@tearleads/client-sdk 0.1.28 → 0.1.30

package/internal/api-client/apiRequestMetrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiRequestMetrics.js","sourceRoot":"","sources":["apiRequestMetrics.ts"],"names":[],"mappings":"AA2BA,MAAM,WAAW,GAAqB;IACpC,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,CAAC;IACZ,MAAM,EAAE,CAAC;IACT,SAAS,EAAE,CAAC;CACb,CAAC;AAEF,SAAS,aAAa;IACpB,OAAO,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IACX,MAAM,GAAG,IAAI,GAAG,EAA4C,CAAC;IAC7D,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;IAClC,WAAW,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEhE,WAAW,GAAG,CAAC,QAAuB,EAA6B,EAAE;QACnE,IAAI,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,aAAa,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,SAAS,GAAG,CAAC,QAAoB,EAAgB,EAAE;QACjD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,KAAK,CAAC,QAAuB;QAC3B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED,KAAK,CACH,QAAuB,EACvB,SAAwB;QAExB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CACtC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CACxE,CAAC;QACF,IAAI,GAAG,GAA6B;YAClC,GAAG,CAAC,QAAQ,IAAI,WAAW,CAAC;YAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;YACjC,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;SACxC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE;YAC7C,KAAK,EAAE,QAAQ,CAAC,KAAK,GAAG,CAAC;YACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC;SAChC,CAAC,CAAC;QACH,2EAA2E;QAC3E,wEAAwE;QACxE,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,OAAO,CAAC,OAAO,EAAE,EAAE;YACjB,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,UAAU;gBAAE,OAAO;YACjE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CACrC,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CACjE,CAAC;YACF,IAAI,CAAC,QAAQ;gBAAE,OAAO;YACtB,GAAG,GAAG;gBACJ,GAAG,QAAQ;gBACX,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC;gBAC/B,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;aACjC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE;gBAC5C,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC;gBAC9B,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;aAChC,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAEO,MAAM,CACZ,QAAuB,EACvB,QAAmC,EACnC,QAA8C,EAC9C,GAA6B,EAC7B,MAAiC;QAEjC,MAAM,SAAS,GAAG,QAAQ;YACxB,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACnC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CACzC;YACH,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACjC,SAAS,CAAC,IAAI,CACZ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;YACxB,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,aAAa,CACzC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,EAC/B,IAAI,CACL,CACJ,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAEO,MAAM;QACZ,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,yDAAyD;YACzD,IAAI,CAAC;gBACH,QAAQ,EAAE,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;CACF","sourcesContent":["import type { HttpOperation } from \"@tearleads/validators/operation\";\n\nexport interface ApiRequestCounts {\n  readonly total: number;\n  readonly inFlight: number;\n  readonly succeeded: number;\n  readonly failed: number;\n  readonly cancelled: number;\n}\n\nexport interface ApiRequestEndpointCounts extends ApiRequestCounts {\n  readonly method: string;\n  readonly path: string;\n}\n\nexport interface ApiRequestMetricsSnapshot extends ApiRequestCounts {\n  readonly startedAt: string;\n  readonly endpoints: readonly ApiRequestEndpointCounts[];\n}\n\nexport interface ApiRequestInstrumentation {\n  readonly metrics: ApiRequestMetrics;\n  readonly getIdentity: () => string | null;\n}\n\ntype Outcome = \"succeeded\" | \"failed\" | \"cancelled\";\n\nconst emptyCounts: ApiRequestCounts = {\n  total: 0,\n  inFlight: 0,\n  succeeded: 0,\n  failed: 0,\n  cancelled: 0,\n};\n\nfunction emptySnapshot(): ApiRequestMetricsSnapshot {\n  return { ...emptyCounts, startedAt: new Date().toISOString(), endpoints: [] };\n}\n\n/**\n * In-memory HTTP attempt counts, partitioned by identity at dispatch time.\n * Only operation templates are retained: no URLs, queries, bodies or tokens.\n * Hosts may reuse this store across client lifetimes until a page reload.\n */\nexport class ApiRequestMetrics {\n  private readonly scopes = new Map<string | null, ApiRequestMetricsSnapshot>();\n  private readonly listeners = new Set<() => void>();\n  private readonly generations = new Map<string | null, number>();\n\n  getSnapshot = (identity: string | null): ApiRequestMetricsSnapshot => {\n    let snapshot = this.scopes.get(identity);\n    if (!snapshot) {\n      snapshot = emptySnapshot();\n      this.scopes.set(identity, snapshot);\n    }\n    return snapshot;\n  };\n\n  subscribe = (listener: () => void): (() => void) => {\n    this.listeners.add(listener);\n    return () => this.listeners.delete(listener);\n  };\n\n  reset(identity: string | null): void {\n    this.generations.set(identity, (this.generations.get(identity) ?? 0) + 1);\n    this.scopes.set(identity, emptySnapshot());\n    this.notify();\n  }\n\n  begin(\n    identity: string | null,\n    operation: HttpOperation,\n  ): (outcome: Outcome) => void {\n    const generation = this.generations.get(identity) ?? 0;\n    const previous = this.getSnapshot(identity);\n    const existing = previous.endpoints.find(\n      (row) => row.method === operation.method && row.path === operation.path,\n    );\n    let row: ApiRequestEndpointCounts = {\n      ...(existing ?? emptyCounts),\n      method: operation.method,\n      path: operation.path,\n      total: (existing?.total ?? 0) + 1,\n      inFlight: (existing?.inFlight ?? 0) + 1,\n    };\n    this.update(identity, previous, existing, row, {\n      total: previous.total + 1,\n      inFlight: previous.inFlight + 1,\n    });\n    // Reset replaces the scope's endpoints. Capture a generation independently\n    // of snapshots, which are replaced for every concurrent request update.\n    let completed = false;\n    return (outcome) => {\n      if (completed) return;\n      completed = true;\n      if ((this.generations.get(identity) ?? 0) !== generation) return;\n      const current = this.getSnapshot(identity);\n      const endpoint = current.endpoints.find(\n        (candidate) =>\n          candidate.method === row.method && candidate.path === row.path,\n      );\n      if (!endpoint) return;\n      row = {\n        ...endpoint,\n        inFlight: endpoint.inFlight - 1,\n        [outcome]: endpoint[outcome] + 1,\n      };\n      this.update(identity, current, endpoint, row, {\n        inFlight: current.inFlight - 1,\n        [outcome]: current[outcome] + 1,\n      });\n    };\n  }\n\n  private update(\n    identity: string | null,\n    previous: ApiRequestMetricsSnapshot,\n    existing: ApiRequestEndpointCounts | undefined,\n    row: ApiRequestEndpointCounts,\n    counts: Partial<ApiRequestCounts>,\n  ): void {\n    const endpoints = existing\n      ? previous.endpoints.map((candidate) =>\n          candidate === existing ? row : candidate,\n        )\n      : [...previous.endpoints, row];\n    endpoints.sort(\n      (left, right) =>\n        right.total - left.total ||\n        `${left.method} ${left.path}`.localeCompare(\n          `${right.method} ${right.path}`,\n          \"en\",\n        ),\n    );\n    this.scopes.set(identity, { ...previous, ...counts, endpoints });\n    this.notify();\n  }\n\n  private notify(): void {\n    for (const listener of this.listeners) {\n      // Instrumentation must never change a request's outcome.\n      try {\n        listener();\n      } catch {\n        /* A broken observer cannot block HTTP. */\n      }\n    }\n  }\n}\n"]}

package/internal/api-client/apiRequestRuntime.d.ts

@@ -1,7 +1,9 @@
+import type { ApiRequestInstrumentation } from "./apiRequestMetrics.js";
 import type { HttpMethod, OperationRequestFn, OperationRequestResultFn, OperationResponseRequestFn, RequestFailure } from "./types.js";
 type ExpiredHandler = () => boolean | Promise<boolean>;
 type PaymentRequiredHandler = (organizationId: string | null) => void;
 export declare class ApiRequestRuntime {
+    private readonly instrumentation?;
     private authToken;
     private readonly sessionRenewals;
     private readonly baseUrl;
@@ -15,7 +17,7 @@ export declare class ApiRequestRuntime {
     readonly request: OperationRequestFn;
     readonly requestResult: OperationRequestResultFn;
     readonly responseRequest: OperationResponseRequestFn;
-    constructor(baseUrl?: string | null);
+    constructor(baseUrl?: string | null, instrumentation?: ApiRequestInstrumentation | undefined);
     /**
      * The bytes a login challenge is signed as, bound to the API this client
      * addresses. A relative base URL resolves against the page, as its requests

package/internal/api-client/apiRequestRuntime.js

@@ -1,10 +1,12 @@
 import { authChallengeSigningBytes, canonicalAuthOrigin, } from "../crypto/index.js";
 import { apiVersionHeaderName, parseApiVersion, } from "../validators/operation/index.js";
+import { measureApiRequest } from "./measureApiRequest.js";
 import { bindPrototypeMethods, describeErrorResponse, errorMessage, hasHeader, isSuccessfulResponse, normalizeApiBaseUrl, requestFailureKey, } from "./requestInternals.js";
 import { responseBodyFailure } from "./responseBodyFailure.js";
 import { shouldRetryAfterSessionExpired } from "./sessionRefresh.js";
 import { SessionRenewalTracker } from "./sessionRenewal.js";
 export class ApiRequestRuntime {
+    instrumentation;
     authToken = null;
     sessionRenewals = new SessionRenewalTracker(() => this.authToken);
     baseUrl;
@@ -18,7 +20,8 @@ export class ApiRequestRuntime {
     request;
     requestResult;
     responseRequest;
-    constructor(baseUrl) {
+    constructor(baseUrl, instrumentation) {
+        this.instrumentation = instrumentation;
         this.baseUrl = normalizeApiBaseUrl(baseUrl);
         bindPrototypeMethods(this, ApiRequestRuntime.prototype);
         this.request = this.makeRequest;
@@ -157,7 +160,7 @@ export class ApiRequestRuntime {
     }
     async makeResponseRequest(path, method, body, options = {}, additionalSuccessStatuses, failureOperation) {
         const authToken = this.authToken;
-        const responseResult = await this.fetchResponseRequest(path, method, body, options, authToken);
+        const responseResult = await this.fetchResponseRequest(path, method, body, options, authToken, failureOperation);
         if (!responseResult.ok) {
             return responseResult;
         }
@@ -194,10 +197,9 @@ export class ApiRequestRuntime {
                     path,
                     response,
                 });
-            const retryResult = await this.fetchResponseRequest(path, method, body, options, retryAuthToken);
-            if (!retryResult.ok) {
+            const retryResult = await this.fetchResponseRequest(path, method, body, options, retryAuthToken, failureOperation);
+            if (!retryResult.ok)
                 return retryResult;
-            }
             const retryResponse = retryResult.data;
             if (isSuccessfulResponse(retryResponse, additionalSuccessStatuses)) {
                 this.requestFailuresByKey.delete(requestFailureKey({ method, path }));
@@ -221,7 +223,7 @@ export class ApiRequestRuntime {
             response,
         });
     }
-    async fetchResponseRequest(path, method, body, options, authToken) {
+    async fetchResponseRequest(path, method, body, options, authToken, operation) {
         const reportErrors = options.reportErrors ?? true;
         const init = {
             method,
@@ -236,7 +238,7 @@ export class ApiRequestRuntime {
         }
         let response;
         try {
-            response = await fetch(`${this.baseUrl}${path}`, init);
+            response = await measureApiRequest(this.instrumentation, operation, () => fetch(`${this.baseUrl}${path}`, init), options.signal);
         }
         catch (error) {
             const cancelled = options.signal?.aborted === true;

