@tearleads/client-sdk 0.1.40 → 0.1.42

package/data/persistence/verifiedManifestBundlePersistence.js

@@ -0,0 +1,282 @@
+import { toFingerprint } from "../../internal/crypto/index.js";
+import { isAccessManifestBundleWireResponse, } from "../../internal/validators/response/index.js";
+import { KNOWN_MANIFEST_HINT_LIMIT, MAX_CONTAINER_PATH_LENGTH, } from "../../internal/validators/util/index.js";
+import { and, asc, desc, eq, inArray, sql } from "drizzle-orm";
+import { containers } from "../sqlite/containerSchema.js";
+import { documentDiscoveryHeads, pendingDocumentDiscoveries, } from "../sqlite/documentDiscoveryEvidenceSchema.js";
+import { containerTables, documentContainerProjection, documentContainerProjectionTables, } from "../sqlite/schema.js";
+import { getClientSQLitePersistenceRuntime, } from "../sqlite/sqlitePersistenceRuntime.js";
+import { ensureSqlTables } from "../sqlite/sqlSchema.js";
+import { verifiedAccessManifestBundles as bundles, verifiedManifestBundleTables, } from "../sqlite/verifiedManifestBundleSchema.js";
+/**
+ * Bounds local bytes (a bundle is ~10–20 KB). Evicting the least recently
+ * verified rows only makes a later read carry those bundles again.
+ */
+export const MAX_VERIFIED_MANIFEST_BUNDLES = 1024;
+const STATEMENT_BATCH = 200;
+function sha256Hex(text) {
+    return toFingerprint(new TextEncoder().encode(text));
+}
+function batches(values) {
+    const result = [];
+    for (let index = 0; index < values.length; index += STATEMENT_BATCH)
+        result.push(values.slice(index, index + STATEMENT_BATCH));
+    return result;
+}
+async function pruneInTransaction(tx) {
+    const [row] = await tx.select({ count: sql `count(*)` }).from(bundles);
+    const excess = (row?.count ?? 0) - MAX_VERIFIED_MANIFEST_BUNDLES;
+    if (excess <= 0)
+        return;
+    const evicted = await tx
+        .select({ manifestHash: bundles.manifestHash })
+        .from(bundles)
+        .orderBy(asc(bundles.verifiedAt), asc(bundles.manifestHash))
+        .limit(excess);
+    for (const batch of batches(evicted.map((entry) => entry.manifestHash)))
+        await tx.delete(bundles).where(inArray(bundles.manifestHash, batch)).run();
+}
+/**
+ * Prepares rows for bundles that just passed projection verification. The
+ * digests are computed here, before the checkpoint transaction that writes
+ * them begins.
+ */
+export function verifiedManifestBundleRows(entries) {
+    const unique = new Map(entries.map((entry) => [entry.bundle.manifestHash, entry]));
+    return Promise.all([...unique.values()].map(async ({ bundle, checkpoint }) => {
+        const bundleJson = JSON.stringify(bundle);
+        return {
+            manifestHash: bundle.manifestHash,
+            organizationId: checkpoint.organizationId,
+            objectKind: checkpoint.objectKind,
+            objectId: checkpoint.objectId,
+            epoch: checkpoint.epoch,
+            bundleJson,
+            bundleDigest: await sha256Hex(bundleJson),
+        };
+    }));
+}
+/**
+ * Records verified bundles inside the transaction that finalizes their
+ * projection's checkpoints, so they commit or roll back with it and no cache
+ * work outlives the verification. Freshly verified bytes replace any stored
+ * copy.
+ */
+export async function writeVerifiedManifestBundlesInTransaction(tx, rows, verifiedAt) {
+    if (rows.length === 0)
+        return;
+    const stored = await storedDigests(tx, rows.map((row) => row.manifestHash));
+    // An identical stored row only needs its recency refreshed.
