@tearleads/client-sdk 0.1.40 → 0.1.42

package/internal/api-client/principalHistoryRequestContext.js

@@ -3,30 +3,40 @@ export class PrincipalHistoryRequestContext {
     runtime;
     method;
     path;
+    identity;
     options;
-    token;
     submitted = false;
     renewedRead = false;
     restartedRead = false;
-    constructor(runtime, method, path, options) {
+    constructor(runtime, method, path, options, 
+    // Requests of one operation share the identity they started under.
+    identity = { token: runtime.getAuthToken() }) {
         this.runtime = runtime;
         this.method = method;
         this.path = path;
-        this.token = runtime.getAuthToken();
+        this.identity = identity;
         this.options = {
             ...options,
             retryOnSessionExpired: options?.retryOnSessionExpired === false ? false : "renew-only",
             onSessionRenewed: () => {
                 if (method === "GET" && !options?.signal?.aborted) {
-                    this.token = runtime.getAuthToken();
+                    this.identity.token = runtime.getAuthToken();
                     this.renewedRead = true;
                 }
             },
         };
     }
+    /**
+     * Another request of the same operation, with its own options: an account
+     * switch at any point cancels both, while a session renewal in either
+     * carries over.
+     */
+    derive(options) {
+        return new PrincipalHistoryRequestContext(this.runtime, this.method, this.path, options, this.identity);
+    }
     cancelled() {
         return (this.options.signal?.aborted === true ||
-            this.runtime.getAuthToken() !== this.token);
+            this.runtime.getAuthToken() !== this.identity.token);
     }
     beforeRequest() {
         this.submitted = this.method !== "GET";

package/internal/api-client/principalHistoryRequestContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"principalHistoryRequestContext.js","sourceRoot":"","sources":["principalHistoryRequestContext.ts"],"names":[],"mappings":"AAGA,gGAAgG;AAChG,MAAM,OAAO,8BAA8B;IAQtB;IACA;IACA;IATV,OAAO,CAAuB;IAC/B,KAAK,CAAgB;IACrB,SAAS,GAAG,KAAK,CAAC;IAClB,WAAW,GAAG,KAAK,CAAC;IACpB,aAAa,GAAG,KAAK,CAAC;IAE9B,YACmB,OAA0B,EAC1B,MAAkB,EAClB,IAAY,EAC7B,OAAyC;QAHxB,YAAO,GAAP,OAAO,CAAmB;QAC1B,WAAM,GAAN,MAAM,CAAY;QAClB,SAAI,GAAJ,IAAI,CAAQ;QAG7B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,OAAO;YACV,qBAAqB,EACnB,OAAO,EAAE,qBAAqB,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;YACjE,gBAAgB,EAAE,GAAG,EAAE;gBACrB,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;oBAClD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;oBACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBAC1B,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAED,SAAS;QACP,OAAO,CACL,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;YACrC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,IAAI,CAAC,KAAK,CAC3C,CAAC;IACJ,CAAC;IAED,aAAa;QACX,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC;IACzC,CAAC;IAED,gBAAgB;QACd,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,aAAa;QACX,sEAAsE;QACtE,sEAAsE;QACtE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,uBAAuB;QACrB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,SAAS,EAAE;YAC7D,OAAO,KAAK,CAAC;QACf,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,QAAmB,EAAE,QAAQ,GAAG,KAAK;QAC3C,KAAK,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC;YAChD,IAAI,EAAE,IAAI,CAAC,SAAS;gBAClB,CAAC,CAAC,mCAAmC;gBACrC,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,qCAAqC;oBACvC,CAAC,CAAC,mCAAmC;YACzC,IAAI,EAAE,IAAI,CAAC,SAAS;gBAClB,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,WAAW;YACjB,OAAO,EAAE,IAAI,CAAC,SAAS;gBACrB,CAAC,CAAC,4DAA4D;gBAC9D,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,qCAAqC;oBACvC,CAAC,CAAC,yCAAyC;YAC/C,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE;gBACP,GAAG,IAAI,CAAC,OAAO;gBACf,YAAY,EACV,QAAQ;oBACR,IAAI,CAAC,MAAM,KAAK,KAAK;oBACrB,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK;aACtC;YACD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import type { ApiRequestRuntime } from \"./apiRequestRuntime\";\nimport type { HttpMethod, RequestFailure, RequestResultOptions } from \"./types\";\n\n/** Keep continuations within their authentication context without hiding commit uncertainty. */\nexport class PrincipalHistoryRequestContext {\n  readonly options: RequestResultOptions;\n  private token: string | null;\n  private submitted = false;\n  private renewedRead = false;\n  private restartedRead = false;\n\n  constructor(\n    private readonly runtime: ApiRequestRuntime,\n    private readonly method: HttpMethod,\n    private readonly path: string,\n    options: RequestResultOptions | undefined,\n  ) {\n    this.token = runtime.getAuthToken();\n    this.options = {\n      ...options,\n      retryOnSessionExpired:\n        options?.retryOnSessionExpired === false ? false : \"renew-only\",\n      onSessionRenewed: () => {\n        if (method === \"GET\" && !options?.signal?.aborted) {\n          this.token = runtime.getAuthToken();\n          this.renewedRead = true;\n        }\n      },\n    };\n  }\n\n  cancelled(): boolean {\n    return (\n      this.options.signal?.aborted === true ||\n      this.runtime.getAuthToken() !== this.token\n    );\n  }\n\n  beforeRequest(): void {\n    this.submitted = this.method !== \"GET\";\n  }\n\n  afterPreparation(): void {\n    this.submitted = false;\n  }\n\n  afterReadPage(): void {\n    // A completed page is forward progress. A later page may renew again,\n    // while repeated 401s within one page still cannot loop indefinitely.\n    this.renewedRead = false;\n    this.restartedRead = false;\n  }\n\n  restartReadAfterRenewal(): boolean {\n    if (!this.renewedRead || this.restartedRead || this.cancelled())\n      return false;\n    this.restartedRead = true;\n    return true;\n  }\n\n  failure(response?: Response, timedOut = false): RequestFailure {\n    void response?.body?.cancel().catch(() => {});\n    return this.runtime.responseRequest.reportFailure({\n      code: this.submitted\n        ? \"principal_history_outcome_unknown\"\n        : timedOut\n          ? \"principal_history_request_timed_out\"\n          : \"principal_history_context_changed\",\n      kind: this.submitted\n        ? \"outcome-unknown\"\n        : timedOut\n          ? \"network\"\n          : \"cancelled\",\n      message: this.submitted\n        ? \"Policy request may have committed; refresh before retrying\"\n        : timedOut\n          ? \"Principal history request timed out\"\n          : \"Principal history request was cancelled\",\n      method: this.method,\n      options: {\n        ...this.options,\n        reportErrors:\n          timedOut &&\n          this.method === \"GET\" &&\n          this.options.reportErrors !== false,\n      },\n      path: this.path,\n      status: null,\n      statusText: \"\",\n    });\n  }\n}\n"]}
+{"version":3,"file":"principalHistoryRequestContext.js","sourceRoot":"","sources":["principalHistoryRequestContext.ts"],"names":[],"mappings":"AAGA,gGAAgG;AAChG,MAAM,OAAO,8BAA8B;IAOtB;IACA;IACA;IAGA;IAXV,OAAO,CAAuB;IAC/B,SAAS,GAAG,KAAK,CAAC;IAClB,WAAW,GAAG,KAAK,CAAC;IACpB,aAAa,GAAG,KAAK,CAAC;IAE9B,YACmB,OAA0B,EAC1B,MAAkB,EAClB,IAAY,EAC7B,OAAyC;IACzC,mEAAmE;IAClD,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE;QAL5C,YAAO,GAAP,OAAO,CAAmB;QAC1B,WAAM,GAAN,MAAM,CAAY;QAClB,SAAI,GAAJ,IAAI,CAAQ;QAGZ,aAAQ,GAAR,QAAQ,CAAoC;QAE7D,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,OAAO;YACV,qBAAqB,EACnB,OAAO,EAAE,qBAAqB,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;YACjE,gBAAgB,EAAE,GAAG,EAAE;gBACrB,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;oBAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;oBAC7C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBAC1B,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,OAA6B;QAClC,OAAO,IAAI,8BAA8B,CACvC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,IAAI,EACT,OAAO,EACP,IAAI,CAAC,QAAQ,CACd,CAAC;IACJ,CAAC;IAED,SAAS;QACP,OAAO,CACL,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;YACrC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,CACpD,CAAC;IACJ,CAAC;IAED,aAAa;QACX,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC;IACzC,CAAC;IAED,gBAAgB;QACd,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,aAAa;QACX,sEAAsE;QACtE,sEAAsE;QACtE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;IAC7B,CAAC;IAED,uBAAuB;QACrB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,SAAS,EAAE;YAC7D,OAAO,KAAK,CAAC;QACf,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,QAAmB,EAAE,QAAQ,GAAG,KAAK;QAC3C,KAAK,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC;YAChD,IAAI,EAAE,IAAI,CAAC,SAAS;gBAClB,CAAC,CAAC,mCAAmC;gBACrC,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,qCAAqC;oBACvC,CAAC,CAAC,mCAAmC;YACzC,IAAI,EAAE,IAAI,CAAC,SAAS;gBAClB,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,WAAW;YACjB,OAAO,EAAE,IAAI,CAAC,SAAS;gBACrB,CAAC,CAAC,4DAA4D;gBAC9D,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,qCAAqC;oBACvC,CAAC,CAAC,yCAAyC;YAC/C,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE;gBACP,GAAG,IAAI,CAAC,OAAO;gBACf,YAAY,EACV,QAAQ;oBACR,IAAI,CAAC,MAAM,KAAK,KAAK;oBACrB,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK;aACtC;YACD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import type { ApiRequestRuntime } from \"./apiRequestRuntime\";\nimport type { HttpMethod, RequestFailure, RequestResultOptions } from \"./types\";\n\n/** Keep continuations within their authentication context without hiding commit uncertainty. */\nexport class PrincipalHistoryRequestContext {\n  readonly options: RequestResultOptions;\n  private submitted = false;\n  private renewedRead = false;\n  private restartedRead = false;\n\n  constructor(\n    private readonly runtime: ApiRequestRuntime,\n    private readonly method: HttpMethod,\n    private readonly path: string,\n    options: RequestResultOptions | undefined,\n    // Requests of one operation share the identity they started under.\n    private readonly identity = { token: runtime.getAuthToken() },\n  ) {\n    this.options = {\n      ...options,\n      retryOnSessionExpired:\n        options?.retryOnSessionExpired === false ? false : \"renew-only\",\n      onSessionRenewed: () => {\n        if (method === \"GET\" && !options?.signal?.aborted) {\n          this.identity.token = runtime.getAuthToken();\n          this.renewedRead = true;\n        }\n      },\n    };\n  }\n\n  /**\n   * Another request of the same operation, with its own options: an account\n   * switch at any point cancels both, while a session renewal in either\n   * carries over.\n   */\n  derive(options: RequestResultOptions): PrincipalHistoryRequestContext {\n    return new PrincipalHistoryRequestContext(\n      this.runtime,\n      this.method,\n      this.path,\n      options,\n      this.identity,\n    );\n  }\n\n  cancelled(): boolean {\n    return (\n      this.options.signal?.aborted === true ||\n      this.runtime.getAuthToken() !== this.identity.token\n    );\n  }\n\n  beforeRequest(): void {\n    this.submitted = this.method !== \"GET\";\n  }\n\n  afterPreparation(): void {\n    this.submitted = false;\n  }\n\n  afterReadPage(): void {\n    // A completed page is forward progress. A later page may renew again,\n    // while repeated 401s within one page still cannot loop indefinitely.\n    this.renewedRead = false;\n    this.restartedRead = false;\n  }\n\n  restartReadAfterRenewal(): boolean {\n    if (!this.renewedRead || this.restartedRead || this.cancelled())\n      return false;\n    this.restartedRead = true;\n    return true;\n  }\n\n  failure(response?: Response, timedOut = false): RequestFailure {\n    void response?.body?.cancel().catch(() => {});\n    return this.runtime.responseRequest.reportFailure({\n      code: this.submitted\n        ? \"principal_history_outcome_unknown\"\n        : timedOut\n          ? \"principal_history_request_timed_out\"\n          : \"principal_history_context_changed\",\n      kind: this.submitted\n        ? \"outcome-unknown\"\n        : timedOut\n          ? \"network\"\n          : \"cancelled\",\n      message: this.submitted\n        ? \"Policy request may have committed; refresh before retrying\"\n        : timedOut\n          ? \"Principal history request timed out\"\n          : \"Principal history request was cancelled\",\n      method: this.method,\n      options: {\n        ...this.options,\n        reportErrors:\n          timedOut &&\n          this.method === \"GET\" &&\n          this.options.reportErrors !== false,\n      },\n      path: this.path,\n      status: null,\n      statusText: \"\",\n    });\n  }\n}\n"]}

