@tearleads/client-sdk 0.1.24 → 0.1.26

package/internal/api-client/apiRequestRuntime.js.map

@@ -1 +1 @@
-{"version":3,"file":"apiRequestRuntime.js","sourceRoot":"","sources":["apiRequestRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,eAAe,GAChB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EAErB,YAAY,EACZ,SAAS,EACT,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAiBlE,MAAM,OAAO,iBAAiB;IACpB,SAAS,GAAkB,IAAI,CAAC;IAChC,cAAc,GAAwC,IAAI,CAAC;IAClD,OAAO,CAAS;IACzB,OAAO,GAAuC,IAAI,CAAC;IACnD,cAAc,GAAwB,IAAI,CAAC;IAC3C,gBAAgB,GAAwB,IAAI,CAAC;IAC7C,YAAY,GAAuC,IAAI,CAAC;IACxD,gBAAgB,GAA0B,IAAI,CAAC;IAC/C,iBAAiB,GAAkC,IAAI,CAAC;IAC/C,oBAAoB,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjE,OAAO,CAAqB;IAC5B,aAAa,CAA2B;IACxC,eAAe,CAA6B;IAErD,YAAY,OAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC5C,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC7D,aAAa,EAAE,IAAI,CAAC,4BAA4B;SACjD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,YAAoB,EAAE,WAAmB;QAC1D,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,mBAAmB,CAC7B,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAC7D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,yBAAyB,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,UAAU,CAAC,OAA2C;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,iBAAiB,CAAC,OAA4B;QAC5C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,mBAAmB,CAAC,OAA4B;QAC9C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,kEAAkE;IAClE,eAAe,CAAC,OAA2C;QACzD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,mBAAmB,CAAC,OAA8B;QAChD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,oBAAoB,CAAC,OAAsC;QACzD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC;IACnC,CAAC;IAED,YAAY,CAAC,KAAoB;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;QACzC,IAAI,OAAO;YAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,KAAK,CAAC,CAAC;QAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,OAAO,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE;YACtC,IAAI,CAAC,cAAc,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACrC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,iBAAiB,CAAC,KAA2C;QAC3D,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;IACzE,CAAC;IAEO,YAAY,CAClB,IAA6B,EAC7B,OAA2C,EAC3C,SAAwB;QAExB,OAAO;YACL,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC;gBACjE,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACxC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,IAAY,EACZ,SAAyC,EACzC,MAAkB,EAClB,IAA6B,EAC7B,OAAyC,EACzC,gBAAmD;QAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CACzC,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,gBAAgB,CACjB,CAAC;QACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAEO,cAAc,CAAC,KAWtB;QACC,MAAM,OAAO,GAAmB;YAC9B,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,GAAG,EAAE;gBACX,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;oBAAE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,mBAAmB;gBAC3B,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,oBAAoB;gBAC5B,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAC3B,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAC7D,OAAO,CACR,CAAC;QAEF,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,IAAY,EACZ,SAAyC,EACzC,MAAkB,EAClB,IAA6B,EAC7B,UAAgC,EAAE,EAClC,gBAAmD;QAEnD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACnD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,EAAE,EACF,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QAClD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAChE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,GAAG,MAAM,IAAI,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE;gBAChD,MAAM;gBACN,IAAI;gBACJ,YAAY;gBACZ,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,8BAA8B,IAAI,EAAE;gBAC7C,MAAM;gBACN,IAAI;gBACJ,YAAY;gBACZ,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,IAAY,EACZ,MAAkB,EAClB,IAA6B,EAC7B,UAAgC,EAAE,EAClC,yBAA4C,EAC5C,gBAA2D;QAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACpD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,CACV,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,IAAI,oBAAoB,CAAC,QAAQ,EAAE,yBAAyB,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACtE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAClD,QAAQ,EACR,gBAAgB,EAChB,OAAO,CAAC,qCAAqC,CAC9C,CAAC;QACF,IACE,MAAM,8BAA8B,CAAC;YACnC,SAAS;YACT,IAAI;YACJ,IAAI,EAAE,gBAAgB,CAAC,IAAI;YAC3B,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS;YACzC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAClC,IAAI,CAAC,cAAc,EAAE,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE;YACrE,OAAO;YACP,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE;YACzC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC;YACjD,cAAc,EAAE,QAAQ,CAAC,MAAM;SAChC,CAAC,EACF,CAAC;YACD,IAAI,OAAO,CAAC,qBAAqB,KAAK,YAAY;gBAChD,OAAO,IAAI,CAAC,WAAW,CAAC;oBACtB,gBAAgB;oBAChB,gBAAgB;oBAChB,MAAM;oBACN,OAAO,EAAE;wBACP,GAAG,OAAO;wBACV,YAAY,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;qBAC9D;oBACD,IAAI;oBACJ,QAAQ;iBACT,CAAC,CAAC;YACL,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACjD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,IAAI,CAAC,SAAS,CACf,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;gBACpB,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC;YACvC,IAAI,oBAAoB,CAAC,aAAa,EAAE,yBAAyB,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC3C,CAAC;YAED,OAAO,IAAI,CAAC,WAAW,CAAC;gBACtB,gBAAgB,EAAE,MAAM,qBAAqB,CAC3C,aAAa,EACb,gBAAgB,EAChB,OAAO,CAAC,qCAAqC,CAC9C;gBACD,gBAAgB;gBAChB,MAAM;gBACN,OAAO;gBACP,IAAI;gBACJ,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC;YACtB,gBAAgB;YAChB,gBAAgB;YAChB,MAAM;YACN,OAAO;YACP,IAAI;YACJ,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,IAAY,EACZ,MAAkB,EAClB,IAA6B,EAC7B,OAA6B,EAC7B,SAAwB;QAExB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QAClD,MAAM,IAAI,GAAsC;YAC9C,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC;YAC5D,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,IAAI,YAAY,cAAc,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;YACnD,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBACzC,OAAO,EAAE,GAAG,MAAM,IAAI,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE;gBACpD,MAAM;gBACN,IAAI;gBACJ,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;gBAC9C,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,EAAE;aACf,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,eAAe,CAChC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAC3C,CAAC;QACF,IAAI,UAAU,KAAK,IAAI;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAEO,WAAW,CAAC,KAOnB;QACC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;QACzD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QACxD,IACE,CAAC,SAAS;YACV,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;YAC7B,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC;YAC9C,KAAK,CAAC,gBAAgB,CAAC,6BAA6B,KAAK,SAAS;YAClE,KAAK,CAAC,gBAAgB,CAAC,6BAA6B;gBAClD,KAAK,CAAC,OAAO,CAAC,qCAAqC,EACrD,CAAC;YACD,IAAI,CAAC,iBAAiB,EAAE,CACtB,KAAK,CAAC,gBAAgB,CAAC,6BAA6B,CACrD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;YACzB,GAAG,CAAC,SAAS;gBACX,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBAC7B,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,IAAI;oBACpC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;YACtC,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE;YAC/H,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,CAAC,SAAS,IAAI,YAAY;YACxC,oBAAoB,EAAE,KAAK,CAAC,gBAAgB,CAAC,oBAAoB;YACjE,mBAAmB,EAAE,KAAK,CAAC,gBAAgB,CAAC,mBAAmB;YAC/D,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC7B,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;SACtC,CAAC,CAAC;IACL,CAAC;IAEO,4BAA4B,CAClC,KAA4C;QAE5C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;YACzB,GAAG,KAAK;YACR,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI;YACjD,mBAAmB,EAAE,SAAS;SAC/B,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import {\n  authChallengeSigningBytes,\n  canonicalAuthOrigin,\n} from \"@tearleads/crypto\";\nimport {\n  apiVersionHeaderName,\n  parseApiVersion,\n} from \"@tearleads/validators/operation\";\nimport {\n  bindPrototypeMethods,\n  describeErrorResponse,\n  type ErrorResponseDescription,\n  errorMessage,\n  hasHeader,\n  isSuccessfulResponse,\n  normalizeApiBaseUrl,\n  requestFailureKey,\n} from \"./requestInternals\";\nimport { responseBodyFailure } from \"./responseBodyFailure\";\nimport { shouldRetryAfterSessionExpired } from \"./sessionRefresh\";\nimport type {\n  HttpMethod,\n  OperationRequestFn,\n  OperationRequestResultFn,\n  OperationResponseRequestFn,\n  RequestBody,\n  RequestFailure,\n  RequestFailureKind,\n  RequestResult,\n  RequestResultOptions,\n  ResponseRequestValidationFailureInput,\n} from \"./types\";\n\ntype ExpiredHandler = () => boolean | Promise<boolean>;\ntype PaymentRequiredHandler = (organizationId: string | null) => void;\n\nexport class ApiRequestRuntime {\n  private authToken: string | null = null;\n  private sessionRenewal: { from: string; to: string } | null = null;\n  private readonly baseUrl: string;\n  private onError: ((message: string) => void) | null = null;\n  private onNetworkError: (() => void) | null = null;\n  private onNetworkSuccess: (() => void) | null = null;\n  private onApiVersion: ((version: number) => void) | null = null;\n  private onSessionExpired: ExpiredHandler | null = null;\n  private onPaymentRequired: PaymentRequiredHandler | null = null;\n  private readonly requestFailuresByKey = new Map<string, RequestFailure>();\n  readonly request: OperationRequestFn;\n  readonly requestResult: OperationRequestResultFn;\n  readonly responseRequest: OperationResponseRequestFn;\n\n  constructor(baseUrl?: string | null) {\n    this.baseUrl = normalizeApiBaseUrl(baseUrl);\n    bindPrototypeMethods(this, ApiRequestRuntime.prototype);\n    this.request = this.makeRequest;\n    this.requestResult = this.makeRequestResult;\n    this.responseRequest = Object.assign(this.makeResponseRequest, {\n      reportFailure: this.reportResponseRequestFailure,\n    });\n  }\n\n  /**\n   * The bytes a login challenge is signed as, bound to the API this client\n   * addresses. A relative base URL resolves against the page, as its requests\n   * do; with neither, there is no API origin to sign for.\n   */\n  authChallengeBytes(challengeHex: string, fingerprint: string): Uint8Array {\n    let apiOrigin: string;\n    try {\n      apiOrigin = canonicalAuthOrigin(\n        new URL(this.baseUrl || \"/\", globalThis.location?.href).href,\n      );\n    } catch {\n      throw new Error(\"The API origin is unavailable for authentication\");\n    }\n    return authChallengeSigningBytes({ apiOrigin, challengeHex, fingerprint });\n  }\n\n  setOnError(handler: ((message: string) => void) | null): void {\n    this.onError = handler;\n  }\n\n  setOnNetworkError(handler: (() => void) | null): void {\n    this.onNetworkError = handler;\n  }\n\n  setOnNetworkSuccess(handler: (() => void) | null): void {\n    this.onNetworkSuccess = handler;\n  }\n\n  /** Receives the build named by each response that carries one. */\n  setOnApiVersion(handler: ((version: number) => void) | null): void {\n    this.onApiVersion = handler;\n  }\n\n  setOnSessionExpired(handler: ExpiredHandler | null): void {\n    this.onSessionExpired = handler;\n  }\n\n  setOnPaymentRequired(handler: PaymentRequiredHandler | null): void {\n    this.onPaymentRequired = handler;\n  }\n\n  setAuthToken(token: string | null): boolean {\n    const changed = this.authToken !== token;\n    if (changed) this.sessionRenewal = null;\n    this.authToken = token;\n    return changed;\n  }\n\n  getAuthToken(): string | null {\n    return this.authToken;\n  }\n\n  private async renewSession(): Promise<boolean> {\n    const from = this.authToken;\n    const renewed = await (this.onSessionExpired?.() ?? false);\n    const to = this.authToken;\n    if (renewed && from && to && from !== to)\n      this.sessionRenewal = { from, to };\n    return renewed;\n  }\n\n  getRequestFailure(input: { method: HttpMethod; path: string }) {\n    return this.requestFailuresByKey.get(requestFailureKey(input)) ?? null;\n  }\n\n  private buildHeaders(\n    body: RequestBody | undefined,\n    headers: Record<string, string> | undefined,\n    authToken: string | null,\n  ): Record<string, string> {\n    return {\n      ...(authToken ? { Authorization: `Bearer ${authToken}` } : {}),\n      ...(typeof body === \"string\" && !hasHeader(headers, \"Content-Type\")\n        ? { \"Content-Type\": \"application/json\" }\n        : {}),\n      ...headers,\n    };\n  }\n\n  private async makeRequest<T>(\n    path: string,\n    validator: (value: unknown) => value is T,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions | undefined,\n    failureOperation: Parameters<OperationRequestFn>[5],\n  ): Promise<T | null> {\n    const result = await this.makeRequestResult(\n      path,\n      validator,\n      method,\n      body,\n      options,\n      failureOperation,\n    );\n    return result.ok ? result.data : null;\n  }\n\n  private requestFailure(input: {\n    code?: string | undefined;\n    kind: RequestFailureKind;\n    message: string;\n    method: HttpMethod;\n    path: string;\n    reportErrors: boolean;\n    requiredContainerIds?: RequestFailure[\"requiredContainerIds\"];\n    stalePrincipalHeads: RequestFailure[\"stalePrincipalHeads\"];\n    status: number | null;\n    statusText: string;\n  }): RequestFailure {\n    const failure: RequestFailure = {\n      ...(input.code === undefined ? {} : { code: input.code }),\n      kind: input.kind,\n      message: input.message,\n      method: input.method,\n      ok: false,\n      path: input.path,\n      report: () => {\n        if (input.kind !== \"cancelled\") this.onError?.(input.message);\n      },\n      status: input.status,\n      statusText: input.statusText,\n      ...(input.stalePrincipalHeads\n        ? { stalePrincipalHeads: input.stalePrincipalHeads }\n        : {}),\n      ...(input.requiredContainerIds\n        ? { requiredContainerIds: input.requiredContainerIds }\n        : {}),\n    };\n    this.requestFailuresByKey.set(\n      requestFailureKey({ method: input.method, path: input.path }),\n      failure,\n    );\n\n    if (input.reportErrors) {\n      failure.report();\n    }\n\n    return failure;\n  }\n\n  private async makeRequestResult<T>(\n    path: string,\n    validator: (value: unknown) => value is T,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions = {},\n    failureOperation: Parameters<OperationRequestFn>[5],\n  ): Promise<RequestResult<T>> {\n    const responseResult = await this.makeResponseRequest(\n      path,\n      method,\n      body,\n      options,\n      [],\n      failureOperation,\n    );\n    if (!responseResult.ok) {\n      return responseResult;\n    }\n\n    const response = responseResult.data;\n    const reportErrors = options.reportErrors ?? true;\n    let data: unknown;\n    try {\n      data = await response.json();\n    } catch (error) {\n      const failure = responseBodyFailure(error, errorMessage(error));\n      if (failure.kind === \"network\") {\n        this.onNetworkError?.