package/internal/api-client/apiRequestRuntime.js.map

@@ -1 +1 @@
-{"version":3,"file":"apiRequestRuntime.js","sourceRoot":"","sources":["apiRequestRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,eAAe,GAChB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EAErB,YAAY,EACZ,SAAS,EACT,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAiBzD,MAAM,OAAO,iBAAiB;IACpB,SAAS,GAAkB,IAAI,CAAC;IACvB,eAAe,GAAG,IAAI,qBAAqB,CAC1D,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CACrB,CAAC;IACe,OAAO,CAAS;IACzB,OAAO,GAAuC,IAAI,CAAC;IACnD,cAAc,GAAwB,IAAI,CAAC;IAC3C,gBAAgB,GAAwB,IAAI,CAAC;IAC7C,YAAY,GAAuC,IAAI,CAAC;IACxD,gBAAgB,GAA0B,IAAI,CAAC;IAC/C,iBAAiB,GAAkC,IAAI,CAAC;IAC/C,oBAAoB,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjE,OAAO,CAAqB;IAC5B,aAAa,CAA2B;IACxC,eAAe,CAA6B;IAErD,YAAY,OAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC5C,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC7D,aAAa,EAAE,IAAI,CAAC,4BAA4B;SACjD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,YAAoB,EAAE,WAAmB;QAC1D,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,mBAAmB,CAC7B,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAC7D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,yBAAyB,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,UAAU,CAAC,OAA2C;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,iBAAiB,CAAC,OAA4B;QAC5C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,mBAAmB,CAAC,OAA4B;QAC9C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,kEAAkE;IAClE,eAAe,CAAC,OAA2C;QACzD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,mBAAmB,CAAC,OAA8B;QAChD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,oBAAoB,CAAC,OAAsC;QACzD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC;IACnC,CAAC;IAED,YAAY,CAAC,KAAoB;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;QACzC,IAAI,OAAO;YAAE,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,iBAAiB,CAAC,KAA2C;QAC3D,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;IACzE,CAAC;IAEO,YAAY,CAClB,IAA6B,EAC7B,OAA2C,EAC3C,SAAwB;QAExB,OAAO;YACL,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC;gBACjE,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACxC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,IAAY,EACZ,SAAyC,EACzC,MAAkB,EAClB,IAA6B,EAC7B,OAAyC,EACzC,gBAAmD;QAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CACzC,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,gBAAgB,CACjB,CAAC;QACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAEO,cAAc,CAAC,KAWtB;QACC,MAAM,OAAO,GAAmB;YAC9B,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,GAAG,EAAE;gBACX,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;oBAAE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,mBAAmB;gBAC3B,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,oBAAoB;gBAC5B,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAC3B,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAC7D,OAAO,CACR,CAAC;QAEF,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,IAAY,EACZ,SAAyC,EACzC,MAAkB,EAClB,IAA6B,EAC7B,UAAgC,EAAE,EAClC,gBAAmD;QAEnD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACnD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,EAAE,EACF,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QAClD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAChE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,GAAG,MAAM,IAAI,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE;gBAChD,MAAM;gBACN,IAAI;gBACJ,YAAY;gBACZ,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,8BAA8B,IAAI,EAAE;gBAC7C,MAAM;gBACN,IAAI;gBACJ,YAAY;gBACZ,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,IAAY,EACZ,MAAkB,EAClB,IAA6B,EAC7B,UAAgC,EAAE,EAClC,yBAA4C,EAC5C,gBAA2D;QAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACpD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,CACV,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,IAAI,oBAAoB,CAAC,QAAQ,EAAE,yBAAyB,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACtE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAClD,QAAQ,EACR,gBAAgB,EAChB,OAAO,CAAC,qCAAqC,CAC9C,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,8BAA8B,CAAC;YACvD,SAAS;YACT,IAAI;YACJ,IAAI,EAAE,gBAAgB,CAAC,IAAI;YAC3B,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS;YACzC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAClC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC;YACnE,OAAO;YACP,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC;YACvE,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC;YACjD,cAAc,EAAE,QAAQ,CAAC,MAAM;SAChC,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACpE,wEAAwE;QACxE,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;YAClC,IAAI,OAAO,CAAC,qBAAqB,KAAK,YAAY;gBAChD,OAAO,IAAI,CAAC,WAAW,CAAC;oBACtB,gBAAgB;oBAChB,gBAAgB;oBAChB,MAAM;oBACN,OAAO,EAAE;wBACP,GAAG,OAAO;wBACV,YAAY,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;qBAC9D;oBACD,IAAI;oBACJ,QAAQ;iBACT,CAAC,CAAC;YACL,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACjD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,cAAc,CACf,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;gBACpB,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC;YACvC,IAAI,oBAAoB,CAAC,aAAa,EAAE,yBAAyB,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC3C,CAAC;YAED,OAAO,IAAI,CAAC,WAAW,CAAC;gBACtB,gBAAgB,EAAE,MAAM,qBAAqB,CAC3C,aAAa,EACb,gBAAgB,EAChB,OAAO,CAAC,qCAAqC,CAC9C;gBACD,gBAAgB;gBAChB,MAAM;gBACN,OAAO;gBACP,IAAI;gBACJ,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC;YACtB,gBAAgB;YAChB,gBAAgB;YAChB,MAAM;YACN,OAAO;YACP,IAAI;YACJ,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,IAAY,EACZ,MAAkB,EAClB,IAA6B,EAC7B,OAA6B,EAC7B,SAAwB;QAExB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QAClD,MAAM,IAAI,GAAsC;YAC9C,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC;YAC5D,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,IAAI,YAAY,cAAc,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;YACnD,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBACzC,OAAO,EAAE,GAAG,MAAM,IAAI,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE;gBACpD,MAAM;gBACN,IAAI;gBACJ,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;gBAC9C,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,EAAE;aACf,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,eAAe,CAChC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAC3C,CAAC;QACF,IAAI,UAAU,KAAK,IAAI;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAEO,WAAW,CAAC,KAOnB;QACC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;QACzD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QACxD,IACE,CAAC,SAAS;YACV,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;YAC7B,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC;YAC9C,KAAK,CAAC,gBAAgB,CAAC,6BAA6B,KAAK,SAAS;YAClE,KAAK,CAAC,gBAAgB,CAAC,6BAA6B;gBAClD,KAAK,CAAC,OAAO,CAAC,qCAAqC,EACrD,CAAC;YACD,IAAI,CAAC,iBAAiB,EAAE,CACtB,KAAK,CAAC,gBAAgB,CAAC,6BAA6B,CACrD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;YACzB,GAAG,CAAC,SAAS;gBACX,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBAC7B,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,IAAI;oBACpC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;YACtC,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE;YAC/H,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,CAAC,SAAS,IAAI,YAAY;YACxC,oBAAoB,EAAE,KAAK,CAAC,gBAAgB,CAAC,oBAAoB;YACjE,mBAAmB,EAAE,KAAK,CAAC,gBAAgB,CAAC,mBAAmB;YAC/D,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC7B,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;SACtC,CAAC,CAAC;IACL,CAAC;IAEO,4BAA4B,CAClC,KAA4C;QAE5C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;YACzB,GAAG,KAAK;YACR,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI;YACjD,mBAAmB,EAAE,SAAS;SAC/B,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import {\n  authChallengeSigningBytes,\n  canonicalAuthOrigin,\n} from \"@tearleads/crypto\";\nimport {\n  apiVersionHeaderName,\n  parseApiVersion,\n} from \"@tearleads/validators/operation\";\nimport {\n  bindPrototypeMethods,\n  describeErrorResponse,\n  type ErrorResponseDescription,\n  errorMessage,\n  hasHeader,\n  isSuccessfulResponse,\n  normalizeApiBaseUrl,\n  requestFailureKey,\n} from \"./requestInternals\";\nimport { responseBodyFailure } from \"./responseBodyFailure\";\nimport { shouldRetryAfterSessionExpired } from \"./sessionRefresh\";\nimport { SessionRenewalTracker } from \"./sessionRenewal\";\nimport type {\n  HttpMethod,\n  OperationRequestFn,\n  OperationRequestResultFn,\n  OperationResponseRequestFn,\n  RequestBody,\n  RequestFailure,\n  RequestFailureKind,\n  RequestResult,\n  RequestResultOptions,\n  ResponseRequestValidationFailureInput,\n} from \"./types\";\n\ntype ExpiredHandler = () => boolean | Promise<boolean>;\ntype PaymentRequiredHandler = (organizationId: string | null) => void;\n\nexport class ApiRequestRuntime {\n  private authToken: string | null = null;\n  private readonly sessionRenewals = new SessionRenewalTracker(\n    () => this.authToken,\n  );\n  private readonly baseUrl: string;\n  private onError: ((message: string) => void) | null = null;\n  private onNetworkError: (() => void) | null = null;\n  private onNetworkSuccess: (() => void) | null = null;\n  private onApiVersion: ((version: number) => void) | null = null;\n  private onSessionExpired: ExpiredHandler | null = null;\n  private onPaymentRequired: PaymentRequiredHandler | null = null;\n  private readonly requestFailuresByKey = new Map<string, RequestFailure>();\n  readonly request: OperationRequestFn;\n  readonly requestResult: OperationRequestResultFn;\n  readonly responseRequest: OperationResponseRequestFn;\n\n  constructor(baseUrl?: string | null) {\n    this.baseUrl = normalizeApiBaseUrl(baseUrl);\n    bindPrototypeMethods(this, ApiRequestRuntime.prototype);\n    this.request = this.makeRequest;\n    this.requestResult = this.makeRequestResult;\n    this.responseRequest = Object.assign(this.makeResponseRequest, {\n      reportFailure: this.reportResponseRequestFailure,\n    });\n  }\n\n  /**\n   * The bytes a login challenge is signed as, bound to the API this client\n   * addresses. A relative base URL resolves against the page, as its requests\n   * do; with neither, there is no API origin to sign for.\n   */\n  authChallengeBytes(challengeHex: string, fingerprint: string): Uint8Array {\n    let apiOrigin: string;\n    try {\n      apiOrigin = canonicalAuthOrigin(\n        new URL(this.baseUrl || \"/\", globalThis.location?.href).href,\n      );\n    } catch {\n      throw new Error(\"The API origin is unavailable for authentication\");\n    }\n    return authChallengeSigningBytes({ apiOrigin, challengeHex, fingerprint });\n  }\n\n  setOnError(handler: ((message: string) => void) | null): void {\n    this.onError = handler;\n  }\n\n  setOnNetworkError(handler: (() => void) | null): void {\n    this.onNetworkError = handler;\n  }\n\n  setOnNetworkSuccess(handler: (() => void) | null): void {\n    this.onNetworkSuccess = handler;\n  }\n\n  /** Receives the build named by each response that carries one. */\n  setOnApiVersion(handler: ((version: number) => void) | null): void {\n    this.onApiVersion = handler;\n  }\n\n  setOnSessionExpired(handler: ExpiredHandler | null): void {\n    this.onSessionExpired = handler;\n  }\n\n  setOnPaymentRequired(handler: PaymentRequiredHandler | null): void {\n    this.onPaymentRequired = handler;\n  }\n\n  setAuthToken(token: string | null): boolean {\n    const changed = this.authToken !== token;\n    if (changed) this.sessionRenewals.tokenChanged();\n    this.authToken = token;\n    return changed;\n  }\n\n  getAuthToken(): string | null {\n    return this.authToken;\n  }\n\n  getRequestFailure(input: { method: HttpMethod; path: string }) {\n    return this.requestFailuresByKey.get(requestFailureKey(input)) ?? null;\n  }\n\n  private buildHeaders(\n    body: RequestBody | undefined,\n    headers: Record<string, string> | undefined,\n    authToken: string | null,\n  ): Record<string, string> {\n    return {\n      ...(authToken ? { Authorization: `Bearer ${authToken}` } : {}),\n      ...(typeof body === \"string\" && !hasHeader(headers, \"Content-Type\")\n        ? { \"Content-Type\": \"application/json\" }\n        : {}),\n      ...headers,\n    };\n  }\n\n  private async makeRequest<T>(\n    path: string,\n    validator: (value: unknown) => value is T,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions | undefined,\n    failureOperation: Parameters<OperationRequestFn>[5],\n  ): Promise<T | null> {\n    const result = await this.makeRequestResult(\n      path,\n      validator,\n      method,\n      body,\n      options,\n      failureOperation,\n    );\n    return result.ok ? result.data : null;\n  }\n\n  private requestFailure(input: {\n    code?: string | undefined;\n    kind: RequestFailureKind;\n    message: string;\n    method: HttpMethod;\n    path: string;\n    reportErrors: boolean;\n    requiredContainerIds?: RequestFailure[\"requiredContainerIds\"];\n    stalePrincipalHeads: RequestFailure[\"stalePrincipalHeads\"];\n    status: number | null;\n    statusText: string;\n  }): RequestFailure {\n    const failure: RequestFailure = {\n      ...(input.code === undefined ? {} : { code: input.code }),\n      kind: input.kind,\n      message: input.message,\n      method: input.method,\n      ok: false,\n      path: input.path,\n      report: () => {\n        if (input.kind !== \"cancelled\") this.onError?.(input.message);\n      },\n      status: input.status,\n      statusText: input.statusText,\n      ...(input.stalePrincipalHeads\n        ? { stalePrincipalHeads: input.stalePrincipalHeads }\n        : {}),\n      ...(input.requiredContainerIds\n        ? { requiredContainerIds: input.requiredContainerIds }\n        : {}),\n    };\n    this.requestFailuresByKey.set(\n      requestFailureKey({ method: input.method, path: input.path }),\n      failure,\n    );\n\n    if (input.reportErrors) {\n      failure.report();\n    }\n\n    return failure;\n  }\n\n  private async makeRequestResult<T>(\n    path: string,\n    validator: (value: unknown) => value is T,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions = {},\n    failureOperation: Parameters<OperationRequestFn>[5],\n  ): Promise<RequestResult<T>> {\n    const responseResult = await this.makeResponseRequest(\n      path,\n      method,\n      body,\n      options,\n      [],\n      failureOperation,\n    );\n    if (!responseResult.ok) {\n      return responseResult;\n    }\n\n    const response = responseResult.data;\n    const reportErrors = options.reportErrors ?? true;\n    let data: unknown;\n    try {\n      data = await response.json();\n    } catch (error) {\n      const failure = responseBodyFailure(error, errorMessage(error));\n      if (failure.kind === \"network\") {\n        this.onNetworkError?.();\n      }\n      return this.requestFailure({\n        kind: failure.kind,\n        message: `${method} ${path}: ${failure.message}`,\n        method,\n        path,\n        reportErrors,\n        stalePrincipalHeads: undefined,\n        status: response.status,\n        statusText: response.statusText,\n      });\n    }\n\n    if (!validator(data)) {\n      return this.requestFailure({\n        kind: \"shape\",\n        message: `Invalid response shape for ${path}`,\n        method,\n        path,\n        reportErrors,\n        stalePrincipalHeads: undefined,\n        status: response.status,\n        statusText: response.statusText,\n      });\n    }\n\n    return { data, ok: true };\n  }\n\n  private async makeResponseRequest(\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions = {},\n    additionalSuccessStatuses: readonly number[],\n    failureOperation: Parameters<OperationResponseRequestFn>[5],\n  ): Promise<RequestResult<Response>> {\n    const authToken = this.authToken;\n    const responseResult = await this.fetchResponseRequest(\n      path,\n      method,\n      body,\n      options,\n      authToken,\n    );\n    if (!responseResult.ok) {\n      return responseResult;\n    }\n    const response = responseResult.data;\n    if (isSuccessfulResponse(response, additionalSuccessStatuses)) {\n      this.requestFailuresByKey.delete(requestFailureKey({ method, path }));\n      return { data: response, ok: true };\n    }\n\n    const errorDescription = await describeErrorResponse(\n      response,\n      failureOperation,\n      options.expectedPaymentRequiredOrganizationId,\n    );\n    const shouldRetry = await shouldRetryAfterSessionExpired({\n      authToken,\n      body,\n      code: errorDescription.code,\n      getCurrentAuthToken: () => this.authToken,\n      isKnownSessionRenewal: (from, to) =>\n        this.sessionRenewals.isKnown(from, to),\n      pendingSessionRenewal: (from) => this.sessionRenewals.pending(from),\n      options,\n      refreshSession: () => this.sessionRenewals.renew(this.onSessionExpired),\n      reportError: (message) => this.onError?.(message),\n      responseStatus: response.status,\n    });\n    const retryAuthToken = this.sessionRenewals.currentToken(authToken);\n    // Recheck after the awaited helper and the host's renewal notification.\n    if (shouldRetry && retryAuthToken) {\n      if (options.retryOnSessionExpired === \"renew-only\")\n        return this.httpFailure({\n          errorDescription,\n          failureOperation,\n          method,\n          options: {\n            ...options,\n            reportErrors: method === \"GET\" ? false : options.reportErrors,\n          },\n          path,\n          response,\n        });\n      const retryResult = await this.fetchResponseRequest(\n        path,\n        method,\n        body,\n        options,\n        retryAuthToken,\n      );\n      if (!retryResult.ok) {\n        return retryResult;\n      }\n      const retryResponse = retryResult.data;\n      if (isSuccessfulResponse(retryResponse, additionalSuccessStatuses)) {\n        this.requestFailuresByKey.delete(requestFailureKey({ method, path }));\n        return { data: retryResponse, ok: true };\n      }\n\n      return this.httpFailure({\n        errorDescription: await describeErrorResponse(\n          retryResponse,\n          failureOperation,\n          options.expectedPaymentRequiredOrganizationId,\n        ),\n        failureOperation,\n        method,\n        options,\n        path,\n        response: retryResponse,\n      });\n    }\n\n    return this.httpFailure({\n      errorDescription,\n      failureOperation,\n      method,\n      options,\n      path,\n      response,\n    });\n  }\n\n  private async fetchResponseRequest(\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions,\n    authToken: string | null,\n  ): Promise<RequestResult<Response>> {\n    const reportErrors = options.reportErrors ?? true;\n    const init: RequestInit & { duplex?: \"half\" } = {\n      method,\n      headers: this.buildHeaders(body, options.headers, authToken),\n      ...(options.signal ? { signal: options.signal } : {}),\n    };\n    if (body !== undefined) {\n      init.body = body;\n      if (body instanceof ReadableStream) {\n        init.duplex = \"half\";\n      }\n    }\n\n    let response: Response;\n    try {\n      response = await fetch(`${this.baseUrl}${path}`, init);\n    } catch (error) {\n      const cancelled = options.signal?.aborted === true;\n      if (!cancelled) this.onNetworkError?.();\n      return this.requestFailure({\n        ...(cancelled ? { code: \"request_aborted\" } : {}),\n        kind: cancelled ? \"cancelled\" : \"network\",\n        message: `${method} ${path}: ${errorMessage(error)}`,\n        method,\n        path,\n        reportErrors: cancelled ? false : reportErrors,\n        stalePrincipalHeads: undefined,\n        status: null,\n        statusText: \"\",\n      });\n    }\n\n    this.onNetworkSuccess?.();\n    const apiVersion = parseApiVersion(\n      response.headers.get(apiVersionHeaderName),\n    );\n    if (apiVersion !== null) this.onApiVersion?.(apiVersion);\n    return { data: response, ok: true };\n  }\n\n  private httpFailure(input: {\n    readonly errorDescription: ErrorResponseDescription;\n    readonly failureOperation: Parameters<OperationResponseRequestFn>[5];\n    readonly method: HttpMethod;\n    readonly options: RequestResultOptions;\n    readonly path: string;\n    readonly response: Response;\n  }): RequestFailure {\n    const cancelled = input.options.signal?.aborted === true;\n    const reportErrors = input.options.reportErrors ?? true;\n    if (\n      !cancelled &&\n      input.response.status === 402 &&\n      input.failureOperation.failureResponses?.[402] &&\n      input.errorDescription.paymentRequiredOrganizationId !== undefined &&\n      input.errorDescription.paymentRequiredOrganizationId ===\n        input.options.expectedPaymentRequiredOrganizationId\n    ) {\n      this.onPaymentRequired?.(\n        input.errorDescription.paymentRequiredOrganizationId,\n      );\n    }\n    return this.requestFailure({\n      ...(cancelled\n        ? { code: \"request_aborted\" }\n        : input.errorDescription.code === null\n          ? {}\n          : { code: input.errorDescription.code }),\n      kind: cancelled ? \"cancelled\" : \"http\",\n      message: `${input.method} ${input.path}: ${input.response.status} ${input.response.statusText}${input.errorDescription.detail}`,\n      method: input.method,\n      path: input.path,\n      reportErrors: !cancelled && reportErrors,\n      requiredContainerIds: input.errorDescription.requiredContainerIds,\n      stalePrincipalHeads: input.errorDescription.stalePrincipalHeads,\n      status: input.response.status,\n      statusText: input.response.statusText,\n    });\n  }\n\n  private reportResponseRequestFailure(\n    input: ResponseRequestValidationFailureInput,\n  ): RequestFailure {\n    if (input.kind === \"network\") {\n      this.onNetworkError?.();\n    }\n    return this.requestFailure({\n      ...input,\n      reportErrors: input.options?.reportErrors ?? true,\n      stalePrincipalHeads: undefined,\n    });\n  }\n}\n"]}