package/internal/api-client/routes/writerProjections.js

@@ -1,4 +1,7 @@
-import { getContainerWriterProjectionOperation, getDocumentWriterProjectionOperation, isGetContainerWriterProjectionOperationResponse, isGetDocumentWriterProjectionOperationResponse, operationRequestPath, } from "../../validators/operation/index.js";
+import { getContainerWriterProjectionOperation, getDocumentWriterProjectionOperation, operationRequestPath, } from "../../validators/operation/index.js";
+import { isContainerWriterProjectionResponse, isDocumentWriterProjectionResponse, } from "../../validators/response/index.js";
+// Validators run on the decoded projection: the transport resolves the wire's
+// manifest-hash citations into bundles first (writerProjectionRequests).
 // A writer projection is consumed by its leaf: callers wrap keys under
 // whatever container or document the response describes. Binding the
 // validator to the requested id makes a projection for any other object an
@@ -24,7 +27,7 @@ function containerProjectionDescribes(projection, containerId) {
 }
 export const containerWriterProjection = {
     isResponseFor(containerId) {
-        return (value) => isGetContainerWriterProjectionOperationResponse(value) &&
+        return (value) => isContainerWriterProjectionResponse(value) &&
             containerProjectionDescribes(value, containerId);
     },
     method: getContainerWriterProjectionOperation.method,
@@ -39,7 +42,7 @@ export const documentWriterProjection = {
     // least describe the container it labels itself with, so a substituted
     // path cannot smuggle another container's leaf under a relabeled id.
     isResponseFor(documentId) {
-        return (value) => isGetDocumentWriterProjectionOperationResponse(value) &&
+        return (value) => isDocumentWriterProjectionResponse(value) &&
             value.documentId === documentId &&
             manifestDescribes(value.documentManifest, "documentId", documentId) &&
             value.documentKekTargets.documentId === documentId &&

package/internal/api-client/routes/writerProjections.js.map

@@ -1 +1 @@
-{"version":3,"file":"writerProjections.js","sourceRoot":"","sources":["writerProjections.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qCAAqC,EACrC,oCAAoC,EACpC,+CAA+C,EAC/C,8CAA8C,EAC9C,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AAOzC,uEAAuE;AACvE,qEAAqE;AACrE,2EAA2E;AAC3E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,wEAAwE;AACxE,mEAAmE;AACnE,SAAS,iBAAiB,CACxB,MAA6E,EAC7E,QAAsC,EACtC,EAAU;IAEV,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE;QAC/C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,UAAuC,EACvC,WAAmB;IAEnB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,OAAO,CACL,UAAU,CAAC,WAAW,KAAK,WAAW;QACtC,IAAI,KAAK,SAAS;QAClB,OAAO,KAAK,SAAS;QACrB,iBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,WAAW,CAAC;QACnD,OAAO,CAAC,WAAW,KAAK,WAAW;QACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,WAAW;QAC5D,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,aAAa,CAAC,WAAmB;QAC/B,OAAO,CAAC,KAAc,EAA8C,EAAE,CACpE,+CAA+C,CAAC,KAAK,CAAC;YACtD,4BAA4B,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,EAAE,qCAAqC,CAAC,MAAM;IACpD,IAAI,CAAC,WAAmB;QACtB,OAAO,oBAAoB,CAAC,qCAAqC,EAAE;YACjE,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,0EAA0E;IAC1E,uEAAuE;IACvE,qEAAqE;IACrE,aAAa,CAAC,UAAkB;QAC9B,OAAO,CAAC,KAAc,EAA6C,EAAE,CACnE,8CAA8C,CAAC,KAAK,CAAC;YACrD,KAAK,CAAC,UAAU,KAAK,UAAU;YAC/B,iBAAiB,CAAC,KAAK,CAAC,gBAAgB,EAAE,YAAY,EAAE,UAAU,CAAC;YACnE,KAAK,CAAC,kBAAkB,CAAC,UAAU,KAAK,UAAU;YAClD,KAAK,CAAC,gBAAgB,CAAC,UAAU,KAAK,UAAU;YAChD,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CACnD,4BAA4B,CAAC,UAAU,EAAE,UAAU,CAAC,WAAW,CAAC,CACjE,CAAC;IACN,CAAC;IACD,MAAM,EAAE,oCAAoC,CAAC,MAAM;IACnD,IAAI,CAAC,UAAkB;QACrB,OAAO,oBAAoB,CAAC,oCAAoC,EAAE;YAChE,UAAU;SACX,CAAC,CAAC;IACL,CAAC;CACF,CAAC","sourcesContent":["import {\n  getContainerWriterProjectionOperation,\n  getDocumentWriterProjectionOperation,\n  isGetContainerWriterProjectionOperationResponse,\n  isGetDocumentWriterProjectionOperationResponse,\n  operationRequestPath,\n} from \"@tearleads/validators/operation\";\nimport type {\n  ContainerKeyingPathResponse,\n  ContainerWriterProjectionResponse,\n  DocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\n\n// A writer projection is consumed by its leaf: callers wrap keys under\n// whatever container or document the response describes. Binding the\n// validator to the requested id makes a projection for any other object an\n// invalid response, so a server cannot redirect a create, move, share, rekey,\n// or content-key re-wrap onto an object it substituted. The top-level id is a\n// mutable label, so the binding also covers the hash-committed manifest object\n// id, the manifest state the SDK later verifies, and the nested KEK and\n// content-key bundle ids a relabeled projection would still carry.\nfunction manifestDescribes(\n  bundle: { manifest: Record<string, unknown>; state: Record<string, unknown> },\n  stateKey: \"containerId\" | \"documentId\",\n  id: string,\n): boolean {\n  return (\n    Reflect.get(bundle.manifest, \"objectId\") === id &&\n    Reflect.get(bundle.state, stateKey) === id\n  );\n}\n\nfunction containerProjectionDescribes(\n  projection: ContainerKeyingPathResponse,\n  containerId: string,\n): boolean {\n  const leaf = projection.path.at(-1);\n  const leafKek = projection.containerKeks.at(-1);\n  return (\n    projection.containerId === containerId &&\n    leaf !== undefined &&\n    leafKek !== undefined &&\n    manifestDescribes(leaf, \"containerId\", containerId) &&\n    leafKek.containerId === containerId &&\n    Reflect.get(leafKek.keyEpoch, \"containerId\") === containerId &&\n    (leafKek.keyring === null || leafKek.keyring.containerId === containerId)\n  );\n}\n\nexport const containerWriterProjection = {\n  isResponseFor(containerId: string) {\n    return (value: unknown): value is ContainerWriterProjectionResponse =>\n      isGetContainerWriterProjectionOperationResponse(value) &&\n      containerProjectionDescribes(value, containerId);\n  },\n  method: getContainerWriterProjectionOperation.method,\n  path(containerId: string) {\n    return operationRequestPath(getContainerWriterProjectionOperation, {\n      containerId,\n    });\n  },\n};\n\nexport const documentWriterProjection = {\n  // The authorizing container paths carry no requested id, but each must at\n  // least describe the container it labels itself with, so a substituted\n  // path cannot smuggle another container's leaf under a relabeled id.\n  isResponseFor(documentId: string) {\n    return (value: unknown): value is DocumentWriterProjectionResponse =>\n      isGetDocumentWriterProjectionOperationResponse(value) &&\n      value.documentId === documentId &&\n      manifestDescribes(value.documentManifest, \"documentId\", documentId) &&\n      value.documentKekTargets.documentId === documentId &&\n      value.contentKeyBundle.documentId === documentId &&\n      value.authorizingContainerPaths.every((projection) =>\n        containerProjectionDescribes(projection, projection.containerId),\n      );\n  },\n  method: getDocumentWriterProjectionOperation.method,\n  path(documentId: string) {\n    return operationRequestPath(getDocumentWriterProjectionOperation, {\n      documentId,\n    });\n  },\n};\n"]}
+{"version":3,"file":"writerProjections.js","sourceRoot":"","sources":["writerProjections.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qCAAqC,EACrC,oCAAoC,EACpC,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAIL,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,gCAAgC,CAAC;AAExC,8EAA8E;AAC9E,yEAAyE;AACzE,uEAAuE;AACvE,qEAAqE;AACrE,2EAA2E;AAC3E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,wEAAwE;AACxE,mEAAmE;AACnE,SAAS,iBAAiB,CACxB,MAA6E,EAC7E,QAAsC,EACtC,EAAU;IAEV,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE;QAC/C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAC3C,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,UAAuC,EACvC,WAAmB;IAEnB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,OAAO,CACL,UAAU,CAAC,WAAW,KAAK,WAAW;QACtC,IAAI,KAAK,SAAS;QAClB,OAAO,KAAK,SAAS;QACrB,iBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,WAAW,CAAC;QACnD,OAAO,CAAC,WAAW,KAAK,WAAW;QACnC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,WAAW;QAC5D,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,WAAW,KAAK,WAAW,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,aAAa,CAAC,WAAmB;QAC/B,OAAO,CAAC,KAAc,EAA8C,EAAE,CACpE,mCAAmC,CAAC,KAAK,CAAC;YAC1C,4BAA4B,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,EAAE,qCAAqC,CAAC,MAAM;IACpD,IAAI,CAAC,WAAmB;QACtB,OAAO,oBAAoB,CAAC,qCAAqC,EAAE;YACjE,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,0EAA0E;IAC1E,uEAAuE;IACvE,qEAAqE;IACrE,aAAa,CAAC,UAAkB;QAC9B,OAAO,CAAC,KAAc,EAA6C,EAAE,CACnE,kCAAkC,CAAC,KAAK,CAAC;YACzC,KAAK,CAAC,UAAU,KAAK,UAAU;YAC/B,iBAAiB,CAAC,KAAK,CAAC,gBAAgB,EAAE,YAAY,EAAE,UAAU,CAAC;YACnE,KAAK,CAAC,kBAAkB,CAAC,UAAU,KAAK,UAAU;YAClD,KAAK,CAAC,gBAAgB,CAAC,UAAU,KAAK,UAAU;YAChD,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CACnD,4BAA4B,CAAC,UAAU,EAAE,UAAU,CAAC,WAAW,CAAC,CACjE,CAAC;IACN,CAAC;IACD,MAAM,EAAE,oCAAoC,CAAC,MAAM;IACnD,IAAI,CAAC,UAAkB;QACrB,OAAO,oBAAoB,CAAC,oCAAoC,EAAE;YAChE,UAAU;SACX,CAAC,CAAC;IACL,CAAC;CACF,CAAC","sourcesContent":["import {\n  getContainerWriterProjectionOperation,\n  getDocumentWriterProjectionOperation,\n  operationRequestPath,\n} from \"@tearleads/validators/operation\";\nimport {\n  type ContainerKeyingPathResponse,\n  type ContainerWriterProjectionResponse,\n  type DocumentWriterProjectionResponse,\n  isContainerWriterProjectionResponse,\n  isDocumentWriterProjectionResponse,\n} from \"@tearleads/validators/response\";\n\n// Validators run on the decoded projection: the transport resolves the wire's\n// manifest-hash citations into bundles first (writerProjectionRequests).\n// A writer projection is consumed by its leaf: callers wrap keys under\n// whatever container or document the response describes. Binding the\n// validator to the requested id makes a projection for any other object an\n// invalid response, so a server cannot redirect a create, move, share, rekey,\n// or content-key re-wrap onto an object it substituted. The top-level id is a\n// mutable label, so the binding also covers the hash-committed manifest object\n// id, the manifest state the SDK later verifies, and the nested KEK and\n// content-key bundle ids a relabeled projection would still carry.\nfunction manifestDescribes(\n  bundle: { manifest: Record<string, unknown>; state: Record<string, unknown> },\n  stateKey: \"containerId\" | \"documentId\",\n  id: string,\n): boolean {\n  return (\n    Reflect.get(bundle.manifest, \"objectId\") === id &&\n    Reflect.get(bundle.state, stateKey) === id\n  );\n}\n\nfunction containerProjectionDescribes(\n  projection: ContainerKeyingPathResponse,\n  containerId: string,\n): boolean {\n  const leaf = projection.path.at(-1);\n  const leafKek = projection.containerKeks.at(-1);\n  return (\n    projection.containerId === containerId &&\n    leaf !== undefined &&\n    leafKek !== undefined &&\n    manifestDescribes(leaf, \"containerId\", containerId) &&\n    leafKek.containerId === containerId &&\n    Reflect.get(leafKek.keyEpoch, \"containerId\") === containerId &&\n    (leafKek.keyring === null || leafKek.keyring.containerId === containerId)\n  );\n}\n\nexport const containerWriterProjection = {\n  isResponseFor(containerId: string) {\n    return (value: unknown): value is ContainerWriterProjectionResponse =>\n      isContainerWriterProjectionResponse(value) &&\n      containerProjectionDescribes(value, containerId);\n  },\n  method: getContainerWriterProjectionOperation.method,\n  path(containerId: string) {\n    return operationRequestPath(getContainerWriterProjectionOperation, {\n      containerId,\n    });\n  },\n};\n\nexport const documentWriterProjection = {\n  // The authorizing container paths carry no requested id, but each must at\n  // least describe the container it labels itself with, so a substituted\n  // path cannot smuggle another container's leaf under a relabeled id.\n  isResponseFor(documentId: string) {\n    return (value: unknown): value is DocumentWriterProjectionResponse =>\n      isDocumentWriterProjectionResponse(value) &&\n      value.documentId === documentId &&\n      manifestDescribes(value.documentManifest, \"documentId\", documentId) &&\n      value.documentKekTargets.documentId === documentId &&\n      value.contentKeyBundle.documentId === documentId &&\n      value.authorizingContainerPaths.every((projection) =>\n        containerProjectionDescribes(projection, projection.containerId),\n      );\n  },\n  method: getDocumentWriterProjectionOperation.method,\n  path(documentId: string) {\n    return operationRequestPath(getDocumentWriterProjectionOperation, {\n      documentId,\n    });\n  },\n};\n"]}