();\n      }\n      return this.requestFailure({\n        kind: failure.kind,\n        message: `${method} ${path}: ${failure.message}`,\n        method,\n        path,\n        reportErrors,\n        stalePrincipalHeads: undefined,\n        status: response.status,\n        statusText: response.statusText,\n      });\n    }\n\n    if (!validator(data)) {\n      return this.requestFailure({\n        kind: \"shape\",\n        message: `Invalid response shape for ${path}`,\n        method,\n        path,\n        reportErrors,\n        stalePrincipalHeads: undefined,\n        status: response.status,\n        statusText: response.statusText,\n      });\n    }\n\n    return { data, ok: true };\n  }\n\n  private async makeResponseRequest(\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions = {},\n    additionalSuccessStatuses: readonly number[],\n    failureOperation: Parameters<OperationResponseRequestFn>[5],\n  ): Promise<RequestResult<Response>> {\n    const authToken = this.authToken;\n    const responseResult = await this.fetchResponseRequest(\n      path,\n      method,\n      body,\n      options,\n      authToken,\n    );\n    if (!responseResult.ok) {\n      return responseResult;\n    }\n    const response = responseResult.data;\n    if (isSuccessfulResponse(response, additionalSuccessStatuses)) {\n      this.requestFailuresByKey.delete(requestFailureKey({ method, path }));\n      return { data: response, ok: true };\n    }\n\n    const errorDescription = await describeErrorResponse(\n      response,\n      failureOperation,\n      options.expectedPaymentRequiredOrganizationId,\n    );\n    if (\n      await shouldRetryAfterSessionExpired({\n        authToken,\n        body,\n        code: errorDescription.code,\n        getCurrentAuthToken: () => this.authToken,\n        isKnownSessionRenewal: (from, to) =>\n          this.sessionRenewal?.from === from && this.sessionRenewal.to === to,\n        options,\n        refreshSession: () => this.renewSession(),\n        reportError: (message) => this.onError?.(message),\n        responseStatus: response.status,\n      })\n    ) {\n      if (options.retryOnSessionExpired === \"renew-only\")\n        return this.httpFailure({\n          errorDescription,\n          failureOperation,\n          method,\n          options: {\n            ...options,\n            reportErrors: method === \"GET\" ? false : options.reportErrors,\n          },\n          path,\n          response,\n        });\n      const retryResult = await this.fetchResponseRequest(\n        path,\n        method,\n        body,\n        options,\n        this.authToken,\n      );\n      if (!retryResult.ok) {\n        return retryResult;\n      }\n      const retryResponse = retryResult.data;\n      if (isSuccessfulResponse(retryResponse, additionalSuccessStatuses)) {\n        this.requestFailuresByKey.delete(requestFailureKey({ method, path }));\n        return { data: retryResponse, ok: true };\n      }\n\n      return this.httpFailure({\n        errorDescription: await describeErrorResponse(\n          retryResponse,\n          failureOperation,\n          options.expectedPaymentRequiredOrganizationId,\n        ),\n        failureOperation,\n        method,\n        options,\n        path,\n        response: retryResponse,\n      });\n    }\n\n    return this.httpFailure({\n      errorDescription,\n      failureOperation,\n      method,\n      options,\n      path,\n      response,\n    });\n  }\n\n  private async fetchResponseRequest(\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions,\n    authToken: string | null,\n  ): Promise<RequestResult<Response>> {\n    const reportErrors = options.reportErrors ?? true;\n    const init: RequestInit & { duplex?: \"half\" } = {\n      method,\n      headers: this.buildHeaders(body, options.headers, authToken),\n      ...(options.signal ? { signal: options.signal } : {}),\n    };\n    if (body !== undefined) {\n      init.body = body;\n      if (body instanceof ReadableStream) {\n        init.duplex = \"half\";\n      }\n    }\n\n    let response: Response;\n    try {\n      response = await fetch(`${this.baseUrl}${path}`, init);\n    } catch (error) {\n      const cancelled = options.signal?.aborted === true;\n      if (!cancelled) this.onNetworkError?.();\n      return this.requestFailure({\n        ...(cancelled ? { code: \"request_aborted\" } : {}),\n        kind: cancelled ? \"cancelled\" : \"network\",\n        message: `${method} ${path}: ${errorMessage(error)}`,\n        method,\n        path,\n        reportErrors: cancelled ? false : reportErrors,\n        stalePrincipalHeads: undefined,\n        status: null,\n        statusText: \"\",\n      });\n    }\n\n    this.onNetworkSuccess?.();\n    const apiVersion = parseApiVersion(\n      response.headers.get(apiVersionHeaderName),\n    );\n    if (apiVersion !== null) this.onApiVersion?.(apiVersion);\n    return { data: response, ok: true };\n  }\n\n  private httpFailure(input: {\n    readonly errorDescription: ErrorResponseDescription;\n    readonly failureOperation: Parameters<OperationResponseRequestFn>[5];\n    readonly method: HttpMethod;\n    readonly options: RequestResultOptions;\n    readonly path: string;\n    readonly response: Response;\n  }): RequestFailure {\n    const cancelled = input.options.signal?.aborted === true;\n    const reportErrors = input.options.reportErrors ?? true;\n    if (\n      !cancelled &&\n      input.response.status === 402 &&\n      input.failureOperation.failureResponses?.[402] &&\n      input.errorDescription.paymentRequiredOrganizationId !== undefined &&\n      input.errorDescription.paymentRequiredOrganizationId ===\n        input.options.expectedPaymentRequiredOrganizationId\n    ) {\n      this.onPaymentRequired?.(\n        input.errorDescription.paymentRequiredOrganizationId,\n      );\n    }\n    return this.requestFailure({\n      ...(cancelled\n        ? { code: \"request_aborted\" }\n        : input.errorDescription.code === null\n          ? {}\n          : { code: input.errorDescription.code }),\n      kind: cancelled ? \"cancelled\" : \"http\",\n      message: `${input.method} ${input.path}: ${input.response.status} ${input.response.statusText}${input.errorDescription.detail}`,\n      method: input.method,\n      path: input.path,\n      reportErrors: !cancelled && reportErrors,\n      requiredContainerIds: input.errorDescription.requiredContainerIds,\n      stalePrincipalHeads: input.errorDescription.stalePrincipalHeads,\n      status: input.response.status,\n      statusText: input.response.statusText,\n    });\n  }\n\n  private reportResponseRequestFailure(\n    input: ResponseRequestValidationFailureInput,\n  ): RequestFailure {\n    if (input.kind === \"network\") {\n      this.onNetworkError?.();\n    }\n    return this.requestFailure({\n      ...input,\n      reportErrors: input.options?.reportErrors ?? true,\n      stalePrincipalHeads: undefined,\n    });\n  }\n}\n"]}
+{"version":3,"file":"apiRequestRuntime.js","sourceRoot":"","sources":["apiRequestRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,eAAe,GAChB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EAErB,YAAY,EACZ,SAAS,EACT,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAiBzD,MAAM,OAAO,iBAAiB;IACpB,SAAS,GAAkB,IAAI,CAAC;IACvB,eAAe,GAAG,IAAI,qBAAqB,CAC1D,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CACrB,CAAC;IACe,OAAO,CAAS;IACzB,OAAO,GAAuC,IAAI,CAAC;IACnD,cAAc,GAAwB,IAAI,CAAC;IAC3C,gBAAgB,GAAwB,IAAI,CAAC;IAC7C,YAAY,GAAuC,IAAI,CAAC;IACxD,gBAAgB,GAA0B,IAAI,CAAC;IAC/C,iBAAiB,GAAkC,IAAI,CAAC;IAC/C,oBAAoB,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjE,OAAO,CAAqB;IAC5B,aAAa,CAA2B;IACxC,eAAe,CAA6B;IAErD,YAAY,OAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC5C,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC7D,aAAa,EAAE,IAAI,CAAC,4BAA4B;SACjD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,YAAoB,EAAE,WAAmB;QAC1D,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,mBAAmB,CAC7B,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAC7D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,yBAAyB,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,UAAU,CAAC,OAA2C;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,iBAAiB,CAAC,OAA4B;QAC5C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,mBAAmB,CAAC,OAA4B;QAC9C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,kEAAkE;IAClE,eAAe,CAAC,OAA2C;QACzD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,mBAAmB,CAAC,OAA8B;QAChD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,oBAAoB,CAAC,OAAsC;QACzD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC;IACnC,CAAC;IAED,YAAY,CAAC,KAAoB;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;QACzC,IAAI,OAAO;YAAE,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,iBAAiB,CAAC,KAA2C;QAC3D,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;IACzE,CAAC;IAEO,YAAY,CAClB,IAA6B,EAC7B,OAA2C,EAC3C,SAAwB;QAExB,OAAO;YACL,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC;gBACjE,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACxC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,IAAY,EACZ,SAAyC,EACzC,MAAkB,EAClB,IAA6B,EAC7B,OAAyC,EACzC,gBAAmD;QAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CACzC,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,gBAAgB,CACjB,CAAC;QACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAEO,cAAc,CAAC,KAWtB;QACC,MAAM,OAAO,GAAmB;YAC9B,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,GAAG,EAAE;gBACX,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;oBAAE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,mBAAmB;gBAC3B,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,oBAAoB;gBAC5B,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAC3B,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAC7D,OAAO,CACR,CAAC;QAEF,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,IAAY,EACZ,SAAyC,EACzC,MAAkB,EAClB,IAA6B,EAC7B,UAAgC,EAAE,EAClC,gBAAmD;QAEnD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACnD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,EAAE,EACF,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QAClD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAChE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,GAAG,MAAM,IAAI,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE;gBAChD,MAAM;gBACN,IAAI;gBACJ,YAAY;gBACZ,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,8BAA8B,IAAI,EAAE;gBAC7C,MAAM;gBACN,IAAI;gBACJ,YAAY;gBACZ,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,IAAY,EACZ,MAAkB,EAClB,IAA6B,EAC7B,UAAgC,EAAE,EAClC,yBAA4C,EAC5C,gBAA2D;QAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACpD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,CACV,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,IAAI,oBAAoB,CAAC,QAAQ,EAAE,yBAAyB,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACtE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAClD,QAAQ,EACR,gBAAgB,EAChB,OAAO,CAAC,qCAAqC,CAC9C,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,8BAA8B,CAAC;YACvD,SAAS;YACT,IAAI;YACJ,IAAI,EAAE,gBAAgB,CAAC,IAAI;YAC3B,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS;YACzC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAClC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC;YACnE,OAAO;YACP,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC;YACvE,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC;YACjD,cAAc,EAAE,QAAQ,CAAC,MAAM;SAChC,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACpE,wEAAwE;QACxE,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;YAClC,IAAI,OAAO,CAAC,qBAAqB,KAAK,YAAY;gBAChD,OAAO,IAAI,CAAC,WAAW,CAAC;oBACtB,gBAAgB;oBAChB,gBAAgB;oBAChB,MAAM;oBACN,OAAO,EAAE;wBACP,GAAG,OAAO;wBACV,YAAY,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;qBAC9D;oBACD,IAAI;oBACJ,QAAQ;iBACT,CAAC,CAAC;YACL,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACjD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,cAAc,CACf,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;gBACpB,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC;YACvC,IAAI,oBAAoB,CAAC,aAAa,EAAE,yBAAyB,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC3C,CAAC;YAED,OAAO,IAAI,CAAC,WAAW,CAAC;gBACtB,gBAAgB,EAAE,MAAM,qBAAqB,CAC3C,aAAa,EACb,gBAAgB,EAChB,OAAO,CAAC,qCAAqC,CAC9C;gBACD,gBAAgB;gBAChB,MAAM;gBACN,OAAO;gBACP,IAAI;gBACJ,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC;YACtB,gBAAgB;YAChB,gBAAgB;YAChB,MAAM;YACN,OAAO;YACP,IAAI;YACJ,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,IAAY,EACZ,MAAkB,EAClB,IAA6B,EAC7B,OAA6B,EAC7B,SAAwB;QAExB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QAClD,MAAM,IAAI,GAAsC;YAC9C,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC;YAC5D,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,IAAI,YAAY,cAAc,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;YACnD,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBACzC,OAAO,EAAE,GAAG,MAAM,IAAI,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE;gBACpD,MAAM;gBACN,IAAI;gBACJ,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;gBAC9C,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,EAAE;aACf,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,eAAe,CAChC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAC3C,CAAC;QACF,IAAI,UAAU,KAAK,IAAI;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAEO,WAAW,CAAC,KAOnB;QACC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;QACzD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QACxD,IACE,CAAC,SAAS;YACV,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;YAC7B,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC;YAC9C,KAAK,CAAC,gBAAgB,CAAC,6BAA6B,KAAK,SAAS;YAClE,KAAK,CAAC,gBAAgB,CAAC,6BAA6B;gBAClD,KAAK,CAAC,OAAO,CAAC,qCAAqC,EACrD,CAAC;YACD,IAAI,CAAC,iBAAiB,EAAE,CACtB,KAAK,CAAC,gBAAgB,CAAC,6BAA6B,CACrD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;YACzB,GAAG,CAAC,SAAS;gBACX,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBAC7B,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,IAAI;oBACpC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;YACtC,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE;YAC/H,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,CAAC,SAAS,IAAI,YAAY;YACxC,oBAAoB,EAAE,KAAK,CAAC,gBAAgB,CAAC,oBAAoB;YACjE,mBAAmB,EAAE,KAAK,CAAC,gBAAgB,CAAC,mBAAmB;YAC/D,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC7B,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;SACtC,CAAC,CAAC;IACL,CAAC;IAEO,4BAA4B,CAClC,KAA4C;QAE5C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;YACzB,GAAG,KAAK;YACR,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI;YACjD,mBAAmB,EAAE,SAAS;SAC/B,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import {\n  authChallengeSigningBytes,\n  canonicalAuthOrigin,\n} from \"@tearleads/crypto\";\nimport {\n  apiVersionHeaderName,\n  parseApiVersion,\n} from \"@tearleads/validators/operation\";\nimport {\n  bindPrototypeMethods,\n  describeErrorResponse,\n  type ErrorResponseDescription,\n  errorMessage,\n  hasHeader,\n  isSuccessfulResponse,\n  normalizeApiBaseUrl,\n  requestFailureKey,\n} from \"./requestInternals\";\nimport { responseBodyFailure } from \"./responseBodyFailure\";\nimport { shouldRetryAfterSessionExpired } from \"./sessionRefresh\";\nimport { SessionRenewalTracker } from \"./sessionRenewal\";\nimport type {\n  HttpMethod,\n  OperationRequestFn,\n  OperationRequestResultFn,\n  OperationResponseRequestFn,\n  RequestBody,\n  RequestFailure,\n  RequestFailureKind,\n  RequestResult,\n  RequestResultOptions,\n  ResponseRequestValidationFailureInput,\n} from \"./types\";\n\ntype ExpiredHandler = () => boolean | Promise<boolean>;\ntype PaymentRequiredHandler = (organizationId: string | null) => void;\n\nexport class ApiRequestRuntime {\n  private authToken: string | null = null;\n  private readonly sessionRenewals = new SessionRenewalTracker(\n    () => this.authToken,\n  );\n  private readonly baseUrl: string;\n  private onError: ((message: string) => void) | null = null;\n  private onNetworkError: (() => void) | null = null;\n  private onNetworkSuccess: (() => void) | null = null;\n  private onApiVersion: ((version: number) => void) | null = null;\n  private onSessionExpired: ExpiredHandler | null = null;\n  private onPaymentRequired: PaymentRequiredHandler | null = null;\n  private readonly requestFailuresByKey = new Map<string, RequestFailure>();\n  readonly request: OperationRequestFn;\n  readonly requestResult: OperationRequestResultFn;\n  readonly responseRequest: OperationResponseRequestFn;\n\n  constructor(baseUrl?: string | null) {\n    this.baseUrl = normalizeApiBaseUrl(baseUrl);\n    bindPrototypeMethods(this, ApiRequestRuntime.prototype);\n    this.request = this.makeRequest;\n    this.requestResult = this.makeRequestResult;\n    this.responseRequest = Object.assign(this.makeResponseRequest, {\n      reportFailure: this.reportResponseRequestFailure,\n    });\n  }\n\n  /**\n   * The bytes a login challenge is signed as, bound to the API this client\n   * addresses. A relative base URL resolves against the page, as its requests\n   * do; with neither, there is no API origin to sign for.\n   */\n  authChallengeBytes(challengeHex: string, fingerprint: string): Uint8Array {\n    let apiOrigin: string;\n    try {\n      apiOrigin = canonicalAuthOrigin(\n        new URL(this.baseUrl || \"/\", globalThis.location?.href).href,\n      );\n    } catch {\n      throw new Error(\"The API origin is unavailable for authentication\");\n    }\n    return authChallengeSigningBytes({ apiOrigin, challengeHex, fingerprint });\n  }\n\n  setOnError(handler: ((message: string) => void) | null): void {\n    this.onError = handler;\n  }\n\n  setOnNetworkError(handler: (() => void) | null): void {\n    this.onNetworkError = handler;\n  }\n\n  setOnNetworkSuccess(handler: (() => void) | null): void {\n    this.onNetworkSuccess = handler;\n  }\n\n  /** Receives the build named by each response that carries one. */\n  setOnApiVersion(handler: ((version: number) => void) | null): void {\n    this.onApiVersion = handler;\n  }\n\n  setOnSessionExpired(handler: ExpiredHandler | null): void {\n    this.onSessionExpired = handler;\n  }\n\n  setOnPaymentRequired(handler: PaymentRequiredHandler | null): void {\n    this.onPaymentRequired = handler;\n  }\n\n  setAuthToken(token: string | null): boolean {\n    const changed = this.authToken !== token;\n    if (changed) this.sessionRenewals.tokenChanged();\n    this.authToken = token;\n    return changed;\n  }\n\n  getAuthToken(): string | null {\n    return this.authToken;\n  }\n\n  getRequestFailure(input: { method: HttpMethod; path: string }) {\n    return this.requestFailuresByKey.get(requestFailureKey(input)) ?? null;\n  }\n\n  private buildHeaders(\n    body: RequestBody | undefined,\n    headers: Record<string, string> | undefined,\n    authToken: string | null,\n  ): Record<string, string> {\n    return {\n      ...(authToken ? { Authorization: `Bearer ${authToken}` } : {}),\n      ...(typeof body === \"string\" && !hasHeader(headers, \"Content-Type\")\n        ? { \"Content-Type\": \"application/json\" }\n        : {}),\n      ...headers,\n    };\n  }\n\n  private async makeRequest<T>(\n    path: string,\n    validator: (value: unknown) => value is T,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions | undefined,\n    failureOperation: Parameters<OperationRequestFn>[5],\n  ): Promise<T | null> {\n    const result = await this.makeRequestResult(\n      path,\n      validator,\n      method,\n      body,\n      options,\n      failureOperation,\n    );\n    return result.ok ? result.data : null;\n  }\n\n  private requestFailure(input: {\n    code?: string | undefined;\n    kind: RequestFailureKind;\n    message: string;\n    method: HttpMethod;\n    path: string;\n    reportErrors: boolean;\n    requiredContainerIds?: RequestFailure[\"requiredContainerIds\"];\n    stalePrincipalHeads: RequestFailure[\"stalePrincipalHeads\"];\n    status: number | null;\n    statusText: string;\n  }): RequestFailure {\n    const failure: RequestFailure = {\n      ...(input.code === undefined ? {} : { code: input.code }),\n      kind: input.kind,\n      message: input.message,\n      method: input.method,\n      ok: false,\n      path: input.path,\n      report: () => {\n        if (input.kind !== \"cancelled\") this.onError?.(input.message);\n      },\n      status: input.status,\n      statusText: input.statusText,\n      ...(input.stalePrincipalHeads\n        ? { stalePrincipalHeads: input.stalePrincipalHeads }\n        : {}),\n      ...(input.requiredContainerIds\n        ? { requiredContainerIds: input.requiredContainerIds }\n        : {}),\n    };\n    this.requestFailuresByKey.set(\n      requestFailureKey({ method: input.method, path: input.path }),\n      failure,\n    );\n\n    if (input.reportErrors) {\n      failure.report();\n    }\n\n    return failure;\n  }\n\n  private async makeRequestResult<T>(\n    path: string,\n    validator: (value: unknown) => value is T,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions = {},\n    failureOperation: Parameters<OperationRequestFn>[5],\n  ): Promise<RequestResult<T>> {\n    const responseResult = await this.makeResponseRequest(\n      path,\n      method,\n      body,\n      options,\n      [],\n      failureOperation,\n    );\n    if (!responseResult.ok) {\n      return responseResult;\n    }\n\n    const response = responseResult.data;\n    const reportErrors = options.reportErrors ?? true;\n    let data: unknown;\n    try {\n      data = await response.json();\n    } catch (error) {\n      const failure = responseBodyFailure(error, errorMessage(error));\n      if (failure.kind === \"network\") {\n        this.onNetworkError?.();\n      }\n      return this.requestFailure({\n        kind: failure.kind,\n        message: `${method} ${path}: ${failure.message}`,\n        method,\n        path,\n        reportErrors,\n        stalePrincipalHeads: undefined,\n        status: response.status,\n        statusText: response.statusText,\n      });\n    }\n\n    if (!validator(data)) {\n      return this.requestFailure({\n        kind: \"shape\",\n        message: `Invalid response shape for ${path}`,\n        method,\n        path,\n        reportErrors,\n        stalePrincipalHeads: undefined,\n        status: response.status,\n        statusText: response.statusText,\n      });\n    }\n\n    return { data, ok: true };\n  }\n\n  private async makeResponseRequest(\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions = {},\n    additionalSuccessStatuses: readonly number[],\n    failureOperation: Parameters<OperationResponseRequestFn>[5],\n  ): Promise<RequestResult<Response>> {\n    const authToken = this.authToken;\n    const responseResult = await this.fetchResponseRequest(\n      path,\n      method,\n      body,\n      options,\n      authToken,\n    );\n    if (!responseResult.ok) {\n      return responseResult;\n    }\n    const response = responseResult.data;\n    if (isSuccessfulResponse(response, additionalSuccessStatuses)) {\n      this.requestFailuresByKey.delete(requestFailureKey({ method, path }));\n      return { data: response, ok: true };\n    }\n\n    const errorDescription = await describeErrorResponse(\n      response,\n      failureOperation,\n      options.expectedPaymentRequiredOrganizationId,\n    );\n    const shouldRetry = await shouldRetryAfterSessionExpired({\n      authToken,\n      body,\n      code: errorDescription.code,\n      getCurrentAuthToken: () => this.authToken,\n      isKnownSessionRenewal: (from, to) =>\n        this.sessionRenewals.isKnown(from, to),\n      pendingSessionRenewal: (from) => this.sessionRenewals.pending(from),\n      options,\n      refreshSession: () => this.sessionRenewals.renew(this.onSessionExpired),\n      reportError: (message) => this.onError?.(message),\n      responseStatus: response.status,\n    });\n    const retryAuthToken = this.sessionRenewals.currentToken(authToken);\n    // Recheck after the awaited helper and the host's renewal notification.\n    if (shouldRetry && retryAuthToken) {\n      if (options.retryOnSessionExpired === \"renew-only\")\n        return this.httpFailure({\n          errorDescription,\n          failureOperation,\n          method,\n          options: {\n            ...options,\n            reportErrors: method === \"GET\" ? false : options.reportErrors,\n          },\n          path,\n          response,\n        });\n      const retryResult = await this.fetchResponseRequest(\n        path,\n        method,\n        body,\n        options,\n        retryAuthToken,\n      );\n      if (!retryResult.ok) {\n        return retryResult;\n      }\n      const retryResponse = retryResult.data;\n      if (isSuccessfulResponse(retryResponse, additionalSuccessStatuses)) {\n        this.requestFailuresByKey.delete(requestFailureKey({ method, path }));\n        return { data: retryResponse, ok: true };\n      }\n\n      return this.httpFailure({\n        errorDescription: await describeErrorResponse(\n          retryResponse,\n          failureOperation,\n          options.expectedPaymentRequiredOrganizationId,\n        ),\n        failureOperation,\n        method,\n        options,\n        path,\n        response: retryResponse,\n      });\n    }\n\n    return this.httpFailure({\n      errorDescription,\n      failureOperation,\n      method,\n      options,\n      path,\n      response,\n    });\n  }\n\n  private async fetchResponseRequest(\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions,\n    authToken: string | null,\n  ): Promise<RequestResult<Response>> {\n    const reportErrors = options.reportErrors ?? true;\n    const init: RequestInit & { duplex?: \"half\" } = {\n      method,\n      headers: this.buildHeaders(body, options.headers, authToken),\n      ...(options.signal ? { signal: options.signal } : {}),\n    };\n    if (body !== undefined) {\n      init.body = body;\n      if (body instanceof ReadableStream) {\n        init.duplex = \"half\";\n      }\n    }\n\n    let response: Response;\n    try {\n      response = await fetch(`${this.baseUrl}${path}`, init);\n    } catch (error) {\n      const cancelled = options.signal?.aborted === true;\n      if (!cancelled) this.onNetworkError?.();\n      return this.requestFailure({\n        ...(cancelled ? { code: \"request_aborted\" } : {}),\n        kind: cancelled ? \"cancelled\" : \"network\",\n        message: `${method} ${path}: ${errorMessage(error)}`,\n        method,\n        path,\n        reportErrors: cancelled ? false : reportErrors,\n        stalePrincipalHeads: undefined,\n        status: null,\n        statusText: \"\",\n      });\n    }\n\n    this.onNetworkSuccess?.();\n    const apiVersion = parseApiVersion(\n      response.headers.get(apiVersionHeaderName),\n    );\n    if (apiVersion !== null) this.onApiVersion?.(apiVersion);\n    return { data: response, ok: true };\n  }\n\n  private httpFailure(input: {\n    readonly errorDescription: ErrorResponseDescription;\n    readonly failureOperation: Parameters<OperationResponseRequestFn>[5];\n    readonly method: HttpMethod;\n    readonly options: RequestResultOptions;\n    readonly path: string;\n    readonly response: Response;\n  }): RequestFailure {\n    const cancelled = input.options.signal?.aborted === true;\n    const reportErrors = input.options.reportErrors ?? true;\n    if (\n      !cancelled &&\n      input.response.status === 402 &&\n      input.failureOperation.failureResponses?.[402] &&\n      input.errorDescription.paymentRequiredOrganizationId !== undefined &&\n      input.errorDescription.paymentRequiredOrganizationId ===\n        input.options.expectedPaymentRequiredOrganizationId\n    ) {\n      this.onPaymentRequired?.(\n        input.errorDescription.paymentRequiredOrganizationId,\n      );\n    }\n    return this.requestFailure({\n      ...(cancelled\n        ? { code: \"request_aborted\" }\n        : input.errorDescription.code === null\n          ? {}\n          : { code: input.errorDescription.code }),\n      kind: cancelled ? \"cancelled\" : \"http\",\n      message: `${input.method} ${input.path}: ${input.response.status} ${input.response.statusText}${input.errorDescription.detail}`,\n      method: input.method,\n      path: input.path,\n      reportErrors: !cancelled && reportErrors,\n      requiredContainerIds: input.errorDescription.requiredContainerIds,\n      stalePrincipalHeads: input.errorDescription.stalePrincipalHeads,\n      status: input.response.status,\n      statusText: input.response.statusText,\n    });\n  }\n\n  private reportResponseRequestFailure(\n    input: ResponseRequestValidationFailureInput,\n  ): RequestFailure {\n    if (input.kind === \"network\") {\n      this.onNetworkError?.();\n    }\n    return this.requestFailure({\n      ...input,\n      reportErrors: input.options?.reportErrors ?? true,\n      stalePrincipalHeads: undefined,\n    });\n  }\n}\n"]}