+{"version":3,"file":"apiRequestRuntime.js","sourceRoot":"","sources":["apiRequestRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,oBAAoB,EACpB,eAAe,GAChB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EAErB,YAAY,EACZ,SAAS,EACT,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAiBzD,MAAM,OAAO,iBAAiB;IAmBT;IAlBX,SAAS,GAAkB,IAAI,CAAC;IACvB,eAAe,GAAG,IAAI,qBAAqB,CAC1D,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CACrB,CAAC;IACe,OAAO,CAAS;IACzB,OAAO,GAAuC,IAAI,CAAC;IACnD,cAAc,GAAwB,IAAI,CAAC;IAC3C,gBAAgB,GAAwB,IAAI,CAAC;IAC7C,YAAY,GAAuC,IAAI,CAAC;IACxD,gBAAgB,GAA0B,IAAI,CAAC;IAC/C,iBAAiB,GAAkC,IAAI,CAAC;IAC/C,oBAAoB,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjE,OAAO,CAAqB;IAC5B,aAAa,CAA2B;IACxC,eAAe,CAA6B;IAErD,YACE,OAAuB,EACN,eAA2C;QAA3C,oBAAe,GAAf,eAAe,CAA4B;QAE5D,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC5C,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC7D,aAAa,EAAE,IAAI,CAAC,4BAA4B;SACjD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,kBAAkB,CAAC,YAAoB,EAAE,WAAmB;QAC1D,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,mBAAmB,CAC7B,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAC7D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,yBAAyB,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,UAAU,CAAC,OAA2C;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,iBAAiB,CAAC,OAA4B;QAC5C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,mBAAmB,CAAC,OAA4B;QAC9C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,kEAAkE;IAClE,eAAe,CAAC,OAA2C;QACzD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,mBAAmB,CAAC,OAA8B;QAChD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,oBAAoB,CAAC,OAAsC;QACzD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC;IACnC,CAAC;IAED,YAAY,CAAC,KAAoB;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;QACzC,IAAI,OAAO;YAAE,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,iBAAiB,CAAC,KAA2C;QAC3D,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;IACzE,CAAC;IAEO,YAAY,CAClB,IAA6B,EAC7B,OAA2C,EAC3C,SAAwB;QAExB,OAAO;YACL,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC;gBACjE,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACxC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,IAAY,EACZ,SAAyC,EACzC,MAAkB,EAClB,IAA6B,EAC7B,OAAyC,EACzC,gBAAmD;QAEnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CACzC,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,gBAAgB,CACjB,CAAC;QACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAEO,cAAc,CAAC,KAWtB;QACC,MAAM,OAAO,GAAmB;YAC9B,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,GAAG,EAAE;gBACX,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;oBAAE,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,mBAAmB;gBAC3B,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,oBAAoB;gBAC5B,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAC3B,iBAAiB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAC7D,OAAO,CACR,CAAC;QAEF,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,IAAY,EACZ,SAAyC,EACzC,MAAkB,EAClB,IAA6B,EAC7B,UAAgC,EAAE,EAClC,gBAAmD;QAEnD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACnD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,EAAE,EACF,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QAClD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAChE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,GAAG,MAAM,IAAI,IAAI,KAAK,OAAO,CAAC,OAAO,EAAE;gBAChD,MAAM;gBACN,IAAI;gBACJ,YAAY;gBACZ,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,8BAA8B,IAAI,EAAE;gBAC7C,MAAM;gBACN,IAAI;gBACJ,YAAY;gBACZ,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;aAChC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,IAAY,EACZ,MAAkB,EAClB,IAA6B,EAC7B,UAAgC,EAAE,EAClC,yBAA4C,EAC5C,gBAA2D;QAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACpD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,EACT,gBAAgB,CACjB,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC;QACrC,IAAI,oBAAoB,CAAC,QAAQ,EAAE,yBAAyB,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACtE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,CAClD,QAAQ,EACR,gBAAgB,EAChB,OAAO,CAAC,qCAAqC,CAC9C,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,8BAA8B,CAAC;YACvD,SAAS;YACT,IAAI;YACJ,IAAI,EAAE,gBAAgB,CAAC,IAAI;YAC3B,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS;YACzC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAClC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC;YACnE,OAAO;YACP,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC;YACvE,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC;YACjD,cAAc,EAAE,QAAQ,CAAC,MAAM;SAChC,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACpE,wEAAwE;QACxE,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;YAClC,IAAI,OAAO,CAAC,qBAAqB,KAAK,YAAY;gBAChD,OAAO,IAAI,CAAC,WAAW,CAAC;oBACtB,gBAAgB;oBAChB,gBAAgB;oBAChB,MAAM;oBACN,OAAO,EAAE;wBACP,GAAG,OAAO;wBACV,YAAY,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;qBAC9D;oBACD,IAAI;oBACJ,QAAQ;iBACT,CAAC,CAAC;YACL,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CACjD,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,OAAO,EACP,cAAc,EACd,gBAAgB,CACjB,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,EAAE;gBAAE,OAAO,WAAW,CAAC;YACxC,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,CAAC;YACvC,IAAI,oBAAoB,CAAC,aAAa,EAAE,yBAAyB,CAAC,EAAE,CAAC;gBACnE,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACtE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAC3C,CAAC;YAED,OAAO,IAAI,CAAC,WAAW,CAAC;gBACtB,gBAAgB,EAAE,MAAM,qBAAqB,CAC3C,aAAa,EACb,gBAAgB,EAChB,OAAO,CAAC,qCAAqC,CAC9C;gBACD,gBAAgB;gBAChB,MAAM;gBACN,OAAO;gBACP,IAAI;gBACJ,QAAQ,EAAE,aAAa;aACxB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC;YACtB,gBAAgB;YAChB,gBAAgB;YAChB,MAAM;YACN,OAAO;YACP,IAAI;YACJ,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,IAAY,EACZ,MAAkB,EAClB,IAA6B,EAC7B,OAA6B,EAC7B,SAAwB,EACxB,SAAoD;QAEpD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QAClD,MAAM,IAAI,GAAsC;YAC9C,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC;YAC5D,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,IAAI,IAAI,YAAY,cAAc,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,CAAC;QACH,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,iBAAiB,CAChC,IAAI,CAAC,eAAe,EACpB,SAAS,EACT,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,EAC3C,OAAO,CAAC,MAAM,CACf,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;YACnD,IAAI,CAAC,SAAS;gBAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,cAAc,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBACzC,OAAO,EAAE,GAAG,MAAM,IAAI,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,EAAE;gBACpD,MAAM;gBACN,IAAI;gBACJ,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;gBAC9C,mBAAmB,EAAE,SAAS;gBAC9B,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,EAAE;aACf,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,eAAe,CAChC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAC3C,CAAC;QACF,IAAI,UAAU,KAAK,IAAI;YAAE,IAAI,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAEO,WAAW,CAAC,KAOnB;QACC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;QACzD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QACxD,IACE,CAAC,SAAS;YACV,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;YAC7B,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC;YAC9C,KAAK,CAAC,gBAAgB,CAAC,6BAA6B,KAAK,SAAS;YAClE,KAAK,CAAC,gBAAgB,CAAC,6BAA6B;gBAClD,KAAK,CAAC,OAAO,CAAC,qCAAqC,EACrD,CAAC;YACD,IAAI,CAAC,iBAAiB,EAAE,CACtB,KAAK,CAAC,gBAAgB,CAAC,6BAA6B,CACrD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;YACzB,GAAG,CAAC,SAAS;gBACX,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;gBAC7B,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,IAAI;oBACpC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;YACtC,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE;YAC/H,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,CAAC,SAAS,IAAI,YAAY;YACxC,oBAAoB,EAAE,KAAK,CAAC,gBAAgB,CAAC,oBAAoB;YACjE,mBAAmB,EAAE,KAAK,CAAC,gBAAgB,CAAC,mBAAmB;YAC/D,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC7B,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;SACtC,CAAC,CAAC;IACL,CAAC;IAEO,4BAA4B,CAClC,KAA4C;QAE5C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC;YACzB,GAAG,KAAK;YACR,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,YAAY,IAAI,IAAI;YACjD,mBAAmB,EAAE,SAAS;SAC/B,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import {\n  authChallengeSigningBytes,\n  canonicalAuthOrigin,\n} from \"@tearleads/crypto\";\nimport {\n  apiVersionHeaderName,\n  parseApiVersion,\n} from \"@tearleads/validators/operation\";\nimport type { ApiRequestInstrumentation } from \"./apiRequestMetrics\";\nimport { measureApiRequest } from \"./measureApiRequest\";\nimport {\n  bindPrototypeMethods,\n  describeErrorResponse,\n  type ErrorResponseDescription,\n  errorMessage,\n  hasHeader,\n  isSuccessfulResponse,\n  normalizeApiBaseUrl,\n  requestFailureKey,\n} from \"./requestInternals\";\nimport { responseBodyFailure } from \"./responseBodyFailure\";\nimport { shouldRetryAfterSessionExpired } from \"./sessionRefresh\";\nimport { SessionRenewalTracker } from \"./sessionRenewal\";\nimport type {\n  HttpMethod,\n  OperationRequestFn,\n  OperationRequestResultFn,\n  OperationResponseRequestFn,\n  RequestBody,\n  RequestFailure,\n  RequestFailureKind,\n  RequestResult,\n  RequestResultOptions,\n  ResponseRequestValidationFailureInput,\n} from \"./types\";\n\ntype ExpiredHandler = () => boolean | Promise<boolean>;\ntype PaymentRequiredHandler = (organizationId: string | null) => void;\n\nexport class ApiRequestRuntime {\n  private authToken: string | null = null;\n  private readonly sessionRenewals = new SessionRenewalTracker(\n    () => this.authToken,\n  );\n  private readonly baseUrl: string;\n  private onError: ((message: string) => void) | null = null;\n  private onNetworkError: (() => void) | null = null;\n  private onNetworkSuccess: (() => void) | null = null;\n  private onApiVersion: ((version: number) => void) | null = null;\n  private onSessionExpired: ExpiredHandler | null = null;\n  private onPaymentRequired: PaymentRequiredHandler | null = null;\n  private readonly requestFailuresByKey = new Map<string, RequestFailure>();\n  readonly request: OperationRequestFn;\n  readonly requestResult: OperationRequestResultFn;\n  readonly responseRequest: OperationResponseRequestFn;\n\n  constructor(\n    baseUrl?: string | null,\n    private readonly instrumentation?: ApiRequestInstrumentation,\n  ) {\n    this.baseUrl = normalizeApiBaseUrl(baseUrl);\n    bindPrototypeMethods(this, ApiRequestRuntime.prototype);\n    this.request = this.makeRequest;\n    this.requestResult = this.makeRequestResult;\n    this.responseRequest = Object.assign(this.makeResponseRequest, {\n      reportFailure: this.reportResponseRequestFailure,\n    });\n  }\n\n  /**\n   * The bytes a login challenge is signed as, bound to the API this client\n   * addresses. A relative base URL resolves against the page, as its requests\n   * do; with neither, there is no API origin to sign for.\n   */\n  authChallengeBytes(challengeHex: string, fingerprint: string): Uint8Array {\n    let apiOrigin: string;\n    try {\n      apiOrigin = canonicalAuthOrigin(\n        new URL(this.baseUrl || \"/\", globalThis.location?.href).href,\n      );\n    } catch {\n      throw new Error(\"The API origin is unavailable for authentication\");\n    }\n    return authChallengeSigningBytes({ apiOrigin, challengeHex, fingerprint });\n  }\n\n  setOnError(handler: ((message: string) => void) | null): void {\n    this.onError = handler;\n  }\n\n  setOnNetworkError(handler: (() => void) | null): void {\n    this.onNetworkError = handler;\n  }\n\n  setOnNetworkSuccess(handler: (() => void) | null): void {\n    this.onNetworkSuccess = handler;\n  }\n\n  /** Receives the build named by each response that carries one. */\n  setOnApiVersion(handler: ((version: number) => void) | null): void {\n    this.onApiVersion = handler;\n  }\n\n  setOnSessionExpired(handler: ExpiredHandler | null): void {\n    this.onSessionExpired = handler;\n  }\n\n  setOnPaymentRequired(handler: PaymentRequiredHandler | null): void {\n    this.onPaymentRequired = handler;\n  }\n\n  setAuthToken(token: string | null): boolean {\n    const changed = this.authToken !== token;\n    if (changed) this.sessionRenewals.tokenChanged();\n    this.authToken = token;\n    return changed;\n  }\n\n  getAuthToken(): string | null {\n    return this.authToken;\n  }\n\n  getRequestFailure(input: { method: HttpMethod; path: string }) {\n    return this.requestFailuresByKey.get(requestFailureKey(input)) ?? null;\n  }\n\n  private buildHeaders(\n    body: RequestBody | undefined,\n    headers: Record<string, string> | undefined,\n    authToken: string | null,\n  ): Record<string, string> {\n    return {\n      ...(authToken ? { Authorization: `Bearer ${authToken}` } : {}),\n      ...(typeof body === \"string\" && !hasHeader(headers, \"Content-Type\")\n        ? { \"Content-Type\": \"application/json\" }\n        : {}),\n      ...headers,\n    };\n  }\n\n  private async makeRequest<T>(\n    path: string,\n    validator: (value: unknown) => value is T,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions | undefined,\n    failureOperation: Parameters<OperationRequestFn>[5],\n  ): Promise<T | null> {\n    const result = await this.makeRequestResult(\n      path,\n      validator,\n      method,\n      body,\n      options,\n      failureOperation,\n    );\n    return result.ok ? result.data : null;\n  }\n\n  private requestFailure(input: {\n    code?: string | undefined;\n    kind: RequestFailureKind;\n    message: string;\n    method: HttpMethod;\n    path: string;\n    reportErrors: boolean;\n    requiredContainerIds?: RequestFailure[\"requiredContainerIds\"];\n    stalePrincipalHeads: RequestFailure[\"stalePrincipalHeads\"];\n    status: number | null;\n    statusText: string;\n  }): RequestFailure {\n    const failure: RequestFailure = {\n      ...(input.code === undefined ? {} : { code: input.code }),\n      kind: input.kind,\n      message: input.message,\n      method: input.method,\n      ok: false,\n      path: input.path,\n      report: () => {\n        if (input.kind !== \"cancelled\") this.onError?.(input.message);\n      },\n      status: input.status,\n      statusText: input.statusText,\n      ...(input.stalePrincipalHeads\n        ? { stalePrincipalHeads: input.stalePrincipalHeads }\n        : {}),\n      ...(input.requiredContainerIds\n        ? { requiredContainerIds: input.requiredContainerIds }\n        : {}),\n    };\n    this.requestFailuresByKey.set(\n      requestFailureKey({ method: input.method, path: input.path }),\n      failure,\n    );\n\n    if (input.reportErrors) {\n      failure.report();\n    }\n\n    return failure;\n  }\n\n  private async makeRequestResult<T>(\n    path: string,\n    validator: (value: unknown) => value is T,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions = {},\n    failureOperation: Parameters<OperationRequestFn>[5],\n  ): Promise<RequestResult<T>> {\n    const responseResult = await this.makeResponseRequest(\n      path,\n      method,\n      body,\n      options,\n      [],\n      failureOperation,\n    );\n    if (!responseResult.ok) {\n      return responseResult;\n    }\n\n    const response = responseResult.data;\n    const reportErrors = options.reportErrors ?? true;\n    let data: unknown;\n    try {\n      data = await response.json();\n    } catch (error) {\n      const failure = responseBodyFailure(error, errorMessage(error));\n      if (failure.kind === \"network\") {\n        this.onNetworkError?.();\n      }\n      return this.requestFailure({\n        kind: failure.kind,\n        message: `${method} ${path}: ${failure.message}`,\n        method,\n        path,\n        reportErrors,\n        stalePrincipalHeads: undefined,\n        status: response.status,\n        statusText: response.statusText,\n      });\n    }\n\n    if (!validator(data)) {\n      return this.requestFailure({\n        kind: \"shape\",\n        message: `Invalid response shape for ${path}`,\n        method,\n        path,\n        reportErrors,\n        stalePrincipalHeads: undefined,\n        status: response.status,\n        statusText: response.statusText,\n      });\n    }\n\n    return { data, ok: true };\n  }\n\n  private async makeResponseRequest(\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions = {},\n    additionalSuccessStatuses: readonly number[],\n    failureOperation: Parameters<OperationResponseRequestFn>[5],\n  ): Promise<RequestResult<Response>> {\n    const authToken = this.authToken;\n    const responseResult = await this.fetchResponseRequest(\n      path,\n      method,\n      body,\n      options,\n      authToken,\n      failureOperation,\n    );\n    if (!responseResult.ok) {\n      return responseResult;\n    }\n    const response = responseResult.data;\n    if (isSuccessfulResponse(response, additionalSuccessStatuses)) {\n      this.requestFailuresByKey.delete(requestFailureKey({ method, path }));\n      return { data: response, ok: true };\n    }\n\n    const errorDescription = await describeErrorResponse(\n      response,\n      failureOperation,\n      options.expectedPaymentRequiredOrganizationId,\n    );\n    const shouldRetry = await shouldRetryAfterSessionExpired({\n      authToken,\n      body,\n      code: errorDescription.code,\n      getCurrentAuthToken: () => this.authToken,\n      isKnownSessionRenewal: (from, to) =>\n        this.sessionRenewals.isKnown(from, to),\n      pendingSessionRenewal: (from) => this.sessionRenewals.pending(from),\n      options,\n      refreshSession: () => this.sessionRenewals.renew(this.onSessionExpired),\n      reportError: (message) => this.onError?.(message),\n      responseStatus: response.status,\n    });\n    const retryAuthToken = this.sessionRenewals.currentToken(authToken);\n    // Recheck after the awaited helper and the host's renewal notification.\n    if (shouldRetry && retryAuthToken) {\n      if (options.retryOnSessionExpired === \"renew-only\")\n        return this.httpFailure({\n          errorDescription,\n          failureOperation,\n          method,\n          options: {\n            ...options,\n            reportErrors: method === \"GET\" ? false : options.reportErrors,\n          },\n          path,\n          response,\n        });\n      const retryResult = await this.fetchResponseRequest(\n        path,\n        method,\n        body,\n        options,\n        retryAuthToken,\n        failureOperation,\n      );\n      if (!retryResult.ok) return retryResult;\n      const retryResponse = retryResult.data;\n      if (isSuccessfulResponse(retryResponse, additionalSuccessStatuses)) {\n        this.requestFailuresByKey.delete(requestFailureKey({ method, path }));\n        return { data: retryResponse, ok: true };\n      }\n\n      return this.httpFailure({\n        errorDescription: await describeErrorResponse(\n          retryResponse,\n          failureOperation,\n          options.expectedPaymentRequiredOrganizationId,\n        ),\n        failureOperation,\n        method,\n        options,\n        path,\n        response: retryResponse,\n      });\n    }\n\n    return this.httpFailure({\n      errorDescription,\n      failureOperation,\n      method,\n      options,\n      path,\n      response,\n    });\n  }\n\n  private async fetchResponseRequest(\n    path: string,\n    method: HttpMethod,\n    body: RequestBody | undefined,\n    options: RequestResultOptions,\n    authToken: string | null,\n    operation: Parameters<OperationResponseRequestFn>[5],\n  ): Promise<RequestResult<Response>> {\n    const reportErrors = options.reportErrors ?? true;\n    const init: RequestInit & { duplex?: \"half\" } = {\n      method,\n      headers: this.buildHeaders(body, options.headers, authToken),\n      ...(options.signal ? { signal: options.signal } : {}),\n    };\n    if (body !== undefined) {\n      init.body = body;\n      if (body instanceof ReadableStream) {\n        init.duplex = \"half\";\n      }\n    }\n\n    let response: Response;\n    try {\n      response = await measureApiRequest(\n        this.instrumentation,\n        operation,\n        () => fetch(`${this.baseUrl}${path}`, init),\n        options.signal,\n      );\n    } catch (error) {\n      const cancelled = options.signal?.aborted === true;\n      if (!cancelled) this.onNetworkError?.();\n      return this.requestFailure({\n        ...(cancelled ? { code: \"request_aborted\" } : {}),\n        kind: cancelled ? \"cancelled\" : \"network\",\n        message: `${method} ${path}: ${errorMessage(error)}`,\n        method,\n        path,\n        reportErrors: cancelled ? false : reportErrors,\n        stalePrincipalHeads: undefined,\n        status: null,\n        statusText: \"\",\n      });\n    }\n\n    this.onNetworkSuccess?.();\n    const apiVersion = parseApiVersion(\n      response.headers.get(apiVersionHeaderName),\n    );\n    if (apiVersion !== null) this.onApiVersion?.(apiVersion);\n    return { data: response, ok: true };\n  }\n\n  private httpFailure(input: {\n    readonly errorDescription: ErrorResponseDescription;\n    readonly failureOperation: Parameters<OperationResponseRequestFn>[5];\n    readonly method: HttpMethod;\n    readonly options: RequestResultOptions;\n    readonly path: string;\n    readonly response: Response;\n  }): RequestFailure {\n    const cancelled = input.options.signal?.aborted === true;\n    const reportErrors = input.options.reportErrors ?? true;\n    if (\n      !cancelled &&\n      input.response.status === 402 &&\n      input.failureOperation.failureResponses?.[402] &&\n      input.errorDescription.paymentRequiredOrganizationId !== undefined &&\n      input.errorDescription.paymentRequiredOrganizationId ===\n        input.options.expectedPaymentRequiredOrganizationId\n    ) {\n      this.onPaymentRequired?.(\n        input.errorDescription.paymentRequiredOrganizationId,\n      );\n    }\n    return this.requestFailure({\n      ...(cancelled\n        ? { code: \"request_aborted\" }\n        : input.errorDescription.code === null\n          ? {}\n          : { code: input.errorDescription.code }),\n      kind: cancelled ? \"cancelled\" : \"http\",\n      message: `${input.method} ${input.path}: ${input.response.status} ${input.response.statusText}${input.errorDescription.detail}`,\n      method: input.method,\n      path: input.path,\n      reportErrors: !cancelled && reportErrors,\n      requiredContainerIds: input.errorDescription.requiredContainerIds,\n      stalePrincipalHeads: input.errorDescription.stalePrincipalHeads,\n      status: input.response.status,\n      statusText: input.response.statusText,\n    });\n  }\n\n  private reportResponseRequestFailure(\n    input: ResponseRequestValidationFailureInput,\n  ): RequestFailure {\n    if (input.kind === \"network\") {\n      this.onNetworkError?.();\n    }\n    return this.requestFailure({\n      ...input,\n      reportErrors: input.options?.reportErrors ?? true,\n      stalePrincipalHeads: undefined,\n    });\n  }\n}\n"]}