package/internal/api-client/verifiedManifestCitations.d.ts

@@ -0,0 +1,23 @@
+import { type AccessManifestBundleWireResponse } from "../validators/response/index.js";
+/** Citation only saves bytes: a source slower than this sends the read uncited. */
+export declare const MANIFEST_CITATION_DEADLINE_MS = 250;
+export interface WriterProjectionTarget {
+    readonly kind: "container" | "document";
+    readonly id: string;
+}
+/**
+ * Verified access-manifest bundles a device durably holds that a writer
+ * projection of `target` may cite, most useful first. This is never trust
+ * input: the exact cited bytes only fill the response's omitted positions,
+ * and the caller verifies the rebuilt projection exactly as a full one.
+ */
+export interface VerifiedManifestCitations {
+    cite(target: WriterProjectionTarget): Promise<readonly AccessManifestBundleWireResponse[]>;
+}
+/**
+ * The bytes one request cites, copied so a later eviction or mutation of the
+ * source cannot change what fills its omissions. Citing only saves bytes, so
+ * it never blocks or fails a read: a slow, failing, or abandoned source
+ * yields no hints.
+ */
+export declare function heldManifestCitations(source: VerifiedManifestCitations | null, target: WriterProjectionTarget, signal?: AbortSignal | undefined): Promise<Map<string, AccessManifestBundleWireResponse>>;

package/internal/api-client/verifiedManifestCitations.js

@@ -0,0 +1,60 @@
+import { isAccessManifestBundleWireResponse, } from "../validators/response/index.js";
+import { isSha256HexString, KNOWN_MANIFEST_HINT_LIMIT, } from "../validators/util/index.js";
+/** Citation only saves bytes: a source slower than this sends the read uncited. */
+export const MANIFEST_CITATION_DEADLINE_MS = 250;
+/**
+ * The source's answer, or nothing once the deadline passes, the caller
+ * aborts, or the source throws or rejects. A late answer is discarded: it can
+ * never reach a request that was already sent.
+ */
+function boundedCitation(source, target, signal) {
+    return new Promise((resolve) => {
+        let settled = false;
+        const finish = (bundles) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            signal?.removeEventListener("abort", abandon);
+            resolve(bundles);
+        };
+        const abandon = () => finish([]);
+        const timer = setTimeout(abandon, MANIFEST_CITATION_DEADLINE_MS);
+        if (signal?.aborted)
+            return abandon();
+        signal?.addEventListener("abort", abandon, { once: true });
+        try {
+            source.cite(target).then(finish, abandon);
+        }
+        catch {
+            abandon();
+        }
+    });
+}
+/**
+ * The bytes one request cites, copied so a later eviction or mutation of the
+ * source cannot change what fills its omissions. Citing only saves bytes, so
+ * it never blocks or fails a read: a slow, failing, or abandoned source
+ * yields no hints.
+ */
+export async function heldManifestCitations(source, target, signal) {
+    const held = new Map();
+    if (!source)
+        return held;
+    for (const bundle of await boundedCitation(source, target, signal)) {
+        if (held.size >= KNOWN_MANIFEST_HINT_LIMIT)
+            break;
+        if (!isAccessManifestBundleWireResponse(bundle) ||
+            !isSha256HexString(bundle.manifestHash) ||
+            held.has(bundle.manifestHash))
+            continue;
+        try {
+            held.set(bundle.manifestHash, structuredClone(bundle));
+        }
+        catch {
+            // An uncloneable entry is skipped; its manifest simply travels.
+        }
+    }
+    return held;
+}
+//# sourceMappingURL=verifiedManifestCitations.js.map

package/internal/api-client/verifiedManifestCitations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiedManifestCitations.js","sourceRoot":"","sources":["verifiedManifestCitations.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,kCAAkC,GACnC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AAEpC,mFAAmF;AACnF,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAmBjD;;;;GAIG;AACH,SAAS,eAAe,CACtB,MAAiC,EACjC,MAA8B,EAC9B,MAA+B;IAE/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,OAA2B,EAAE,EAAE;YAC7C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QACjE,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,OAAO,EAAE,CAAC;QACtC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAwC,EACxC,MAA8B,EAC9B,MAAgC;IAEhC,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4C,CAAC;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,KAAK,MAAM,MAAM,IAAI,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACnE,IAAI,IAAI,CAAC,IAAI,IAAI,yBAAyB;YAAE,MAAM;QAClD,IACE,CAAC,kCAAkC,CAAC,MAAM,CAAC;YAC3C,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;YAE7B,SAAS;QACX,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import {\n  type AccessManifestBundleWireResponse,\n  isAccessManifestBundleWireResponse,\n} from \"@tearleads/validators/response\";\nimport {\n  isSha256HexString,\n  KNOWN_MANIFEST_HINT_LIMIT,\n} from \"@tearleads/validators/util\";\n\n/** Citation only saves bytes: a source slower than this sends the read uncited. */\nexport const MANIFEST_CITATION_DEADLINE_MS = 250;\n\nexport interface WriterProjectionTarget {\n  readonly kind: \"container\" | \"document\";\n  readonly id: string;\n}\n\n/**\n * Verified access-manifest bundles a device durably holds that a writer\n * projection of `target` may cite, most useful first. This is never trust\n * input: the exact cited bytes only fill the response's omitted positions,\n * and the caller verifies the rebuilt projection exactly as a full one.\n */\nexport interface VerifiedManifestCitations {\n  cite(\n    target: WriterProjectionTarget,\n  ): Promise<readonly AccessManifestBundleWireResponse[]>;\n}\n\n/**\n * The source's answer, or nothing once the deadline passes, the caller\n * aborts, or the source throws or rejects. A late answer is discarded: it can\n * never reach a request that was already sent.\n */\nfunction boundedCitation(\n  source: VerifiedManifestCitations,\n  target: WriterProjectionTarget,\n  signal: AbortSignal | undefined,\n): Promise<readonly unknown[]> {\n  return new Promise((resolve) => {\n    let settled = false;\n    const finish = (bundles: readonly unknown[]) => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      signal?.removeEventListener(\"abort\", abandon);\n      resolve(bundles);\n    };\n    const abandon = () => finish([]);\n    const timer = setTimeout(abandon, MANIFEST_CITATION_DEADLINE_MS);\n    if (signal?.aborted) return abandon();\n    signal?.addEventListener(\"abort\", abandon, { once: true });\n    try {\n      source.cite(target).then(finish, abandon);\n    } catch {\n      abandon();\n    }\n  });\n}\n\n/**\n * The bytes one request cites, copied so a later eviction or mutation of the\n * source cannot change what fills its omissions. Citing only saves bytes, so\n * it never blocks or fails a read: a slow, failing, or abandoned source\n * yields no hints.\n */\nexport async function heldManifestCitations(\n  source: VerifiedManifestCitations | null,\n  target: WriterProjectionTarget,\n  signal?: AbortSignal | undefined,\n): Promise<Map<string, AccessManifestBundleWireResponse>> {\n  const held = new Map<string, AccessManifestBundleWireResponse>();\n  if (!source) return held;\n  for (const bundle of await boundedCitation(source, target, signal)) {\n    if (held.size >= KNOWN_MANIFEST_HINT_LIMIT) break;\n    if (\n      !isAccessManifestBundleWireResponse(bundle) ||\n      !isSha256HexString(bundle.manifestHash) ||\n      held.has(bundle.manifestHash)\n    )\n      continue;\n    try {\n      held.set(bundle.manifestHash, structuredClone(bundle));\n    } catch {\n      // An uncloneable entry is skipped; its manifest simply travels.\n    }\n  }\n  return held;\n}\n"]}

package/internal/api-client/writerProjectionRequests.js

@@ -1,20 +1,81 @@
 import { getContainerWriterProjectionOperation, getDocumentWriterProjectionOperation, } from "../validators/operation/index.js";
+import { decodeContainerWriterProjection, decodeDocumentWriterProjection, } from "../validators/response/index.js";
 import { principalHistoryRequest } from "./principalHistoryRequest.js";
-/** Preparation and body deadlines sit inside projection-history negotiation. */
-export function writerProjectionRequests(runtime) {
+import { PrincipalHistoryRequestContext } from "./principalHistoryRequestContext.js";
+import { heldManifestCitations, } from "./verifiedManifestCitations.js";
+const PROJECTION_PATH = /^\/(?:containers|documents)\/([^/?#]+)\/writer-projection$/u;
+function projectionId(path) {
+    const encoded = PROJECTION_PATH.exec(path)?.[1];
+    if (encoded === undefined)
+        return null;
+    try {
+        return decodeURIComponent(encoded);
+    }
+    catch {
+        return null;
+    }
+}
+function writerProjectionKind(operationId) {
+    if (operationId === "containers.writerProjection.get")
+        return "container";
+    if (operationId === "documents.writerProjection.get")
+        return "document";
+    return null;
+}
+function readProjection(runtime, input, held, context) {
+    const container = input.kind === "container";
+    return principalHistoryRequest(runtime, {
+        path: input.path,
+        validator: input.validator,
+        decode: (value) => container
+            ? decodeContainerWriterProjection(value, held)
+            : decodeDocumentWriterProjection(value, held),
+        method: "GET",
+        context,
+        operation: container
+            ? getContainerWriterProjectionOperation
+            : getDocumentWriterProjectionOperation,
+    });
+}
+/**
+ * Preparation and body deadlines sit inside the projection read. The wire
+ * cites each manifest bundle by hash; decoding resolves every citation, from
+ * the response or from the exact bytes this request declared held, before any
+ * validator, cache, or verifier sees the projection. A response this device
+ * cannot rebuild fails closed into one complete, hint-free refetch.
+ */
+async function citedProjectionRead(runtime, citations, input, options) {
+    // Bind the identity before citations load: an account switch while they
+    // load, or before the refetch, must not carry one identity's hints or
+    // answer into another's session. Each request rechecks this context.
+    const context = new PrincipalHistoryRequestContext(runtime, "GET", input.path, options);
+    const id = projectionId(input.path);
+    // Caller-specific headers make a request its own; it cites nothing. The
+    // caller's abort also ends a citation wait.
+    const held = id === null || options.headers !== undefined
+        ? new Map()
+        : await heldManifestCitations(citations, { kind: input.kind, id }, options.signal);
+    if (held.size === 0)
+        return readProjection(runtime, input, held, context);
+    const hinted = await readProjection(runtime, input, held, context.derive({
+        ...options,
+        headers: { "x-known-manifests": [...held.keys()].join(",") },
+        reportErrors: false,
+    }));
+    if (hinted.ok)
+        return hinted;
+    if (hinted.kind !== "shape") {
+        if (options.reportErrors !== false)
+            hinted.report();
+        return hinted;
+    }
+    return readProjection(runtime, input, new Map(), context.derive(options));
+}
+export function writerProjectionRequests(runtime, citations) {
     const requestResult = (path, validator, method, body, options, operation) => {
-        if (method === "GET" &&
-            (operation.id === "containers.writerProjection.get" ||
-                operation.id === "documents.writerProjection.get"))
-            return principalHistoryRequest(runtime, {
-                path,
-                validator,
-                method,
-                options: options ?? {},
-                operation: operation.id === "containers.writerProjection.get"
-                    ? getContainerWriterProjectionOperation
-                    : getDocumentWriterProjectionOperation,
-            });
+        const kind = method === "GET" ? writerProjectionKind(operation.id) : null;
+        if (kind)
+            return citedProjectionRead(runtime, citations(), { kind, path, validator }, options ?? {});
         return runtime.requestResult(path, validator, method, body, options, operation);
     };
     const request = async (...args) => {