package/internal/api-client/routes/containers/mutations.js

@@ -1,4 +1,4 @@
-import { createContainerOperation, createContainerWithMetadataDocumentOperation, deleteContainerOperation, isContainerMutationOperationRequest, isContainerMutationOperationResponse, isContainerRotationOperationRequest, isContainerRotationOperationResponse, isCreateContainerWithMetadataDocumentOperationRequest, isCreateContainerWithMetadataDocumentOperationResponse, isDeleteContainerOperationResponse, moveContainerOperation, operationRequestPath, reciteContainerOperation, rekeyContainerOperation, revokeContainerOperation, shareContainerOperation, } from "../../../validators/operation/index.js";
+import { createContainerOperation, createContainerWithMetadataDocumentOperation, deleteContainerOperation, isContainerMutationOperationRequest, isContainerMutationOperationResponse, isContainerRotationOperationRequest, isContainerRotationOperationResponse, isCreateContainerWithMetadataDocumentOperationRequest, isCreateContainerWithMetadataDocumentOperationResponse, isDeleteContainerOperationResponse, moveContainerOperation, operationRequestPath, operationRequestPathWithQuery, reciteContainerOperation, rekeyContainerOperation, revokeContainerOperation, shareContainerOperation, } from "../../../validators/operation/index.js";
 import { isContainerReciteRequest } from "../../../validators/request/index.js";
 import { isContainerReciteResponse } from "../../../validators/response/index.js";
 export const containerRecite = {
@@ -49,6 +49,6 @@ export const containerMove = {
 export const containerDelete = {
     isResponse: isDeleteContainerOperationResponse,
     method: deleteContainerOperation.method,
-    path: (containerId) => operationRequestPath(deleteContainerOperation, { containerId }),
+    path: (containerId, requiredAncestorId) => operationRequestPathWithQuery(deleteContainerOperation, { containerId }, { requiredAncestorId }),
 };
 //# sourceMappingURL=mutations.js.map

package/internal/api-client/routes/containers/mutations.js.map

@@ -1 +1 @@
-{"version":3,"file":"mutations.js","sourceRoot":"","sources":["mutations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,4CAA4C,EAC5C,wBAAwB,EACxB,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,oCAAoC,EACpC,qDAAqD,EACrD,sDAAsD,EACtD,kCAAkC,EAClC,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,wBAAwB;IACnC,UAAU,EAAE,yBAAyB;IACrC,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,WAAW,EAAE,CAAC;CACzD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,CAAC;CAChD,CAAC;AAEX,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,SAAS,EAAE,qDAAqD;IAChE,UAAU,EAAE,sDAAsD;IAClE,MAAM,EAAE,4CAA4C,CAAC,MAAM;IAC3D,IAAI,EAAE,oBAAoB,CAAC,4CAA4C,EAAE,EAAE,CAAC;CACpE,CAAC;AAEX,SAAS,qBAAqB,CAC5B,SAIkC,EAClC,WAAmB;IAEnB,OAAO,oBAAoB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,uBAAuB,CAAC,MAAM;IACtC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,uBAAuB,EAAE,WAAW,CAAC;CACrD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,wBAAwB,EAAE,WAAW,CAAC;CACtD,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,uBAAuB,CAAC,MAAM;IACtC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,uBAAuB,EAAE,WAAW,CAAC;CACrD,CAAC;AAEX,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,sBAAsB,CAAC,MAAM;IACrC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,sBAAsB,EAAE,WAAW,CAAC;CACpD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,kCAAkC;IAC9C,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,WAAW,EAAE,CAAC;CACzD,CAAC","sourcesContent":["import {\n  createContainerOperation,\n  createContainerWithMetadataDocumentOperation,\n  deleteContainerOperation,\n  isContainerMutationOperationRequest,\n  isContainerMutationOperationResponse,\n  isContainerRotationOperationRequest,\n  isContainerRotationOperationResponse,\n  isCreateContainerWithMetadataDocumentOperationRequest,\n  isCreateContainerWithMetadataDocumentOperationResponse,\n  isDeleteContainerOperationResponse,\n  moveContainerOperation,\n  operationRequestPath,\n  reciteContainerOperation,\n  rekeyContainerOperation,\n  revokeContainerOperation,\n  shareContainerOperation,\n} from \"@tearleads/validators/operation\";\nimport { isContainerReciteRequest } from \"@tearleads/validators/request\";\nimport { isContainerReciteResponse } from \"@tearleads/validators/response\";\n\nexport const containerRecite = {\n  isRequest: isContainerReciteRequest,\n  isResponse: isContainerReciteResponse,\n  method: reciteContainerOperation.method,\n  path: (containerId: string) =>\n    operationRequestPath(reciteContainerOperation, { containerId }),\n} as const;\n\nexport const containerCreate = {\n  isRequest: isContainerMutationOperationRequest,\n  isResponse: isContainerMutationOperationResponse,\n  method: createContainerOperation.method,\n  path: operationRequestPath(createContainerOperation, {}),\n} as const;\n\nexport const containerCreateWithMetadataDocument = {\n  isRequest: isCreateContainerWithMetadataDocumentOperationRequest,\n  isResponse: isCreateContainerWithMetadataDocumentOperationResponse,\n  method: createContainerWithMetadataDocumentOperation.method,\n  path: operationRequestPath(createContainerWithMetadataDocumentOperation, {}),\n} as const;\n\nfunction containerMutationPath(\n  operation:\n    | typeof moveContainerOperation\n    | typeof rekeyContainerOperation\n    | typeof revokeContainerOperation\n    | typeof shareContainerOperation,\n  containerId: string,\n) {\n  return operationRequestPath(operation, { containerId });\n}\n\nexport const containerShare = {\n  isRequest: isContainerMutationOperationRequest,\n  isResponse: isContainerMutationOperationResponse,\n  method: shareContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(shareContainerOperation, containerId),\n} as const;\n\nexport const containerRevoke = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: revokeContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(revokeContainerOperation, containerId),\n} as const;\n\nexport const containerRekey = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: rekeyContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(rekeyContainerOperation, containerId),\n} as const;\n\nexport const containerMove = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: moveContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(moveContainerOperation, containerId),\n} as const;\n\nexport const containerDelete = {\n  isResponse: isDeleteContainerOperationResponse,\n  method: deleteContainerOperation.method,\n  path: (containerId: string) =>\n    operationRequestPath(deleteContainerOperation, { containerId }),\n} as const;\n"]}
+{"version":3,"file":"mutations.js","sourceRoot":"","sources":["mutations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,4CAA4C,EAC5C,wBAAwB,EACxB,mCAAmC,EACnC,oCAAoC,EACpC,mCAAmC,EACnC,oCAAoC,EACpC,qDAAqD,EACrD,sDAAsD,EACtD,kCAAkC,EAClC,sBAAsB,EACtB,oBAAoB,EACpB,6BAA6B,EAC7B,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,wBAAwB;IACnC,UAAU,EAAE,yBAAyB;IACrC,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,WAAW,EAAE,CAAC;CACzD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,oBAAoB,CAAC,wBAAwB,EAAE,EAAE,CAAC;CAChD,CAAC;AAEX,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,SAAS,EAAE,qDAAqD;IAChE,UAAU,EAAE,sDAAsD;IAClE,MAAM,EAAE,4CAA4C,CAAC,MAAM;IAC3D,IAAI,EAAE,oBAAoB,CAAC,4CAA4C,EAAE,EAAE,CAAC;CACpE,CAAC;AAEX,SAAS,qBAAqB,CAC5B,SAIkC,EAClC,WAAmB;IAEnB,OAAO,oBAAoB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,uBAAuB,CAAC,MAAM;IACtC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,uBAAuB,EAAE,WAAW,CAAC;CACrD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,wBAAwB,EAAE,WAAW,CAAC;CACtD,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,uBAAuB,CAAC,MAAM;IACtC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,uBAAuB,EAAE,WAAW,CAAC;CACrD,CAAC;AAEX,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,SAAS,EAAE,mCAAmC;IAC9C,UAAU,EAAE,oCAAoC;IAChD,MAAM,EAAE,sBAAsB,CAAC,MAAM;IACrC,IAAI,EAAE,CAAC,WAAmB,EAAE,EAAE,CAC5B,qBAAqB,CAAC,sBAAsB,EAAE,WAAW,CAAC;CACpD,CAAC;AAEX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU,EAAE,kCAAkC;IAC9C,MAAM,EAAE,wBAAwB,CAAC,MAAM;IACvC,IAAI,EAAE,CAAC,WAAmB,EAAE,kBAA2B,EAAE,EAAE,CACzD,6BAA6B,CAC3B,wBAAwB,EACxB,EAAE,WAAW,EAAE,EACf,EAAE,kBAAkB,EAAE,CACvB;CACK,CAAC","sourcesContent":["import {\n  createContainerOperation,\n  createContainerWithMetadataDocumentOperation,\n  deleteContainerOperation,\n  isContainerMutationOperationRequest,\n  isContainerMutationOperationResponse,\n  isContainerRotationOperationRequest,\n  isContainerRotationOperationResponse,\n  isCreateContainerWithMetadataDocumentOperationRequest,\n  isCreateContainerWithMetadataDocumentOperationResponse,\n  isDeleteContainerOperationResponse,\n  moveContainerOperation,\n  operationRequestPath,\n  operationRequestPathWithQuery,\n  reciteContainerOperation,\n  rekeyContainerOperation,\n  revokeContainerOperation,\n  shareContainerOperation,\n} from \"@tearleads/validators/operation\";\nimport { isContainerReciteRequest } from \"@tearleads/validators/request\";\nimport { isContainerReciteResponse } from \"@tearleads/validators/response\";\n\nexport const containerRecite = {\n  isRequest: isContainerReciteRequest,\n  isResponse: isContainerReciteResponse,\n  method: reciteContainerOperation.method,\n  path: (containerId: string) =>\n    operationRequestPath(reciteContainerOperation, { containerId }),\n} as const;\n\nexport const containerCreate = {\n  isRequest: isContainerMutationOperationRequest,\n  isResponse: isContainerMutationOperationResponse,\n  method: createContainerOperation.method,\n  path: operationRequestPath(createContainerOperation, {}),\n} as const;\n\nexport const containerCreateWithMetadataDocument = {\n  isRequest: isCreateContainerWithMetadataDocumentOperationRequest,\n  isResponse: isCreateContainerWithMetadataDocumentOperationResponse,\n  method: createContainerWithMetadataDocumentOperation.method,\n  path: operationRequestPath(createContainerWithMetadataDocumentOperation, {}),\n} as const;\n\nfunction containerMutationPath(\n  operation:\n    | typeof moveContainerOperation\n    | typeof rekeyContainerOperation\n    | typeof revokeContainerOperation\n    | typeof shareContainerOperation,\n  containerId: string,\n) {\n  return operationRequestPath(operation, { containerId });\n}\n\nexport const containerShare = {\n  isRequest: isContainerMutationOperationRequest,\n  isResponse: isContainerMutationOperationResponse,\n  method: shareContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(shareContainerOperation, containerId),\n} as const;\n\nexport const containerRevoke = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: revokeContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(revokeContainerOperation, containerId),\n} as const;\n\nexport const containerRekey = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: rekeyContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(rekeyContainerOperation, containerId),\n} as const;\n\nexport const containerMove = {\n  isRequest: isContainerRotationOperationRequest,\n  isResponse: isContainerRotationOperationResponse,\n  method: moveContainerOperation.method,\n  path: (containerId: string) =>\n    containerMutationPath(moveContainerOperation, containerId),\n} as const;\n\nexport const containerDelete = {\n  isResponse: isDeleteContainerOperationResponse,\n  method: deleteContainerOperation.method,\n  path: (containerId: string, requiredAncestorId?: string) =>\n    operationRequestPathWithQuery(\n      deleteContainerOperation,\n      { containerId },\n      { requiredAncestorId },\n    ),\n} as const;\n"]}

package/internal/api-client/sessionRefresh.js

@@ -12,14 +12,21 @@ export async function shouldRetryAfterSessionExpired(input) {
         return false;
     }
     const currentAuthToken = input.getCurrentAuthToken();
-    if (currentAuthToken && currentAuthToken !== input.authToken) {
-        if (input.isKnownSessionRenewal(input.authToken, currentAuthToken))
+    let pending = null;
+    if (currentAuthToken !== input.authToken) {
+        const renewed = currentAuthToken !== null &&
+            input.isKnownSessionRenewal(input.authToken, currentAuthToken);
+        if (renewed) {
             input.options.onSessionRenewed?.();
-        return true;
+            return true;
+        }
+        pending = input.pendingSessionRenewal(input.authToken);
+        if (!currentAuthToken || !pending)
+            return false;
     }
     let refreshed = false;
     try {
-        refreshed = await input.refreshSession();
+        refreshed = await (pending ?? input.refreshSession());
     }
     catch (error) {
         if (error instanceof KeyingVerificationError) {
@@ -29,9 +36,10 @@ export async function shouldRetryAfterSessionExpired(input) {
             input.reportError(`Session refresh failed: ${errorMessage(error)}`);
         }
     }
+    const refreshedToken = input.getCurrentAuthToken();
     const renewed = Boolean(refreshed &&
-        input.getCurrentAuthToken() &&
-        input.getCurrentAuthToken() !== input.authToken);
+        refreshedToken &&
+        input.isKnownSessionRenewal(input.authToken, refreshedToken));
     if (renewed)
         input.options.onSessionRenewed?.();
     return renewed;