package/internal/api-client/index.d.ts

@@ -1,4 +1,5 @@
 export { ApiClient } from "./ApiClient.js";
+export { type ApiRequestCounts, type ApiRequestEndpointCounts, ApiRequestMetrics, type ApiRequestMetricsSnapshot, } from "./apiRequestMetrics.js";
 export type { PrincipalPolicyPageCurrent, PrincipalPolicyPageReadOptions, PrincipalPolicyPageResume, } from "./principalPolicyPages.js";
 export type { ProjectionPolicyHistoryReadOptions } from "./projectionPolicyHistoryPages.js";
 export type { BlobBytesResponse, UploadMultipartBlobPartBytesRequest, } from "./routes/blobs/get.js";

package/internal/api-client/index.js

@@ -1,3 +1,4 @@
 export { ApiClient } from "./ApiClient.js";
+export { ApiRequestMetrics, } from "./apiRequestMetrics.js";
 export { retainVerifiedProjectionHistory } from "./verifiedProjectionHistory.js";
 //# sourceMappingURL=index.js.map

package/internal/api-client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAoBxC,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC","sourcesContent":["export { ApiClient } from \"./ApiClient\";\nexport type {\n  PrincipalPolicyPageCurrent,\n  PrincipalPolicyPageReadOptions,\n  PrincipalPolicyPageResume,\n} from \"./principalPolicyPages\";\nexport type { ProjectionPolicyHistoryReadOptions } from \"./projectionPolicyHistoryPages\";\nexport type {\n  BlobBytesResponse,\n  UploadMultipartBlobPartBytesRequest,\n} from \"./routes/blobs/get\";\nexport type {\n  HttpMethod,\n  ListDocumentEditAttributionRangesOptions,\n  RequestFailure,\n  RequestFailureKind,\n  RequestResult,\n  RequestResultOptions,\n  RequestSuccess,\n} from \"./types\";\nexport { retainVerifiedProjectionHistory } from \"./verifiedProjectionHistory\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAGL,iBAAiB,GAElB,MAAM,qBAAqB,CAAC;AAoB7B,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC","sourcesContent":["export { ApiClient } from \"./ApiClient\";\nexport {\n  type ApiRequestCounts,\n  type ApiRequestEndpointCounts,\n  ApiRequestMetrics,\n  type ApiRequestMetricsSnapshot,\n} from \"./apiRequestMetrics\";\nexport type {\n  PrincipalPolicyPageCurrent,\n  PrincipalPolicyPageReadOptions,\n  PrincipalPolicyPageResume,\n} from \"./principalPolicyPages\";\nexport type { ProjectionPolicyHistoryReadOptions } from \"./projectionPolicyHistoryPages\";\nexport type {\n  BlobBytesResponse,\n  UploadMultipartBlobPartBytesRequest,\n} from \"./routes/blobs/get\";\nexport type {\n  HttpMethod,\n  ListDocumentEditAttributionRangesOptions,\n  RequestFailure,\n  RequestFailureKind,\n  RequestResult,\n  RequestResultOptions,\n  RequestSuccess,\n} from \"./types\";\nexport { retainVerifiedProjectionHistory } from \"./verifiedProjectionHistory\";\n"]}

package/internal/api-client/measureApiRequest.js

@@ -0,0 +1,31 @@
+function beginMeasurement(instrumentation, operation) {
+    let finish;
+    try {
+        finish = instrumentation?.metrics.begin(instrumentation.getIdentity(), operation);
+    }
+    catch {
+        // Optional host instrumentation must not prevent HTTP dispatch.
+    }
+    return (outcome) => {
+        try {
+            finish?.(outcome);
+        }
+        catch {
+            // Nor may a recording failure replace the transport's result.
+        }
+    };
+}
+/** Counts each fetch, including automatic retries, without consuming bodies. */
+export async function measureApiRequest(instrumentation, operation, fetchResponse, signal) {
+    const finish = beginMeasurement(instrumentation, operation);
+    try {
+        const response = await fetchResponse();
+        finish(response.status >= 200 && response.status < 400 ? "succeeded" : "failed");
+        return response;
+    }
+    catch (error) {
+        finish(signal?.aborted ? "cancelled" : "failed");
+        throw error;
+    }
+}
+//# sourceMappingURL=measureApiRequest.js.map

package/internal/api-client/measureApiRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"measureApiRequest.js","sourceRoot":"","sources":["measureApiRequest.ts"],"names":[],"mappings":"AAOA,SAAS,gBAAgB,CACvB,eAAsD,EACtD,SAAwB;IAExB,IAAI,MAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,EAAE,OAAO,CAAC,KAAK,CACrC,eAAe,CAAC,WAAW,EAAE,EAC7B,SAAS,CACV,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;IACD,OAAO,CAAC,OAAO,EAAE,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;QAChE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,eAAsD,EACtD,SAAwB,EACxB,aAAsC,EACtC,MAA+B;IAE/B,MAAM,MAAM,GAAG,gBAAgB,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;QACvC,MAAM,CACJ,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CACzE,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import type { HttpOperation } from \"@tearleads/validators/operation\";\nimport type { ApiRequestInstrumentation } from \"./apiRequestMetrics\";\n\ntype FinishMeasurement = ReturnType<\n  ApiRequestInstrumentation[\"metrics\"][\"begin\"]\n>;\n\nfunction beginMeasurement(\n  instrumentation: ApiRequestInstrumentation | undefined,\n  operation: HttpOperation,\n): FinishMeasurement {\n  let finish: FinishMeasurement | undefined;\n  try {\n    finish = instrumentation?.metrics.begin(\n      instrumentation.getIdentity(),\n      operation,\n    );\n  } catch {\n    // Optional host instrumentation must not prevent HTTP dispatch.\n  }\n  return (outcome) => {\n    try {\n      finish?.(outcome);\n    } catch {\n      // Nor may a recording failure replace the transport's result.\n    }\n  };\n}\n\n/** Counts each fetch, including automatic retries, without consuming bodies. */\nexport async function measureApiRequest(\n  instrumentation: ApiRequestInstrumentation | undefined,\n  operation: HttpOperation,\n  fetchResponse: () => Promise<Response>,\n  signal: AbortSignal | undefined,\n): Promise<Response> {\n  const finish = beginMeasurement(instrumentation, operation);\n  try {\n    const response = await fetchResponse();\n    finish(\n      response.status >= 200 && response.status < 400 ? \"succeeded\" : \"failed\",\n    );\n    return response;\n  } catch (error) {\n    finish(signal?.aborted ? \"cancelled\" : \"failed\");\n    throw error;\n  }\n}\n"]}

package/internal/crypto/blobContentMetadata.d.ts

@@ -0,0 +1,7 @@
+export declare function blobContentMetadataHash(input: {
+    blobId: string;
+    byteLength: number;
+    chunkCount: number;
+    chunkSize: number;
+    contentKeyEpoch: number;
+}): Promise<string>;

package/internal/crypto/blobContentMetadata.js

@@ -0,0 +1,21 @@
+import { BLOB_ENCRYPTED_BYTES_FORMAT, BLOB_ENCRYPTED_BYTES_VERSION, } from "./blobEnvelopeV2.js";
+import { toFingerprint } from "./fingerprint.js";
+import { serializeKeyingCanonicalJson } from "./keying/canonical.js";
+const TEXT_ENCODER = new TextEncoder();
+const BLOB_CONTENT_RECORD_METADATA_HASH_DOMAIN = "tearleads.blob.content-record-metadata";
+export async function blobContentMetadataHash(input) {
+    return toFingerprint(TEXT_ENCODER.encode(serializeKeyingCanonicalJson({
+        domain: BLOB_CONTENT_RECORD_METADATA_HASH_DOMAIN,
+        payload: {
+            version: BLOB_ENCRYPTED_BYTES_VERSION,
+            recordKind: "blob_bytes",
+            blobId: input.blobId,
+            byteLength: input.byteLength,
+            chunkCount: input.chunkCount,
+            chunkSize: input.chunkSize,
+            contentKeyEpoch: input.contentKeyEpoch,
+            format: BLOB_ENCRYPTED_BYTES_FORMAT,
+        },
+    })));
+}
+//# sourceMappingURL=blobContentMetadata.js.map

package/internal/crypto/blobContentMetadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blobContentMetadata.js","sourceRoot":"","sources":["blobContentMetadata.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAElE,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;AACvC,MAAM,wCAAwC,GAC5C,wCAAwC,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAM7C;IACC,OAAO,aAAa,CAClB,YAAY,CAAC,MAAM,CACjB,4BAA4B,CAAC;QAC3B,MAAM,EAAE,wCAAwC;QAChD,OAAO,EAAE;YACP,OAAO,EAAE,4BAA4B;YACrC,UAAU,EAAE,YAAY;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,MAAM,EAAE,2BAA2B;SACpC;KACF,CAAC,CACH,CACF,CAAC;AACJ,CAAC","sourcesContent":["import {\n  BLOB_ENCRYPTED_BYTES_FORMAT,\n  BLOB_ENCRYPTED_BYTES_VERSION,\n} from \"./blobEnvelopeV2\";\nimport { toFingerprint } from \"./fingerprint\";\nimport { serializeKeyingCanonicalJson } from \"./keying/canonical\";\n\nconst TEXT_ENCODER = new TextEncoder();\nconst BLOB_CONTENT_RECORD_METADATA_HASH_DOMAIN =\n  \"tearleads.blob.content-record-metadata\";\n\nexport async function blobContentMetadataHash(input: {\n  blobId: string;\n  byteLength: number;\n  chunkCount: number;\n  chunkSize: number;\n  contentKeyEpoch: number;\n}): Promise<string> {\n  return toFingerprint(\n    TEXT_ENCODER.encode(\n      serializeKeyingCanonicalJson({\n        domain: BLOB_CONTENT_RECORD_METADATA_HASH_DOMAIN,\n        payload: {\n          version: BLOB_ENCRYPTED_BYTES_VERSION,\n          recordKind: \"blob_bytes\",\n          blobId: input.blobId,\n          byteLength: input.byteLength,\n          chunkCount: input.chunkCount,\n          chunkSize: input.chunkSize,\n          contentKeyEpoch: input.contentKeyEpoch,\n          format: BLOB_ENCRYPTED_BYTES_FORMAT,\n        },\n      }),\n    ),\n  );\n}\n"]}

package/internal/crypto/index.d.ts

@@ -1,3 +1,4 @@
+export { blobContentMetadataHash } from "./blobContentMetadata.js";
 export { BlobEnvelopeError } from "./blobEnvelopeError.js";
 export type { BlobEnvelopeHeaderRecord, BlobEnvelopeRecord, } from "./blobEnvelopeReader.js";
 export { MAX_BLOB_ENVELOPE_HEADER_BYTES, parseBlobEnvelopeV2, parseBlobEnvelopeV2Header, readBlobEnvelopeHeaderByteLength, } from "./blobEnvelopeReader.js";

package/internal/crypto/index.js

@@ -1,3 +1,4 @@
+export { blobContentMetadataHash } from "./blobContentMetadata.js";
 export { BlobEnvelopeError } from "./blobEnvelopeError.js";
 export { MAX_BLOB_ENVELOPE_HEADER_BYTES, parseBlobEnvelopeV2, parseBlobEnvelopeV2Header, readBlobEnvelopeHeaderByteLength, } from "./blobEnvelopeReader.js";
 export { BLOB_CHUNK_SIZE_BYTES, BLOB_ENCRYPTED_BYTES_FORMAT, BLOB_ENCRYPTED_BYTES_VERSION, BLOB_ENVELOPE_MAGIC_BYTES, BLOB_ENVELOPE_PREFIX_BYTES, blobChunkPlaintextByteLength, computeBlobChunkCount, computeBlobEncryptedByteLength, deriveBlobChunkIv, encodeBlobEnvelopeV2Header, joinBlobPartBytes, MAX_BLOB_CHUNK_COUNT, normalizeBlobChunkSize, } from "./blobEnvelopeV2.js";