package/internal/api-client/writerProjectionRequests.js.map

@@ -1 +1 @@
-{"version":3,"file":"writerProjectionRequests.js","sourceRoot":"","sources":["writerProjectionRequests.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qCAAqC,EACrC,oCAAoC,GACrC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,gFAAgF;AAChF,MAAM,UAAU,wBAAwB,CAAC,OAA0B;IAIjE,MAAM,aAAa,GAA6B,CAC9C,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,EACT,EAAE;QACF,IACE,MAAM,KAAK,KAAK;YAChB,CAAC,SAAS,CAAC,EAAE,KAAK,iCAAiC;gBACjD,SAAS,CAAC,EAAE,KAAK,gCAAgC,CAAC;YAEpD,OAAO,uBAAuB,CAAC,OAAO,EAAE;gBACtC,IAAI;gBACJ,SAAS;gBACT,MAAM;gBACN,OAAO,EAAE,OAAO,IAAI,EAAE;gBACtB,SAAS,EACP,SAAS,CAAC,EAAE,KAAK,iCAAiC;oBAChD,CAAC,CAAC,qCAAqC;oBACvC,CAAC,CAAC,oCAAoC;aAC3C,CAAC,CAAC;QACL,OAAO,OAAO,CAAC,aAAa,CAC1B,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,CACV,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,OAAO,GAAuB,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AACpC,CAAC","sourcesContent":["import {\n  getContainerWriterProjectionOperation,\n  getDocumentWriterProjectionOperation,\n} from \"@tearleads/validators/operation\";\nimport type { ApiRequestRuntime } from \"./apiRequestRuntime\";\nimport { principalHistoryRequest } from \"./principalHistoryRequest\";\nimport type { OperationRequestFn, OperationRequestResultFn } from \"./types\";\n\n/** Preparation and body deadlines sit inside projection-history negotiation. */\nexport function writerProjectionRequests(runtime: ApiRequestRuntime): {\n  request: OperationRequestFn;\n  requestResult: OperationRequestResultFn;\n} {\n  const requestResult: OperationRequestResultFn = (\n    path,\n    validator,\n    method,\n    body,\n    options,\n    operation,\n  ) => {\n    if (\n      method === \"GET\" &&\n      (operation.id === \"containers.writerProjection.get\" ||\n        operation.id === \"documents.writerProjection.get\")\n    )\n      return principalHistoryRequest(runtime, {\n        path,\n        validator,\n        method,\n        options: options ?? {},\n        operation:\n          operation.id === \"containers.writerProjection.get\"\n            ? getContainerWriterProjectionOperation\n            : getDocumentWriterProjectionOperation,\n      });\n    return runtime.requestResult(\n      path,\n      validator,\n      method,\n      body,\n      options,\n      operation,\n    );\n  };\n  const request: OperationRequestFn = async (...args) => {\n    const result = await requestResult(...args);\n    return result.ok ? result.data : null;\n  };\n  return { request, requestResult };\n}\n"]}
+{"version":3,"file":"writerProjectionRequests.js","sourceRoot":"","sources":["writerProjectionRequests.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qCAAqC,EACrC,oCAAoC,GACrC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAEL,+BAA+B,EAC/B,8BAA8B,GAC/B,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAOlF,OAAO,EACL,qBAAqB,GAGtB,MAAM,6BAA6B,CAAC;AAIrC,MAAM,eAAe,GACnB,6DAA6D,CAAC;AAEhE,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,WAAmB;IAEnB,IAAI,WAAW,KAAK,iCAAiC;QAAE,OAAO,WAAW,CAAC;IAC1E,IAAI,WAAW,KAAK,gCAAgC;QAAE,OAAO,UAAU,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CACrB,OAA0B,EAC1B,KAIC,EACD,IAAiB,EACjB,OAAuC;IAEvC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;IAC7C,OAAO,uBAAuB,CAAC,OAAO,EAAE;QACtC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,SAAS;YACP,CAAC,CAAC,+BAA+B,CAAC,KAAK,EAAE,IAAI,CAAC;YAC9C,CAAC,CAAC,8BAA8B,CAAC,KAAK,EAAE,IAAI,CAAC;QACjD,MAAM,EAAE,KAAK;QACb,OAAO;QACP,SAAS,EAAE,SAAS;YAClB,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,oCAAoC;KACzC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,mBAAmB,CAChC,OAA0B,EAC1B,SAA2C,EAC3C,KAIC,EACD,OAA6B;IAE7B,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrE,MAAM,OAAO,GAAG,IAAI,8BAA8B,CAChD,OAAO,EACP,KAAK,EACL,KAAK,CAAC,IAAI,EACV,OAAO,CACR,CAAC;IACF,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,wEAAwE;IACxE,4CAA4C;IAC5C,MAAM,IAAI,GACR,EAAE,KAAK,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QAC1C,CAAC,CAAC,IAAI,GAAG,EAA4C;QACrD,CAAC,CAAC,MAAM,qBAAqB,CACzB,SAAS,EACT,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,EACxB,OAAO,CAAC,MAAM,CACf,CAAC;IACR,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,OAAO,EACP,KAAK,EACL,IAAI,EACJ,OAAO,CAAC,MAAM,CAAC;QACb,GAAG,OAAO;QACV,OAAO,EAAE,EAAE,mBAAmB,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAC5D,YAAY,EAAE,KAAK;KACpB,CAAC,CACH,CAAC;IACF,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK;YAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAA0B,EAC1B,SAAiD;IAKjD,MAAM,aAAa,GAA6B,CAC9C,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,EACT,EAAE;QACF,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,IAAI,IAAI;YACN,OAAO,mBAAmB,CACxB,OAAO,EACP,SAAS,EAAE,EACX,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,EACzB,OAAO,IAAI,EAAE,CACd,CAAC;QACJ,OAAO,OAAO,CAAC,aAAa,CAC1B,IAAI,EACJ,SAAS,EACT,MAAM,EACN,IAAI,EACJ,OAAO,EACP,SAAS,CACV,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,OAAO,GAAuB,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AACpC,CAAC","sourcesContent":["import {\n  getContainerWriterProjectionOperation,\n  getDocumentWriterProjectionOperation,\n} from \"@tearleads/validators/operation\";\nimport {\n  type AccessManifestBundleWireResponse,\n  decodeContainerWriterProjection,\n  decodeDocumentWriterProjection,\n} from \"@tearleads/validators/response\";\nimport type { ApiRequestRuntime } from \"./apiRequestRuntime\";\nimport { principalHistoryRequest } from \"./principalHistoryRequest\";\nimport { PrincipalHistoryRequestContext } from \"./principalHistoryRequestContext\";\nimport type {\n  OperationRequestFn,\n  OperationRequestResultFn,\n  RequestResult,\n  RequestResultOptions,\n} from \"./types\";\nimport {\n  heldManifestCitations,\n  type VerifiedManifestCitations,\n  type WriterProjectionTarget,\n} from \"./verifiedManifestCitations\";\n\ntype HeldBundles = ReadonlyMap<string, AccessManifestBundleWireResponse>;\n\nconst PROJECTION_PATH =\n  /^\\/(?:containers|documents)\\/([^/?#]+)\\/writer-projection$/u;\n\nfunction projectionId(path: string): string | null {\n  const encoded = PROJECTION_PATH.exec(path)?.[1];\n  if (encoded === undefined) return null;\n  try {\n    return decodeURIComponent(encoded);\n  } catch {\n    return null;\n  }\n}\n\nfunction writerProjectionKind(\n  operationId: string,\n): WriterProjectionTarget[\"kind\"] | null {\n  if (operationId === \"containers.writerProjection.get\") return \"container\";\n  if (operationId === \"documents.writerProjection.get\") return \"document\";\n  return null;\n}\n\nfunction readProjection<T>(\n  runtime: ApiRequestRuntime,\n  input: {\n    readonly kind: WriterProjectionTarget[\"kind\"];\n    readonly path: string;\n    readonly validator: (value: unknown) => value is T;\n  },\n  held: HeldBundles,\n  context: PrincipalHistoryRequestContext,\n): Promise<RequestResult<T>> {\n  const container = input.kind === \"container\";\n  return principalHistoryRequest(runtime, {\n    path: input.path,\n    validator: input.validator,\n    decode: (value) =>\n      container\n        ? decodeContainerWriterProjection(value, held)\n        : decodeDocumentWriterProjection(value, held),\n    method: \"GET\",\n    context,\n    operation: container\n      ? getContainerWriterProjectionOperation\n      : getDocumentWriterProjectionOperation,\n  });\n}\n\n/**\n * Preparation and body deadlines sit inside the projection read. The wire\n * cites each manifest bundle by hash; decoding resolves every citation, from\n * the response or from the exact bytes this request declared held, before any\n * validator, cache, or verifier sees the projection. A response this device\n * cannot rebuild fails closed into one complete, hint-free refetch.\n */\nasync function citedProjectionRead<T>(\n  runtime: ApiRequestRuntime,\n  citations: VerifiedManifestCitations | null,\n  input: {\n    readonly kind: WriterProjectionTarget[\"kind\"];\n    readonly path: string;\n    readonly validator: (value: unknown) => value is T;\n  },\n  options: RequestResultOptions,\n): Promise<RequestResult<T>> {\n  // Bind the identity before citations load: an account switch while they\n  // load, or before the refetch, must not carry one identity's hints or\n  // answer into another's session. Each request rechecks this context.\n  const context = new PrincipalHistoryRequestContext(\n    runtime,\n    \"GET\",\n    input.path,\n    options,\n  );\n  const id = projectionId(input.path);\n  // Caller-specific headers make a request its own; it cites nothing. The\n  // caller's abort also ends a citation wait.\n  const held =\n    id === null || options.headers !== undefined\n      ? new Map<string, AccessManifestBundleWireResponse>()\n      : await heldManifestCitations(\n          citations,\n          { kind: input.kind, id },\n          options.signal,\n        );\n  if (held.size === 0) return readProjection(runtime, input, held, context);\n  const hinted = await readProjection(\n    runtime,\n    input,\n    held,\n    context.derive({\n      ...options,\n      headers: { \"x-known-manifests\": [...held.keys()].join(\",\") },\n      reportErrors: false,\n    }),\n  );\n  if (hinted.ok) return hinted;\n  if (hinted.kind !== \"shape\") {\n    if (options.reportErrors !== false) hinted.report();\n    return hinted;\n  }\n  return readProjection(runtime, input, new Map(), context.derive(options));\n}\n\nexport function writerProjectionRequests(\n  runtime: ApiRequestRuntime,\n  citations: () => VerifiedManifestCitations | null,\n): {\n  request: OperationRequestFn;\n  requestResult: OperationRequestResultFn;\n} {\n  const requestResult: OperationRequestResultFn = (\n    path,\n    validator,\n    method,\n    body,\n    options,\n    operation,\n  ) => {\n    const kind = method === \"GET\" ? writerProjectionKind(operation.id) : null;\n    if (kind)\n      return citedProjectionRead(\n        runtime,\n        citations(),\n        { kind, path, validator },\n        options ?? {},\n      );\n    return runtime.requestResult(\n      path,\n      validator,\n      method,\n      body,\n      options,\n      operation,\n    );\n  };\n  const request: OperationRequestFn = async (...args) => {\n    const result = await requestResult(...args);\n    return result.ok ? result.data : null;\n  };\n  return { request, requestResult };\n}\n"]}

package/internal/crypto/index.d.ts

@@ -30,7 +30,6 @@ export { PrincipalPolicyValidationError, throwPrincipalPolicyValidationError, }
 export type { ManagedRecipientPrincipalType, PrincipalContainerGrant, PrincipalContainerGrantAccessLevel, PrincipalProjectionMember, PrincipalProjectionRole, PrincipalStateExternalAuthority, PrincipalStateHeaderInput, PrincipalStateMember, PrincipalStateMemberEnvelope, PrincipalStateMembershipMode, PrincipalStatePayloadCipherSuite, PrincipalStateSigningInput, SignedPrincipalState, UnsignedPrincipalState, } from "./principalState.js";
 export { buildPrincipalStateSigningInput, computePrincipalMembershipRoot, computePrincipalProjectionRoot, computePrincipalStateHash, computePrincipalStatePayloadCiphertextHash, derivePrincipalProjectionMembers, isManagedRecipientPrincipalType, isPrincipalProjectionRole, normalizePrincipalProjectionMembers, normalizePrincipalStateMembers, serializeUnsignedPrincipalState, signPrincipalState, } from "./principalState.js";
 export { verifySignedPrincipalState, verifySignedPrincipalStateResult, } from "./principalStateVerification.js";
-export { captureProjectionHistory, type HistoryProjection, omitProjectionHistory, type RetainedProjectionHistory, restoreProjectionHistory, } from "./projectionHistory.js";
 export type { SigningKeyPair } from "./signing/generateKeyPair.js";
 export { generateSigningKeyPair, generateSigningSeedAndKeyPair, ML_DSA87_PUBLIC_KEY_BYTES, ML_DSA87_SECRET_KEY_BYTES, ML_DSA87_SIGNATURE_BYTES, } from "./signing/generateKeyPair.js";
 export { sign } from "./signing/sign.js";

package/internal/crypto/index.js

@@ -22,7 +22,6 @@ export { computePrincipalMemberEnvelopesRoot, normalizePrincipalStateMemberEnvel
 export { PrincipalPolicyValidationError, throwPrincipalPolicyValidationError, } from "./principalPolicyValidationError.js";
 export { buildPrincipalStateSigningInput, computePrincipalMembershipRoot, computePrincipalProjectionRoot, computePrincipalStateHash, computePrincipalStatePayloadCiphertextHash, derivePrincipalProjectionMembers, isManagedRecipientPrincipalType, isPrincipalProjectionRole, normalizePrincipalProjectionMembers, normalizePrincipalStateMembers, serializeUnsignedPrincipalState, signPrincipalState, } from "./principalState.js";
 export { verifySignedPrincipalState, verifySignedPrincipalStateResult, } from "./principalStateVerification.js";
-export { captureProjectionHistory, omitProjectionHistory, restoreProjectionHistory, } from "./projectionHistory.js";
 export { generateSigningKeyPair, generateSigningSeedAndKeyPair, ML_DSA87_PUBLIC_KEY_BYTES, ML_DSA87_SECRET_KEY_BYTES, ML_DSA87_SIGNATURE_BYTES, } from "./signing/generateKeyPair.js";
 export { sign } from "./signing/sign.js";
 export { verify } from "./signing/verify.js";