package/internal/api-client/sessionRefresh.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessionRefresh.js","sourceRoot":"","sources":["sessionRefresh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EACL,YAAY,EACZ,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAe5B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAA0B;IAE1B,IACE,KAAK,CAAC,OAAO,CAAC,qBAAqB,KAAK,KAAK;QAC7C,CAAC,KAAK,CAAC,SAAS;QAChB,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC;QACpC,CAAC,yBAAyB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,EAC5D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC;IACrD,IAAI,gBAAgB,IAAI,gBAAgB,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC7D,IAAI,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC;YAChE,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;YACvC,KAAK,CAAC,WAAW,CAAC,2BAA2B,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CACrB,SAAS;QACP,KAAK,CAAC,mBAAmB,EAAE;QAC3B,KAAK,CAAC,mBAAmB,EAAE,KAAK,KAAK,CAAC,SAAS,CAClD,CAAC;IACF,IAAI,OAAO;QAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;IAChD,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport {\n  errorMessage,\n  isRefreshableSessionError,\n  isReplayableRequestBody,\n} from \"./requestInternals\";\nimport type { RequestBody, RequestResultOptions } from \"./types\";\n\ninterface SessionRefreshInput {\n  readonly authToken: string | null;\n  readonly body: RequestBody | undefined;\n  readonly code: string | null;\n  readonly getCurrentAuthToken: () => string | null;\n  readonly isKnownSessionRenewal: (from: string, to: string) => boolean;\n  readonly options: RequestResultOptions;\n  readonly refreshSession: () => boolean | Promise<boolean>;\n  readonly reportError: (message: string) => void;\n  readonly responseStatus: number;\n}\n\n/**\n * Decides whether a failed request can be replayed after session renewal.\n * Identity-integrity failures are terminal and must retain their typed error.\n */\nexport async function shouldRetryAfterSessionExpired(\n  input: SessionRefreshInput,\n): Promise<boolean> {\n  if (\n    input.options.retryOnSessionExpired === false ||\n    !input.authToken ||\n    !isReplayableRequestBody(input.body) ||\n    !isRefreshableSessionError(input.responseStatus, input.code)\n  ) {\n    return false;\n  }\n\n  const currentAuthToken = input.getCurrentAuthToken();\n  if (currentAuthToken && currentAuthToken !== input.authToken) {\n    if (input.isKnownSessionRenewal(input.authToken, currentAuthToken))\n      input.options.onSessionRenewed?.();\n    return true;\n  }\n\n  let refreshed = false;\n  try {\n    refreshed = await input.refreshSession();\n  } catch (error: unknown) {\n    if (error instanceof KeyingVerificationError) {\n      throw error;\n    }\n    if (input.options.reportErrors ?? true) {\n      input.reportError(`Session refresh failed: ${errorMessage(error)}`);\n    }\n  }\n\n  const renewed = Boolean(\n    refreshed &&\n      input.getCurrentAuthToken() &&\n      input.getCurrentAuthToken() !== input.authToken,\n  );\n  if (renewed) input.options.onSessionRenewed?.();\n  return renewed;\n}\n"]}
+{"version":3,"file":"sessionRefresh.js","sourceRoot":"","sources":["sessionRefresh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EACL,YAAY,EACZ,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAgB5B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAA0B;IAE1B,IACE,KAAK,CAAC,OAAO,CAAC,qBAAqB,KAAK,KAAK;QAC7C,CAAC,KAAK,CAAC,SAAS;QAChB,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC;QACpC,CAAC,yBAAyB,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,EAC5D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC;IACrD,IAAI,OAAO,GAA4B,IAAI,CAAC;IAC5C,IAAI,gBAAgB,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,OAAO,GACX,gBAAgB,KAAK,IAAI;YACzB,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACjE,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,GAAG,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,gBAAgB,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;IAClD,CAAC;IAED,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;YAC7C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;YACvC,KAAK,CAAC,WAAW,CAAC,2BAA2B,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,KAAK,CAAC,mBAAmB,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,OAAO,CACrB,SAAS;QACP,cAAc;QACd,KAAK,CAAC,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC,CAC/D,CAAC;IACF,IAAI,OAAO;QAAE,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;IAChD,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import { KeyingVerificationError } from \"@tearleads/crypto\";\nimport {\n  errorMessage,\n  isRefreshableSessionError,\n  isReplayableRequestBody,\n} from \"./requestInternals\";\nimport type { RequestBody, RequestResultOptions } from \"./types\";\n\ninterface SessionRefreshInput {\n  readonly authToken: string | null;\n  readonly body: RequestBody | undefined;\n  readonly code: string | null;\n  readonly getCurrentAuthToken: () => string | null;\n  readonly isKnownSessionRenewal: (from: string, to: string) => boolean;\n  readonly options: RequestResultOptions;\n  readonly pendingSessionRenewal: (from: string) => Promise<boolean> | null;\n  readonly refreshSession: () => boolean | Promise<boolean>;\n  readonly reportError: (message: string) => void;\n  readonly responseStatus: number;\n}\n\n/**\n * Decides whether a failed request can be replayed after session renewal.\n * Identity-integrity failures are terminal and must retain their typed error.\n */\nexport async function shouldRetryAfterSessionExpired(\n  input: SessionRefreshInput,\n): Promise<boolean> {\n  if (\n    input.options.retryOnSessionExpired === false ||\n    !input.authToken ||\n    !isReplayableRequestBody(input.body) ||\n    !isRefreshableSessionError(input.responseStatus, input.code)\n  ) {\n    return false;\n  }\n\n  const currentAuthToken = input.getCurrentAuthToken();\n  let pending: Promise<boolean> | null = null;\n  if (currentAuthToken !== input.authToken) {\n    const renewed =\n      currentAuthToken !== null &&\n      input.isKnownSessionRenewal(input.authToken, currentAuthToken);\n    if (renewed) {\n      input.options.onSessionRenewed?.();\n      return true;\n    }\n    pending = input.pendingSessionRenewal(input.authToken);\n    if (!currentAuthToken || !pending) return false;\n  }\n\n  let refreshed = false;\n  try {\n    refreshed = await (pending ?? input.refreshSession());\n  } catch (error: unknown) {\n    if (error instanceof KeyingVerificationError) {\n      throw error;\n    }\n    if (input.options.reportErrors ?? true) {\n      input.reportError(`Session refresh failed: ${errorMessage(error)}`);\n    }\n  }\n\n  const refreshedToken = input.getCurrentAuthToken();\n  const renewed = Boolean(\n    refreshed &&\n      refreshedToken &&\n      input.isKnownSessionRenewal(input.authToken, refreshedToken),\n  );\n  if (renewed) input.options.onSessionRenewed?.();\n  return renewed;\n}\n"]}

package/internal/api-client/sessionRenewal.js

@@ -0,0 +1,54 @@
+/** An identity change invalidates renewal evidence, including an awaited callback. */
+export class SessionRenewalTracker {
+    readToken;
+    revision = 0;
+    known = null;
+    inFlight = null;
+    constructor(readToken) {
+        this.readToken = readToken;
+    }
+    tokenChanged() {
+        this.revision += 1;
+        this.known = null;
+    }
+    isKnown(from, to) {
+        return this.known?.from === from && this.known.to === to;
+    }
+    currentToken(from) {
+        const token = this.readToken();
+        return from && token && this.isKnown(from, token) ? token : null;
+    }
+    pending(from) {
+        return this.inFlight?.from === from ? this.inFlight.promise : null;
+    }
+    async renew(handler) {
+        const from = this.readToken();
+        if (!from)
+            return false;
+        const existing = this.pending(from);
+        if (existing)
+            return existing;
+        const pending = {
+            from,
+            promise: this.complete(from, this.revision, handler),
+        };
+        this.inFlight = pending;
+        try {
+            return await pending.promise;
+        }
+        finally {
+            if (this.inFlight === pending)
+                this.inFlight = null;
+        }
+    }
+    async complete(from, revision, handler) {
+        const renewed = await (handler?.() ?? false);
+        const to = this.readToken();
+        // The trusted callback authenticates the same identity and installs one
+        // replacement token. A second transition cannot borrow that renewal.
+        if (renewed && to && from !== to && this.revision === revision + 1)
+            this.known = { from, to };
+        return renewed;
+    }
+}
+//# sourceMappingURL=sessionRenewal.js.map

package/internal/api-client/sessionRenewal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionRenewal.js","sourceRoot":"","sources":["sessionRenewal.ts"],"names":[],"mappings":"AAEA,sFAAsF;AACtF,MAAM,OAAO,qBAAqB;IAKH;IAJrB,QAAQ,GAAG,CAAC,CAAC;IACb,KAAK,GAAwC,IAAI,CAAC;IAClD,QAAQ,GAAuD,IAAI,CAAC;IAE5E,YAA6B,SAA8B;QAA9B,cAAS,GAAT,SAAS,CAAqB;IAAG,CAAC;IAE/D,YAAY;QACV,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,OAAO,CAAC,IAAY,EAAE,EAAU;QAC9B,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC;IAED,YAAY,CAAC,IAAmB;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAqB;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,OAAO,GAAG;YACd,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;SACrD,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;gBAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACtD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,IAAY,EACZ,QAAgB,EAChB,OAAqB;QAErB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,KAAK,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,OAAO,IAAI,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG,CAAC;YAChE,IAAI,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;CACF","sourcesContent":["type RenewSession = (() => boolean | Promise<boolean>) | null;\n\n/** An identity change invalidates renewal evidence, including an awaited callback. */\nexport class SessionRenewalTracker {\n  private revision = 0;\n  private known: { from: string; to: string } | null = null;\n  private inFlight: { from: string; promise: Promise<boolean> } | null = null;\n\n  constructor(private readonly readToken: () => string | null) {}\n\n  tokenChanged(): void {\n    this.revision += 1;\n    this.known = null;\n  }\n\n  isKnown(from: string, to: string): boolean {\n    return this.known?.from === from && this.known.to === to;\n  }\n\n  currentToken(from: string | null): string | null {\n    const token = this.readToken();\n    return from && token && this.isKnown(from, token) ? token : null;\n  }\n\n  pending(from: string): Promise<boolean> | null {\n    return this.inFlight?.from === from ? this.inFlight.promise : null;\n  }\n\n  async renew(handler: RenewSession): Promise<boolean> {\n    const from = this.readToken();\n    if (!from) return false;\n    const existing = this.pending(from);\n    if (existing) return existing;\n    const pending = {\n      from,\n      promise: this.complete(from, this.revision, handler),\n    };\n    this.inFlight = pending;\n    try {\n      return await pending.promise;\n    } finally {\n      if (this.inFlight === pending) this.inFlight = null;\n    }\n  }\n\n  private async complete(\n    from: string,\n    revision: number,\n    handler: RenewSession,\n  ): Promise<boolean> {\n    const renewed = await (handler?.() ?? false);\n    const to = this.readToken();\n    // The trusted callback authenticates the same identity and installs one\n    // replacement token. A second transition cannot borrow that renewal.\n    if (renewed && to && from !== to && this.revision === revision + 1)\n      this.known = { from, to };\n    return renewed;\n  }\n}\n"]}

package/internal/validators/operation/containerMutations.d.ts

@@ -6244,6 +6244,9 @@ export declare const deleteContainerOperation: Omit<{
         containerId: z.ZodString;
     }, z.core.$strict>;
     readonly path: "/containers/{containerId}";
+    readonly query: z.ZodObject<{
+        requiredAncestorId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
     readonly responses: {
         readonly 200: z.ZodType<{
             containerId: string;

package/internal/validators/operation/containerMutations.js

@@ -119,6 +119,7 @@ export const deleteContainerOperation = defineJsonOperation({
     method: "DELETE",
     params: ContainerMutationPathParamsSchema,
     path: "/containers/{containerId}",
+    query: z.strictObject({ requiredAncestorId: z.string().min(1).optional() }),
     responses: { 200: ContainerDeleteResponseSchema },
 });
 export const isContainerMutationOperationRequest = isContainerMutationRequest;