package/internal/crypto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAKxD,OAAO,EACL,8BAA8B,EAC9B,mBAAmB,EACnB,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,EAC1B,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC9B,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAKrB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EAGpB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAC/C,OAAO,EACL,wBAAwB,EACxB,mCAAmC,EACnC,sCAAsC,EACtC,qCAAqC,EACrC,kCAAkC,EAClC,kCAAkC,EAClC,0BAA0B,EAE1B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAuI7B,OAAO,EACL,qCAAqC,EACrC,oCAAoC,EACpC,8BAA8B,EAC9B,qCAAqC,EACrC,2BAA2B,EAC3B,iCAAiC,EACjC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,gCAAgC,EAChC,+BAA+B,EAC/B,oCAAoC,EACpC,6BAA6B,EAC7B,+BAA+B,EAC/B,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,+BAA+B,EAC/B,8BAA8B,EAC9B,6BAA6B,EAC7B,wCAAwC,EACxC,sCAAsC,EACtC,4BAA4B,EAC5B,mCAAmC,EACnC,mCAAmC,EACnC,0CAA0C,EAC1C,wCAAwC,EACxC,yCAAyC,EACzC,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,sBAAsB,EACtB,mCAAmC,EACnC,gCAAgC,EAChC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,+BAA+B,EAC/B,oBAAoB,EACpB,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,EACnC,wBAAwB,EACxB,6BAA6B,EAC7B,kCAAkC,EAClC,6BAA6B,EAC7B,sCAAsC,EACtC,oCAAoC,EACpC,0CAA0C,EAC1C,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,8BAA8B,EAC9B,uBAAuB,EACvB,0BAA0B,EAC1B,mCAAmC,EACnC,6BAA6B,EAC7B,8BAA8B,EAC9B,mCAAmC,EACnC,mCAAmC,EACnC,2BAA2B,EAC3B,kCAAkC,EAClC,iCAAiC,EACjC,4BAA4B,EAC5B,sCAAsC,EACtC,gCAAgC,EAChC,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,uCAAuC,EACvC,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAC/B,mCAAmC,EACnC,wCAAwC,EACxC,6CAA6C,EAC7C,iCAAiC,EACjC,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,iDAAiD,EACjD,4BAA4B,EAC5B,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,4BAA4B,EAC5B,mCAAmC,EACnC,oBAAoB,EACpB,mCAAmC,EACnC,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,yCAAyC,EACzC,+BAA+B,EAC/B,4BAA4B,EAC5B,oCAAoC,EACpC,qCAAqC,EACrC,sCAAsC,EACtC,6BAA6B,EAC7B,uBAAuB,EACvB,gCAAgC,EAChC,kCAAkC,EAClC,gCAAgC,EAChC,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,2CAA2C,EAC3C,mCAAmC,EACnC,wCAAwC,EAExC,0CAA0C,GAC3C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mCAAmC,EACnC,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,8BAA8B,EAC9B,mCAAmC,GACpC,MAAM,kCAAkC,CAAC;AAiB1C,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,8BAA8B,EAC9B,yBAAyB,EACzB,0CAA0C,EAC1C,gCAAgC,EAChC,+BAA+B,EAC/B,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,+BAA+B,EAC/B,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,wBAAwB,EAExB,qBAAqB,EAErB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC","sourcesContent":["export { BlobEnvelopeError } from \"./blobEnvelopeError\";\nexport type {\n  BlobEnvelopeHeaderRecord,\n  BlobEnvelopeRecord,\n} from \"./blobEnvelopeReader\";\nexport {\n  MAX_BLOB_ENVELOPE_HEADER_BYTES,\n  parseBlobEnvelopeV2,\n  parseBlobEnvelopeV2Header,\n  readBlobEnvelopeHeaderByteLength,\n} from \"./blobEnvelopeReader\";\nexport type { BlobEnvelopeV2Header } from \"./blobEnvelopeV2\";\nexport {\n  BLOB_CHUNK_SIZE_BYTES,\n  BLOB_ENCRYPTED_BYTES_FORMAT,\n  BLOB_ENCRYPTED_BYTES_VERSION,\n  BLOB_ENVELOPE_MAGIC_BYTES,\n  BLOB_ENVELOPE_PREFIX_BYTES,\n  blobChunkPlaintextByteLength,\n  computeBlobChunkCount,\n  computeBlobEncryptedByteLength,\n  deriveBlobChunkIv,\n  encodeBlobEnvelopeV2Header,\n  joinBlobPartBytes,\n  MAX_BLOB_CHUNK_COUNT,\n  normalizeBlobChunkSize,\n} from \"./blobEnvelopeV2\";\nexport { compareCanonicalStrings } from \"./canonicalOrdering\";\nexport {\n  AUTH_CHALLENGE_BYTES,\n  AUTH_CHALLENGE_HEX_LENGTH,\n  authChallengeSigningBytes,\n  CHALLENGE_TTL_SECONDS,\n  canonicalAuthOrigin,\n  generateChallenge,\n} from \"./challenge\";\nexport type {\n  ContentKeyEnvelopeKind,\n  ContentKeyWrapBinding,\n} from \"./contentKeyEnvelope\";\nexport {\n  ContentKeyEnvelopeError,\n  decodeContentKeyEnvelope,\n  unwrapContentKey,\n  wrapContentKey,\n} from \"./contentKeyEnvelope\";\nexport { decryptAsRecipient } from \"./encapsulation/decryptAsRecipient\";\nexport { encryptForRecipients } from \"./encapsulation/encryptForRecipients\";\nexport type { EncapsulationKeyPair } from \"./encapsulation/generateKeyPair\";\nexport {\n  generateKemKeyPair,\n  generateKemSeedAndKeyPair,\n  ML_KEM1024_CIPHERTEXT_BYTES,\n  ML_KEM1024_PUBLIC_KEY_BYTES,\n  ML_KEM1024_SECRET_KEY_BYTES,\n  ML_KEM1024_SEED_BYTES,\n} from \"./encapsulation/generateKeyPair\";\nexport type { EncryptedEnvelope, RecipientEntry } from \"./encapsulation/types\";\nexport { unwrapDek } from \"./encapsulation/unwrapDek\";\nexport { wrapDekForRecipients } from \"./encapsulation/wrapDek\";\nexport { toFingerprint } from \"./fingerprint\";\nexport {\n  decryptGroupMetadata,\n  encodeBuiltinGroupMetadata,\n  encryptGroupMetadata,\n  type GroupMetadata,\n  type GroupMetadataKey,\n  readGroupMetadata,\n} from \"./groupMetadata\";\nexport { bytesToHex, hexToBytes } from \"./hex\";\nexport {\n  createIdentitySeedPhrase,\n  createIdentitySeedPhraseFromEntropy,\n  generateIdentityKeyPairsFromSeedPhrase,\n  IDENTITY_SEED_PHRASE_DERIVATION_SUITE,\n  IDENTITY_SEED_PHRASE_ENTROPY_BYTES,\n  IDENTITY_SEED_PHRASE_STRENGTH_BITS,\n  IDENTITY_SEED_PHRASE_WORDS,\n  type IdentitySeedPhraseKeyPairs,\n  normalizeIdentitySeedPhrase,\n  validateIdentitySeedPhrase,\n} from \"./identitySeedPhrase\";\nexport {\n  createIncrementalSha256,\n  type IncrementalSha256,\n} from \"./incrementalSha256\";\nexport type {\n  AccessEvent,\n  AccessEventType,\n  AccessManifest,\n  AccessManifestCheckpoint,\n  AccessManifestTransparencyLeaf,\n  AccessObjectKind,\n  AnyVerifiedAccessManifest,\n  AnyVerifiedPrincipalPolicy,\n  AttachmentAccessEventBody,\n  AttachmentBindAccessEventBody,\n  AttachmentDetachAccessEventBody,\n  BlobAccessManifest,\n  BlobContentKeyTarget,\n  ContainerAccessEventBody,\n  ContainerAccessKeyState,\n  ContainerAccessLevel,\n  ContainerAccessManifest,\n  ContainerAccessManifestState,\n  ContainerAccessStructural,\n  ContainerCreateAccessEventBody,\n  ContainerDirectGrant,\n  ContainerGrantAccessEventBody,\n  ContainerGrantPrincipalHead,\n  ContainerGrantSubjectType,\n  ContainerKekKeyring,\n  ContainerKekKeyringEntry,\n  ContainerKekPredecessorBridge,\n  ContainerKekRecipientTarget,\n  ContainerKekTarget,\n  ContainerKeyEpoch,\n  ContainerKeyWrap,\n  ContainerMoveAccessEventBody,\n  ContainerReciteAccessEventBody,\n  ContainerRekeyAccessEventBody,\n  ContainerRevokeAccessEventBody,\n  ContainerUserRecipientKey,\n  ContentObjectKind,\n  ContentRecordEncryptionSuite,\n  ContentRecordNonceDomain,\n  DeriveBlobKekTargetsInput,\n  DeriveContainerKekRecipientTargetsInput,\n  DeriveDocumentKekTargetsInput,\n  DocumentAccessEventBody,\n  DocumentContentKeyTarget,\n  DocumentContentRecordMetadataInput,\n  DocumentLinkAccessEventBody,\n  DocumentLinkSetManifestState,\n  DocumentLinkSetStructural,\n  DocumentPurgeAccessEventBody,\n  DocumentUnlinkAccessEventBody,\n  IdentityStateCheckpoint,\n  IdentityStateHead,\n  IdentityStateTransparencyLeaf,\n  KekRecipientKind,\n  KeyingCanonicalJson,\n  KeyingHashDomain,\n  KeyingLocalCheckpointStore,\n  KeyingVerificationCode,\n  KeyingVerificationResult,\n  ManagedPrincipalKind,\n  PrincipalHistoryIndexNode,\n  PrincipalPolicyAuthorization,\n  PrincipalPolicyBundle,\n  PrincipalPolicyCheckpoint,\n  PrincipalPolicyCurrent,\n  PrincipalPolicyExternalAuthority,\n  PrincipalPolicyExternalAuthorityState,\n  PrincipalPolicyHistoryInput,\n  PrincipalPolicyHistoryPage,\n  PrincipalPolicyHistoryProgressOptions,\n  PrincipalPolicyHistoryReferenceProof,\n  PrincipalPolicyHistoryVerifier,\n  PrincipalPolicyMemberEnvelopes,\n  PrincipalPolicyPayload,\n  PrincipalPolicySignedState,\n  PrincipalPolicySignerPublicKey,\n  PrincipalPolicySnapshot,\n  PrincipalPolicyStateChainEntry,\n  PrincipalPolicyTransitionMismatch,\n  PrincipalPolicyTransitionMismatchCode,\n  PrincipalPolicyTransparencyLeaf,\n  ReferencedPrincipalHead,\n  SignedTransparencyTreeHead,\n  TransparencyConsistencyProof,\n  TransparencyInclusionProof,\n  TransparencyLeaf,\n  TransparencyLeafKind,\n  TransparencyTreeCheckpoint,\n  UnsignedAccessEvent,\n  UnsignedTransparencyTreeHead,\n  UnsignedWriteHeader,\n  VerifiedAccessEvent,\n  VerifiedAccessManifest,\n  VerifiedAccessManifestCheckpointEvidence,\n  VerifiedAccessManifestSnapshot,\n  VerifiedAttachmentBinding,\n  VerifiedAttachmentDetach,\n  VerifiedBlobKekTargets,\n  VerifiedContainerAccessManifest,\n  VerifiedContainerKekState,\n  VerifiedContainerParentEdge,\n  VerifiedDocumentKekTargets,\n  VerifiedDocumentLinkSetManifest,\n  VerifiedDocumentLinkSetSnapshot,\n  VerifiedDocumentLinkSetStateEvidence,\n  VerifiedIdentityState,\n  VerifiedPrincipalPolicy,\n  VerifiedPrincipalPolicyCurrent,\n  VerifiedPrincipalPolicyHistory,\n  VerifiedPrincipalPolicySelection,\n  VerifiedPrincipalPolicySnapshot,\n  VerifiedTransparencyProof,\n  VerifiedTransparencyTreeHead,\n  VerifiedWriteHeader,\n  VerifyAccessEventInput,\n  VerifyAccessManifestInput,\n  VerifyAttachmentBindingEventInput,\n  VerifyAttachmentDetachEventInput,\n  VerifyContainerAccessManifestInput,\n  VerifyContainerKekStateInput,\n  VerifyContainerParentEdgeInput,\n  VerifyDocumentLinkSetManifestInput,\n  VerifyDocumentPurgeEventInput,\n  VerifyIdentityStateCheckpointInput,\n  VerifyPrincipalPolicyBundleInput,\n  VerifyPrincipalPolicySnapshotInput,\n  VerifySignedTransparencyTreeHeadInput,\n  VerifyTransparencyConsistencyProofInput,\n  VerifyTransparencyInclusionProofInput,\n  VerifyTransparencyProofInput,\n  VerifyWriteHeaderInput,\n  WriteHeader,\n} from \"./keying\";\nexport {\n  ACCESS_MANIFEST_VERIFICATION_REVISION,\n  accessManifestCheckpointFromManifest,\n  accessManifestTransparencyLeaf,\n  assertSealedContainerKekKeyringLength,\n  BLOB_CONTENT_KEY_WRAP_SUITE,\n  CONTAINER_KEK_KEYRING_ENTRY_BYTES,\n  CONTAINER_KEK_KEYRING_FORMAT_VERSION,\n  CONTAINER_KEK_KEYRING_HEADER_BYTES,\n  CONTAINER_KEK_KEYRING_SEAL_SUITE,\n  CONTAINER_KEK_MATERIAL_ID_PREFIX,\n  CONTAINER_KEK_PARENT_WRAP_SUITE,\n  CONTAINER_KEK_PREDECESSOR_WRAP_SUITE,\n  CONTAINER_KEK_USER_WRAP_SUITE,\n  CONTENT_RECORD_ENCRYPTION_SUITE,\n  computeAccessEventBodyHash,\n  computeAccessEventHash,\n  computeAccessManifestHash,\n  computeBlobAccessManifestHash,\n  computeBlobContentKeyTargetHash,\n  computeContainerAccessKeyTargetHash,\n  computeContainerAccessStructuralHash,\n  computeContainerDirectGrantRoot,\n  computeContainerKekKeyringHash,\n  computeContainerKekMaterialId,\n  computeContainerKekPredecessorBridgeHash,\n  computeContainerKekRecipientTargetHash,\n  computeContainerKeyEpochHash,\n  computeContentRecordNonceDomainHash,\n  computeDocumentContentKeyTargetHash,\n  computeDocumentContentRecordCiphertextHash,\n  computeDocumentContentRecordMetadataHash,\n  computeDocumentContentRecordPlaintextHash,\n  computeDocumentLinkSetGrantRoot,\n  computeDocumentLinkSetKeyTargetHash,\n  computeDocumentLinkSetStructuralHash,\n  computeKeyingDomainHash,\n  computeTransparencyLeafHash,\n  computeTransparencyMerkleRoot,\n  computeWriteHeaderHash,\n  createContainerKekPredecessorBridge,\n  createPrincipalHistoryIndexProof,\n  createPrincipalPolicyHistoryVerifier,\n  createTransparencyConsistencyProof,\n  createTransparencyInclusionProof,\n  DOCUMENT_CONTENT_KEY_WRAP_SUITE,\n  