package/internal/crypto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAKxD,OAAO,EACL,8BAA8B,EAC9B,mBAAmB,EACnB,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,EAC1B,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC9B,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAKrB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EAGpB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAC/C,OAAO,EACL,wBAAwB,EACxB,mCAAmC,EACnC,sCAAsC,EACtC,qCAAqC,EACrC,kCAAkC,EAClC,kCAAkC,EAClC,0BAA0B,EAE1B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAuI7B,OAAO,EACL,qCAAqC,EACrC,oCAAoC,EACpC,8BAA8B,EAC9B,qCAAqC,EACrC,2BAA2B,EAC3B,iCAAiC,EACjC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,gCAAgC,EAChC,+BAA+B,EAC/B,oCAAoC,EACpC,6BAA6B,EAC7B,+BAA+B,EAC/B,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,+BAA+B,EAC/B,8BAA8B,EAC9B,6BAA6B,EAC7B,wCAAwC,EACxC,sCAAsC,EACtC,4BAA4B,EAC5B,mCAAmC,EACnC,mCAAmC,EACnC,0CAA0C,EAC1C,wCAAwC,EACxC,yCAAyC,EACzC,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,sBAAsB,EACtB,mCAAmC,EACnC,gCAAgC,EAChC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,+BAA+B,EAC/B,oBAAoB,EACpB,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,EACnC,wBAAwB,EACxB,6BAA6B,EAC7B,kCAAkC,EAClC,6BAA6B,EAC7B,sCAAsC,EACtC,oCAAoC,EACpC,0CAA0C,EAC1C,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,8BAA8B,EAC9B,uBAAuB,EACvB,0BAA0B,EAC1B,mCAAmC,EACnC,6BAA6B,EAC7B,8BAA8B,EAC9B,mCAAmC,EACnC,mCAAmC,EACnC,2BAA2B,EAC3B,kCAAkC,EAClC,iCAAiC,EACjC,4BAA4B,EAC5B,sCAAsC,EACtC,gCAAgC,EAChC,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,uCAAuC,EACvC,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAC/B,mCAAmC,EACnC,wCAAwC,EACxC,6CAA6C,EAC7C,iCAAiC,EACjC,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,iDAAiD,EACjD,4BAA4B,EAC5B,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,4BAA4B,EAC5B,mCAAmC,EACnC,oBAAoB,EACpB,mCAAmC,EACnC,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,yCAAyC,EACzC,+BAA+B,EAC/B,4BAA4B,EAC5B,oCAAoC,EACpC,qCAAqC,EACrC,sCAAsC,EACtC,6BAA6B,EAC7B,uBAAuB,EACvB,gCAAgC,EAChC,kCAAkC,EAClC,gCAAgC,EAChC,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,2CAA2C,EAC3C,mCAAmC,EACnC,wCAAwC,EAExC,0CAA0C,GAC3C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mCAAmC,EACnC,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,8BAA8B,EAC9B,mCAAmC,GACpC,MAAM,kCAAkC,CAAC;AAiB1C,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,8BAA8B,EAC9B,yBAAyB,EACzB,0CAA0C,EAC1C,gCAAgC,EAChC,+BAA+B,EAC/B,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,+BAA+B,EAC/B,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,wBAAwB,EAExB,qBAAqB,EAErB,wBAAwB,GACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC","sourcesContent":["export { blobContentMetadataHash } from \"./blobContentMetadata\";\nexport { BlobEnvelopeError } from \"./blobEnvelopeError\";\nexport type {\n  BlobEnvelopeHeaderRecord,\n  BlobEnvelopeRecord,\n} from \"./blobEnvelopeReader\";\nexport {\n  MAX_BLOB_ENVELOPE_HEADER_BYTES,\n  parseBlobEnvelopeV2,\n  parseBlobEnvelopeV2Header,\n  readBlobEnvelopeHeaderByteLength,\n} from \"./blobEnvelopeReader\";\nexport type { BlobEnvelopeV2Header } from \"./blobEnvelopeV2\";\nexport {\n  BLOB_CHUNK_SIZE_BYTES,\n  BLOB_ENCRYPTED_BYTES_FORMAT,\n  BLOB_ENCRYPTED_BYTES_VERSION,\n  BLOB_ENVELOPE_MAGIC_BYTES,\n  BLOB_ENVELOPE_PREFIX_BYTES,\n  blobChunkPlaintextByteLength,\n  computeBlobChunkCount,\n  computeBlobEncryptedByteLength,\n  deriveBlobChunkIv,\n  encodeBlobEnvelopeV2Header,\n  joinBlobPartBytes,\n  MAX_BLOB_CHUNK_COUNT,\n  normalizeBlobChunkSize,\n} from \"./blobEnvelopeV2\";\nexport { compareCanonicalStrings } from \"./canonicalOrdering\";\nexport {\n  AUTH_CHALLENGE_BYTES,\n  AUTH_CHALLENGE_HEX_LENGTH,\n  authChallengeSigningBytes,\n  CHALLENGE_TTL_SECONDS,\n  canonicalAuthOrigin,\n  generateChallenge,\n} from \"./challenge\";\nexport type {\n  ContentKeyEnvelopeKind,\n  ContentKeyWrapBinding,\n} from \"./contentKeyEnvelope\";\nexport {\n  ContentKeyEnvelopeError,\n  decodeContentKeyEnvelope,\n  unwrapContentKey,\n  wrapContentKey,\n} from \"./contentKeyEnvelope\";\nexport { decryptAsRecipient } from \"./encapsulation/decryptAsRecipient\";\nexport { encryptForRecipients } from \"./encapsulation/encryptForRecipients\";\nexport type { EncapsulationKeyPair } from \"./encapsulation/generateKeyPair\";\nexport {\n  generateKemKeyPair,\n  generateKemSeedAndKeyPair,\n  ML_KEM1024_CIPHERTEXT_BYTES,\n  ML_KEM1024_PUBLIC_KEY_BYTES,\n  ML_KEM1024_SECRET_KEY_BYTES,\n  ML_KEM1024_SEED_BYTES,\n} from \"./encapsulation/generateKeyPair\";\nexport type { EncryptedEnvelope, RecipientEntry } from \"./encapsulation/types\";\nexport { unwrapDek } from \"./encapsulation/unwrapDek\";\nexport { wrapDekForRecipients } from \"./encapsulation/wrapDek\";\nexport { toFingerprint } from \"./fingerprint\";\nexport {\n  decryptGroupMetadata,\n  encodeBuiltinGroupMetadata,\n  encryptGroupMetadata,\n  type GroupMetadata,\n  type GroupMetadataKey,\n  readGroupMetadata,\n} from \"./groupMetadata\";\nexport { bytesToHex, hexToBytes } from \"./hex\";\nexport {\n  createIdentitySeedPhrase,\n  createIdentitySeedPhraseFromEntropy,\n  generateIdentityKeyPairsFromSeedPhrase,\n  IDENTITY_SEED_PHRASE_DERIVATION_SUITE,\n  IDENTITY_SEED_PHRASE_ENTROPY_BYTES,\n  IDENTITY_SEED_PHRASE_STRENGTH_BITS,\n  IDENTITY_SEED_PHRASE_WORDS,\n  type IdentitySeedPhraseKeyPairs,\n  normalizeIdentitySeedPhrase,\n  validateIdentitySeedPhrase,\n} from \"./identitySeedPhrase\";\nexport {\n  createIncrementalSha256,\n  type IncrementalSha256,\n} from \"./incrementalSha256\";\nexport type {\n  AccessEvent,\n  AccessEventType,\n  AccessManifest,\n  AccessManifestCheckpoint,\n  AccessManifestTransparencyLeaf,\n  AccessObjectKind,\n  AnyVerifiedAccessManifest,\n  AnyVerifiedPrincipalPolicy,\n  AttachmentAccessEventBody,\n  AttachmentBindAccessEventBody,\n  AttachmentDetachAccessEventBody,\n  BlobAccessManifest,\n  BlobContentKeyTarget,\n  ContainerAccessEventBody,\n  ContainerAccessKeyState,\n  ContainerAccessLevel,\n  ContainerAccessManifest,\n  ContainerAccessManifestState,\n  ContainerAccessStructural,\n  ContainerCreateAccessEventBody,\n  ContainerDirectGrant,\n  ContainerGrantAccessEventBody,\n  ContainerGrantPrincipalHead,\n  ContainerGrantSubjectType,\n  ContainerKekKeyring,\n  ContainerKekKeyringEntry,\n  ContainerKekPredecessorBridge,\n  ContainerKekRecipientTarget,\n  ContainerKekTarget,\n  ContainerKeyEpoch,\n  ContainerKeyWrap,\n  ContainerMoveAccessEventBody,\n  ContainerReciteAccessEventBody,\n  ContainerRekeyAccessEventBody,\n  ContainerRevokeAccessEventBody,\n  ContainerUserRecipientKey,\n  ContentObjectKind,\n  ContentRecordEncryptionSuite,\n  ContentRecordNonceDomain,\n  DeriveBlobKekTargetsInput,\n  DeriveContainerKekRecipientTargetsInput,\n  DeriveDocumentKekTargetsInput,\n  DocumentAccessEventBody,\n  DocumentContentKeyTarget,\n  DocumentContentRecordMetadataInput,\n  DocumentLinkAccessEventBody,\n  DocumentLinkSetManifestState,\n  DocumentLinkSetStructural,\n  DocumentPurgeAccessEventBody,\n  DocumentUnlinkAccessEventBody,\n  IdentityStateCheckpoint,\n  IdentityStateHead,\n  IdentityStateTransparencyLeaf,\n  KekRecipientKind,\n  KeyingCanonicalJson,\n  KeyingHashDomain,\n  KeyingLocalCheckpointStore,\n  KeyingVerificationCode,\n  KeyingVerificationResult,\n  ManagedPrincipalKind,\n  PrincipalHistoryIndexNode,\n  PrincipalPolicyAuthorization,\n  PrincipalPolicyBundle,\n  PrincipalPolicyCheckpoint,\n  PrincipalPolicyCurrent,\n  PrincipalPolicyExternalAuthority,\n  PrincipalPolicyExternalAuthorityState,\n  PrincipalPolicyHistoryInput,\n  PrincipalPolicyHistoryPage,\n  PrincipalPolicyHistoryProgressOptions,\n  PrincipalPolicyHistoryReferenceProof,\n  PrincipalPolicyHistoryVerifier,\n  PrincipalPolicyMemberEnvelopes,\n  PrincipalPolicyPayload,\n  PrincipalPolicySignedState,\n  PrincipalPolicySignerPublicKey,\n  PrincipalPolicySnapshot,\n  PrincipalPolicyStateChainEntry,\n  PrincipalPolicyTransitionMismatch,\n  PrincipalPolicyTransitionMismatchCode,\n  PrincipalPolicyTransparencyLeaf,\n  ReferencedPrincipalHead,\n  SignedTransparencyTreeHead,\n  TransparencyConsistencyProof,\n  TransparencyInclusionProof,\n  TransparencyLeaf,\n  TransparencyLeafKind,\n  TransparencyTreeCheckpoint,\n  UnsignedAccessEvent,\n  UnsignedTransparencyTreeHead,\n  UnsignedWriteHeader,\n  VerifiedAccessEvent,\n  VerifiedAccessManifest,\n  VerifiedAccessManifestCheckpointEvidence,\n  VerifiedAccessManifestSnapshot,\n  VerifiedAttachmentBinding,\n  VerifiedAttachmentDetach,\n  VerifiedBlobKekTargets,\n  VerifiedContainerAccessManifest,\n  VerifiedContainerKekState,\n  VerifiedContainerParentEdge,\n  VerifiedDocumentKekTargets,\n  VerifiedDocumentLinkSetManifest,\n  VerifiedDocumentLinkSetSnapshot,\n  VerifiedDocumentLinkSetStateEvidence,\n  VerifiedIdentityState,\n  VerifiedPrincipalPolicy,\n  VerifiedPrincipalPolicyCurrent,\n  VerifiedPrincipalPolicyHistory,\n  VerifiedPrincipalPolicySelection,\n  VerifiedPrincipalPolicySnapshot,\n  VerifiedTransparencyProof,\n  VerifiedTransparencyTreeHead,\n  VerifiedWriteHeader,\n  VerifyAccessEventInput,\n  VerifyAccessManifestInput,\n  VerifyAttachmentBindingEventInput,\n  VerifyAttachmentDetachEventInput,\n  VerifyContainerAccessManifestInput,\n  VerifyContainerKekStateInput,\n  VerifyContainerParentEdgeInput,\n  VerifyDocumentLinkSetManifestInput,\n  VerifyDocumentPurgeEventInput,\n  VerifyIdentityStateCheckpointInput,\n  VerifyPrincipalPolicyBundleInput,\n  VerifyPrincipalPolicySnapshotInput,\n  VerifySignedTransparencyTreeHeadInput,\n  VerifyTransparencyConsistencyProofInput,\n  VerifyTransparencyInclusionProofInput,\n  VerifyTransparencyProofInput,\n  VerifyWriteHeaderInput,\n  WriteHeader,\n} from \"./keying\";\nexport {\n  ACCESS_MANIFEST_VERIFICATION_REVISION,\n  accessManifestCheckpointFromManifest,\n  accessManifestTransparencyLeaf,\n  assertSealedContainerKekKeyringLength,\n  BLOB_CONTENT_KEY_WRAP_SUITE,\n  CONTAINER_KEK_KEYRING_ENTRY_BYTES,\n  CONTAINER_KEK_KEYRING_FORMAT_VERSION,\n  CONTAINER_KEK_KEYRING_HEADER_BYTES,\n  CONTAINER_KEK_KEYRING_SEAL_SUITE,\n  CONTAINER_KEK_MATERIAL_ID_PREFIX,\n  CONTAINER_KEK_PARENT_WRAP_SUITE,\n  CONTAINER_KEK_PREDECESSOR_WRAP_SUITE,\n  CONTAINER_KEK_USER_WRAP_SUITE,\n  CONTENT_RECORD_ENCRYPTION_SUITE,\n  computeAccessEventBodyHash,\n  computeAccessEventHash,\n  computeAccessManifestHash,\n  computeBlobAccessManifestHash,\n  computeBlobContentKeyTargetHash,\n  computeContainerAccessKeyTargetHash,\n  computeContainerAccessStructuralHash,\n  computeContainerDirectGrantRoot,\n  computeContainerKekKeyringHash,\n  computeContainerKekMaterialId,\n  computeContainerKekPredecessorBridgeHash,\n  computeContainerKekRecipientTargetHash,\n  computeContainerKeyEpochHash,\n  computeContentRecordNonceDomainHash,\n  computeDocumentContentKeyTargetHash,\n  computeDocumentContentRecordCiphertextHash,\n  computeDocumentContentRecordMetadataHash,\n  computeDocumentContentRecordPlaintextHash,\n  computeDocumentLinkSetGrantRoot,\n  computeDocumentLinkSetKeyTargetHash,\n  computeDocumentLinkSetStructuralHash,\n  computeKeyingDomainHash,\n  computeTransparencyLeafHash,\n  computeTransparencyMerkleRoot,\n  computeWriteHeaderHash,\n  