+    const unchanged = rows.filter((row) => stored.get(row.manifestHash) === row.bundleDigest);
+    for (const batch of batches(unchanged.map((row) => row.manifestHash)))
+        await tx
+            .update(bundles)
+            .set({ verifiedAt })
+            .where(inArray(bundles.manifestHash, batch))
+            .run();
+    for (const row of rows) {
+        if (stored.get(row.manifestHash) === row.bundleDigest)
+            continue;
+        const verified = { ...row, verifiedAt };
+        await tx
+            .insert(bundles)
+            .values(verified)
+            .onConflictDoUpdate({ target: bundles.manifestHash, set: verified })
+            .run();
+    }
+    await pruneInTransaction(tx);
+}
+async function storedDigests(tx, manifestHashes) {
+    const digests = new Map();
+    for (const batch of batches(manifestHashes)) {
+        const rows = await tx
+            .select({
+            bundleDigest: bundles.bundleDigest,
+            manifestHash: bundles.manifestHash,
+        })
+            .from(bundles)
+            .where(inArray(bundles.manifestHash, batch));
+        for (const row of rows)
+            digests.set(row.manifestHash, row.bundleDigest);
+    }
+    return digests;
+}
+/** The requested object first, then each container whose lineage it cites. */
+async function containerLineage(db, containerId) {
+    const lineage = [containerId];
+    while (lineage.length < MAX_CONTAINER_PATH_LENGTH) {
+        const [row] = await db
+            .select({ parentId: containers.parentId })
+            .from(containers)
+            .where(eq(containers.id, lineage.at(-1) ?? ""))
+            .limit(1);
+        const parentId = row?.parentId;
+        if (!parentId || lineage.includes(parentId))
+            break;
+        lineage.push(parentId);
+    }
+    return lineage;
+}
+async function citedObjects(db, target) {
+    if (target.kind === "container")
+        return (await containerLineage(db, target.id)).map((id) => ({
+            kind: "container",
+            id,
+        }));
+    // Linked containers, containers listing the document before its signed
+    // placement is checked, and a container whose metadata document it is.
+    const placements = [
+        ...(await db
+            .select({ containerId: documentContainerProjection.containerId })
+            .from(documentContainerProjection)
+            .where(eq(documentContainerProjection.documentId, target.id))),
+        ...(await db
+            .select({ containerId: pendingDocumentDiscoveries.containerId })
+            .from(pendingDocumentDiscoveries)
+            .where(eq(pendingDocumentDiscoveries.documentId, target.id))),
+        ...(await db
+            .select({ containerId: containers.id })
+            .from(containers)
+            .where(eq(containers.metadataDocumentId, target.id))),
+    ];
+    const containerIds = new Set();
+    for (const { containerId } of placements)
+        if (containerId)
+            for (const id of await containerLineage(db, containerId))
+                containerIds.add(id);
+    return [
+        { kind: "document", id: target.id },
+        ...[...containerIds].map((id) => ({ kind: "container", id })),
+    ];
+}
+/**
+ * The one organization every local source places the read in. Verified
+ * ownership (stored verified bundles of the target and of the containers on
+ * its walk, and a document's verified discovery head) and local placement
+ * (listed container rows reached through links, pending listings, metadata,
+ * or parents) must all agree: any disagreement, or no source at all, yields
+ * null, so the read is sent with no hints rather than another
+ * organization's.
+ */
+async function targetOrganization(db, target, objects) {
+    const containerIds = objects
+        .filter((object) => object.kind === "container")
+        .map((object) => object.id);
+    const listed = containerIds.length === 0
+        ? []
+        : await db
+            .select({ organizationId: containers.organizationId })
+            .from(containers)
+            .where(inArray(containers.id, containerIds));
+    const verifiedContainers = containerIds.length === 0
+        ? []
+        : await db
+            .select({ organizationId: bundles.organizationId })
+            .from(bundles)
+            .where(and(eq(bundles.objectKind, "container"), inArray(bundles.objectId, containerIds)));
+    const verifiedTarget = await db
+        .select({ organizationId: bundles.organizationId })
+        .from(bundles)
+        .where(and(eq(bundles.objectKind, target.kind), eq(bundles.objectId, target.id)));
+    const discovered = target.kind === "document"
+        ? await db
+            .select({ organizationId: documentDiscoveryHeads.organizationId })
+            .from(documentDiscoveryHeads)
+            .where(eq(documentDiscoveryHeads.documentId, target.id))
+        : [];
+    const sources = [listed, verifiedContainers, verifiedTarget, discovered];
+    const organizations = new Set(sources.flat().map((row) => row.organizationId));
+    const [organizationId] = organizations;
+    return organizations.size === 1 && organizationId ? organizationId : null;
+}
+const storedColumns = {
+    bundleDigest: bundles.bundleDigest,
+    bundleJson: bundles.bundleJson,
+    manifestHash: bundles.manifestHash,
+};
+async function readStoredBundle(row) {
+    if ((await sha256Hex(row.bundleJson)) !== row.bundleDigest)
+        return null;
+    try {
+        const bundle = JSON.parse(row.bundleJson);
+        return isAccessManifestBundleWireResponse(bundle) &&
+            bundle.manifestHash === row.manifestHash
+            ? bundle
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+function objectRows(db, organizationId, object, limit) {
+    return db
+        .select(storedColumns)
+        .from(bundles)
+        .where(and(eq(bundles.organizationId, organizationId), eq(bundles.objectKind, object.kind), eq(bundles.objectId, object.id)))
+        .orderBy(desc(bundles.epoch))
+        .limit(limit);
+}
+function recentRows(db, organizationId, limit) {
+    return db
+        .select(storedColumns)
+        .from(bundles)
+        .where(eq(bundles.organizationId, organizationId))
+        .orderBy(desc(bundles.verifiedAt), asc(bundles.manifestHash))
+        .limit(limit);
+}
+/**
+ * Verified bundles of the target's object and of the containers its
+ * projection walks, newest epochs first; then the most recently verified rows
+ * of its organization, since a just-verified parent is the likeliest part of
+ * a new child's projection. Citations never leave the target's organization:
+ * an object whose organization the device cannot place cites nothing.