package/internal/validators/operation/containerMutations.js.map

@@ -1 +1 @@
-{"version":3,"file":"containerMutations.js","sourceRoot":"","sources":["containerMutations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kDAAkD,EAAE,MAAM,wCAAwC,CAAC;AAC5G,OAAO,EACL,gDAAgD,EAChD,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,EAC9B,4CAA4C,EAC5C,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iDAAiD,EACjD,6BAA6B,EAC7B,sCAAsC,EACtC,+BAA+B,EAC/B,oCAAoC,EACpC,6BAA6B,EAC7B,+BAA+B,EAC/B,mBAAmB,EACnB,6CAA6C,EAC7C,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,sCAAsC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAMH,MAAM,iCAAiC,GAAG;IACxC,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,kCAAkC;IACvC,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,sCAAsC;IAC3C,GAAG,EAAE,mBAAmB;CAChB,CAAC;AAEX,MAAM,gCAAgC,GAAG;IACvC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;CACzB,CAAC;AAEX,MAAM,mCAAmC,GAAG;IAC1C,kDAAkD;CAC1C,CAAC;AAEX,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,8BAA8B;IACpC,gBAAgB,EAAE,iCAAiC;IACnD,eAAe,EAAE,gCAAgC;IACjD,EAAE,EAAE,mBAAmB;IACvB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,sCAAsC;IAC9C,IAAI,EAAE,aAAa;IACnB,SAAS,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE;IACnD,kBAAkB,EAAE,mCAAmC;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4CAA4C,GAAG,mBAAmB,CAC7E;IACE,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,gDAAgD;IACtD,gBAAgB,EAAE;QAChB,GAAG,iCAAiC;QACpC,GAAG,EAAE,mBAAmB;KACzB;IACD,eAAe,EAAE,CAAC,GAAG,gCAAgC,EAAE,GAAG,CAAC;IAC3D,EAAE,EAAE,wCAAwC;IAC5C,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,sCAAsC;IAC9C,IAAI,EAAE,oCAAoC;IAC1C,SAAS,EAAE,EAAE,GAAG,EAAE,iDAAiD,EAAE;IACrE,kBAAkB,EAAE,mCAAmC;CACxD,CACF,CAAC;AAEF,SAAS,gCAAgC,CAGvC,KAA+C;IAC/C,OAAO,mBAAmB,CAAC;QACzB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,8BAA8B;QACpC,gBAAgB,EAAE,iCAAiC;QACnD,eAAe,EAAE,gCAAgC;QACjD,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,iCAAiC;QACzC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE;QACnD,kBAAkB,EAAE,mCAAmC;KACxD,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,gCAAgC,CAGvC,KAA+C;IAC/C,OAAO,mBAAmB,CAAC;QACzB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,8BAA8B;QACpC,gBAAgB,EAAE,iCAAiC;QACnD,eAAe,EAAE,gCAAgC;QACjD,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,iCAAiC;QACzC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE;QACnD,kBAAkB,EAAE,mCAAmC;KACxD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,gCAAgC,CAAC;IACtE,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,iCAAiC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,4BAA4B;IAClC,gBAAgB,EAAE,iCAAiC;IACnD,eAAe,EAAE,gCAAgC;IACjD,EAAE,EAAE,mBAAmB;IACvB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,iCAAiC;IACzC,IAAI,EAAE,kCAAkC;IACxC,SAAS,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;IACvE,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,kCAAkC;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gCAAgC,CAAC;IACtE,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,iCAAiC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,gCAAgC,CAAC;IACrE,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,gCAAgC;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE;QAChB,GAAG,iCAAiC;QACpC,GAAG,EAAE,oCAAoC;KAC1C;IACD,eAAe,EAAE,gCAAgC;IACjD,EAAE,EAAE,mBAAmB;IACvB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,iCAAiC;IACzC,IAAI,EAAE,2BAA2B;IACjC,SAAS,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mCAAmC,GAAG,0BAA0B,CAAC;AAC9E,MAAM,CAAC,MAAM,oCAAoC,GAAG,2BAA2B,CAAC;AAChF,MAAM,CAAC,MAAM,mCAAmC,GAAG,0BAA0B,CAAC;AAC9E,MAAM,CAAC,MAAM,oCAAoC,GAAG,2BAA2B,CAAC;AAChF,MAAM,CAAC,MAAM,qDAAqD,GAChE,4CAA4C,CAAC;AAC/C,MAAM,CAAC,MAAM,sDAAsD,GACjE,6CAA6C,CAAC;AAChD,MAAM,CAAC,MAAM,kCAAkC,GAAG,yBAAyB,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { organizationProvisioningContainerKeyringRefinement } from \"../organizationProvisioningRefinements\";\nimport {\n  ContainerCreateWithMetadataDocumentRequestSchema,\n  ContainerMutationRequestSchema,\n  ContainerReciteRequestSchema,\n  ContainerRotationRequestSchema,\n  isContainerCreateWithMetadataDocumentRequest,\n  isContainerMutationRequest,\n  isContainerRotationRequest,\n} from \"../request\";\nimport {\n  ContainerCreateWithMetadataDocumentResponseSchema,\n  ContainerDeleteResponseSchema,\n  ContainerMutationFailureResponseSchema,\n  ContainerMutationResponseSchema,\n  ContainerNotFoundErrorResponseSchema,\n  ContainerReciteResponseSchema,\n  ContainerRotationResponseSchema,\n  ErrorResponseSchema,\n  isContainerCreateWithMetadataDocumentResponse,\n  isContainerDeleteResponse,\n  isContainerMutationResponse,\n  isContainerRotationResponse,\n  PaymentRequiredErrorResponseSchema,\n  SessionFailureResponseSchema,\n} from \"../response\";\nimport { defineJsonOperation } from \"./definition\";\n\nconst EmptyContainerMutationPathParamsSchema = z.strictObject({});\n\nexport const ContainerMutationPathParamsSchema = z.strictObject({\n  containerId: z.string(),\n});\n\nexport type ContainerMutationPathParams = z.infer<\n  typeof ContainerMutationPathParamsSchema\n>;\n\nconst containerMutationFailureResponses = {\n  400: ErrorResponseSchema,\n  401: SessionFailureResponseSchema,\n  402: PaymentRequiredErrorResponseSchema,\n  403: ErrorResponseSchema,\n  404: ErrorResponseSchema,\n  409: ContainerMutationFailureResponseSchema,\n  500: ErrorResponseSchema,\n} as const;\n\nconst containerMutationFailureStatuses = [\n  400, 401, 402, 403, 404, 409, 500,\n] as const;\n\nconst containerMutationRuntimeRefinements = [\n  organizationProvisioningContainerKeyringRefinement,\n] as const;\n\nexport const createContainerOperation = defineJsonOperation({\n  auth: \"session\",\n  body: ContainerMutationRequestSchema,\n  failureResponses: containerMutationFailureResponses,\n  failureStatuses: containerMutationFailureStatuses,\n  id: \"containers.create\",\n  method: \"POST\",\n  params: EmptyContainerMutationPathParamsSchema,\n  path: \"/containers\",\n  responses: { 200: ContainerMutationResponseSchema },\n  runtimeRefinements: containerMutationRuntimeRefinements,\n});\n\nexport const createContainerWithMetadataDocumentOperation = defineJsonOperation(\n  {\n    auth: \"session\",\n    body: ContainerCreateWithMetadataDocumentRequestSchema,\n    failureResponses: {\n      ...containerMutationFailureResponses,\n      503: ErrorResponseSchema,\n    },\n    failureStatuses: [...containerMutationFailureStatuses, 503],\n    id: \"containers.withMetadataDocument.create\",\n    method: \"POST\",\n    params: EmptyContainerMutationPathParamsSchema,\n    path: \"/containers/with-metadata-document\",\n    responses: { 200: ContainerCreateWithMetadataDocumentResponseSchema },\n    runtimeRefinements: containerMutationRuntimeRefinements,\n  },\n);\n\nfunction defineContainerMutationOperation<\n  const Id extends string,\n  const Path extends `/${string}`,\n>(input: { readonly id: Id; readonly path: Path }) {\n  return defineJsonOperation({\n    auth: \"session\",\n    body: ContainerMutationRequestSchema,\n    failureResponses: containerMutationFailureResponses,\n    failureStatuses: containerMutationFailureStatuses,\n    id: input.id,\n    method: \"POST\",\n    params: ContainerMutationPathParamsSchema,\n    path: input.path,\n    responses: { 200: ContainerMutationResponseSchema },\n    runtimeRefinements: containerMutationRuntimeRefinements,\n  });\n}\n\n/**\n * Rekey, revoke, and move mint a new key epoch, so they alone may carry the\n * descendant rekeys that must commit with them.\n */\nfunction defineContainerRotationOperation<\n  const Id extends string,\n  const Path extends `/${string}`,\n>(input: { readonly id: Id; readonly path: Path }) {\n  return defineJsonOperation({\n    auth: \"session\",\n    body: ContainerRotationRequestSchema,\n    failureResponses: containerMutationFailureResponses,\n    failureStatuses: containerMutationFailureStatuses,\n    id: input.id,\n    method: \"POST\",\n    params: ContainerMutationPathParamsSchema,\n    path: input.path,\n    responses: { 200: ContainerRotationResponseSchema },\n    runtimeRefinements: containerMutationRuntimeRefinements,\n  });\n}\n\nexport const shareContainerOperation = defineContainerMutationOperation({\n  id: \"containers.share\",\n  path: \"/containers/{containerId}/share\",\n});\n\nexport const reciteContainerOperation = defineJsonOperation({\n  auth: \"session\",\n  body: ContainerReciteRequestSchema,\n  failureResponses: containerMutationFailureResponses,\n  failureStatuses: containerMutationFailureStatuses,\n  id: \"containers.recite\",\n  method: \"POST\",\n  params: ContainerMutationPathParamsSchema,\n  path: \"/containers/{containerId}/recite\",\n  responses: { 200: ContainerReciteResponseSchema },\n});\n\nexport const revokeContainerOperation = defineContainerRotationOperation({\n  id: \"containers.revoke\",\n  path: \"/containers/{containerId}/revoke\",\n});\n\nexport const rekeyContainerOperation = defineContainerRotationOperation({\n  id: \"containers.rekey\",\n  path: \"/containers/{containerId}/rekey\",\n});\n\nexport const moveContainerOperation = defineContainerRotationOperation({\n  id: \"containers.move\",\n  path: \"/containers/{containerId}/move\",\n});\n\nexport const deleteContainerOperation = defineJsonOperation({\n  auth: \"session\",\n  failureResponses: {\n    ...containerMutationFailureResponses,\n    404: ContainerNotFoundErrorResponseSchema,\n  },\n  failureStatuses: containerMutationFailureStatuses,\n  id: \"containers.delete\",\n  method: \"DELETE\",\n  params: ContainerMutationPathParamsSchema,\n  path: \"/containers/{containerId}\",\n  responses: { 200: ContainerDeleteResponseSchema },\n});\n\nexport const isContainerMutationOperationRequest = isContainerMutationRequest;\nexport const isContainerMutationOperationResponse = isContainerMutationResponse;\nexport const isContainerRotationOperationRequest = isContainerRotationRequest;\nexport const isContainerRotationOperationResponse = isContainerRotationResponse;\nexport const isCreateContainerWithMetadataDocumentOperationRequest =\n  isContainerCreateWithMetadataDocumentRequest;\nexport const isCreateContainerWithMetadataDocumentOperationResponse =\n  isContainerCreateWithMetadataDocumentResponse;\nexport const isDeleteContainerOperationResponse = isContainerDeleteResponse;\n"]}
+{"version":3,"file":"containerMutations.js","sourceRoot":"","sources":["containerMutations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kDAAkD,EAAE,MAAM,wCAAwC,CAAC;AAC5G,OAAO,EACL,gDAAgD,EAChD,8BAA8B,EAC9B,4BAA4B,EAC5B,8BAA8B,EAC9B,4CAA4C,EAC5C,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iDAAiD,EACjD,6BAA6B,EAC7B,sCAAsC,EACtC,+BAA+B,EAC/B,oCAAoC,EACpC,6BAA6B,EAC7B,+BAA+B,EAC/B,mBAAmB,EACnB,6CAA6C,EAC7C,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,sCAAsC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAMH,MAAM,iCAAiC,GAAG;IACxC,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,4BAA4B;IACjC,GAAG,EAAE,kCAAkC;IACvC,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,sCAAsC;IAC3C,GAAG,EAAE,mBAAmB;CAChB,CAAC;AAEX,MAAM,gCAAgC,GAAG;IACvC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;CACzB,CAAC;AAEX,MAAM,mCAAmC,GAAG;IAC1C,kDAAkD;CAC1C,CAAC;AAEX,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,8BAA8B;IACpC,gBAAgB,EAAE,iCAAiC;IACnD,eAAe,EAAE,gCAAgC;IACjD,EAAE,EAAE,mBAAmB;IACvB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,sCAAsC;IAC9C,IAAI,EAAE,aAAa;IACnB,SAAS,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE;IACnD,kBAAkB,EAAE,mCAAmC;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4CAA4C,GAAG,mBAAmB,CAC7E;IACE,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,gDAAgD;IACtD,gBAAgB,EAAE;QAChB,GAAG,iCAAiC;QACpC,GAAG,EAAE,mBAAmB;KACzB;IACD,eAAe,EAAE,CAAC,GAAG,gCAAgC,EAAE,GAAG,CAAC;IAC3D,EAAE,EAAE,wCAAwC;IAC5C,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,sCAAsC;IAC9C,IAAI,EAAE,oCAAoC;IAC1C,SAAS,EAAE,EAAE,GAAG,EAAE,iDAAiD,EAAE;IACrE,kBAAkB,EAAE,mCAAmC;CACxD,CACF,CAAC;AAEF,SAAS,gCAAgC,CAGvC,KAA+C;IAC/C,OAAO,mBAAmB,CAAC;QACzB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,8BAA8B;QACpC,gBAAgB,EAAE,iCAAiC;QACnD,eAAe,EAAE,gCAAgC;QACjD,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,iCAAiC;QACzC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE;QACnD,kBAAkB,EAAE,mCAAmC;KACxD,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,gCAAgC,CAGvC,KAA+C;IAC/C,OAAO,mBAAmB,CAAC;QACzB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,8BAA8B;QACpC,gBAAgB,EAAE,iCAAiC;QACnD,eAAe,EAAE,gCAAgC;QACjD,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,iCAAiC;QACzC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,EAAE,GAAG,EAAE,+BAA+B,EAAE;QACnD,kBAAkB,EAAE,mCAAmC;KACxD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,gCAAgC,CAAC;IACtE,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,iCAAiC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,4BAA4B;IAClC,gBAAgB,EAAE,iCAAiC;IACnD,eAAe,EAAE,gCAAgC;IACjD,EAAE,EAAE,mBAAmB;IACvB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,iCAAiC;IACzC,IAAI,EAAE,kCAAkC;IACxC,SAAS,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;IACvE,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,kCAAkC;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,gCAAgC,CAAC;IACtE,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,iCAAiC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,gCAAgC,CAAC;IACrE,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,gCAAgC;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;IAC1D,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE;QAChB,GAAG,iCAAiC;QACpC,GAAG,EAAE,oCAAoC;KAC1C;IACD,eAAe,EAAE,gCAAgC;IACjD,EAAE,EAAE,mBAAmB;IACvB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,iCAAiC;IACzC,IAAI,EAAE,2BAA2B;IACjC,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC3E,SAAS,EAAE,EAAE,GAAG,EAAE,6BAA6B,EAAE;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mCAAmC,GAAG,0BAA0B,CAAC;AAC9E,MAAM,CAAC,MAAM,oCAAoC,GAAG,2BAA2B,CAAC;AAChF,MAAM,CAAC,MAAM,mCAAmC,GAAG,0BAA0B,CAAC;AAC9E,MAAM,CAAC,MAAM,oCAAoC,GAAG,2BAA2B,CAAC;AAChF,MAAM,CAAC,MAAM,qDAAqD,GAChE,4CAA4C,CAAC;AAC/C,MAAM,CAAC,MAAM,sDAAsD,GACjE,6CAA6C,CAAC;AAChD,MAAM,CAAC,MAAM,kCAAkC,GAAG,yBAAyB,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { organizationProvisioningContainerKeyringRefinement } from \"../organizationProvisioningRefinements\";\nimport {\n  ContainerCreateWithMetadataDocumentRequestSchema,\n  ContainerMutationRequestSchema,\n  ContainerReciteRequestSchema,\n  ContainerRotationRequestSchema,\n  isContainerCreateWithMetadataDocumentRequest,\n  isContainerMutationRequest,\n  isContainerRotationRequest,\n} from \"../request\";\nimport {\n  ContainerCreateWithMetadataDocumentResponseSchema,\n  ContainerDeleteResponseSchema,\n  ContainerMutationFailureResponseSchema,\n  ContainerMutationResponseSchema,\n  ContainerNotFoundErrorResponseSchema,\n  ContainerReciteResponseSchema,\n  ContainerRotationResponseSchema,\n  ErrorResponseSchema,\n  isContainerCreateWithMetadataDocumentResponse,\n  isContainerDeleteResponse,\n  isContainerMutationResponse,\n  isContainerRotationResponse,\n  PaymentRequiredErrorResponseSchema,\n  SessionFailureResponseSchema,\n} from \"../response\";\nimport { defineJsonOperation } from \"./definition\";\n\nconst EmptyContainerMutationPathParamsSchema = z.strictObject({});\n\nexport const ContainerMutationPathParamsSchema = z.strictObject({\n  containerId: z.string(),\n});\n\nexport type ContainerMutationPathParams = z.infer<\n  typeof ContainerMutationPathParamsSchema\n>;\n\nconst containerMutationFailureResponses = {\n  400: ErrorResponseSchema,\n  401: SessionFailureResponseSchema,\n  402: PaymentRequiredErrorResponseSchema,\n  403: ErrorResponseSchema,\n  404: ErrorResponseSchema,\n  409: ContainerMutationFailureResponseSchema,\n  500: ErrorResponseSchema,\n} as const;\n\nconst containerMutationFailureStatuses = [\n  400, 401, 402, 403, 404, 409, 500,\n] as const;\n\nconst containerMutationRuntimeRefinements = [\n  organizationProvisioningContainerKeyringRefinement,\n] as const;\n\nexport const createContainerOperation = defineJsonOperation({\n  auth: \"session\",\n  body: ContainerMutationRequestSchema,\n  failureResponses: containerMutationFailureResponses,\n  failureStatuses: containerMutationFailureStatuses,\n  id: \"containers.create\",\n  method: \"POST\",\n  params: EmptyContainerMutationPathParamsSchema,\n  path: \"/containers\",\n  responses: { 200: ContainerMutationResponseSchema },\n  runtimeRefinements: containerMutationRuntimeRefinements,\n});\n\nexport const createContainerWithMetadataDocumentOperation = defineJsonOperation(\n  {\n    auth: \"session\",\n    body: ContainerCreateWithMetadataDocumentRequestSchema,\n    failureResponses: {\n      ...containerMutationFailureResponses,\n      503: ErrorResponseSchema,\n    },\n    failureStatuses: [...containerMutationFailureStatuses, 503],\n    id: \"containers.withMetadataDocument.create\",\n    method: \"POST\",\n    params: EmptyContainerMutationPathParamsSchema,\n    path: \"/containers/with-metadata-document\",\n    responses: { 200: ContainerCreateWithMetadataDocumentResponseSchema },\n    runtimeRefinements: containerMutationRuntimeRefinements,\n  },\n);\n\nfunction defineContainerMutationOperation<\n  const Id extends string,\n  const Path extends `/${string}`,\n>(input: { readonly id: Id; readonly path: Path }) {\n  return defineJsonOperation({\n    auth: \"session\",\n    body: ContainerMutationRequestSchema,\n    failureResponses: containerMutationFailureResponses,\n    failureStatuses: containerMutationFailureStatuses,\n    id: input.id,\n    method: \"POST\",\n    params: ContainerMutationPathParamsSchema,\n    path: input.path,\n    responses: { 200: ContainerMutationResponseSchema },\n    runtimeRefinements: containerMutationRuntimeRefinements,\n  });\n}\n\n/**\n * Rekey, revoke, and move mint a new key epoch, so they alone may carry the\n * descendant rekeys that must commit with them.\n */\nfunction defineContainerRotationOperation<\n  const Id extends string,\n  const Path extends `/${string}`,\n>(input: { readonly id: Id; readonly path: Path }) {\n  return defineJsonOperation({\n    auth: \"session\",\n    body: ContainerRotationRequestSchema,\n    failureResponses: containerMutationFailureResponses,\n    failureStatuses: containerMutationFailureStatuses,\n    id: input.id,\n    method: \"POST\",\n    params: ContainerMutationPathParamsSchema,\n    path: input.path,\n    responses: { 200: ContainerRotationResponseSchema },\n    runtimeRefinements: containerMutationRuntimeRefinements,\n  });\n}\n\nexport const shareContainerOperation = defineContainerMutationOperation({\n  id: \"containers.share\",\n  path: \"/containers/{containerId}/share\",\n});\n\nexport const reciteContainerOperation = defineJsonOperation({\n  auth: \"session\",\n  body: ContainerReciteRequestSchema,\n  failureResponses: containerMutationFailureResponses,\n  failureStatuses: containerMutationFailureStatuses,\n  id: \"containers.recite\",\n  method: \"POST\",\n  params: ContainerMutationPathParamsSchema,\n  path: \"/containers/{containerId}/recite\",\n  responses: { 200: ContainerReciteResponseSchema },\n});\n\nexport const revokeContainerOperation = defineContainerRotationOperation({\n  id: \"containers.revoke\",\n  path: \"/containers/{containerId}/revoke\",\n});\n\nexport const rekeyContainerOperation = defineContainerRotationOperation({\n  id: \"containers.rekey\",\n  path: \"/containers/{containerId}/rekey\",\n});\n\nexport const moveContainerOperation = defineContainerRotationOperation({\n  id: \"containers.move\",\n  path: \"/containers/{containerId}/move\",\n});\n\nexport const deleteContainerOperation = defineJsonOperation({\n  auth: \"session\",\n  failureResponses: {\n    ...containerMutationFailureResponses,\n    404: ContainerNotFoundErrorResponseSchema,\n  },\n  failureStatuses: containerMutationFailureStatuses,\n  id: \"containers.delete\",\n  method: \"DELETE\",\n  params: ContainerMutationPathParamsSchema,\n  path: \"/containers/{containerId}\",\n  query: z.strictObject({ requiredAncestorId: z.string().min(1).optional() }),\n  responses: { 200: ContainerDeleteResponseSchema },\n});\n\nexport const isContainerMutationOperationRequest = isContainerMutationRequest;\nexport const isContainerMutationOperationResponse = isContainerMutationResponse;\nexport const isContainerRotationOperationRequest = isContainerRotationRequest;\nexport const isContainerRotationOperationResponse = isContainerRotationResponse;\nexport const isCreateContainerWithMetadataDocumentOperationRequest =\n  isContainerCreateWithMetadataDocumentRequest;\nexport const isCreateContainerWithMetadataDocumentOperationResponse =\n  isContainerCreateWithMetadataDocumentResponse;\nexport const isDeleteContainerOperationResponse = isContainerDeleteResponse;\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tearleads/client-sdk",
-  "version": "0.1.24",
+  "version": "0.1.26",
   "description": "React-free Tearleads client runtime: local SQLite persistence, keys, sync, encrypted blobs, and domain workflows.",
   "license": "UNLICENSED",
   "repository": {