createContainerKekPredecessorBridge,\n  createPrincipalHistoryIndexProof,\n  createPrincipalPolicyHistoryVerifier,\n  createTransparencyConsistencyProof,\n  createTransparencyInclusionProof,\n  DOCUMENT_CONTENT_KEY_WRAP_SUITE,\n  deriveBlobKekTargets,\n  deriveContainerAccessManifest,\n  deriveContainerKekRecipientTargets,\n  deriveContainerKekWrappingPublicKey,\n  deriveDocumentKekTargets,\n  deriveDocumentLinkSetManifest,\n  derivePrincipalRecipientKeyEpochId,\n  documentContentRecordMetadata,\n  expectedSealedContainerKekKeyringBytes,\n  getPrincipalPolicyTransitionMismatch,\n  getPrincipalPolicyTransitionMismatchReason,\n  identityStateTransparencyLeaf,\n  isContainerKekMaterialId,\n  isKeyingVerificationCode,\n  KEYING_VERIFICATION_CODES,\n  KeyingVerificationError,\n  MAX_CONTAINER_KEY_EPOCH,\n  MAX_CONTAINER_RECITATION_EPOCH,\n  makeVerifiedAccessEvent,\n  makeVerifiedBlobKekTargets,\n  makeVerifiedContainerAccessManifest,\n  makeVerifiedContainerKekState,\n  makeVerifiedDocumentKekTargets,\n  makeVerifiedDocumentLinkSetManifest,\n  makeVerifiedDocumentLinkSetSnapshot,\n  makeVerifiedPrincipalPolicy,\n  normalizeAttachmentAccessEventBody,\n  normalizeContainerAccessEventBody,\n  normalizeContainerKekKeyring,\n  normalizeContainerKekPredecessorBridge,\n  normalizeDocumentAccessEventBody,\n  normalizeDocumentPurgeAccessEventBody,\n  openContainerKekKeyring,\n  PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT,\n  PRINCIPAL_HISTORY_VERIFICATION_REVISION,\n  principalHistoryIndexLeaf,\n  principalPolicyMatchesReference,\n  principalPolicyTransparencyLeaf,\n  resolveContainerPathUserAccessLevel,\n  resolveContainerStatePathUserAccessLevel,\n  resolveHistoricalContainerPathUserAccessLevel,\n  resolvePrincipalHistoryIndexProof,\n  restorePrincipalPolicyHistoryVerifier,\n  sealContainerKekKeyring,\n  selectPrincipalPolicyAuthorization,\n  selectPrincipalPolicyCurrentPredecessorReferences,\n  serializeKeyingCanonicalJson,\n  signAccessEvent,\n  signTransparencyTreeHead,\n  signWriteHeader,\n  unwrapContainerKekParentWrap,\n  unwrapContainerKekPredecessorBridge,\n  verifyAccessManifest,\n  verifyAccessManifestLocalCheckpoint,\n  verifyAccessManifestSnapshot,\n  verifyAttachmentBindingEvent,\n  verifyAttachmentDetachEvent,\n  verifyContainerAccessManifest,\n  verifyContainerKekKeyringEntry,\n  verifyContainerKekState,\n  verifyContainerParentEdge,\n  verifyDocumentLinkSetManifest,\n  verifyDocumentLinkSetSnapshot,\n  verifyDocumentPurgeEvent,\n  verifyIdentityStateCheckpoint,\n  verifyPrincipalPolicyBundle,\n  verifyPrincipalPolicyBundleAgainstHistory,\n  verifyPrincipalPolicyCheckpoint,\n  verifyPrincipalPolicyCurrent,\n  verifyPrincipalPolicyCurrentMutation,\n  verifyPrincipalPolicyCurrentSuccessor,\n  verifyPrincipalPolicyHistoryReferences,\n  verifyPrincipalPolicySnapshot,\n  verifySignedAccessEvent,\n  verifySignedTransparencyTreeHead,\n  verifyTransparencyConsistencyProof,\n  verifyTransparencyInclusionProof,\n  verifyTransparencyProof,\n  verifyWriteHeader,\n} from \"./keying\";\nexport {\n  organizationReplacementAuthorizationPayload,\n  organizationReplacementSigningBytes,\n  signOrganizationReplacementAuthorization,\n  type VerifiedOrganizationReplacementAuthorization,\n  verifyOrganizationReplacementAuthorization,\n} from \"./organizationReplacement\";\nexport {\n  computePrincipalContainerGrantRoot,\n  normalizePrincipalContainerGrants,\n} from \"./principalContainerGrants\";\nexport {\n  computePrincipalMemberEnvelopesRoot,\n  normalizePrincipalStateMemberEnvelopes,\n  PrincipalMemberEnvelopeValidationError,\n} from \"./principalMemberEnvelopes\";\nexport type { PrincipalPolicyValidationErrorCode } from \"./principalPolicyValidationError\";\nexport {\n  PrincipalPolicyValidationError,\n  throwPrincipalPolicyValidationError,\n} from \"./principalPolicyValidationError\";\nexport type {\n  ManagedRecipientPrincipalType,\n  PrincipalContainerGrant,\n  PrincipalContainerGrantAccessLevel,\n  PrincipalProjectionMember,\n  PrincipalProjectionRole,\n  PrincipalStateExternalAuthority,\n  PrincipalStateHeaderInput,\n  PrincipalStateMember,\n  PrincipalStateMemberEnvelope,\n  PrincipalStateMembershipMode,\n  PrincipalStatePayloadCipherSuite,\n  PrincipalStateSigningInput,\n  SignedPrincipalState,\n  UnsignedPrincipalState,\n} from \"./principalState\";\nexport {\n  buildPrincipalStateSigningInput,\n  computePrincipalMembershipRoot,\n  computePrincipalProjectionRoot,\n  computePrincipalStateHash,\n  computePrincipalStatePayloadCiphertextHash,\n  derivePrincipalProjectionMembers,\n  isManagedRecipientPrincipalType,\n  isPrincipalProjectionRole,\n  normalizePrincipalProjectionMembers,\n  normalizePrincipalStateMembers,\n  serializeUnsignedPrincipalState,\n  signPrincipalState,\n} from \"./principalState\";\nexport {\n  verifySignedPrincipalState,\n  verifySignedPrincipalStateResult,\n} from \"./principalStateVerification\";\nexport {\n  captureProjectionHistory,\n  type HistoryProjection,\n  omitProjectionHistory,\n  type RetainedProjectionHistory,\n  restoreProjectionHistory,\n} from \"./projectionHistory\";\nexport type { SigningKeyPair } from \"./signing/generateKeyPair\";\nexport {\n  generateSigningKeyPair,\n  generateSigningSeedAndKeyPair,\n  ML_DSA87_PUBLIC_KEY_BYTES,\n  ML_DSA87_SECRET_KEY_BYTES,\n  ML_DSA87_SIGNATURE_BYTES,\n} from \"./signing/generateKeyPair\";\nexport { sign } from \"./signing/sign\";\nexport { verify } from \"./signing/verify\";\nexport type { SymmetricCiphertext } from \"./symmetric\";\nexport {\n  AES_256_KEY_BYTES,\n  AES_GCM_IV_BYTES,\n  AES_GCM_TAG_BYTES,\n  assertAesGcmIv,\n  createAesGcmIv,\n  decryptWithDek,\n  encryptWithDek,\n} from \"./symmetric\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAKxD,OAAO,EACL,8BAA8B,EAC9B,mBAAmB,EACnB,yBAAyB,EACzB,gCAAgC,GACjC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EACzB,0BAA0B,EAC1B,4BAA4B,EAC5B,qBAAqB,EACrB,8BAA8B,EAC9B,iBAAiB,EACjB,0BAA0B,EAC1B,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAKrB,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,gBAAgB,EAChB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EAGpB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAC/C,OAAO,EACL,wBAAwB,EACxB,mCAAmC,EACnC,sCAAsC,EACtC,qCAAqC,EACrC,kCAAkC,EAClC,kCAAkC,EAClC,0BAA0B,EAE1B,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,uBAAuB,GAExB,MAAM,qBAAqB,CAAC;AAuI7B,OAAO,EACL,qCAAqC,EACrC,oCAAoC,EACpC,8BAA8B,EAC9B,qCAAqC,EACrC,2BAA2B,EAC3B,iCAAiC,EACjC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,gCAAgC,EAChC,+BAA+B,EAC/B,oCAAoC,EACpC,6BAA6B,EAC7B,+BAA+B,EAC/B,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,+BAA+B,EAC/B,8BAA8B,EAC9B,6BAA6B,EAC7B,wCAAwC,EACxC,sCAAsC,EACtC,4BAA4B,EAC5B,mCAAmC,EACnC,mCAAmC,EACnC,0CAA0C,EAC1C,wCAAwC,EACxC,yCAAyC,EACzC,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,sBAAsB,EACtB,mCAAmC,EACnC,gCAAgC,EAChC,oCAAoC,EACpC,kCAAkC,EAClC,gCAAgC,EAChC,+BAA+B,EAC/B,oBAAoB,EACpB,6BAA6B,EAC7B,kCAAkC,EAClC,mCAAmC,EACnC,wBAAwB,EACxB,6BAA6B,EAC7B,kCAAkC,EAClC,6BAA6B,EAC7B,sCAAsC,EACtC,oCAAoC,EACpC,0CAA0C,EAC1C,6BAA6B,EAC7B,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,EACvB,8BAA8B,EAC9B,uBAAuB,EACvB,0BAA0B,EAC1B,mCAAmC,EACnC,6BAA6B,EAC7B,8BAA8B,EAC9B,mCAAmC,EACnC,mCAAmC,EACnC,2BAA2B,EAC3B,kCAAkC,EAClC,iCAAiC,EACjC,4BAA4B,EAC5B,sCAAsC,EACtC,gCAAgC,EAChC,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,uCAAuC,EACvC,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAC/B,mCAAmC,EACnC,wCAAwC,EACxC,6CAA6C,EAC7C,iCAAiC,EACjC,qCAAqC,EACrC,uBAAuB,EACvB,kCAAkC,EAClC,iDAAiD,EACjD,4BAA4B,EAC5B,eAAe,EACf,wBAAwB,EACxB,eAAe,EACf,4BAA4B,EAC5B,mCAAmC,EACnC,oBAAoB,EACpB,mCAAmC,EACnC,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,6BAA6B,EAC7B,wBAAwB,EACxB,6BAA6B,EAC7B,2BAA2B,EAC3B,yCAAyC,EACzC,+BAA+B,EAC/B,4BAA4B,EAC5B,oCAAoC,EACpC,qCAAqC,EACrC,sCAAsC,EACtC,6BAA6B,EAC7B,uBAAuB,EACvB,gCAAgC,EAChC,kCAAkC,EAClC,gCAAgC,EAChC,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,2CAA2C,EAC3C,mCAAmC,EACnC,wCAAwC,EAExC,0CAA0C,GAC3C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mCAAmC,EACnC,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,8BAA8B,EAC9B,mCAAmC,GACpC,MAAM,kCAAkC,CAAC;AAiB1C,OAAO,EACL,+BAA+B,EAC/B,8BAA8B,EAC9B,8BAA8B,EAC9B,yBAAyB,EACzB,0CAA0C,EAC1C,gCAAgC,EAChC,+BAA+B,EAC/B,yBAAyB,EACzB,mCAAmC,EACnC,8BAA8B,EAC9B,+BAA+B,EAC/B,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,GACf,MAAM,aAAa,CAAC","sourcesContent":["export { blobContentMetadataHash } from \"./blobContentMetadata\";\nexport { BlobEnvelopeError } from \"./blobEnvelopeError\";\nexport type {\n  BlobEnvelopeHeaderRecord,\n  BlobEnvelopeRecord,\n} from \"./blobEnvelopeReader\";\nexport {\n  MAX_BLOB_ENVELOPE_HEADER_BYTES,\n  parseBlobEnvelopeV2,\n  parseBlobEnvelopeV2Header,\n  readBlobEnvelopeHeaderByteLength,\n} from \"./blobEnvelopeReader\";\nexport type { BlobEnvelopeV2Header } from \"./blobEnvelopeV2\";\nexport {\n  BLOB_CHUNK_SIZE_BYTES,\n  BLOB_ENCRYPTED_BYTES_FORMAT,\n  BLOB_ENCRYPTED_BYTES_VERSION,\n  BLOB_ENVELOPE_MAGIC_BYTES,\n  BLOB_ENVELOPE_PREFIX_BYTES,\n  blobChunkPlaintextByteLength,\n  computeBlobChunkCount,\n  computeBlobEncryptedByteLength,\n  deriveBlobChunkIv,\n  encodeBlobEnvelopeV2Header,\n  joinBlobPartBytes,\n  MAX_BLOB_CHUNK_COUNT,\n  normalizeBlobChunkSize,\n} from \"./blobEnvelopeV2\";\nexport { compareCanonicalStrings } from \"./canonicalOrdering\";\nexport {\n  AUTH_CHALLENGE_BYTES,\n  AUTH_CHALLENGE_HEX_LENGTH,\n  authChallengeSigningBytes,\n  CHALLENGE_TTL_SECONDS,\n  canonicalAuthOrigin,\n  generateChallenge,\n} from \"./challenge\";\nexport type {\n  ContentKeyEnvelopeKind,\n  ContentKeyWrapBinding,\n} from \"./contentKeyEnvelope\";\nexport {\n  ContentKeyEnvelopeError,\n  decodeContentKeyEnvelope,\n  unwrapContentKey,\n  wrapContentKey,\n} from \"./contentKeyEnvelope\";\nexport { decryptAsRecipient } from \"./encapsulation/decryptAsRecipient\";\nexport { encryptForRecipients } from \"./encapsulation/encryptForRecipients\";\nexport type { EncapsulationKeyPair } from \"./encapsulation/generateKeyPair\";\nexport {\n  generateKemKeyPair,\n  generateKemSeedAndKeyPair,\n  ML_KEM1024_CIPHERTEXT_BYTES,\n  ML_KEM1024_PUBLIC_KEY_BYTES,\n  ML_KEM1024_SECRET_KEY_BYTES,\n  ML_KEM1024_SEED_BYTES,\n} from \"./encapsulation/generateKeyPair\";\nexport type { EncryptedEnvelope, RecipientEntry } from \"./encapsulation/types\";\nexport { unwrapDek } from \"./encapsulation/unwrapDek\";\nexport { wrapDekForRecipients } from \"./encapsulation/wrapDek\";\nexport { toFingerprint } from \"./fingerprint\";\nexport {\n  decryptGroupMetadata,\n  encodeBuiltinGroupMetadata,\n  encryptGroupMetadata,\n  type GroupMetadata,\n  type GroupMetadataKey,\n  readGroupMetadata,\n} from \"./groupMetadata\";\nexport { bytesToHex, hexToBytes } from \"./hex\";\nexport {\n  createIdentitySeedPhrase,\n  createIdentitySeedPhraseFromEntropy,\n  generateIdentityKeyPairsFromSeedPhrase,\n  IDENTITY_SEED_PHRASE_DERIVATION_SUITE,\n  IDENTITY_SEED_PHRASE_ENTROPY_BYTES,\n  IDENTITY_SEED_PHRASE_STRENGTH_BITS,\n  IDENTITY_SEED_PHRASE_WORDS,\n  type IdentitySeedPhraseKeyPairs,\n  normalizeIdentitySeedPhrase,\n  validateIdentitySeedPhrase,\n} from \"./identitySeedPhrase\";\nexport {\n  