+ * Damaged rows are dropped.
+ */
+export async function loadVerifiedManifestCitations(execSql, target, limit = KNOWN_MANIFEST_HINT_LIMIT) {
+    await ensureSqlTables(execSql, [
+        ...verifiedManifestBundleTables,
+        ...containerTables,
+        ...documentContainerProjectionTables,
+    ]);
+    const { db } = getClientSQLitePersistenceRuntime(execSql);
+    const cited = new Map();
+    const damaged = [];
+    const collect = async (rows) => {
+        for (const row of rows) {
+            if (cited.size >= limit || cited.has(row.manifestHash))
+                continue;
+            const bundle = await readStoredBundle(row);
+            if (bundle)
+                cited.set(row.manifestHash, bundle);
+            else
+                damaged.push(row.manifestHash);
+        }
+    };
+    const objects = await citedObjects(db, target);
+    const organizationId = await targetOrganization(db, target, objects);
+    if (organizationId === null)
+        return [];
+    for (const object of objects)
+        if (cited.size < limit)
+            await collect(await objectRows(db, organizationId, object, limit - cited.size));
+    if (cited.size < limit)
+        await collect(await recentRows(db, organizationId, limit + cited.size));
+    if (damaged.length > 0)
+        await getClientSQLitePersistenceRuntime(execSql)
+            .runMutation((handle) => handle
+            .delete(bundles)
+            .where(inArray(bundles.manifestHash, damaged))
+            .run())
+            .catch(() => undefined);
+    return [...cited.values()];
+}
+/** Cites from whichever database the signed-in identity currently uses. */
+export function createVerifiedManifestCitations(resolveExecSql) {
+    return {
+        cite: async (target) => {
+            const execSql = resolveExecSql();
+            return execSql ? loadVerifiedManifestCitations(execSql, target) : [];
+        },
+    };
+}
+//# sourceMappingURL=verifiedManifestBundlePersistence.js.map

package/data/persistence/verifiedManifestBundlePersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedManifestBundlePersistence.js","sourceRoot":"","sources":["verifiedManifestBundlePersistence.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAEL,kCAAkC,GACnC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EACL,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,eAAe,EACf,2BAA2B,EAC3B,iCAAiC,GAClC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAGL,iCAAiC,GAClC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAgB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EACL,6BAA6B,IAAI,OAAO,EACxC,4BAA4B,GAC7B,MAAM,wCAAwC,CAAC;AAEhD;;;GAGG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAClD,MAAM,eAAe,GAAG,GAAG,CAAC;AAY5B,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,aAAa,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,OAAO,CAAI,MAAoB;IACtC,MAAM,MAAM,GAAU,EAAE,CAAC;IACzB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,eAAe;QACjE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,EAAgC;IAEhC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,CAAQ,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,6BAA6B,CAAC;IACjE,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO;IACxB,MAAM,OAAO,GAAG,MAAM,EAAE;SACrB,MAAM,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;SAC9C,IAAI,CAAC,OAAO,CAAC;SACb,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;SAC3D,KAAK,CAAC,MAAM,CAAC,CAAC;IACjB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACrE,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC/E,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA0C;IAE1C,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAC3D,CAAC;IACF,OAAO,OAAO,CAAC,GAAG,CAChB,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;QACxD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1C,OAAO;YACL,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,UAAU;YACV,YAAY,EAAE,MAAM,SAAS,CAAC,UAAU,CAAC;SAC1C,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yCAAyC,CAC7D,EAAgC,EAChC,IAA0C,EAC1C,UAAkB;IAElB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,EAAE,EACF,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CACpC,CAAC;IACF,4DAA4D;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAC3B,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,YAAY,CAC3D,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACnE,MAAM,EAAE;aACL,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC;aACnB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;aAC3C,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,GAAG,CAAC,YAAY;YAAE,SAAS;QAChE,MAAM,QAAQ,GAAG,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,CAAC;QACxC,MAAM,EAAE;aACL,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC,QAAQ,CAAC;aAChB,kBAAkB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;aACnE,GAAG,EAAE,CAAC;IACX,CAAC;IACD,MAAM,kBAAkB,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,EAAgC,EAChC,cAAiC;IAEjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,EAAE;aAClB,MAAM,CAAC;YACN,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC;aACD,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,gBAAgB,CAC7B,EAAwB,EACxB,WAAmB;IAEnB,MAAM,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC,MAAM,GAAG,yBAAyB,EAAE,CAAC;QAClD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;aACnB,MAAM,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;aACzC,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;aAC9C,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,QAAQ,GAAG,GAAG,EAAE,QAAQ,CAAC;QAC/B,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,MAAM;QACnD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,EAAwB,EACxB,MAA8B;IAE9B,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAC7B,OAAO,CAAC,MAAM,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC1D,IAAI,EAAE,WAAW;YACjB,EAAE;SACH,CAAC,CAAC,CAAC;IACN,uEAAuE;IACvE,uEAAuE;IACvE,MAAM,UAAU,GAAG;QACjB,GAAG,CAAC,MAAM,EAAE;aACT,MAAM,CAAC,EAAE,WAAW,EAAE,2BAA2B,CAAC,WAAW,EAAE,CAAC;aAChE,IAAI,CAAC,2BAA2B,CAAC;aACjC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,GAAG,CAAC,MAAM,EAAE;aACT,MAAM,CAAC,EAAE,WAAW,EAAE,0BAA0B,CAAC,WAAW,EAAE,CAAC;aAC/D,IAAI,CAAC,0BAA0B,CAAC;aAChC,KAAK,CAAC,EAAE,CAAC,0BAA0B,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,GAAG,CAAC,MAAM,EAAE;aACT,MAAM,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;aACtC,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;KACxD,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,EAAE,WAAW,EAAE,IAAI,UAAU;QACtC,IAAI,WAAW;YACb,KAAK,MAAM,EAAE,IAAI,MAAM,gBAAgB,CAAC,EAAE,EAAE,WAAW,CAAC;gBACtD,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO;QACL,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;QACnC,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,kBAAkB,CAC/B,EAAwB,EACxB,MAA8B,EAC9B,OAAkE;IAElE,MAAM,YAAY,GAAG,OAAO;SACzB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC;SAC/C,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,MAAM,GACV,YAAY,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,EAAE;aACL,MAAM,CAAC,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,CAAC;aACrD,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IACrD,MAAM,kBAAkB,GACtB,YAAY,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,EAAE;aACL,MAAM,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;aAClD,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,EACnC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CACxC,CACF,CAAC;IACV,MAAM,cAAc,GAAG,MAAM,EAAE;SAC5B,MAAM,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;SAClD,IAAI,CAAC,OAAO,CAAC;SACb,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAC1E,CAAC;IACJ,MAAM,UAAU,GACd,MAAM,CAAC,IAAI,KAAK,UAAU;QACxB,CAAC,CAAC,MAAM,EAAE;aACL,MAAM,CAAC,EAAE,cAAc,EAAE,sBAAsB,CAAC,cAAc,EAAE,CAAC;aACjE,IAAI,CAAC,sBAAsB,CAAC;aAC5B,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAChD,CAAC;IACF,MAAM,CAAC,cAAc,CAAC,GAAG,aAAa,CAAC;IACvC,OAAO,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAQD,MAAM,aAAa,GAAG;IACpB,YAAY,EAAE,OAAO,CAAC,YAAY;IAClC,UAAU,EAAE,OAAO,CAAC,UAAU;IAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;CACnC,CAAC;AAEF,KAAK,UAAU,gBAAgB,CAC7B,GAAoB;IAEpB,IAAI,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,KAAK,GAAG,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,OAAO,kCAAkC,CAAC,MAAM,CAAC;YAC/C,MAAM,CAAC,YAAY,KAAK,GAAG,CAAC,YAAY;YACxC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,EAAwB,EACxB,cAAsB,EACtB,MAAsD,EACtD,KAAa;IAEb,OAAO,EAAE;SACN,MAAM,CAAC,aAAa,CAAC;SACrB,IAAI,CAAC,OAAO,CAAC;SACb,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,cAAc,CAAC,EAC1C,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EACnC,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAChC,CACF;SACA,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;SAC5B,KAAK,CAAC,KAAK,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CACjB,EAAwB,EACxB,cAAsB,EACtB,KAAa;IAEb,OAAO,EAAE;SACN,MAAM,CAAC,aAAa,CAAC;SACrB,IAAI,CAAC,OAAO,CAAC;SACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;SACjD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;SAC5D,KAAK,CAAC,KAAK,CAAC,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,OAAgB,EAChB,MAA8B,EAC9B,KAAK,GAAG,yBAAyB;IAEjC,MAAM,eAAe,CAAC,OAAO,EAAE;QAC7B,GAAG,4BAA4B;QAC/B,GAAG,eAAe;QAClB,GAAG,iCAAiC;KACrC,CAAC,CAAC;IACH,MAAM,EAAE,EAAE,EAAE,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4C,CAAC;IAClE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,KAAK,EAAE,IAAgC,EAAE,EAAE;QACzD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC;gBAAE,SAAS;YACjE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,MAAM;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;;gBAC3C,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACrE,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACvC,KAAK,MAAM,MAAM,IAAI,OAAO;QAC1B,IAAI,KAAK,CAAC,IAAI,GAAG,KAAK;YACpB,MAAM,OAAO,CACX,MAAM,UAAU,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CACjE,CAAC;IACN,IAAI,KAAK,CAAC,IAAI,GAAG,KAAK;QACpB,MAAM,OAAO,CAAC,MAAM,UAAU,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QACpB,MAAM,iCAAiC,CAAC,OAAO,CAAC;aAC7C,WAAW,CAAC,CAAC,MAAM,EAAE,EAAE,CACtB,MAAM;aACH,MAAM,CAAC,OAAO,CAAC;aACf,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;aAC7C,GAAG,EAAE,CACT;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,+BAA+B,CAC7C,cAAoC;IAEpC,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACrB,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  VerifiedManifestCitations,\n  WriterProjectionTarget,\n} from \"@tearleads/api-client\";\nimport { toFingerprint } from \"@tearleads/crypto\";\nimport {\n  type AccessManifestBundleWireResponse,\n  isAccessManifestBundleWireResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  KNOWN_MANIFEST_HINT_LIMIT,\n  MAX_CONTAINER_PATH_LENGTH,\n} from \"@tearleads/validators/util\";\nimport { and, asc, desc, eq, inArray, sql } from \"drizzle-orm\";\nimport { containers } from \"../sqlite/containerSchema\";\nimport {\n  documentDiscoveryHeads,\n  pendingDocumentDiscoveries,\n} from \"../sqlite/documentDiscoveryEvidenceSchema\";\nimport {\n  containerTables,\n  documentContainerProjection,\n  documentContainerProjectionTables,\n} from \"../sqlite/schema\";\nimport {\n  type ClientSQLiteDatabase,\n  type ClientSQLiteTransactionScope,\n  getClientSQLitePersistenceRuntime,\n} from \"../sqlite/sqlitePersistenceRuntime\";\nimport { type ExecSql, ensureSqlTables } from \"../sqlite/sqlSchema\";\nimport {\n  verifiedAccessManifestBundles as bundles,\n  verifiedManifestBundleTables,\n} from \"../sqlite/verifiedManifestBundleSchema\";\n\n/**\n * Bounds local bytes (a bundle is ~10–20 KB). Evicting the least recently\n * verified rows only makes a later read carry those bundles again.\n */\nexport const MAX_VERIFIED_MANIFEST_BUNDLES = 1024;\nconst STATEMENT_BATCH = 200;\n\nexport interface VerifiedManifestBundle {\n  readonly bundle: AccessManifestBundleWireResponse;\n  readonly checkpoint: {\n    readonly objectKind: string;\n    readonly organizationId: string;\n    readonly objectId: string;\n    readonly epoch: number;\n  };\n}\n\nfunction sha256Hex(text: string): Promise<string> {\n  return toFingerprint(new TextEncoder().encode(text));\n}\n\nfunction batches<T>(values: readonly T[]): T[][] {\n  const result: T[][] = [];\n  for (let index = 0; index < values.length; index += STATEMENT_BATCH)\n    result.push(values.slice(index, index + STATEMENT_BATCH));\n  return result;\n}\n\nasync function pruneInTransaction(\n  tx: ClientSQLiteTransactionScope,\n): Promise<void> {\n  const [row] = await tx.select({ count: sql<number>`count(*)` }).from(bundles);\n  const excess = (row?.count ?? 0) - MAX_VERIFIED_MANIFEST_BUNDLES;\n  if (excess <= 0) return;\n  const evicted = await tx\n    .select({ manifestHash: bundles.manifestHash })\n    .from(bundles)\n    .orderBy(asc(bundles.verifiedAt), asc(bundles.manifestHash))\n    .limit(excess);\n  for (const batch of batches(evicted.map((entry) => entry.manifestHash)))\n    await tx.delete(bundles).where(inArray(bundles.manifestHash, batch)).run();\n}\n\n/** A verified bundle's exact JSON and that JSON's digest. */\nexport type VerifiedManifestBundleRow = Omit<\n  typeof bundles.$inferInsert,\n  \"verifiedAt\"\n>;\n\n/**\n * Prepares rows for bundles that just passed projection verification. The\n * digests are computed here, before the checkpoint transaction that writes\n * them begins.\n */\nexport function verifiedManifestBundleRows(\n  entries: readonly VerifiedManifestBundle[],\n): Promise<VerifiedManifestBundleRow[]> {\n  const unique = new Map(\n    entries.map((entry) => [entry.bundle.manifestHash, entry]),\n  );\n  return Promise.all(\n    [...unique.values()].map(async ({ bundle, checkpoint }) => {\n      const bundleJson = JSON.stringify(bundle);\n      return {\n        manifestHash: bundle.manifestHash,\n        organizationId: checkpoint.organizationId,\n        objectKind: checkpoint.objectKind,\n        objectId: checkpoint.objectId,\n        epoch: checkpoint.epoch,\n        bundleJson,\n        bundleDigest: await sha256Hex(bundleJson),\n      };\n    }),\n  );\n}\n\n/**\n * Records verified bundles inside the transaction that finalizes their\n * projection's checkpoints, so they commit or roll back with it and no cache\n * work outlives the verification. Freshly verified bytes replace any stored\n * copy.