deriveBlobKekTargets,\n  deriveContainerAccessManifest,\n  deriveContainerKekRecipientTargets,\n  deriveContainerKekWrappingPublicKey,\n  deriveDocumentKekTargets,\n  deriveDocumentLinkSetManifest,\n  derivePrincipalRecipientKeyEpochId,\n  documentContentRecordMetadata,\n  expectedSealedContainerKekKeyringBytes,\n  getPrincipalPolicyTransitionMismatch,\n  getPrincipalPolicyTransitionMismatchReason,\n  identityStateTransparencyLeaf,\n  isContainerKekMaterialId,\n  isKeyingVerificationCode,\n  KEYING_VERIFICATION_CODES,\n  KeyingVerificationError,\n  MAX_CONTAINER_KEY_EPOCH,\n  MAX_CONTAINER_RECITATION_EPOCH,\n  makeVerifiedAccessEvent,\n  makeVerifiedBlobKekTargets,\n  makeVerifiedContainerAccessManifest,\n  makeVerifiedContainerKekState,\n  makeVerifiedDocumentKekTargets,\n  makeVerifiedDocumentLinkSetManifest,\n  makeVerifiedDocumentLinkSetSnapshot,\n  makeVerifiedPrincipalPolicy,\n  normalizeAttachmentAccessEventBody,\n  normalizeContainerAccessEventBody,\n  normalizeContainerKekKeyring,\n  normalizeContainerKekPredecessorBridge,\n  normalizeDocumentAccessEventBody,\n  normalizeDocumentPurgeAccessEventBody,\n  openContainerKekKeyring,\n  PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT,\n  PRINCIPAL_HISTORY_VERIFICATION_REVISION,\n  principalHistoryIndexLeaf,\n  principalPolicyMatchesReference,\n  principalPolicyTransparencyLeaf,\n  resolveContainerPathUserAccessLevel,\n  resolveContainerStatePathUserAccessLevel,\n  resolveHistoricalContainerPathUserAccessLevel,\n  resolvePrincipalHistoryIndexProof,\n  restorePrincipalPolicyHistoryVerifier,\n  sealContainerKekKeyring,\n  selectPrincipalPolicyAuthorization,\n  selectPrincipalPolicyCurrentPredecessorReferences,\n  serializeKeyingCanonicalJson,\n  signAccessEvent,\n  signTransparencyTreeHead,\n  signWriteHeader,\n  unwrapContainerKekParentWrap,\n  unwrapContainerKekPredecessorBridge,\n  verifyAccessManifest,\n  verifyAccessManifestLocalCheckpoint,\n  verifyAccessManifestSnapshot,\n  verifyAttachmentBindingEvent,\n  verifyAttachmentDetachEvent,\n  verifyContainerAccessManifest,\n  verifyContainerKekKeyringEntry,\n  verifyContainerKekState,\n  verifyContainerParentEdge,\n  verifyDocumentLinkSetManifest,\n  verifyDocumentLinkSetSnapshot,\n  verifyDocumentPurgeEvent,\n  verifyIdentityStateCheckpoint,\n  verifyPrincipalPolicyBundle,\n  verifyPrincipalPolicyBundleAgainstHistory,\n  verifyPrincipalPolicyCheckpoint,\n  verifyPrincipalPolicyCurrent,\n  verifyPrincipalPolicyCurrentMutation,\n  verifyPrincipalPolicyCurrentSuccessor,\n  verifyPrincipalPolicyHistoryReferences,\n  verifyPrincipalPolicySnapshot,\n  verifySignedAccessEvent,\n  verifySignedTransparencyTreeHead,\n  verifyTransparencyConsistencyProof,\n  verifyTransparencyInclusionProof,\n  verifyTransparencyProof,\n  verifyWriteHeader,\n} from \"./keying\";\nexport {\n  organizationReplacementAuthorizationPayload,\n  organizationReplacementSigningBytes,\n  signOrganizationReplacementAuthorization,\n  type VerifiedOrganizationReplacementAuthorization,\n  verifyOrganizationReplacementAuthorization,\n} from \"./organizationReplacement\";\nexport {\n  computePrincipalContainerGrantRoot,\n  normalizePrincipalContainerGrants,\n} from \"./principalContainerGrants\";\nexport {\n  computePrincipalMemberEnvelopesRoot,\n  normalizePrincipalStateMemberEnvelopes,\n  PrincipalMemberEnvelopeValidationError,\n} from \"./principalMemberEnvelopes\";\nexport type { PrincipalPolicyValidationErrorCode } from \"./principalPolicyValidationError\";\nexport {\n  PrincipalPolicyValidationError,\n  throwPrincipalPolicyValidationError,\n} from \"./principalPolicyValidationError\";\nexport type {\n  ManagedRecipientPrincipalType,\n  PrincipalContainerGrant,\n  PrincipalContainerGrantAccessLevel,\n  PrincipalProjectionMember,\n  PrincipalProjectionRole,\n  PrincipalStateExternalAuthority,\n  PrincipalStateHeaderInput,\n  PrincipalStateMember,\n  PrincipalStateMemberEnvelope,\n  PrincipalStateMembershipMode,\n  PrincipalStatePayloadCipherSuite,\n  PrincipalStateSigningInput,\n  SignedPrincipalState,\n  UnsignedPrincipalState,\n} from \"./principalState\";\nexport {\n  buildPrincipalStateSigningInput,\n  computePrincipalMembershipRoot,\n  computePrincipalProjectionRoot,\n  computePrincipalStateHash,\n  computePrincipalStatePayloadCiphertextHash,\n  derivePrincipalProjectionMembers,\n  isManagedRecipientPrincipalType,\n  isPrincipalProjectionRole,\n  normalizePrincipalProjectionMembers,\n  normalizePrincipalStateMembers,\n  serializeUnsignedPrincipalState,\n  signPrincipalState,\n} from \"./principalState\";\nexport {\n  verifySignedPrincipalState,\n  verifySignedPrincipalStateResult,\n} from \"./principalStateVerification\";\nexport {\n  captureProjectionHistory,\n  type HistoryProjection,\n  omitProjectionHistory,\n  type RetainedProjectionHistory,\n  restoreProjectionHistory,\n} from \"./projectionHistory\";\nexport type { SigningKeyPair } from \"./signing/generateKeyPair\";\nexport {\n  generateSigningKeyPair,\n  generateSigningSeedAndKeyPair,\n  ML_DSA87_PUBLIC_KEY_BYTES,\n  ML_DSA87_SECRET_KEY_BYTES,\n  ML_DSA87_SIGNATURE_BYTES,\n} from \"./signing/generateKeyPair\";\nexport { sign } from \"./signing/sign\";\nexport { verify } from \"./signing/verify\";\nexport type { SymmetricCiphertext } from \"./symmetric\";\nexport {\n  AES_256_KEY_BYTES,\n  AES_GCM_IV_BYTES,\n  AES_GCM_TAG_BYTES,\n  assertAesGcmIv,\n  createAesGcmIv,\n  decryptWithDek,\n  encryptWithDek,\n} from \"./symmetric\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAKxD,OAAO,EACL,8BAA8B,EAC9B,mBAAmB,EACnB,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,EAC1B,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC9B,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAKrB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EAGpB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAC/C,OAAO,EACL,wBAAwB,EACxB,mCAAmC,EACnC,sCAAsC,EACtC,qCAAqC,EACrC,kCAAkC,EAClC,kCAAkC,EAClC,0BAA0B,EAE1B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAuI7B,OAAO,EACL,qCAAqC,EACrC,oCAAoC,EACpC,8BAA8B,EAC9B,qCAAqC,EACrC,2BAA2B,EAC3B,iCAAiC,EACjC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,gCAAgC,EAChC,+BAA+B,EAC/B,oCAAoC,EACpC,6BAA6B,EAC7B,+BAA+B,EAC/B,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,+BAA+B,EAC/B,8BAA8B,EAC9B,6BAA6B,EAC7B,wCAAwC,EACxC,sCAAsC,EACtC,4BAA4B,EAC5B,mCAAmC,EACnC,mCAAmC,EACnC,0CAA0C,EAC1C,wCAAwC,EACxC,yCAAyC,EACzC,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,sBAAsB,EACtB,mCAAmC,EACnC,gCAAgC,EAChC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,+BAA+B,EAC/B,oBAAoB,EACpB,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,EACnC,wBAAwB,EACxB,6BAA6B,EAC7B,kCAAkC,EAClC,6BAA6B,EAC7B,sCAAsC,EACtC,oCAAoC,EACpC,0CAA0C,EAC1C,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,8BAA8B,EAC9B,uBAAuB,EACvB,0BAA0B,EAC1B,mCAAmC,EACnC,6BAA6B,EAC7B,8BAA8B,EAC9B,mCAAmC,EACnC,mCAAmC,EACnC,2BAA2B,EAC3B,kCAAkC,EAClC,iCAAiC,EACjC,4BAA4B,EAC5B,sCAAsC,EACtC,gCAAgC,EAChC,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,uCAAuC,EACvC,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAC/B,mCAAmC,EACnC,wCAAwC,EACxC,6CAA6C,EAC7C,iCAAiC,EACjC,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,iDAAiD,EACjD,4BAA4B,EAC5B,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,4BAA4B,EAC5B,mCAAmC,EACnC,oBAAoB,EACpB,mCAAmC,EACnC,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,yCAAyC,EACzC,+BAA+B,EAC/B,4BAA4B,EAC5B,oCAAoC,EACpC,qCAAqC,EACrC,sCAAsC,EACtC,6BAA6B,EAC7B,uBAAuB,EACvB,gCAAgC,EAChC,kCAAkC,EAClC,gCAAgC,EAChC,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,2CAA2C,EAC3C,mCAAmC,EACnC,wCAAwC,EAExC,0CAA0C,GAC3C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mCAAmC,EACnC,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,8BAA8B,EAC9B,mCAAmC,GACpC,MAAM,kCAAkC,CAAC;AAiB1C,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,8BAA8B,EAC9B,yBAAyB,EACzB,0CAA0C,EAC1C,gCAAgC,EAChC,+BAA+B,EAC/B,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,+BAA+B,EAC/B,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,wBAAwB,EAExB,qBAAqB,EAErB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC","sourcesContent":["export { blobContentMetadataHash } from \"./blobContentMetadata\";\nexport { BlobEnvelopeError } from \"./blobEnvelopeError\";\nexport type {\n  BlobEnvelopeHeaderRecord,\n  BlobEnvelopeRecord,\n} from \"./blobEnvelopeReader\";\nexport {\n  MAX_BLOB_ENVELOPE_HEADER_BYTES,\n  parseBlobEnvelopeV2,\n  parseBlobEnvelopeV2Header,\n  readBlobEnvelopeHeaderByteLength,\n} from \"./blobEnvelopeReader\";\nexport type { BlobEnvelopeV2Header } from \"./blobEnvelopeV2\";\nexport {\n  BLOB_CHUNK_SIZE_BYTES,\n  BLOB_ENCRYPTED_BYTES_FORMAT,\n  BLOB_ENCRYPTED_BYTES_VERSION,\n  BLOB_ENVELOPE_MAGIC_BYTES,\n  BLOB_ENVELOPE_PREFIX_BYTES,\n  blobChunkPlaintextByteLength,\n  computeBlobChunkCount,\n  computeBlobEncryptedByteLength,\n  deriveBlobChunkIv,\n  encodeBlobEnvelopeV2Header,\n  joinBlobPartBytes,\n  MAX_BLOB_CHUNK_COUNT,\n  normalizeBlobChunkSize,\n} from \"./blobEnvelopeV2\";\nexport { compareCanonicalStrings } from \"./canonicalOrdering\";\nexport {\n  AUTH_CHALLENGE_BYTES,\n  AUTH_CHALLENGE_HEX_LENGTH,\n  authChallengeSigningBytes,\n  CHALLENGE_TTL_SECONDS,\n  canonicalAuthOrigin,\n  generateChallenge,\n} from \"./challenge\";\nexport type {\n  ContentKeyEnvelopeKind,\n  ContentKeyWrapBinding,\n} from \"./contentKeyEnvelope\";\nexport {\n  ContentKeyEnvelopeError,\n  decodeContentKeyEnvelope,\n  unwrapContentKey,\n  wrapContentKey,\n} from \"./contentKeyEnvelope\";\nexport { decryptAsRecipient } from \"./encapsulation/decryptAsRecipient\";\nexport { encryptForRecipients } from \"./encapsulation/encryptForRecipients\";\nexport type { EncapsulationKeyPair } from \"./encapsulation/generateKeyPair\";\nexport {\n  generateKemKeyPair,\n  generateKemSeedAndKeyPair,\n  ML_KEM1024_CIPHERTEXT_BYTES,\n  ML_KEM1024_PUBLIC_KEY_BYTES,\n  ML_KEM1024_SECRET_KEY_BYTES,\n  ML_KEM1024_SEED_BYTES,\n} from \"./encapsulation/generateKeyPair\";\nexport type { EncryptedEnvelope, RecipientEntry } from \"./encapsulation/types\";\nexport { unwrapDek } from \"./encapsulation/unwrapDek\";\nexport { wrapDekForRecipients } from \"./encapsulation/wrapDek\";\nexport { toFingerprint } from \"./fingerprint\";\nexport {\n  decryptGroupMetadata,\n  encodeBuiltinGroupMetadata,\n  encryptGroupMetadata,\n  type GroupMetadata,\n  type GroupMetadataKey,\n  readGroupMetadata,\n} from \"./groupMetadata\";\nexport { bytesToHex, hexToBytes } from \"./hex\";\nexport {\n  createIdentitySeedPhrase,\n  createIdentitySeedPhraseFromEntropy,\n  generateIdentityKeyPairsFromSeedPhrase,\n  IDENTITY_SEED_PHRASE_DERIVATION_SUITE,\n  IDENTITY_SEED_PHRASE_ENTROPY_BYTES,\n  IDENTITY_SEED_PHRASE_STRENGTH_BITS,\n  IDENTITY_SEED_PHRASE_WORDS,\n  type IdentitySeedPhraseKeyPairs,\n  normalizeIdentitySeedPhrase,\n  validateIdentitySeedPhrase,\n} from \"./identitySeedPhrase\";\nexport {\n  createIncrementalSha256,\n  type IncrementalSha256,\n} from \"./incrementalSha256\";\nexport type {\n  AccessEvent,\n  AccessEventType,\n  AccessManifest,\n  AccessManifestCheckpoint,\n  AccessManifestTransparencyLeaf,\n  AccessObjectKind,\n  AnyVerifiedAccessManifest,\n  AnyVerifiedPrincipalPolicy,\n  AttachmentAccessEventBody,\n  AttachmentBindAccessEventBody,\n  AttachmentDetachAccessEventBody,\n  