createIncrementalSha256,\n  type IncrementalSha256,\n} from \"./incrementalSha256\";\nexport type {\n  AccessEvent,\n  AccessEventType,\n  AccessManifest,\n  AccessManifestCheckpoint,\n  AccessManifestTransparencyLeaf,\n  AccessObjectKind,\n  AnyVerifiedAccessManifest,\n  AnyVerifiedPrincipalPolicy,\n  AttachmentAccessEventBody,\n  AttachmentBindAccessEventBody,\n  AttachmentDetachAccessEventBody,\n  BlobAccessManifest,\n  BlobContentKeyTarget,\n  ContainerAccessEventBody,\n  ContainerAccessKeyState,\n  ContainerAccessLevel,\n  ContainerAccessManifest,\n  ContainerAccessManifestState,\n  ContainerAccessStructural,\n  ContainerCreateAccessEventBody,\n  ContainerDirectGrant,\n  ContainerGrantAccessEventBody,\n  ContainerGrantPrincipalHead,\n  ContainerGrantSubjectType,\n  ContainerKekKeyring,\n  ContainerKekKeyringEntry,\n  ContainerKekPredecessorBridge,\n  ContainerKekRecipientTarget,\n  ContainerKekTarget,\n  ContainerKeyEpoch,\n  ContainerKeyWrap,\n  ContainerMoveAccessEventBody,\n  ContainerReciteAccessEventBody,\n  ContainerRekeyAccessEventBody,\n  ContainerRevokeAccessEventBody,\n  ContainerUserRecipientKey,\n  ContentObjectKind,\n  ContentRecordEncryptionSuite,\n  ContentRecordNonceDomain,\n  DeriveBlobKekTargetsInput,\n  DeriveContainerKekRecipientTargetsInput,\n  DeriveDocumentKekTargetsInput,\n  DocumentAccessEventBody,\n  DocumentContentKeyTarget,\n  DocumentContentRecordMetadataInput,\n  DocumentLinkAccessEventBody,\n  DocumentLinkSetManifestState,\n  DocumentLinkSetStructural,\n  DocumentPurgeAccessEventBody,\n  DocumentUnlinkAccessEventBody,\n  IdentityStateCheckpoint,\n  IdentityStateHead,\n  IdentityStateTransparencyLeaf,\n  KekRecipientKind,\n  KeyingCanonicalJson,\n  KeyingHashDomain,\n  KeyingLocalCheckpointStore,\n  KeyingVerificationCode,\n  KeyingVerificationResult,\n  ManagedPrincipalKind,\n  PrincipalHistoryIndexNode,\n  PrincipalPolicyAuthorization,\n  PrincipalPolicyBundle,\n  PrincipalPolicyCheckpoint,\n  PrincipalPolicyCurrent,\n  PrincipalPolicyExternalAuthority,\n  PrincipalPolicyExternalAuthorityState,\n  PrincipalPolicyHistoryInput,\n  PrincipalPolicyHistoryPage,\n  PrincipalPolicyHistoryProgressOptions,\n  PrincipalPolicyHistoryReferenceProof,\n  PrincipalPolicyHistoryVerifier,\n  PrincipalPolicyMemberEnvelopes,\n  PrincipalPolicyPayload,\n  PrincipalPolicySignedState,\n  PrincipalPolicySignerPublicKey,\n  PrincipalPolicySnapshot,\n  PrincipalPolicyStateChainEntry,\n  PrincipalPolicyTransitionMismatch,\n  PrincipalPolicyTransitionMismatchCode,\n  PrincipalPolicyTransparencyLeaf,\n  ReferencedPrincipalHead,\n  SignedTransparencyTreeHead,\n  TransparencyConsistencyProof,\n  TransparencyInclusionProof,\n  TransparencyLeaf,\n  TransparencyLeafKind,\n  TransparencyTreeCheckpoint,\n  UnsignedAccessEvent,\n  UnsignedTransparencyTreeHead,\n  UnsignedWriteHeader,\n  VerifiedAccessEvent,\n  VerifiedAccessManifest,\n  VerifiedAccessManifestCheckpointEvidence,\n  VerifiedAccessManifestSnapshot,\n  VerifiedAttachmentBinding,\n  VerifiedAttachmentDetach,\n  VerifiedBlobKekTargets,\n  VerifiedContainerAccessManifest,\n  VerifiedContainerKekState,\n  VerifiedContainerParentEdge,\n  VerifiedDocumentKekTargets,\n  VerifiedDocumentLinkSetManifest,\n  VerifiedDocumentLinkSetSnapshot,\n  VerifiedDocumentLinkSetStateEvidence,\n  VerifiedIdentityState,\n  VerifiedPrincipalPolicy,\n  VerifiedPrincipalPolicyCurrent,\n  VerifiedPrincipalPolicyHistory,\n  VerifiedPrincipalPolicySelection,\n  VerifiedPrincipalPolicySnapshot,\n  VerifiedTransparencyProof,\n  VerifiedTransparencyTreeHead,\n  VerifiedWriteHeader,\n  VerifyAccessEventInput,\n  VerifyAccessManifestInput,\n  VerifyAttachmentBindingEventInput,\n  VerifyAttachmentDetachEventInput,\n  VerifyContainerAccessManifestInput,\n  VerifyContainerKekStateInput,\n  VerifyContainerParentEdgeInput,\n  VerifyDocumentLinkSetManifestInput,\n  VerifyDocumentPurgeEventInput,\n  VerifyIdentityStateCheckpointInput,\n  VerifyPrincipalPolicyBundleInput,\n  VerifyPrincipalPolicySnapshotInput,\n  VerifySignedTransparencyTreeHeadInput,\n  VerifyTransparencyConsistencyProofInput,\n  VerifyTransparencyInclusionProofInput,\n  VerifyTransparencyProofInput,\n  VerifyWriteHeaderInput,\n  WriteHeader,\n} from \"./keying\";\nexport {\n  ACCESS_MANIFEST_VERIFICATION_REVISION,\n  accessManifestCheckpointFromManifest,\n  accessManifestTransparencyLeaf,\n  assertSealedContainerKekKeyringLength,\n  BLOB_CONTENT_KEY_WRAP_SUITE,\n  CONTAINER_KEK_KEYRING_ENTRY_BYTES,\n  CONTAINER_KEK_KEYRING_FORMAT_VERSION,\n  CONTAINER_KEK_KEYRING_HEADER_BYTES,\n  CONTAINER_KEK_KEYRING_SEAL_SUITE,\n  CONTAINER_KEK_MATERIAL_ID_PREFIX,\n  CONTAINER_KEK_PARENT_WRAP_SUITE,\n  CONTAINER_KEK_PREDECESSOR_WRAP_SUITE,\n  CONTAINER_KEK_USER_WRAP_SUITE,\n  CONTENT_RECORD_ENCRYPTION_SUITE,\n  computeAccessEventBodyHash,\n  computeAccessEventHash,\n  computeAccessManifestHash,\n  computeBlobAccessManifestHash,\n  computeBlobContentKeyTargetHash,\n  computeContainerAccessKeyTargetHash,\n  computeContainerAccessStructuralHash,\n  computeContainerDirectGrantRoot,\n  computeContainerKekKeyringHash,\n  computeContainerKekMaterialId,\n  computeContainerKekPredecessorBridgeHash,\n  computeContainerKekRecipientTargetHash,\n  computeContainerKeyEpochHash,\n  computeContentRecordNonceDomainHash,\n  computeDocumentContentKeyTargetHash,\n  computeDocumentContentRecordCiphertextHash,\n  computeDocumentContentRecordMetadataHash,\n  computeDocumentContentRecordPlaintextHash,\n  computeDocumentLinkSetGrantRoot,\n  computeDocumentLinkSetKeyTargetHash,\n  computeDocumentLinkSetStructuralHash,\n  computeKeyingDomainHash,\n  computeTransparencyLeafHash,\n  computeTransparencyMerkleRoot,\n  computeWriteHeaderHash,\n  createContainerKekPredecessorBridge,\n  createPrincipalHistoryIndexProof,\n  createPrincipalPolicyHistoryVerifier,\n  createTransparencyConsistencyProof,\n  createTransparencyInclusionProof,\n  DOCUMENT_CONTENT_KEY_WRAP_SUITE,\n  deriveBlobKekTargets,\n  deriveContainerAccessManifest,\n  deriveContainerKekRecipientTargets,\n  deriveContainerKekWrappingPublicKey,\n  deriveDocumentKekTargets,\n  deriveDocumentLinkSetManifest,\n  derivePrincipalRecipientKeyEpochId,\n  documentContentRecordMetadata,\n  expectedSealedContainerKekKeyringBytes,\n  getPrincipalPolicyTransitionMismatch,\n  getPrincipalPolicyTransitionMismatchReason,\n  identityStateTransparencyLeaf,\n  isContainerKekMaterialId,\n  isKeyingVerificationCode,\n  KEYING_VERIFICATION_CODES,\n  KeyingVerificationError,\n  MAX_CONTAINER_KEY_EPOCH,\n  MAX_CONTAINER_RECITATION_EPOCH,\n  makeVerifiedAccessEvent,\n  makeVerifiedBlobKekTargets,\n  makeVerifiedContainerAccessManifest,\n  makeVerifiedContainerKekState,\n  makeVerifiedDocumentKekTargets,\n  makeVerifiedDocumentLinkSetManifest,\n  makeVerifiedDocumentLinkSetSnapshot,\n  makeVerifiedPrincipalPolicy,\n  normalizeAttachmentAccessEventBody,\n  normalizeContainerAccessEventBody,\n  normalizeContainerKekKeyring,\n  normalizeContainerKekPredecessorBridge,\n  normalizeDocumentAccessEventBody,\n  normalizeDocumentPurgeAccessEventBody,\n  openContainerKekKeyring,\n  PRINCIPAL_HISTORY_PAGE_ENTRY_LIMIT,\n  PRINCIPAL_HISTORY_VERIFICATION_REVISION,\n  principalHistoryIndexLeaf,\n  principalPolicyMatchesReference,\n  principalPolicyTransparencyLeaf,\n  resolveContainerPathUserAccessLevel,\n  resolveContainerStatePathUserAccessLevel,\n  resolveHistoricalContainerPathUserAccessLevel,\n  resolvePrincipalHistoryIndexProof,\n  restorePrincipalPolicyHistoryVerifier,\n  sealContainerKekKeyring,\n  selectPrincipalPolicyAuthorization,\n  selectPrincipalPolicyCurrentPredecessorReferences,\n  serializeKeyingCanonicalJson,\n  signAccessEvent,\n  signTransparencyTreeHead,\n  signWriteHeader,\n  unwrapContainerKekParentWrap,\n  unwrapContainerKekPredecessorBridge,\n  verifyAccessManifest,\n  verifyAccessManifestLocalCheckpoint,\n  verifyAccessManifestSnapshot,\n  verifyAttachmentBindingEvent,\n  verifyAttachmentDetachEvent,\n  verifyContainerAccessManifest,\n  verifyContainerKekKeyringEntry,\n  verifyContainerKekState,\n  verifyContainerParentEdge,\n  verifyDocumentLinkSetManifest,\n  verifyDocumentLinkSetSnapshot,\n  verifyDocumentPurgeEvent,\n  verifyIdentityStateCheckpoint,\n  verifyPrincipalPolicyBundle,\n  verifyPrincipalPolicyBundleAgainstHistory,\n  verifyPrincipalPolicyCheckpoint,\n  verifyPrincipalPolicyCurrent,\n  verifyPrincipalPolicyCurrentMutation,\n  verifyPrincipalPolicyCurrentSuccessor,\n  verifyPrincipalPolicyHistoryReferences,\n  verifyPrincipalPolicySnapshot,\n  verifySignedAccessEvent,\n  verifySignedTransparencyTreeHead,\n  verifyTransparencyConsistencyProof,\n  verifyTransparencyInclusionProof,\n  verifyTransparencyProof,\n  verifyWriteHeader,\n} from \"./keying\";\nexport {\n  organizationReplacementAuthorizationPayload,\n  organizationReplacementSigningBytes,\n  signOrganizationReplacementAuthorization,\n  type VerifiedOrganizationReplacementAuthorization,\n  verifyOrganizationReplacementAuthorization,\n} from \"./organizationReplacement\";\nexport {\n  computePrincipalContainerGrantRoot,\n  normalizePrincipalContainerGrants,\n} from \"./principalContainerGrants\";\nexport {\n  computePrincipalMemberEnvelopesRoot,\n  normalizePrincipalStateMemberEnvelopes,\n  PrincipalMemberEnvelopeValidationError,\n} from \"./principalMemberEnvelopes\";\nexport type { PrincipalPolicyValidationErrorCode } from \"./principalPolicyValidationError\";\nexport {\n  PrincipalPolicyValidationError,\n  throwPrincipalPolicyValidationError,\n} from \"./principalPolicyValidationError\";\nexport type {\n  ManagedRecipientPrincipalType,\n  PrincipalContainerGrant,\n  PrincipalContainerGrantAccessLevel,\n  PrincipalProjectionMember,\n  PrincipalProjectionRole,\n  PrincipalStateExternalAuthority,\n  PrincipalStateHeaderInput,\n  PrincipalStateMember,\n  PrincipalStateMemberEnvelope,\n  PrincipalStateMembershipMode,\n  PrincipalStatePayloadCipherSuite,\n  PrincipalStateSigningInput,\n  SignedPrincipalState,\n  UnsignedPrincipalState,\n} from \"./principalState\";\nexport {\n  buildPrincipalStateSigningInput,\n  computePrincipalMembershipRoot,\n  computePrincipalProjectionRoot,\n  computePrincipalStateHash,\n  computePrincipalStatePayloadCiphertextHash,\n  derivePrincipalProjectionMembers,\n  isManagedRecipientPrincipalType,\n  isPrincipalProjectionRole,\n  normalizePrincipalProjectionMembers,\n  normalizePrincipalStateMembers,\n  serializeUnsignedPrincipalState,\n  signPrincipalState,\n} from \"./principalState\";\nexport {\n  verifySignedPrincipalState,\n  verifySignedPrincipalStateResult,\n} from \"./principalStateVerification\";\nexport type { SigningKeyPair } from \"./signing/generateKeyPair\";\nexport {\n  generateSigningKeyPair,\n  generateSigningSeedAndKeyPair,\n  ML_DSA87_PUBLIC_KEY_BYTES,\n  ML_DSA87_SECRET_KEY_BYTES,\n  ML_DSA87_SIGNATURE_BYTES,\n} from \"./signing/generateKeyPair\";\nexport { sign } from \"./signing/sign\";\nexport { verify } from \"./signing/verify\";\nexport type { SymmetricCiphertext } from \"./symmetric\";\nexport {\n  AES_256_KEY_BYTES,\n  AES_GCM_IV_BYTES,\n  AES_GCM_TAG_BYTES,\n  assertAesGcmIv,\n  createAesGcmIv,\n  decryptWithDek,\n  encryptWithDek,\n} from \"./symmetric\";\n"]}