package/stores/documents/documentStore/attachmentStaging.js

@@ -1,4 +1,5 @@
 import { createBlobByteSource } from "../../../data/blobContracts.js";
+import { runSerializedDocumentBlobMutation, runSerializedSqlMutation, } from "../../../workflows/documents/index.js";
 import { assignLocalAttachmentSlots, upsertPendingAttachments, } from "./attachmentPersistence.js";
 import { setReadySnapshot } from "./state.js";
 import { isDocumentStoreSyncGenerationCurrent, } from "./syncGeneration.js";
@@ -22,21 +23,31 @@ async function deleteStagedAttachmentBytes(input) {
         state.runtime.util.log(`Documents: failed to roll back ${failedCleanupCount} staged attachment operation${failedCleanupCount === 1 ? "" : "s"}.`);
     }
 }
+/**
+ * Roll back staged bytes that no committed row references. Like orphan
+ * reclaim, check every held and pending reference under the key's lock: an
+ * overlapping reset can leave a committed key referenced only by an upload.
+ */
 export async function deleteUnreferencedStagedAttachmentBytes(input) {
-    let durableStorageKeys;
-    try {
-        const durableAttachments = await input.state.persistence.listLocalAttachments(input.generation.execSql, input.state.localId);
-        durableStorageKeys = new Set(durableAttachments.map(({ storageKey }) => storageKey));
-    }
-    catch {
-        // A failed probe cannot prove that the atomic mutation rolled back. Keep
-        // the bytes: orphan maintenance can reclaim them once storage is readable.
-        return;
+    const { execSql } = input.generation;
+    const { state } = input;
+    let failedCleanupCount = 0;
+    for (const { storageKey } of input.pendingAttachments) {
+        try {
+            await runSerializedDocumentBlobMutation(execSql, storageKey, async () => {
+                const referenced = await runSerializedSqlMutation(execSql, (lockedExecSql) => state.persistence.orphanBlobs.isReferenced(lockedExecSql, storageKey));
+                if (!referenced)
+                    await state.runtime.infra.blobStore.deleteBytes(storageKey);
+            });
+        }
+        catch {
+            // A failed probe cannot prove that the atomic mutation rolled back, so
+            // the bytes stay; a failed delete leaves them for a later sweep.
+            failedCleanupCount += 1;
+        }
     }
-    await deleteStagedAttachmentBytes({
-        pendingAttachments: input.pendingAttachments.filter(({ storageKey }) => !durableStorageKeys.has(storageKey)),
-        state: input.state,
-    });
+    if (failedCleanupCount > 0)
+        state.runtime.util.log(`Documents: failed to roll back ${failedCleanupCount} staged attachment operation${failedCleanupCount === 1 ? "" : "s"}.`);
 }
 async function writePendingAttachmentBytes(input) {
     for (const [index, pendingAttachment] of input.pendingAttachments.entries()) {