\n */\nexport async function writeVerifiedManifestBundlesInTransaction(\n  tx: ClientSQLiteTransactionScope,\n  rows: readonly VerifiedManifestBundleRow[],\n  verifiedAt: string,\n): Promise<void> {\n  if (rows.length === 0) return;\n  const stored = await storedDigests(\n    tx,\n    rows.map((row) => row.manifestHash),\n  );\n  // An identical stored row only needs its recency refreshed.\n  const unchanged = rows.filter(\n    (row) => stored.get(row.manifestHash) === row.bundleDigest,\n  );\n  for (const batch of batches(unchanged.map((row) => row.manifestHash)))\n    await tx\n      .update(bundles)\n      .set({ verifiedAt })\n      .where(inArray(bundles.manifestHash, batch))\n      .run();\n  for (const row of rows) {\n    if (stored.get(row.manifestHash) === row.bundleDigest) continue;\n    const verified = { ...row, verifiedAt };\n    await tx\n      .insert(bundles)\n      .values(verified)\n      .onConflictDoUpdate({ target: bundles.manifestHash, set: verified })\n      .run();\n  }\n  await pruneInTransaction(tx);\n}\n\nasync function storedDigests(\n  tx: ClientSQLiteTransactionScope,\n  manifestHashes: readonly string[],\n): Promise<Map<string, string>> {\n  const digests = new Map<string, string>();\n  for (const batch of batches(manifestHashes)) {\n    const rows = await tx\n      .select({\n        bundleDigest: bundles.bundleDigest,\n        manifestHash: bundles.manifestHash,\n      })\n      .from(bundles)\n      .where(inArray(bundles.manifestHash, batch));\n    for (const row of rows) digests.set(row.manifestHash, row.bundleDigest);\n  }\n  return digests;\n}\n\n/** The requested object first, then each container whose lineage it cites. */\nasync function containerLineage(\n  db: ClientSQLiteDatabase,\n  containerId: string,\n): Promise<string[]> {\n  const lineage = [containerId];\n  while (lineage.length < MAX_CONTAINER_PATH_LENGTH) {\n    const [row] = await db\n      .select({ parentId: containers.parentId })\n      .from(containers)\n      .where(eq(containers.id, lineage.at(-1) ?? \"\"))\n      .limit(1);\n    const parentId = row?.parentId;\n    if (!parentId || lineage.includes(parentId)) break;\n    lineage.push(parentId);\n  }\n  return lineage;\n}\n\nasync function citedObjects(\n  db: ClientSQLiteDatabase,\n  target: WriterProjectionTarget,\n): Promise<{ readonly kind: string; readonly id: string }[]> {\n  if (target.kind === \"container\")\n    return (await containerLineage(db, target.id)).map((id) => ({\n      kind: \"container\",\n      id,\n    }));\n  // Linked containers, containers listing the document before its signed\n  // placement is checked, and a container whose metadata document it is.\n  const placements = [\n    ...(await db\n      .select({ containerId: documentContainerProjection.containerId })\n      .from(documentContainerProjection)\n      .where(eq(documentContainerProjection.documentId, target.id))),\n    ...(await db\n      .select({ containerId: pendingDocumentDiscoveries.containerId })\n      .from(pendingDocumentDiscoveries)\n      .where(eq(pendingDocumentDiscoveries.documentId, target.id))),\n    ...(await db\n      .select({ containerId: containers.id })\n      .from(containers)\n      .where(eq(containers.metadataDocumentId, target.id))),\n  ];\n  const containerIds = new Set<string>();\n  for (const { containerId } of placements)\n    if (containerId)\n      for (const id of await containerLineage(db, containerId))\n        containerIds.add(id);\n  return [\n    { kind: \"document\", id: target.id },\n    ...[...containerIds].map((id) => ({ kind: \"container\", id })),\n  ];\n}\n\n/**\n * The one organization every local source places the read in. Verified\n * ownership (stored verified bundles of the target and of the containers on\n * its walk, and a document's verified discovery head) and local placement\n * (listed container rows reached through links, pending listings, metadata,\n * or parents) must all agree: any disagreement, or no source at all, yields\n * null, so the read is sent with no hints rather than another\n * organization's.