n  const deletedContainerIds = await input.persistence.deleteContainers(\n    execSql,\n    [\n      {\n        containerId,\n        reason: \"deleted\",\n        updatedAt: deletedAt ?? new Date().toISOString(),\n      },\n    ],\n    {\n      beforeDeleteInTransaction: input.beforeDeleteInTransaction,\n      expectedContainers: [\n        { containerId, expectedContainer: input.containerState.container },\n      ],\n      stillCurrent: input.stillCurrent,\n    },\n  );\n  if (deletedContainerIds.includes(containerId)) return \"deleted\";\n  return isRemoteContainer ? \"remote-deleted\" : \"local-conflict\";\n}\n"]}

package/workflows/container-contents/container-state/localPurgeScope.js

@@ -0,0 +1,49 @@
+import { hasUnsettledDocumentPlacement } from "../../../data/persistence/container-contents/documentPurgePlacement.js";
+function guardedContainerIds(input) {
+    const guardedIds = new Set();
+    const seen = new Set();
+    let currentId = input.containerId;
+    while (true) {
+        if (!currentId || seen.has(currentId))
+            throw changedScope();
+        seen.add(currentId);
+        guardedIds.add(currentId);
+        for (const id of input.verifiedAncestorsById.get(currentId) ?? [])
+            guardedIds.add(id);
+        const expected = input.containersById.get(currentId);
+        if (!expected)
+            throw changedScope();
+        if (currentId === input.rootContainerId)
+            break;
+        currentId = expected.container.parentId;
+    }
+    return guardedIds;
+}
+/** Called inside the document deletion transaction; performs no remote I/O. */
+export async function assertLocalPurgeScope(input) {
+    if (input.localId !== undefined &&
+        (await hasUnsettledDocumentPlacement(input.execSql, input.localId)))
+        throw changedScope();
+    const guardedIds = guardedContainerIds(input);
+    // Include every known signed ancestor as well as the local selection chain.
+    // A dishonest listing can give these chains different intermediate nodes.
+    for (const id of guardedIds) {
+        const expected = input.containersById.get(id);
+        if (!expected)
+            continue;
+        const current = await input.persistence.loadContainerMetadataState(input.execSql, id);
+        if (!current?.record ||
+            current.container.parentId !== expected.container.parentId ||
+            current.container.organizationId !== expected.container.organizationId ||
+            current.record.documentId !== expected.record.documentId)
+            throw changedScope();
+    }
+    const pending = await input.persistence.listUnsyncedMoveIntents(input.execSql);
+    if (pending.some((intent) => guardedIds.has(intent.containerId)) ||
+        input.stillCurrent?.() === false)
+        throw changedScope();
+}
+function changedScope() {
+    return new Error("Local subtree purge scope changed before deletion committed");
+}
+//# sourceMappingURL=localPurgeScope.js.map