package/stores/documents/documentStore/attachmentStaging.js.map

@@ -1 +1 @@
-{"version":3,"file":"attachmentStaging.js","sourceRoot":"","sources":["attachmentStaging.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAOnE,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAA2B,gBAAgB,EAAE,MAAM,SAAS,CAAC;AACpE,OAAO,EAEL,oCAAoC,GACrC,MAAM,kBAAkB,CAAC;AAS1B,SAAS,sBAAsB,CAC7B,OAAe,EACf,kBAA0D;IAE1D,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,iBAAiB,CAAC,UAAU;QACxC,aAAa,EAAE,iBAAiB,CAAC,aAAa;QAC9C,UAAU,EAAE,IAAI;QAChB,OAAO;QACP,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;QACpC,MAAM,EAAE,iBAAiB,CAAC,MAAM;QAChC,UAAU,EAAE,iBAAiB,CAAC,UAAU;KACzC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAG1C;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,UAAU,CAC7C,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAC1C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CACjE,CACF,CAAC;IACF,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAC9C,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CACzC,CAAC,MAAM,CAAC;IACT,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,kCAAkC,kBAAkB,+BAA+B,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC1H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,KAI7D;IACC,IAAI,kBAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,kBAAkB,GACtB,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,oBAAoB,CAChD,KAAK,CAAC,UAAU,CAAC,OAAO,EACxB,KAAK,CAAC,KAAK,CAAC,OAAO,CACpB,CAAC;QACJ,kBAAkB,GAAG,IAAI,GAAG,CAC1B,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CACvD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,2EAA2E;QAC3E,OAAO;IACT,CAAC;IACD,MAAM,2BAA2B,CAAC;QAChC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,CAAC,MAAM,CACjD,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CACxD;QACD,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,KAAmC;IAEnC,KAAK,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5E,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,CACvD,iBAAiB,CAAC,UAAU,EAC5B,oBAAoB,CAAC,UAAU,CAAC,KAAK,CAAC,CACvC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAI5C;IACC,MAAM,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9D,0BAA0B,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACpD,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,gBAAgB,CACd,KAAK,EACL,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,QAAQ,CAAC,OAAO,EACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,EACnB,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAmC;IAEnC,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,gBAAgB,GAAG,sBAAsB,CAC7C,KAAK,CAAC,OAAO,EACb,kBAAkB,CACnB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAEzC,IAAI,CAAC,oCAAoC,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,2BAA2B,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,2BAA2B,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { createBlobByteSource } from \"../../../data/blobContracts\";\nimport type {\n  AttachmentStagingRows,\n  LocalAttachmentRecord,\n  PendingAttachmentRecord,\n} from \"../../../workflows/documents\";\nimport type { DocumentAttachmentUpload } from \"../types\";\nimport {\n  assignLocalAttachmentSlots,\n  upsertPendingAttachments,\n} from \"./attachmentPersistence\";\nimport { type DocumentStoreState, setReadySnapshot } from \"./state\";\nimport {\n  type DocumentStoreSyncGeneration,\n  isDocumentStoreSyncGenerationCurrent,\n} from \"./syncGeneration\";\n\ninterface StagePendingAttachmentsInput {\n  files: ReadonlyArray<DocumentAttachmentUpload>;\n  generation: DocumentStoreSyncGeneration;\n  pendingAttachments: PendingAttachmentRecord[];\n  state: DocumentStoreState;\n}\n\nfunction localAttachmentRecords(\n  localId: string,\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>,\n): LocalAttachmentRecord[] {\n  return pendingAttachments.map((pendingAttachment) => ({\n    blobId: null,\n    byteLength: pendingAttachment.byteLength,\n    contentSha256: pendingAttachment.contentSha256,\n    detachedAt: null,\n    localId,\n    mimeType: pendingAttachment.mimeType,\n    slotId: pendingAttachment.slotId,\n    storageKey: pendingAttachment.storageKey,\n  }));\n}\n\nasync function deleteStagedAttachmentBytes(input: {\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>;\n  state: DocumentStoreState;\n}) {\n  const { state } = input;\n  const cleanupResults = await Promise.allSettled(\n    input.pendingAttachments.map((attachment) =>\n      state.runtime.infra.blobStore.deleteBytes(attachment.storageKey),\n    ),\n  );\n  const failedCleanupCount = cleanupResults.filter(\n    (result) => result.status === \"rejected\",\n  ).length;\n  if (failedCleanupCount > 0) {\n    state.runtime.util.log(\n      `Documents: failed to roll back ${failedCleanupCount} staged attachment operation${failedCleanupCount === 1 ? \"\" : \"s\"}.`,\n    );\n  }\n}\n\nexport async function deleteUnreferencedStagedAttachmentBytes(input: {\n  generation: DocumentStoreSyncGeneration;\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>;\n  state: DocumentStoreState;\n}): Promise<void> {\n  let durableStorageKeys: Set<string>;\n  try {\n    const durableAttachments =\n      await input.state.persistence.listLocalAttachments(\n        input.generation.execSql,\n        input.state.localId,\n      );\n    durableStorageKeys = new Set(\n      durableAttachments.map(({ storageKey }) => storageKey),\n    );\n  } catch {\n    // A failed probe cannot prove that the atomic mutation rolled back. Keep\n    // the bytes: orphan maintenance can reclaim them once storage is readable.\n    return;\n  }\n  await deleteStagedAttachmentBytes({\n    pendingAttachments: input.pendingAttachments.filter(\n      ({ storageKey }) => !durableStorageKeys.has(storageKey),\n    ),\n    state: input.state,\n  });\n}\n\nasync function writePendingAttachmentBytes(\n  input: StagePendingAttachmentsInput,\n): Promise<void> {\n  for (const [index, pendingAttachment] of input.pendingAttachments.entries()) {\n    const sourceFile = input.files[index];\n    if (!sourceFile) continue;\n    await input.state.runtime.infra.blobStore.writeByteSource(\n      pendingAttachment.storageKey,\n      createBlobByteSource(sourceFile.bytes),\n    );\n  }\n}\n\nexport function installPendingAttachmentRows(input: {\n  localAttachments: ReadonlyArray<LocalAttachmentRecord>;\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>;\n  state: DocumentStoreState;\n}): void {\n  const { localAttachments, pendingAttachments, state } = input;\n  assignLocalAttachmentSlots(state, localAttachments);\n  upsertPendingAttachments(state, pendingAttachments);\n  if (state.doc) {\n    setReadySnapshot(\n      state,\n      state.doc,\n      state.snapshot.syncing,\n      state.snapshot.text,\n      state.snapshot.structuredFields,\n    );\n  }\n}\n\nexport async function stagePendingAttachments(\n  input: StagePendingAttachmentsInput,\n): Promise<AttachmentStagingRows | null> {\n  const { pendingAttachments, state } = input;\n  const localAttachments = localAttachmentRecords(\n    state.localId,\n    pendingAttachments,\n  );\n\n  try {\n    await writePendingAttachmentBytes(input);\n\n    if (!isDocumentStoreSyncGenerationCurrent(state, input.generation)) {\n      await deleteStagedAttachmentBytes({ pendingAttachments, state });\n      return null;\n    }\n    return { localAttachments, pendingAttachments };\n  } catch (error) {\n    await deleteStagedAttachmentBytes({ pendingAttachments, state });\n    throw error;\n  }\n}\n"]}
+{"version":3,"file":"attachmentStaging.js","sourceRoot":"","sources":["attachmentStaging.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAIL,iCAAiC,EACjC,wBAAwB,GACzB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAA2B,gBAAgB,EAAE,MAAM,SAAS,CAAC;AACpE,OAAO,EAEL,oCAAoC,GACrC,MAAM,kBAAkB,CAAC;AAS1B,SAAS,sBAAsB,CAC7B,OAAe,EACf,kBAA0D;IAE1D,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,iBAAiB,CAAC,UAAU;QACxC,aAAa,EAAE,iBAAiB,CAAC,aAAa;QAC9C,UAAU,EAAE,IAAI;QAChB,OAAO;QACP,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;QACpC,MAAM,EAAE,iBAAiB,CAAC,MAAM;QAChC,UAAU,EAAE,iBAAiB,CAAC,UAAU;KACzC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAG1C;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,UAAU,CAC7C,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAC1C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,CACjE,CACF,CAAC;IACF,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAC9C,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CACzC,CAAC,MAAM,CAAC;IACT,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,kCAAkC,kBAAkB,+BAA+B,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC1H,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAAC,KAI7D;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC;IACrC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,KAAK,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,iCAAiC,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE;gBACtE,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAC/C,OAAO,EACP,CAAC,aAAa,EAAE,EAAE,CAChB,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,YAAY,CACxC,aAAa,EACb,UAAU,CACX,CACJ,CAAC;gBACF,IAAI,CAAC,UAAU;oBACb,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,iEAAiE;YACjE,kBAAkB,IAAI,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,IAAI,kBAAkB,GAAG,CAAC;QACxB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CACpB,kCAAkC,kBAAkB,+BAA+B,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAC1H,CAAC;AACN,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,KAAmC;IAEnC,KAAK,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5E,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,CACvD,iBAAiB,CAAC,UAAU,EAC5B,oBAAoB,CAAC,UAAU,CAAC,KAAK,CAAC,CACvC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAI5C;IACC,MAAM,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC9D,0BAA0B,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACpD,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,gBAAgB,CACd,KAAK,EACL,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,QAAQ,CAAC,OAAO,EACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,EACnB,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAmC;IAEnC,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,gBAAgB,GAAG,sBAAsB,CAC7C,KAAK,CAAC,OAAO,EACb,kBAAkB,CACnB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,2BAA2B,CAAC,KAAK,CAAC,CAAC;QAEzC,IAAI,CAAC,oCAAoC,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,2BAA2B,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,2BAA2B,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import { createBlobByteSource } from \"../../../data/blobContracts\";\nimport {\n  type AttachmentStagingRows,\n  type LocalAttachmentRecord,\n  type PendingAttachmentRecord,\n  runSerializedDocumentBlobMutation,\n  runSerializedSqlMutation,\n} from \"../../../workflows/documents\";\nimport type { DocumentAttachmentUpload } from \"../types\";\nimport {\n  assignLocalAttachmentSlots,\n  upsertPendingAttachments,\n} from \"./attachmentPersistence\";\nimport { type DocumentStoreState, setReadySnapshot } from \"./state\";\nimport {\n  type DocumentStoreSyncGeneration,\n  isDocumentStoreSyncGenerationCurrent,\n} from \"./syncGeneration\";\n\ninterface StagePendingAttachmentsInput {\n  files: ReadonlyArray<DocumentAttachmentUpload>;\n  generation: DocumentStoreSyncGeneration;\n  pendingAttachments: PendingAttachmentRecord[];\n  state: DocumentStoreState;\n}\n\nfunction localAttachmentRecords(\n  localId: string,\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>,\n): LocalAttachmentRecord[] {\n  return pendingAttachments.map((pendingAttachment) => ({\n    blobId: null,\n    byteLength: pendingAttachment.byteLength,\n    contentSha256: pendingAttachment.contentSha256,\n    detachedAt: null,\n    localId,\n    mimeType: pendingAttachment.mimeType,\n    slotId: pendingAttachment.slotId,\n    storageKey: pendingAttachment.storageKey,\n  }));\n}\n\nasync function deleteStagedAttachmentBytes(input: {\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>;\n  state: DocumentStoreState;\n}) {\n  const { state } = input;\n  const cleanupResults = await Promise.allSettled(\n    input.pendingAttachments.map((attachment) =>\n      state.runtime.infra.blobStore.deleteBytes(attachment.storageKey),\n    ),\n  );\n  const failedCleanupCount = cleanupResults.filter(\n    (result) => result.status === \"rejected\",\n  ).length;\n  if (failedCleanupCount > 0) {\n    state.runtime.util.log(\n      `Documents: failed to roll back ${failedCleanupCount} staged attachment operation${failedCleanupCount === 1 ? \"\" : \"s\"}.`,\n    );\n  }\n}\n\n/**\n * Roll back staged bytes that no committed row references. Like orphan\n * reclaim, check every held and pending reference under the key's lock: an\n * overlapping reset can leave a committed key referenced only by an upload.\n */\nexport async function deleteUnreferencedStagedAttachmentBytes(input: {\n  generation: DocumentStoreSyncGeneration;\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>;\n  state: DocumentStoreState;\n}): Promise<void> {\n  const { execSql } = input.generation;\n  const { state } = input;\n  let failedCleanupCount = 0;\n  for (const { storageKey } of input.pendingAttachments) {\n    try {\n      await runSerializedDocumentBlobMutation(execSql, storageKey, async () => {\n        const referenced = await runSerializedSqlMutation(\n          execSql,\n          (lockedExecSql) =>\n            state.persistence.orphanBlobs.isReferenced(\n              lockedExecSql,\n              storageKey,\n            ),\n        );\n        if (!referenced)\n          await state.runtime.infra.blobStore.deleteBytes(storageKey);\n      });\n    } catch {\n      // A failed probe cannot prove that the atomic mutation rolled back, so\n      // the bytes stay; a failed delete leaves them for a later sweep.\n      failedCleanupCount += 1;\n    }\n  }\n  if (failedCleanupCount > 0)\n    state.runtime.util.log(\n      `Documents: failed to roll back ${failedCleanupCount} staged attachment operation${failedCleanupCount === 1 ? \"\" : \"s\"}.`,\n    );\n}\n\nasync function writePendingAttachmentBytes(\n  input: StagePendingAttachmentsInput,\n): Promise<void> {\n  for (const [index, pendingAttachment] of input.pendingAttachments.entries()) {\n    const sourceFile = input.files[index];\n    if (!sourceFile) continue;\n    await input.state.runtime.infra.blobStore.writeByteSource(\n      pendingAttachment.storageKey,\n      createBlobByteSource(sourceFile.bytes),\n    );\n  }\n}\n\nexport function installPendingAttachmentRows(input: {\n  localAttachments: ReadonlyArray<LocalAttachmentRecord>;\n  pendingAttachments: ReadonlyArray<PendingAttachmentRecord>;\n  state: DocumentStoreState;\n}): void {\n  const { localAttachments, pendingAttachments, state } = input;\n  assignLocalAttachmentSlots(state, localAttachments);\n  upsertPendingAttachments(state, pendingAttachments);\n  if (state.doc) {\n    setReadySnapshot(\n      state,\n      state.doc,\n      state.snapshot.syncing,\n      state.snapshot.text,\n      state.snapshot.structuredFields,\n    );\n  }\n}\n\nexport async function stagePendingAttachments(\n  input: StagePendingAttachmentsInput,\n): Promise<AttachmentStagingRows | null> {\n  const { pendingAttachments, state } = input;\n  const localAttachments = localAttachmentRecords(\n    state.localId,\n    pendingAttachments,\n  );\n\n  try {\n    await writePendingAttachmentBytes(input);\n\n    if (!isDocumentStoreSyncGenerationCurrent(state, input.generation)) {\n      await deleteStagedAttachmentBytes({ pendingAttachments, state });\n      return null;\n    }\n    return { localAttachments, pendingAttachments };\n  } catch (error) {\n    await deleteStagedAttachmentBytes({ pendingAttachments, state });\n    throw error;\n  }\n}\n"]}

package/stores/documents/documentStore/attachments.js

@@ -178,9 +178,8 @@ function installCommittedAttachmentRemoval(input) {
         return;
     state.pendingAttachments = state.pendingAttachments.filter((attachment) => attachment.slotId !== slotId || attachment.storageKey !== storageKey);
     // The committed removal queued this key. A reset can leave another document
-    // uploading from the same copy, even though this document is local-only.
-    if (!input.syncedAttachment)
-        void runDocumentOrphanMaintenance(state);
+    // uploading from the same copy, and a pending-only slot leaves no marker.
+    void runDocumentOrphanMaintenance(state);
     if (input.syncedAttachment ||
         state.attachmentStorageKeyBySlotId[slotId] !== storageKey) {
         return;
@@ -203,7 +202,10 @@ async function persistRemovedAttachment(state, slotId, writeGeneration) {
     if (!existingAttachment) {
         return;
     }
-    const storageKey = state.attachmentStorageKeyBySlotId[slotId];
+    // After a reset, a store opened cold holds the slot only as a pending upload.
+    const storageKey = state.attachmentStorageKeyBySlotId[slotId] ??
+        state.pendingAttachments.find((attachment) => attachment.slotId === slotId)
+            ?.storageKey;
     if (!isAttachmentWriteGenerationCurrent(state, writeGeneration) ||
         state.doc !== currentDoc)
         return;