\n */\nasync function targetOrganization(\n  db: ClientSQLiteDatabase,\n  target: WriterProjectionTarget,\n  objects: readonly { readonly kind: string; readonly id: string }[],\n): Promise<string | null> {\n  const containerIds = objects\n    .filter((object) => object.kind === \"container\")\n    .map((object) => object.id);\n  const listed =\n    containerIds.length === 0\n      ? []\n      : await db\n          .select({ organizationId: containers.organizationId })\n          .from(containers)\n          .where(inArray(containers.id, containerIds));\n  const verifiedContainers =\n    containerIds.length === 0\n      ? []\n      : await db\n          .select({ organizationId: bundles.organizationId })\n          .from(bundles)\n          .where(\n            and(\n              eq(bundles.objectKind, \"container\"),\n              inArray(bundles.objectId, containerIds),\n            ),\n          );\n  const verifiedTarget = await db\n    .select({ organizationId: bundles.organizationId })\n    .from(bundles)\n    .where(\n      and(eq(bundles.objectKind, target.kind), eq(bundles.objectId, target.id)),\n    );\n  const discovered =\n    target.kind === \"document\"\n      ? await db\n          .select({ organizationId: documentDiscoveryHeads.organizationId })\n          .from(documentDiscoveryHeads)\n          .where(eq(documentDiscoveryHeads.documentId, target.id))\n      : [];\n  const sources = [listed, verifiedContainers, verifiedTarget, discovered];\n  const organizations = new Set(\n    sources.flat().map((row) => row.organizationId),\n  );\n  const [organizationId] = organizations;\n  return organizations.size === 1 && organizationId ? organizationId : null;\n}\n\ninterface StoredBundleRow {\n  readonly bundleDigest: string;\n  readonly bundleJson: string;\n  readonly manifestHash: string;\n}\n\nconst storedColumns = {\n  bundleDigest: bundles.bundleDigest,\n  bundleJson: bundles.bundleJson,\n  manifestHash: bundles.manifestHash,\n};\n\nasync function readStoredBundle(\n  row: StoredBundleRow,\n): Promise<AccessManifestBundleWireResponse | null> {\n  if ((await sha256Hex(row.bundleJson)) !== row.bundleDigest) return null;\n  try {\n    const bundle: unknown = JSON.parse(row.bundleJson);\n    return isAccessManifestBundleWireResponse(bundle) &&\n      bundle.manifestHash === row.manifestHash\n      ? bundle\n      : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction objectRows(\n  db: ClientSQLiteDatabase,\n  organizationId: string,\n  object: { readonly kind: string; readonly id: string },\n  limit: number,\n) {\n  return db\n    .select(storedColumns)\n    .from(bundles)\n    .where(\n      and(\n        eq(bundles.organizationId, organizationId),\n        eq(bundles.objectKind, object.kind),\n        eq(bundles.objectId, object.id),\n      ),\n    )\n    .orderBy(desc(bundles.epoch))\n    .limit(limit);\n}\n\nfunction recentRows(\n  db: ClientSQLiteDatabase,\n  organizationId: string,\n  limit: number,\n) {\n  return db\n    .select(storedColumns)\n    .from(bundles)\n    .where(eq(bundles.organizationId, organizationId))\n    .orderBy(desc(bundles.verifiedAt), asc(bundles.manifestHash))\n    .limit(limit);\n}\n\n/**\n * Verified bundles of the target's object and of the containers its\n * projection walks, newest epochs first; then the most recently verified rows\n * of its organization, since a just-verified parent is the likeliest part of\n * a new child's projection. Citations never leave the target's organization:\n * an object whose organization the device cannot place cites nothing.\n * Damaged rows are dropped.\n */\nexport async function loadVerifiedManifestCitations(\n  execSql: ExecSql,\n  target: WriterProjectionTarget,\n  limit = KNOWN_MANIFEST_HINT_LIMIT,\n): Promise<AccessManifestBundleWireResponse[]> {\n  await ensureSqlTables(execSql, [\n    ...verifiedManifestBundleTables,\n    ...containerTables,\n    ...documentContainerProjectionTables,\n  ]);\n  const { db } = getClientSQLitePersistenceRuntime(execSql);\n  const cited = new Map<string, AccessManifestBundleWireResponse>();\n  const damaged: string[] = [];\n  const collect = async (rows: readonly StoredBundleRow[]) => {\n    for (const row of rows) {\n      if (cited.size >= limit || cited.has(row.manifestHash)) continue;\n      const bundle = await readStoredBundle(row);\n      if (bundle) cited.set(row.manifestHash, bundle);\n      else damaged.push(row.manifestHash);\n    }\n  };\n  const objects = await citedObjects(db, target);\n  const organizationId = await targetOrganization(db, target, objects);\n  if (organizationId === null) return [];\n  for (const object of objects)\n    if (cited.size < limit)\n      await collect(\n        await objectRows(db, organizationId, object, limit - cited.size),\n      );\n  if (cited.size < limit)\n    await collect(await recentRows(db, organizationId, limit + cited.size));\n  if (damaged.length > 0)\n    await getClientSQLitePersistenceRuntime(execSql)\n      .runMutation((handle) =>\n        handle\n          .delete(bundles)\n          .where(inArray(bundles.manifestHash, damaged))\n          .run(),\n      )\n      .catch(() => undefined);\n  return [...cited.values()];\n}\n\n/** Cites from whichever database the signed-in identity currently uses. */\nexport function createVerifiedManifestCitations(\n  resolveExecSql: () => ExecSql | null,\n): VerifiedManifestCitations {\n  return {\n    cite: async (target) => {\n      const execSql = resolveExecSql();\n      return execSql ? loadVerifiedManifestCitations(execSql, target) : [];\n    },\n  };\n}\n"]}