package/workflows/container-contents/container-state/localPurgeScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localPurgeScope.js","sourceRoot":"","sources":["localPurgeScope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,qEAAqE,CAAC;AAgBpH,SAAS,mBAAmB,CAAC,KAA2B;IACtD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC;IAClC,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,MAAM,YAAY,EAAE,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpB,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1B,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE;YAC/D,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ;YAAE,MAAM,YAAY,EAAE,CAAC;QACpC,IAAI,SAAS,KAAK,KAAK,CAAC,eAAe;YAAE,MAAM;QAC/C,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;IAC1C,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAA2B;IAE3B,IACE,KAAK,CAAC,OAAO,KAAK,SAAS;QAC3B,CAAC,MAAM,6BAA6B,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAEnE,MAAM,YAAY,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,0EAA0E;IAC1E,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,0BAA0B,CAChE,KAAK,CAAC,OAAO,EACb,EAAE,CACH,CAAC;QACF,IACE,CAAC,OAAO,EAAE,MAAM;YAChB,OAAO,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,SAAS,CAAC,QAAQ;YAC1D,OAAO,CAAC,SAAS,CAAC,cAAc,KAAK,QAAQ,CAAC,SAAS,CAAC,cAAc;YACtE,OAAO,CAAC,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,MAAM,CAAC,UAAU;YAExD,MAAM,YAAY,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,uBAAuB,CAC7D,KAAK,CAAC,OAAO,CACd,CAAC;IACF,IACE,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC5D,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;QAEhC,MAAM,YAAY,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,KAAK,CACd,6DAA6D,CAC9D,CAAC;AACJ,CAAC","sourcesContent":["import { hasUnsettledDocumentPlacement } from \"../../../data/persistence/container-contents/documentPurgePlacement\";\nimport type { ExecSql } from \"../../../data/sqlite/sqlSchema\";\nimport type { ContainerContentsPersistence } from \"../containerPersistence\";\nimport type { ContainerState } from \"../remoteHydration\";\n\ninterface LocalPurgeScopeInput {\n  containerId: string | null | undefined;\n  containersById: ReadonlyMap<string, ContainerState>;\n  execSql: ExecSql;\n  localId?: string | undefined;\n  persistence: ContainerContentsPersistence;\n  rootContainerId: string;\n  stillCurrent?: (() => boolean) | undefined;\n  verifiedAncestorsById: ReadonlyMap<string, readonly string[]>;\n}\n\nfunction guardedContainerIds(input: LocalPurgeScopeInput): ReadonlySet<string> {\n  const guardedIds = new Set<string>();\n  const seen = new Set<string>();\n  let currentId = input.containerId;\n  while (true) {\n    if (!currentId || seen.has(currentId)) throw changedScope();\n    seen.add(currentId);\n    guardedIds.add(currentId);\n    for (const id of input.verifiedAncestorsById.get(currentId) ?? [])\n      guardedIds.add(id);\n    const expected = input.containersById.get(currentId);\n    if (!expected) throw changedScope();\n    if (currentId === input.rootContainerId) break;\n    currentId = expected.container.parentId;\n  }\n  return guardedIds;\n}\n\n/** Called inside the document deletion transaction; performs no remote I/O. */\nexport async function assertLocalPurgeScope(\n  input: LocalPurgeScopeInput,\n): Promise<void> {\n  if (\n    input.localId !== undefined &&\n    (await hasUnsettledDocumentPlacement(input.execSql, input.localId))\n  )\n    throw changedScope();\n  const guardedIds = guardedContainerIds(input);\n  // Include every known signed ancestor as well as the local selection chain.\n  // A dishonest listing can give these chains different intermediate nodes.\n  for (const id of guardedIds) {\n    const expected = input.containersById.get(id);\n    if (!expected) continue;\n    const current = await input.persistence.loadContainerMetadataState(\n      input.execSql,\n      id,\n    );\n    if (\n      !current?.record ||\n      current.container.parentId !== expected.container.parentId ||\n      current.container.organizationId !== expected.container.organizationId ||\n      current.record.documentId !== expected.record.documentId\n    )\n      throw changedScope();\n  }\n  const pending = await input.persistence.listUnsyncedMoveIntents(\n    input.execSql,\n  );\n  if (\n    pending.some((intent) => guardedIds.has(intent.containerId)) ||\n    input.stillCurrent?.() === false\n  )\n    throw changedScope();\n}\n\nfunction changedScope(): Error {\n  return new Error(\n    \"Local subtree purge scope changed before deletion committed\",\n  );\n}\n"]}