BlobAccessManifest,\n  BlobContentKeyTarget,\n  ContainerAccessEventBody,\n  ContainerAccessKeyState,\n  ContainerAccessLevel,\n  ContainerAccessManifest,\n  ContainerAccessManifestState,\n  ContainerAccessStructural,\n  ContainerCreateAccessEventBody,\n  ContainerDirectGrant,\n  ContainerGrantAccessEventBody,\n  ContainerGrantPrincipalHead,\n  ContainerGrantSubjectType,\n  ContainerKekKeyring,\n  ContainerKekKeyringEntry,\n  ContainerKekPredecessorBridge,\n  ContainerKekRecipientTarget,\n  ContainerKekTarget,\n  ContainerKeyEpoch,\n  ContainerKeyWrap,\n  ContainerMoveAccessEventBody,\n  ContainerReciteAccessEventBody,\n  ContainerRekeyAccessEventBody,\n  ContainerRevokeAccessEventBody,\n  ContainerUserRecipientKey,\n  ContentObjectKind,\n  ContentRecordEncryptionSuite,\n  ContentRecordNonceDomain,\n  DeriveBlobKekTargetsInput,\n  DeriveContainerKekRecipientTargetsInput,\n  DeriveDocumentKekTargetsInput,\n  DocumentAccessEventBody,\n  DocumentContentKeyTarget,\n  DocumentContentRecordMetadataInput,\n  DocumentLinkAccessEventBody,\n  DocumentLinkSetManifestState,\n  DocumentLinkSetStructural,\n  DocumentPurgeAccessEventBody,\n  DocumentUnlinkAccessEventBody,\n  IdentityStateCheckpoint,\n  IdentityStateHead,\n  IdentityStateTransparencyLeaf,\n  KekRecipientKind,\n  KeyingCanonicalJson,\n  KeyingHashDomain,\n  KeyingLocalCheckpointStore,\n  KeyingVerificationCode,\n  KeyingVerificationResult,\n  ManagedPrincipalKind,\n  PrincipalHistoryIndexNode,\n  PrincipalPolicyAuthorization,\n  PrincipalPolicyBundle,\n  PrincipalPolicyCheckpoint,\n  PrincipalPolicyCurrent,\n  PrincipalPolicyExternalAuthority,\n  PrincipalPolicyExternalAuthorityState,\n  PrincipalPolicyHistoryInput,\n  PrincipalPolicyHistoryPage,\n  PrincipalPolicyHistoryProgressOptions,\n  PrincipalPolicyHistoryReferenceProof,\n  PrincipalPolicyHistoryVerifier,\n  PrincipalPolicyMemberEnvelopes,\n  PrincipalPolicyPayload,\n  PrincipalPolicySignedState,\n  PrincipalPolicySignerPublicKey,\n  PrincipalPolicySnapshot,\n  PrincipalPolicyStateChainEntry,\n  PrincipalPolicyTransitionMismatch,\n  PrincipalPolicyTransitionMismatchCode,\n  PrincipalPolicyTransparencyLeaf,\n  ReferencedPrincipalHead,\n  SignedTransparencyTreeHead,\n  TransparencyConsistencyProof,\n  TransparencyInclusionProof,\n  TransparencyLeaf,\n  TransparencyLeafKind,\n  TransparencyTreeCheckpoint,\n  UnsignedAccessEvent,\n  UnsignedTransparencyTreeHead,\n  UnsignedWriteHeader,\n  VerifiedAccessEvent,\n  VerifiedAccessManifest,\n  VerifiedAccessManifestCheckpointEvidence,\n  VerifiedAccessManifestSnapshot,\n  VerifiedAttachmentBinding,\n  VerifiedAttachmentDetach,\n  VerifiedBlobKekTargets,\n  VerifiedContainerAccessManifest,\n  VerifiedContainerKekState,\n  VerifiedContainerParentEdge,\n  VerifiedDocumentKekTargets,\n  VerifiedDocumentLinkSetManifest,\n  VerifiedDocumentLinkSetSnapshot,\n  VerifiedDocumentLinkSetStateEvidence,\n  VerifiedIdentityState,\n  VerifiedPrincipalPolicy,\n  VerifiedPrincipalPolicyCurrent,\n  VerifiedPrincipalPolicyHistory,\n  VerifiedPrincipalPolicySelection,\n  VerifiedPrincipalPolicySnapshot,\n  VerifiedTransparencyProof,\n  VerifiedTransparencyTreeHead,\n  VerifiedWriteHeader,\n  VerifyAccessEventInput,\n  VerifyAccessManifestInput,\n  VerifyAttachmentBindingEventInput,\n  VerifyAttachmentDetachEventInput,\n  VerifyContainerAccessManifestInput,\n  VerifyContainerKekStateInput,\n  VerifyContainerParentEdgeInput,\n  VerifyDocumentLinkSetManifestInput,\n  VerifyDocumentPurgeEventInput,\n  VerifyIdentityStateCheckpointInput,\n  VerifyPrincipalPolicyBundleInput,\n  VerifyPrincipalPolicySnapshotInput,\n  VerifySignedTransparencyTreeHeadInput,\n  VerifyTransparencyConsistencyProofInput,\n  VerifyTransparencyInclusionProofInput,\n  VerifyTransparencyProofInput,\n  VerifyWriteHeaderInput,\n  WriteHeader,\n} from \"./keying\";\nexport {\n  ACCESS_MANIFEST_VERIFICATION_REVISION,\n  accessManifestCheckpointFromManifest,\n  accessManifestTransparencyLeaf,\n  assertSealedContainerKekKeyringLength,\n  BLOB_CONTENT_KEY_WRAP_SUITE,\n  CONTAINER_KEK_KEYRING_ENTRY_BYTES,\n  CONTAINER_KEK_KEYRING_FORMAT_VERSION,\n  CONTAINER_KEK_KEYRING_HEADER_BYTES,\n  CONTAINER_KEK_KEYRING_SEAL_SUITE,\n  CONTAINER_KEK_MATERIAL_ID_PREFIX,\n  CONTAINER_KEK_PARENT_WRAP_SUITE,\n  CONTAINER_KEK_PREDECESSOR_WRAP_SUITE,\n  CONTAINER_KEK_USER_WRAP_SUITE,\n  CONTENT_RECORD_ENCRYPTION_SUITE,\n  computeAccessEventBodyHash,\n  computeAccessEventHash,\n  computeAccessManifestHash,\n  computeBlobAccessManifestHash,\n  computeBlobContentKeyTargetHash,\n  computeContainerAccessKeyTargetHash,\n  computeContainerAccessStructuralHash,\n  computeContainerDirectGrantRoot,\n  computeContainerKekKeyringHash,\n  computeContainerKekMaterialId,\n  computeContainerKekPredecessorBridgeHash,\n  computeContainerKekRecipientTargetHash,\n  computeContainerKeyEpochHash,\n  computeContentRecordNonceDomainHash,\n  computeDocumentContentKeyTargetHash,\n  computeDocumentContentRecordCiphertextHash,\n  computeDocumentContentRecordMetadataHash,\n  computeDocumentContentRecordPlaintextHash,\n  computeDocumentLinkSetGrantRoot,\n  computeDocumentLinkSetKeyTargetHash,\n  computeDocumentLinkSetStructuralHash,\n  computeKeyingDomainHash,\n  computeTransparencyLeafHash,\n  computeTransparencyMerkleRoot,\n  computeWriteHeaderHash,\n  createContainerKekPredecessorBridge,\n  createPrincipalHistoryIndexProof,\n  createPrincipalPolicyHistoryVerifier,\n  createTransparencyConsistencyProof,\n  createTransparencyInclusionProof,\n  DOCUMENT_CONTENT_KEY_WRAP_SUITE,\n  deriveBlobKekTargets,\n  deriveContainerAccessManifest,\n  deriveContainerKekRecipientTargets,\n  deriveContainerKekWrappingPublicKey,\n  deriveDocumentKekTargets,\n  deriveDocumentLinkSetManifest,\n  derivePrincipalRecipientKeyEpochId,\n  documentContentRecordMetadata,\n  expectedSealedContainerKekKeyringBytes,\n  getPrincipalPolicyTransitionMismatch,\n  getPrincipalPolicyTransitionMismatchReason,\n  identityStateTransparencyLeaf,\n  isContainerKekMaterialId,\n  isKeyingVerificationCode,\n  KEYING_VERIFICATION_CODES,\n  KeyingVerificationError,\n  MAX_CONTAINER_KEY_EPOCH,\n  MAX_CONTAINER_RECITATION_EPOCH,\n  makeVerifiedAccessEvent,\n  makeVerifiedBlobKekTargets,\n  makeVerifiedContainerAccessManifest,\n  makeVerifiedContainerKekState,\n  makeVerifiedDocumentKekTargets,\n  makeVerifiedDocumentLinkSetManifest,\n  makeVerifiedDocumentLinkSetSnapshot,\n  makeVerifiedPrincipalPolicy,\n  normalizeAttachmentAccessEventBody,\n  normalizeContainerAccessEventBody,\n  normalizeContainerKekKeyring,\n  normalizeContainerKekPredecessorBridge,\n  normalizeDocumentAccessEventBody,\n  normalizeDocumentPurgeAccessEventBody,\n  openContainerKekKeyring,\n  PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT,\n  PRINCIPAL_HISTORY_VERIFICATION_REVISION,\n  principalHistoryIndexLeaf,\n  principalPolicyMatchesReference,\n  principalPolicyTransparencyLeaf,\n  resolveContainerPathUserAccessLevel,\n  resolveContainerStatePathUserAccessLevel,\n  resolveHistoricalContainerPathUserAccessLevel,\n  resolvePrincipalHistoryIndexProof,\n  restorePrincipalPolicyHistoryVerifier,\n  sealContainerKekKeyring,\n  selectPrincipalPolicyAuthorization,\n  selectPrincipalPolicyCurrentPredecessorReferences,\n  serializeKeyingCanonicalJson,\n  signAccessEvent,\n  signTransparencyTreeHead,\n  signWriteHeader,\n  unwrapContainerKekParentWrap,\n  unwrapContainerKekPredecessorBridge,\n  verifyAccessManifest,\n  verifyAccessManifestLocalCheckpoint,\n  verifyAccessManifestSnapshot,\n  verifyAttachmentBindingEvent,\n  verifyAttachmentDetachEvent,\n  verifyContainerAccessManifest,\n  verifyContainerKekKeyringEntry,\n  verifyContainerKekState,\n  verifyContainerParentEdge,\n  verifyDocumentLinkSetManifest,\n  verifyDocumentLinkSetSnapshot,\n  verifyDocumentPurgeEvent,\n  verifyIdentityStateCheckpoint,\n  verifyPrincipalPolicyBundle,\n  verifyPrincipalPolicyBundleAgainstHistory,\n  verifyPrincipalPolicyCheckpoint,\n  verifyPrincipalPolicyCurrent,\n  verifyPrincipalPolicyCurrentMutation,\n  verifyPrincipalPolicyCurrentSuccessor,\n  verifyPrincipalPolicyHistoryReferences,\n  verifyPrincipalPolicySnapshot,\n  verifySignedAccessEvent,\n  verifySignedTransparencyTreeHead,\n  verifyTransparencyConsistencyProof,\n  verifyTransparencyInclusionProof,\n  verifyTransparencyProof,\n  verifyWriteHeader,\n} from \"./keying\";\nexport {\n  organizationReplacementAuthorizationPayload,\n  organizationReplacementSigningBytes,\n  signOrganizationReplacementAuthorization,\n  type VerifiedOrganizationReplacementAuthorization,\n  verifyOrganizationReplacementAuthorization,\n} from \"./organizationReplacement\";\nexport {\n  computePrincipalContainerGrantRoot,\n  normalizePrincipalContainerGrants,\n} from \"./principalContainerGrants\";\nexport {\n  computePrincipalMemberEnvelopesRoot,\n  normalizePrincipalStateMemberEnvelopes,\n  PrincipalMemberEnvelopeValidationError,\n} from \"./principalMemberEnvelopes\";\nexport type { PrincipalPolicyValidationErrorCode } from \"./principalPolicyValidationError\";\nexport {\n  PrincipalPolicyValidationError,\n  throwPrincipalPolicyValidationError,\n} from \"./principalPolicyValidationError\";\nexport type {\n  ManagedRecipientPrincipalType,\n  PrincipalContainerGrant,\n  PrincipalContainerGrantAccessLevel,\n  PrincipalProjectionMember,\n  PrincipalProjectionRole,\n  PrincipalStateExternalAuthority,\n  PrincipalStateHeaderInput,\n  PrincipalStateMember,\n  PrincipalStateMemberEnvelope,\n  PrincipalStateMembershipMode,\n  PrincipalStatePayloadCipherSuite,\n  PrincipalStateSigningInput,\n  SignedPrincipalState,\n  UnsignedPrincipalState,\n} from \"./principalState\";\nexport {\n  buildPrincipalStateSigningInput,\n  computePrincipalMembershipRoot,\n  computePrincipalProjectionRoot,\n  computePrincipalStateHash,\n  computePrincipalStatePayloadCiphertextHash,\n  derivePrincipalProjectionMembers,\n  isManagedRecipientPrincipalType,\n  isPrincipalProjectionRole,\n  normalizePrincipalProjectionMembers,\n  normalizePrincipalStateMembers,\n  serializeUnsignedPrincipalState,\n  signPrincipalState,\n} from \"./principalState\";\nexport {\n  verifySignedPrincipalState,\n  verifySignedPrincipalStateResult,\n} from \"./principalStateVerification\";\nexport {\n  captureProjectionHistory,\n  type HistoryProjection,\n  omitProjectionHistory,\n  type RetainedProjectionHistory,\n  restoreProjectionHistory,\n} from \"./projectionHistory\";\nexport type { SigningKeyPair } from \"./signing/generateKeyPair\";\nexport {\n  generateSigningKeyPair,\n  generateSigningSeedAndKeyPair,\n  ML_DSA87_PUBLIC_KEY_BYTES,\n  ML_DSA87_SECRET_KEY_BYTES,\n  ML_DSA87_SIGNATURE_BYTES,\n} from \"./signing/generateKeyPair\";\nexport { sign } from \"./signing/sign\";\nexport { verify } from \"./signing/verify\";\nexport type { SymmetricCiphertext } from \"./symmetric\";\nexport {\n  AES_256_KEY_BYTES,\n  AES_GCM_IV_BYTES,\n  AES_GCM_TAG_BYTES,\n  assertAesGcmIv,\n  createAesGcmIv,\n  decryptWithDek,\n  encryptWithDek,\n} from \"./symmetric\";\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tearleads/client-sdk",
-  "version": "0.1.28",
+  "version": "0.1.30",
   "description": "React-free Tearleads client runtime: local SQLite persistence, keys, sync, encrypted blobs, and domain workflows.",
   "license": "UNLICENSED",
   "repository": {