package/data/sqlite/schema.d.ts

@@ -9001,6 +9001,163 @@ export declare const clientSQLiteSchema: {
         };
         dialect: "sqlite";
     }>;
+    verifiedAccessManifestBundles: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
+        name: "verified_access_manifest_bundles";
+        schema: undefined;
+        columns: {
+            manifestHash: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+                name: "manifest_hash";
+                tableName: "verified_access_manifest_bundles";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: true;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number | undefined;
+            }>;
+            organizationId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+                name: "organization_id";
+                tableName: "verified_access_manifest_bundles";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number | undefined;
+            }>;
+            objectKind: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+                name: "object_kind";
+                tableName: "verified_access_manifest_bundles";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number | undefined;
+            }>;
+            objectId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+                name: "object_id";
+                tableName: "verified_access_manifest_bundles";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number | undefined;
+            }>;
+            epoch: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+                name: "epoch";
+                tableName: "verified_access_manifest_bundles";
+                dataType: "number";
+                columnType: "SQLiteInteger";
+                data: number;
+                driverParam: number;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {}>;
+            bundleJson: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+                name: "bundle_json";
+                tableName: "verified_access_manifest_bundles";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number | undefined;
+            }>;
+            bundleDigest: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+                name: "bundle_digest";
+                tableName: "verified_access_manifest_bundles";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number | undefined;
+            }>;
+            verifiedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
+                name: "verified_at";
+                tableName: "verified_access_manifest_bundles";
+                dataType: "string";
+                columnType: "SQLiteText";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: number | undefined;
+            }>;
+        };
+        dialect: "sqlite";
+    }>;
     trustedUserIdentityPins: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
         name: "trusted_user_identity_pins";
         schema: undefined;

package/data/sqlite/schema.js

@@ -19,6 +19,7 @@ import { principalMutationJournal, principalMutationJournalTables, } from "./pri
 import { principalPolicies, principalPolicyBundleHistory, principalPolicyBundleReferences, principalPolicyCheckpoints, principalPolicyOrganizations, } from "./principalPolicySchema.js";
 import { securityIncidents, securityIncidentTable, } from "./securityIncidentSchema.js";
 import { defineSqlTableSchema } from "./sqlTableSchema.js";
+import { verifiedAccessManifestBundles, verifiedManifestBundleTables, } from "./verifiedManifestBundleSchema.js";
 export { containerHydrationTombstones, containerProjection, containers, dormantContainerMetadata, dormantMetadataSweepRequests, supersededContainerBindings, } from "./containerSchema.js";
 export { documentAttachmentBlobProjection, documentPendingAttachments, } from "./documentAttachmentSchema.js";
 export { documentMoveIntents } from "./documentPlacementIntentSchema.js";
@@ -588,6 +589,7 @@ export const clientSqlTables = [
     ...documentTables,
     ...principalPolicyTables,
     ...keyingCheckpointTables,
+    ...verifiedManifestBundleTables,
     ...trustedUserIdentityPinTables,
     ...securityIncidentTables,
     ...containerTables,
@@ -623,6 +625,7 @@ export const clientSQLiteSchema = {
     accessManifestCheckpoints,
     documentPurgeCheckpoints,
     principalPolicyCheckpoints,
+    verifiedAccessManifestBundles,
     trustedUserIdentityPins,
     securityIncidents,
     ...containerSQLiteSchema,