package/workflows/container-contents/container-state/purgeTree.js

@@ -3,8 +3,9 @@ import { sqlDocumentContainerProjectionPersistence } from "../../../data/persist
 import { listDocumentsByContainerIdsOrDocumentIds } from "../../../data/persistence/documents/documentsPersistence.js";
 import { unlinkRemoteContainerDocument } from "../documentLinks.js";
 import { purgeLocalContainerDocument, purgeRemoteContainerDocument, } from "../documentPurge.js";
-import { collectSubtreeLeafFirst } from "./purgeTreeCollection.js";
+import { collectSubtreeLeafFirst, snapshotContainerStates, } from "./purgeTreeCollection.js";
 import { deleteSubtreeContainers } from "./purgeTreeContainerDeletion.js";
+import { createSubtreePurgeScope } from "./purgeTreeScope.js";
 export { collectSubtreeLeafFirst } from "./purgeTreeCollection.js";
 // Destroy local-only documents locally. Destroy synced documents only when all
 // links are in the subtree; preserve documents with an external link. The purge
@@ -84,7 +85,10 @@ async function unlinkSubtreeDocument(input) {
     }
     for (const containerId of input.containerIds) {
         const result = await unlinkRemoteContainerDocument({
+            beforeSubmit: input.beforeSubmit,
             documentId,
+            expectedSubtreeRootId: input.expectedSubtreeRootId,
+            isCurrent: input.stillCurrent,
             noteId: input.document.id,
             resolveProjectionUserKey: input.resolveProjectionUserKey,
             rotationSnapshot,
@@ -97,28 +101,51 @@ async function unlinkSubtreeDocument(input) {
     }
     return true;
 }
-function resolveSubtreeDocumentOperations(input) {
-    return (input.documentOperations ?? {
+function resolveSubtreeDocumentOperations(input, scope) {
+    const operations = input.documentOperations ?? {
         purgeLocal: async (document) => (await purgeLocalContainerDocument({
+            beforeDeleteInTransaction: (execSql) => scope.assertLocalScopeInTransaction(execSql, document.containerId, document.id),
             noteId: document.id,
+            expectedContainerId: document.containerId,
             runtime: input.runtime,
         })) !== null,
         purgeRemote: async (document) => Boolean(document.documentId &&
             (await purgeRemoteContainerDocument({
+                beforeSubmit: () => scope.allowsDocument(document),
                 documentId: document.documentId,
+                expectedSubtreeRootId: input.rootContainerId,
+                stillCurrent: input.stillCurrent,
                 documentKind: document.documentKind ?? DEFAULT_DOCUMENT_KIND,
                 noteId: document.id,
                 resolveProjectionUserKey: input.resolveProjectionUserKey,
                 runtime: input.runtime,
             }))),
         unlink: (document, containerIds) => unlinkSubtreeDocument({
+            beforeSubmit: () => scope.allowsDocument(document),
             containerIds,
             document,
+            expectedSubtreeRootId: input.rootContainerId,
+            stillCurrent: input.stillCurrent,
             prepareDocumentRotationSnapshot: input.prepareDocumentRotationSnapshot,
             resolveProjectionUserKey: input.resolveProjectionUserKey,
             runtime: input.runtime,
         }),
-    });
+    };
+    return {
+        purgeLocal: async (document) => (await scope.allowsDocument(document)) &&
+            (await operations.purgeLocal(document)),
+        purgeRemote: async (document) => (await scope.allowsDocument(document)) &&
+            (await operations.purgeRemote(document)),
+        unlink: async (document, containerIds) => {
+            if (!(await scope.allowsDocument(document)))
+                return false;
+            for (const containerId of containerIds) {
+                if (!(await scope.allowsContainer(containerId)))
+                    return false;
+            }
+            return operations.unlink(document, containerIds);
+        },
+    };
 }
 function purgeWasCancelled(input) {
     return input.signal?.aborted === true || input.stillCurrent?.() === false;
@@ -169,10 +196,14 @@ async function teardownSubtreeDocuments(input) {
 // reports whatever prefix was actually destroyed alongside completed/failed
 // counts and whether a cancellation cut it short. Returns null only when the
 // target container is absent from the snapshot.
-export async function purgeContainerTree(input) {
-    if (purgeWasCancelled(input)) {
+export async function purgeContainerTree(request) {
+    if (purgeWasCancelled(request)) {
         return null;
     }
+    const input = {
+        ...request,
+        containersById: snapshotContainerStates(request.containersById),
+    };
     const subtreeStates = collectSubtreeLeafFirst(input.containersById, input.rootContainerId);
     if (subtreeStates.length === 0) {
         return null;
@@ -216,8 +247,9 @@ export async function purgeContainerTree(input) {
     // Emit the initial 0/total so a determinate bar renders immediately, before the
     // first (potentially slow) remote call.
     emitProgress();
+    const scope = createSubtreePurgeScope(input);
     const teardown = await teardownSubtreeDocuments({
-        documentOperations: resolveSubtreeDocumentOperations(input),
+        documentOperations: resolveSubtreeDocumentOperations(input, scope),
         plan,
         reportStep,
         signal: input.signal,
@@ -228,6 +260,9 @@ export async function purgeContainerTree(input) {
     let aborted = teardown.aborted;
     if (!teardown.aborted) {
         const deletion = await deleteSubtreeContainers({
+            allowsContainer: scope.allowsContainer,
+            allowsLocalScopeInTransaction: scope.allowsLocalScopeInTransaction,
+            rootContainerId: input.rootContainerId,
             persistence: input.persistence,
             reportStep,
             runtime: input.runtime,