package/stores/documents/documentStore/attachmentPersistence.js.map

@@ -1 +1 @@
-{"version":3,"file":"attachmentPersistence.js","sourceRoot":"","sources":["attachmentPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAG/B,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAGL,gBAAgB,GACjB,MAAM,SAAS,CAAC;AACjB,OAAO,EAEL,oCAAoC,IAAI,uBAAuB,GAChE,MAAM,kBAAkB,CAAC;AAE1B,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAyB,EACzB,MAAc,EACd,UAAkB,EAClB,kBAAgD;IAEhD,2EAA2E;IAC3E,mEAAmE;IACnE,aAAa;IACb,MAAM,6BAA6B,CAAC,KAAK,EAAE,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE,CACzE,+BAA+B,CAAC;QAC9B,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM;QACN,UAAU;KACX,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAyB,EACzB,MAAc,EACd,UAAkB,EAClB,aAAmC,KAAK,CAAC,GAAG;IAE5C,MAAM,6BAA6B,CAAC;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM;QACN,UAAU;KACX,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;QAC9D,yBAAyB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,UAAU,IAAI,UAAU,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;QAC3C,gBAAgB,CACd,KAAK,EACL,UAAU,EACV,KAAK,CAAC,QAAQ,CAAC,OAAO,EACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,EACnB,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAyB,EACzB,UAAiC,EACjC,aAAmC,KAAK,CAAC,GAAG,EAC5C,kBAAgD;IAEhD,MAAM,0BAA0B,CAC9B,KAAK,EACL,CAAC,UAAU,CAAC,EACZ,UAAU,EACV,kBAAkB,CACnB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAyB,EACzB,WAAiD,EACjD,aAAmC,KAAK,CAAC,GAAG,EAC5C,kBAAgD;IAEhD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,0EAA0E;IAC1E,4CAA4C;IAC5C,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAC/C,KAAK,EACL,kBAAkB,EAClB,CAAC,OAAO,EAAE,EAAE,CACV,4BAA4B,CAAC;QAC3B,WAAW,EAAE,8BAA8B,CAAC,WAAW,EAAE,UAAU,CAAC;QACpE,OAAO;QACP,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CACL,CAAC;IACF,IACE,CAAC,KAAK;QACN,CAAC,kBAAkB,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,EAC3E,CAAC;QACD,OAAO;IACT,CAAC;IAED,6BAA6B,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAChE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,0BAA0B,CACxC,KAAyB,EACzB,WAAiD;IAEjD,MAAM,OAAO,GAAG,CAAI,IAA8C,EAAE,EAAE,CACpE,MAAM,CAAC,WAAW,CAChB,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CACvE,CAAC;IACJ,KAAK,CAAC,wBAAwB,GAAG;QAC/B,GAAG,KAAK,CAAC,wBAAwB;QACjC,GAAG,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;KAC9C,CAAC;IACF,KAAK,CAAC,+BAA+B,GAAG;QACtC,GAAG,KAAK,CAAC,+BAA+B;QACxC,GAAG,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;KACrD,CAAC;IACF,KAAK,CAAC,4BAA4B,GAAG;QACnC,GAAG,KAAK,CAAC,4BAA4B;QACrC,GAAG,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,yBAAyB,CACvC,KAAyB,EACzB,MAAc;IAEd,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC,wBAAwB,CAAC;IACzE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,GACnD,KAAK,CAAC,+BAA+B,CAAC;IACxC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,GAC7C,KAAK,CAAC,4BAA4B,CAAC;IACrC,KAAK,CAAC,wBAAwB,GAAG,OAAO,CAAC;IACzC,KAAK,CAAC,+BAA+B,GAAG,cAAc,CAAC;IACvD,KAAK,CAAC,4BAA4B,GAAG,WAAW,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAyB,EACzB,WAAiD,EACjD,UAAgC;IAEhC,0BAA0B,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAE/C,IAAI,UAAU,IAAI,UAAU,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;QAC3C,gBAAgB,CACd,KAAK,EACL,UAAU,EACV,KAAK,CAAC,QAAQ,CAAC,OAAO,EACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,EACnB,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAyB,EACzB,sBAA8D;IAE9D,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,sBAAsB,CAAC,GAAG,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAC5E,CAAC;IACF,KAAK,CAAC,kBAAkB,GAAG;QACzB,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAChC,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAClE;QACD,GAAG,sBAAsB;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAyB,EACzB,iBAA0C,EAC1C,kBAAgD;IAEhD,yEAAyE;IACzE,uDAAuD;IACvD,MAAM,6BAA6B,CAAC,KAAK,EAAE,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE,CACzE,6BAA6B,CAAC;QAC5B,UAAU,EAAE,iBAAiB;QAC7B,OAAO;QACP,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CACH,CAAC;AACJ,CAAC","sourcesContent":["import {\n  deleteLocalDocumentAttachment,\n  deletePendingDocumentAttachment,\n  type LocalAttachmentRecord,\n  type PendingAttachmentRecord,\n  saveLocalDocumentAttachments,\n  savePendingDocumentAttachment,\n} from \"../../../workflows/documents\";\nimport { withLocalAttachmentDetachState } from \"./attachmentDetachState\";\nimport { withGenerationGuardedMutation } from \"./persistence\";\nimport {\n  type DocumentState,\n  type DocumentStoreState,\n  setReadySnapshot,\n} from \"./state\";\nimport {\n  type DocumentStoreSyncGeneration,\n  isDocumentStoreSyncGenerationCurrent as isSyncGenerationCurrent,\n} from \"./syncGeneration\";\n\nexport async function deletePendingAttachment(\n  state: DocumentStoreState,\n  slotId: string,\n  storageKey: string,\n  expectedGeneration?: DocumentStoreSyncGeneration,\n) {\n  // After a REFUSED discard the reset store keeps its rows, and a stale pass\n  // racing that reset must not delete state the refusal deliberately\n  // preserved.\n  await withGenerationGuardedMutation(state, expectedGeneration, (execSql) =>\n    deletePendingDocumentAttachment({\n      execSql,\n      localId: state.localId,\n      persistence: state.persistence,\n      slotId,\n      storageKey,\n    }),\n  );\n}\n\nexport async function deleteLocalAttachmentRecord(\n  state: DocumentStoreState,\n  slotId: string,\n  storageKey: string,\n  currentDoc: DocumentState | null = state.doc,\n) {\n  await deleteLocalDocumentAttachment({\n    execSql: state.runtime.infra.execSql,\n    localId: state.localId,\n    persistence: state.persistence,\n    slotId,\n    storageKey,\n  });\n\n  if (state.attachmentStorageKeyBySlotId[slotId] === storageKey) {\n    removeLocalAttachmentSlot(state, slotId);\n  }\n\n  if (currentDoc && currentDoc === state.doc) {\n    setReadySnapshot(\n      state,\n      currentDoc,\n      state.snapshot.syncing,\n      state.snapshot.text,\n      state.snapshot.structuredFields,\n    );\n  }\n}\n\nexport async function saveLocalAttachmentRecord(\n  state: DocumentStoreState,\n  attachment: LocalAttachmentRecord,\n  currentDoc: DocumentState | null = state.doc,\n  expectedGeneration?: DocumentStoreSyncGeneration,\n) {\n  await saveLocalAttachmentRecords(\n    state,\n    [attachment],\n    currentDoc,\n    expectedGeneration,\n  );\n}\n\nexport async function saveLocalAttachmentRecords(\n  state: DocumentStoreState,\n  attachments: ReadonlyArray<LocalAttachmentRecord>,\n  currentDoc: DocumentState | null = state.doc,\n  expectedGeneration?: DocumentStoreSyncGeneration,\n) {\n  if (attachments.length === 0) {\n    return;\n  }\n\n  // These rows are upserts, and a stale writer racing a teardown must never\n  // re-insert what the teardown just removed.\n  const saved = await withGenerationGuardedMutation(\n    state,\n    expectedGeneration,\n    (execSql) =>\n      saveLocalDocumentAttachments({\n        attachments: withLocalAttachmentDetachState(attachments, currentDoc),\n        execSql,\n        persistence: state.persistence,\n      }),\n  );\n  if (\n    !saved ||\n    (expectedGeneration && !isSyncGenerationCurrent(state, expectedGeneration))\n  ) {\n    return;\n  }\n\n  installLocalAttachmentRecords(state, attachments, currentDoc);\n}\n\n/** Publish the held copy of each record's slot to the store's slot maps. */\nexport function assignLocalAttachmentSlots(\n  state: DocumentStoreState,\n  attachments: ReadonlyArray<LocalAttachmentRecord>,\n): void {\n  const entries = <T>(pick: (attachment: LocalAttachmentRecord) => T) =>\n    Object.fromEntries(\n      attachments.map((attachment) => [attachment.slotId, pick(attachment)]),\n    );\n  state.attachmentBlobIdBySlotId = {\n    ...state.attachmentBlobIdBySlotId,\n    ...entries((attachment) => attachment.blobId),\n  };\n  state.attachmentContentSha256BySlotId = {\n    ...state.attachmentContentSha256BySlotId,\n    ...entries((attachment) => attachment.contentSha256),\n  };\n  state.attachmentStorageKeyBySlotId = {\n    ...state.attachmentStorageKeyBySlotId,\n    ...entries((attachment) => attachment.storageKey),\n  };\n}\n\n/** Forget the held copy of one slot without touching its durable row. */\nexport function removeLocalAttachmentSlot(\n  state: DocumentStoreState,\n  slotId: string,\n): void {\n  const { [slotId]: _blobId, ...blobIds } = state.attachmentBlobIdBySlotId;\n  const { [slotId]: _contentSha256, ...contentSha256s } =\n    state.attachmentContentSha256BySlotId;\n  const { [slotId]: _storageKey, ...storageKeys } =\n    state.attachmentStorageKeyBySlotId;\n  state.attachmentBlobIdBySlotId = blobIds;\n  state.attachmentContentSha256BySlotId = contentSha256s;\n  state.attachmentStorageKeyBySlotId = storageKeys;\n}\n\nexport function installLocalAttachmentRecords(\n  state: DocumentStoreState,\n  attachments: ReadonlyArray<LocalAttachmentRecord>,\n  currentDoc: DocumentState | null,\n) {\n  assignLocalAttachmentSlots(state, attachments);\n\n  if (currentDoc && currentDoc === state.doc) {\n    setReadySnapshot(\n      state,\n      currentDoc,\n      state.snapshot.syncing,\n      state.snapshot.text,\n      state.snapshot.structuredFields,\n    );\n  }\n}\n\nexport function upsertPendingAttachments(\n  state: DocumentStoreState,\n  nextPendingAttachments: ReadonlyArray<PendingAttachmentRecord>,\n) {\n  const nextSlotIds = new Set(\n    nextPendingAttachments.map((pendingAttachment) => pendingAttachment.slotId),\n  );\n  state.pendingAttachments = [\n    ...state.pendingAttachments.filter(\n      (pendingAttachment) => !nextSlotIds.has(pendingAttachment.slotId),\n    ),\n    ...nextPendingAttachments,\n  ];\n}\n\n/**\n * Persist a pending attachment's upload-resume identity (blob id, content key,\n * IV, and — once staged — the multipart stage id/part size) so a later attempt\n * reuses it instead of orphaning the stage. The caller publishes the saved\n * identity on the live pending record only after this write succeeds.\n */\nexport async function savePendingAttachmentUpload(\n  state: DocumentStoreState,\n  pendingAttachment: PendingAttachmentRecord,\n  expectedGeneration?: DocumentStoreSyncGeneration,\n): Promise<void> {\n  // This row is an upsert, and a stale resume racing a teardown must never\n  // re-insert the pending row the teardown just removed.\n  await withGenerationGuardedMutation(state, expectedGeneration, (execSql) =>\n    savePendingDocumentAttachment({\n      attachment: pendingAttachment,\n      execSql,\n      persistence: state.persistence,\n    }),\n  );\n}\n"]}
+{"version":3,"file":"attachmentPersistence.js","sourceRoot":"","sources":["attachmentPersistence.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAG/B,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAGL,gBAAgB,GACjB,MAAM,SAAS,CAAC;AACjB,OAAO,EAEL,oCAAoC,IAAI,uBAAuB,GAChE,MAAM,kBAAkB,CAAC;AAE1B,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAyB,EACzB,MAAc,EACd,UAAkB,EAClB,kBAAgD;IAEhD,2EAA2E;IAC3E,mEAAmE;IACnE,aAAa;IACb,MAAM,6BAA6B,CAAC,KAAK,EAAE,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE,CACzE,+BAA+B,CAAC;QAC9B,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM;QACN,UAAU;KACX,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAyB,EACzB,MAAc,EACd,UAAkB,EAClB,aAAmC,KAAK,CAAC,GAAG;IAE5C,MAAM,6BAA6B,CAAC;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM;QACN,UAAU;KACX,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;QAC9D,yBAAyB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,UAAU,IAAI,UAAU,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;QAC3C,gBAAgB,CACd,KAAK,EACL,UAAU,EACV,KAAK,CAAC,QAAQ,CAAC,OAAO,EACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,EACnB,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAyB,EACzB,UAAiC,EACjC,aAAmC,KAAK,CAAC,GAAG,EAC5C,kBAAgD;IAEhD,MAAM,0BAA0B,CAC9B,KAAK,EACL,CAAC,UAAU,CAAC,EACZ,UAAU,EACV,kBAAkB,CACnB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAyB,EACzB,WAAiD,EACjD,aAAmC,KAAK,CAAC,GAAG,EAC5C,kBAAgD;IAEhD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,0EAA0E;IAC1E,4CAA4C;IAC5C,MAAM,KAAK,GAAG,MAAM,6BAA6B,CAC/C,KAAK,EACL,kBAAkB,EAClB,CAAC,OAAO,EAAE,EAAE,CACV,4BAA4B,CAAC;QAC3B,WAAW,EAAE,8BAA8B,CAAC,WAAW,EAAE,UAAU,CAAC;QACpE,OAAO;QACP,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CACL,CAAC;IACF,IACE,CAAC,KAAK;QACN,CAAC,kBAAkB,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,EAC3E,CAAC;QACD,OAAO;IACT,CAAC;IAED,6BAA6B,CAAC,KAAK,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAChE,CAAC;AAOD,4EAA4E;AAC5E,MAAM,UAAU,0BAA0B,CACxC,KAAyB,EACzB,WAA0C;IAE1C,MAAM,OAAO,GAAG,CAAI,IAAuC,EAAE,EAAE,CAC7D,MAAM,CAAC,WAAW,CAChB,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CACvE,CAAC;IACJ,KAAK,CAAC,wBAAwB,GAAG;QAC/B,GAAG,KAAK,CAAC,wBAAwB;QACjC,GAAG,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;KAC9C,CAAC;IACF,KAAK,CAAC,+BAA+B,GAAG;QACtC,GAAG,KAAK,CAAC,+BAA+B;QACxC,GAAG,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;KACrD,CAAC;IACF,KAAK,CAAC,4BAA4B,GAAG;QACnC,GAAG,KAAK,CAAC,4BAA4B;QACrC,GAAG,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,yBAAyB,CACvC,KAAyB,EACzB,MAAc;IAEd,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC,wBAAwB,CAAC;IACzE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,GAAG,cAAc,EAAE,GACnD,KAAK,CAAC,+BAA+B,CAAC;IACxC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,WAAW,EAAE,GAC7C,KAAK,CAAC,4BAA4B,CAAC;IACrC,KAAK,CAAC,wBAAwB,GAAG,OAAO,CAAC;IACzC,KAAK,CAAC,+BAA+B,GAAG,cAAc,CAAC;IACvD,KAAK,CAAC,4BAA4B,GAAG,WAAW,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAyB,EACzB,WAAiD,EACjD,UAAgC;IAEhC,0BAA0B,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAE/C,IAAI,UAAU,IAAI,UAAU,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;QAC3C,gBAAgB,CACd,KAAK,EACL,UAAU,EACV,KAAK,CAAC,QAAQ,CAAC,OAAO,EACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,EACnB,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAyB,EACzB,sBAA8D;IAE9D,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,sBAAsB,CAAC,GAAG,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAC5E,CAAC;IACF,KAAK,CAAC,kBAAkB,GAAG;QACzB,GAAG,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAChC,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAClE;QACD,GAAG,sBAAsB;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAyB,EACzB,iBAA0C,EAC1C,kBAAgD;IAEhD,yEAAyE;IACzE,uDAAuD;IACvD,MAAM,6BAA6B,CAAC,KAAK,EAAE,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE,CACzE,6BAA6B,CAAC;QAC5B,UAAU,EAAE,iBAAiB;QAC7B,OAAO;QACP,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CACH,CAAC;AACJ,CAAC","sourcesContent":["import {\n  deleteLocalDocumentAttachment,\n  deletePendingDocumentAttachment,\n  type LocalAttachmentRecord,\n  type PendingAttachmentRecord,\n  saveLocalDocumentAttachments,\n  savePendingDocumentAttachment,\n} from \"../../../workflows/documents\";\nimport { withLocalAttachmentDetachState } from \"./attachmentDetachState\";\nimport { withGenerationGuardedMutation } from \"./persistence\";\nimport {\n  type DocumentState,\n  type DocumentStoreState,\n  setReadySnapshot,\n} from \"./state\";\nimport {\n  type DocumentStoreSyncGeneration,\n  isDocumentStoreSyncGenerationCurrent as isSyncGenerationCurrent,\n} from \"./syncGeneration\";\n\nexport async function deletePendingAttachment(\n  state: DocumentStoreState,\n  slotId: string,\n  storageKey: string,\n  expectedGeneration?: DocumentStoreSyncGeneration,\n) {\n  // After a REFUSED discard the reset store keeps its rows, and a stale pass\n  // racing that reset must not delete state the refusal deliberately\n  // preserved.\n  await withGenerationGuardedMutation(state, expectedGeneration, (execSql) =>\n    deletePendingDocumentAttachment({\n      execSql,\n      localId: state.localId,\n      persistence: state.persistence,\n      slotId,\n      storageKey,\n    }),\n  );\n}\n\nexport async function deleteLocalAttachmentRecord(\n  state: DocumentStoreState,\n  slotId: string,\n  storageKey: string,\n  currentDoc: DocumentState | null = state.doc,\n) {\n  await deleteLocalDocumentAttachment({\n    execSql: state.runtime.infra.execSql,\n    localId: state.localId,\n    persistence: state.persistence,\n    slotId,\n    storageKey,\n  });\n\n  if (state.attachmentStorageKeyBySlotId[slotId] === storageKey) {\n    removeLocalAttachmentSlot(state, slotId);\n  }\n\n  if (currentDoc && currentDoc === state.doc) {\n    setReadySnapshot(\n      state,\n      currentDoc,\n      state.snapshot.syncing,\n      state.snapshot.text,\n      state.snapshot.structuredFields,\n    );\n  }\n}\n\nexport async function saveLocalAttachmentRecord(\n  state: DocumentStoreState,\n  attachment: LocalAttachmentRecord,\n  currentDoc: DocumentState | null = state.doc,\n  expectedGeneration?: DocumentStoreSyncGeneration,\n) {\n  await saveLocalAttachmentRecords(\n    state,\n    [attachment],\n    currentDoc,\n    expectedGeneration,\n  );\n}\n\nexport async function saveLocalAttachmentRecords(\n  state: DocumentStoreState,\n  attachments: ReadonlyArray<LocalAttachmentRecord>,\n  currentDoc: DocumentState | null = state.doc,\n  expectedGeneration?: DocumentStoreSyncGeneration,\n) {\n  if (attachments.length === 0) {\n    return;\n  }\n\n  // These rows are upserts, and a stale writer racing a teardown must never\n  // re-insert what the teardown just removed.\n  const saved = await withGenerationGuardedMutation(\n    state,\n    expectedGeneration,\n    (execSql) =>\n      saveLocalDocumentAttachments({\n        attachments: withLocalAttachmentDetachState(attachments, currentDoc),\n        execSql,\n        persistence: state.persistence,\n      }),\n  );\n  if (\n    !saved ||\n    (expectedGeneration && !isSyncGenerationCurrent(state, expectedGeneration))\n  ) {\n    return;\n  }\n\n  installLocalAttachmentRecords(state, attachments, currentDoc);\n}\n\ntype AttachmentSlot = Pick<\n  LocalAttachmentRecord,\n  \"slotId\" | \"blobId\" | \"contentSha256\" | \"storageKey\"\n>;\n\n/** Publish the held copy of each record's slot to the store's slot maps. */\nexport function assignLocalAttachmentSlots(\n  state: DocumentStoreState,\n  attachments: ReadonlyArray<AttachmentSlot>,\n): void {\n  const entries = <T>(pick: (attachment: AttachmentSlot) => T) =>\n    Object.fromEntries(\n      attachments.map((attachment) => [attachment.slotId, pick(attachment)]),\n    );\n  state.attachmentBlobIdBySlotId = {\n    ...state.attachmentBlobIdBySlotId,\n    ...entries((attachment) => attachment.blobId),\n  };\n  state.attachmentContentSha256BySlotId = {\n    ...state.attachmentContentSha256BySlotId,\n    ...entries((attachment) => attachment.contentSha256),\n  };\n  state.attachmentStorageKeyBySlotId = {\n    ...state.attachmentStorageKeyBySlotId,\n    ...entries((attachment) => attachment.storageKey),\n  };\n}\n\n/** Forget the held copy of one slot without touching its durable row. */\nexport function removeLocalAttachmentSlot(\n  state: DocumentStoreState,\n  slotId: string,\n): void {\n  const { [slotId]: _blobId, ...blobIds } = state.attachmentBlobIdBySlotId;\n  const { [slotId]: _contentSha256, ...contentSha256s } =\n    state.attachmentContentSha256BySlotId;\n  const { [slotId]: _storageKey, ...storageKeys } =\n    state.attachmentStorageKeyBySlotId;\n  state.attachmentBlobIdBySlotId = blobIds;\n  state.attachmentContentSha256BySlotId = contentSha256s;\n  state.attachmentStorageKeyBySlotId = storageKeys;\n}\n\nexport function installLocalAttachmentRecords(\n  state: DocumentStoreState,\n  attachments: ReadonlyArray<LocalAttachmentRecord>,\n  currentDoc: DocumentState | null,\n) {\n  assignLocalAttachmentSlots(state, attachments);\n\n  if (currentDoc && currentDoc === state.doc) {\n    setReadySnapshot(\n      state,\n      currentDoc,\n      state.snapshot.syncing,\n      state.snapshot.text,\n      state.snapshot.structuredFields,\n    );\n  }\n}\n\nexport function upsertPendingAttachments(\n  state: DocumentStoreState,\n  nextPendingAttachments: ReadonlyArray<PendingAttachmentRecord>,\n) {\n  const nextSlotIds = new Set(\n    nextPendingAttachments.map((pendingAttachment) => pendingAttachment.slotId),\n  );\n  state.pendingAttachments = [\n    ...state.pendingAttachments.filter(\n      (pendingAttachment) => !nextSlotIds.has(pendingAttachment.slotId),\n    ),\n    ...nextPendingAttachments,\n  ];\n}\n\n/**\n * Persist a pending attachment's upload-resume identity (blob id, content key,\n * IV, and — once staged — the multipart stage id/part size) so a later attempt\n * reuses it instead of orphaning the stage. The caller publishes the saved\n * identity on the live pending record only after this write succeeds.\n */\nexport async function savePendingAttachmentUpload(\n  state: DocumentStoreState,\n  pendingAttachment: PendingAttachmentRecord,\n  expectedGeneration?: DocumentStoreSyncGeneration,\n): Promise<void> {\n  // This row is an upsert, and a stale resume racing a teardown must never\n  // re-insert the pending row the teardown just removed.\n  await withGenerationGuardedMutation(state, expectedGeneration, (execSql) =>\n    savePendingDocumentAttachment({\n      attachment: pendingAttachment,\n      execSql,\n      persistence: state.persistence,\n    }),\n  );\n}\n"]}

package/stores/documents/documentStore/attachments.js

@@ -4,7 +4,7 @@ import { createPendingUpdateFields } from "../../../data/documents/documentSync.
 import { requestDocumentStoreSync } from "../registry.js";
 import { buildAttachmentIntent, buildPendingAttachments, } from "./attachmentIntents.js";
 import { persistStagedAttachmentMutation, restoreFailedAttachmentMutation, } from "./attachmentMutationPersistence.js";
-import { removeLocalAttachmentSlot } from "./attachmentPersistence.js";
+import { assignLocalAttachmentSlots, removeLocalAttachmentSlot, } from "./attachmentPersistence.js";
 import { deleteUnreferencedStagedAttachmentBytes, installPendingAttachmentRows, stagePendingAttachments, } from "./attachmentStaging.js";
 import { captureAttachmentWriteGeneration, isAttachmentWriteGenerationCurrent, shouldAbortAttachmentPersistFollowup, } from "./attachmentWriteGeneration.js";
 import { ensureDocumentStoreReady } from "./initialization.js";
@@ -176,9 +176,20 @@ function installCommittedAttachmentRemoval(input) {
     const { slotId, state, storageKey } = input;
     if (!storageKey)
         return;
+    const pending = state.pendingAttachments.find((attachment) => attachment.slotId === slotId && attachment.storageKey === storageKey);
+    if (input.syncedAttachment && pending?.upload) {
+        assignLocalAttachmentSlots(state, [
+            {
+                slotId,
+                storageKey,
+                blobId: pending.upload.blobId,
+                contentSha256: pending.contentSha256,
+            },
+        ]);
+    }
     state.pendingAttachments = state.pendingAttachments.filter((attachment) => attachment.slotId !== slotId || attachment.storageKey !== storageKey);
     // The committed removal queued this key. A reset can leave another document
-    // uploading from the same copy, and a pending-only slot leaves no marker.
+    // uploading from the same copy; a detached marker keeps it until sync.
     void runDocumentOrphanMaintenance(state);
     if (input.syncedAttachment ||
         state.attachmentStorageKeyBySlotId[slotId] !== storageKey) {