package/internal/validators/documentSyncRefinements.js

@@ -60,10 +60,15 @@ export const documentSyncResponsePullPageRefinement = {
     description: "pullPage.hasMore is true exactly when pullPage.nextCursor is non-null",
     id: "response.pull-page-continuation",
 };
+export const documentSyncResponseHistoricalBundlesRefinement = {
+    description: "contentKeyBundles carries each content-key epoch at most once, and only epochs older than contentKeyBundle.contentKeyEpoch",
+    id: "response.historical-content-key-bundles",
+};
 export const documentSyncResponseRuntimeRefinements = [
     documentSyncResponseRotationRefinement,
     documentSyncResponseCommitLsnModeRefinement,
     documentSyncResponseCommitLsnSentinelRefinement,
     documentSyncResponsePullPageRefinement,
+    documentSyncResponseHistoricalBundlesRefinement,
 ];
 //# sourceMappingURL=documentSyncRefinements.js.map

package/internal/validators/documentSyncRefinements.js.map

@@ -1 +1 @@
-{"version":3,"file":"documentSyncRefinements.js","sourceRoot":"","sources":["documentSyncRefinements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yCAAyC,EAAE,MAAM,2BAA2B,CAAC;AAEtF,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,WAAW,EACT,oHAAoH;IACtH,EAAE,EAAE,oCAAoC;CAChC,CAAC;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD;QACE,WAAW,EACT,+EAA+E;QACjF,EAAE,EAAE,oCAAoC;KACzC;IACD;QACE,WAAW,EACT,4EAA4E;QAC9E,EAAE,EAAE,sCAAsC;KAC3C;IACD;QACE,WAAW,EACT,yEAAyE;QAC3E,EAAE,EAAE,wCAAwC;KAC7C;IACD;QACE,WAAW,EAAE,uDAAuD;QACpE,EAAE,EAAE,oCAAoC;KACzC;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD;QACE,WAAW,EACT,+HAA+H;QACjI,EAAE,EAAE,qCAAqC;KAC1C;IACD;QACE,WAAW,EACT,4HAA4H;QAC9H,EAAE,EAAE,+BAA+B;KACpC;IACD;QACE,WAAW,EACT,wGAAwG;QAC1G,EAAE,EAAE,mCAAmC;KACxC;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,GAAG,sCAAsC;IACzC,GAAG,kCAAkC;IACrC,qCAAqC;CAC7B,CAAC;AAEX,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,WAAW,EAAE,gFAAgF,yCAAyC,sBAAsB;IAC5J,EAAE,EAAE,uDAAuD;CACnD,CAAC;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,WAAW,EACT,oHAAoH;IACtH,EAAE,EAAE,qCAAqC;CACjC,CAAC;AAEX,MAAM,CAAC,MAAM,2CAA2C,GAAG;IACzD,WAAW,EACT,iEAAiE;IACnE,EAAE,EAAE,wCAAwC;CACpC,CAAC;AAEX,MAAM,CAAC,MAAM,+CAA+C,GAAG;IAC7D,WAAW,EACT,yEAAyE;IAC3E,EAAE,EAAE,oCAAoC;CAChC,CAAC;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,WAAW,EACT,uEAAuE;IACzE,EAAE,EAAE,iCAAiC;CAC7B,CAAC;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,sCAAsC;IACtC,2CAA2C;IAC3C,+CAA+C;IAC/C,sCAAsC;CAC9B,CAAC","sourcesContent":["import { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS } from \"./util/documentSyncLimits\";\n\nexport const documentSyncRequestRotationRefinement = {\n  description:\n    \"checkpointKind, checkpointPayloadKind, and sourceVersionVector must be absent together or form a rotation baseline\",\n  id: \"request.rotation-checkpoint-fields\",\n} as const;\n\nexport const documentSyncRequestEnvelopeRefinements = [\n  {\n    description:\n      \"inlineRekeyCommitId must be present exactly when containerRekeys is non-empty\",\n    id: \"request.inline-rekey-commit-marker\",\n  },\n  {\n    description:\n      \"authorizingContainerPathRefs is required when outgoingUpdates is non-empty\",\n    id: \"request.authorizing-paths-for-writes\",\n  },\n  {\n    description:\n      \"containerRekeys may be non-empty only when outgoingUpdates is non-empty\",\n    id: \"request.container-rekeys-require-write\",\n  },\n  {\n    description: \"outgoing update ids must be unique within the request\",\n    id: \"request.unique-outgoing-update-ids\",\n  },\n] as const;\n\nexport const documentSyncRequestPullRefinements = [\n  {\n    description:\n      \"a request carrying pullCursor must not contain outgoing updates, container rekeys, a content-key bundle, or authorizing paths\",\n    id: \"request.pull-continuation-read-only\",\n  },\n  {\n    description:\n      'historyMode \"raw\" must not be combined with outgoing updates, container rekeys, a content-key bundle, or authorizing paths',\n    id: \"request.raw-history-read-only\",\n  },\n  {\n    description:\n      'historyMode \"raw\" requires localVersionVector to be null so the complete retained history is requested',\n    id: \"request.raw-history-null-frontier\",\n  },\n] as const;\n\nexport const documentSyncRequestRuntimeRefinements = [\n  ...documentSyncRequestEnvelopeRefinements,\n  ...documentSyncRequestPullRefinements,\n  documentSyncRequestRotationRefinement,\n] as const;\n\nexport const documentLinkSetPathRefinement = {\n  description: `authorizingContainerPathRefs and targetContainerPathRefs may contain at most ${MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS} references in total`,\n  id: \"request.post-link-authorization-path-total-references\",\n} as const;\n\nexport const documentSyncResponseRotationRefinement = {\n  description:\n    \"checkpointKind, checkpointPayloadKind, and sourceVersionVector must be absent together or form a rotation baseline\",\n  id: \"response.rotation-checkpoint-fields\",\n} as const;\n\nexport const documentSyncResponseCommitLsnModeRefinement = {\n  description:\n    'commitLsnMode \"untracked\" requires the commitLsn \"0/0\" sentinel',\n  id: \"response.untracked-commit-lsn-sentinel\",\n} as const;\n\nexport const documentSyncResponseCommitLsnSentinelRefinement = {\n  description:\n    'commitLsn \"0/0\" requires commitLsnMode \"untracked\" in the same response',\n  id: \"response.untracked-commit-lsn-mode\",\n} as const;\n\nexport const documentSyncResponsePullPageRefinement = {\n  description:\n    \"pullPage.hasMore is true exactly when pullPage.nextCursor is non-null\",\n  id: \"response.pull-page-continuation\",\n} as const;\n\nexport const documentSyncResponseRuntimeRefinements = [\n  documentSyncResponseRotationRefinement,\n  documentSyncResponseCommitLsnModeRefinement,\n  documentSyncResponseCommitLsnSentinelRefinement,\n  documentSyncResponsePullPageRefinement,\n] as const;\n"]}
+{"version":3,"file":"documentSyncRefinements.js","sourceRoot":"","sources":["documentSyncRefinements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yCAAyC,EAAE,MAAM,2BAA2B,CAAC;AAEtF,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,WAAW,EACT,oHAAoH;IACtH,EAAE,EAAE,oCAAoC;CAChC,CAAC;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD;QACE,WAAW,EACT,+EAA+E;QACjF,EAAE,EAAE,oCAAoC;KACzC;IACD;QACE,WAAW,EACT,4EAA4E;QAC9E,EAAE,EAAE,sCAAsC;KAC3C;IACD;QACE,WAAW,EACT,yEAAyE;QAC3E,EAAE,EAAE,wCAAwC;KAC7C;IACD;QACE,WAAW,EAAE,uDAAuD;QACpE,EAAE,EAAE,oCAAoC;KACzC;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD;QACE,WAAW,EACT,+HAA+H;QACjI,EAAE,EAAE,qCAAqC;KAC1C;IACD;QACE,WAAW,EACT,4HAA4H;QAC9H,EAAE,EAAE,+BAA+B;KACpC;IACD;QACE,WAAW,EACT,wGAAwG;QAC1G,EAAE,EAAE,mCAAmC;KACxC;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,GAAG,sCAAsC;IACzC,GAAG,kCAAkC;IACrC,qCAAqC;CAC7B,CAAC;AAEX,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,WAAW,EAAE,gFAAgF,yCAAyC,sBAAsB;IAC5J,EAAE,EAAE,uDAAuD;CACnD,CAAC;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,WAAW,EACT,oHAAoH;IACtH,EAAE,EAAE,qCAAqC;CACjC,CAAC;AAEX,MAAM,CAAC,MAAM,2CAA2C,GAAG;IACzD,WAAW,EACT,iEAAiE;IACnE,EAAE,EAAE,wCAAwC;CACpC,CAAC;AAEX,MAAM,CAAC,MAAM,+CAA+C,GAAG;IAC7D,WAAW,EACT,yEAAyE;IAC3E,EAAE,EAAE,oCAAoC;CAChC,CAAC;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,WAAW,EACT,uEAAuE;IACzE,EAAE,EAAE,iCAAiC;CAC7B,CAAC;AAEX,MAAM,CAAC,MAAM,+CAA+C,GAAG;IAC7D,WAAW,EACT,4HAA4H;IAC9H,EAAE,EAAE,yCAAyC;CACrC,CAAC;AAEX,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,sCAAsC;IACtC,2CAA2C;IAC3C,+CAA+C;IAC/C,sCAAsC;IACtC,+CAA+C;CACvC,CAAC","sourcesContent":["import { MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS } from \"./util/documentSyncLimits\";\n\nexport const documentSyncRequestRotationRefinement = {\n  description:\n    \"checkpointKind, checkpointPayloadKind, and sourceVersionVector must be absent together or form a rotation baseline\",\n  id: \"request.rotation-checkpoint-fields\",\n} as const;\n\nexport const documentSyncRequestEnvelopeRefinements = [\n  {\n    description:\n      \"inlineRekeyCommitId must be present exactly when containerRekeys is non-empty\",\n    id: \"request.inline-rekey-commit-marker\",\n  },\n  {\n    description:\n      \"authorizingContainerPathRefs is required when outgoingUpdates is non-empty\",\n    id: \"request.authorizing-paths-for-writes\",\n  },\n  {\n    description:\n      \"containerRekeys may be non-empty only when outgoingUpdates is non-empty\",\n    id: \"request.container-rekeys-require-write\",\n  },\n  {\n    description: \"outgoing update ids must be unique within the request\",\n    id: \"request.unique-outgoing-update-ids\",\n  },\n] as const;\n\nexport const documentSyncRequestPullRefinements = [\n  {\n    description:\n      \"a request carrying pullCursor must not contain outgoing updates, container rekeys, a content-key bundle, or authorizing paths\",\n    id: \"request.pull-continuation-read-only\",\n  },\n  {\n    description:\n      'historyMode \"raw\" must not be combined with outgoing updates, container rekeys, a content-key bundle, or authorizing paths',\n    id: \"request.raw-history-read-only\",\n  },\n  {\n    description:\n      'historyMode \"raw\" requires localVersionVector to be null so the complete retained history is requested',\n    id: \"request.raw-history-null-frontier\",\n  },\n] as const;\n\nexport const documentSyncRequestRuntimeRefinements = [\n  ...documentSyncRequestEnvelopeRefinements,\n  ...documentSyncRequestPullRefinements,\n  documentSyncRequestRotationRefinement,\n] as const;\n\nexport const documentLinkSetPathRefinement = {\n  description: `authorizingContainerPathRefs and targetContainerPathRefs may contain at most ${MAX_DOCUMENT_SYNC_AUTHORIZATION_PATH_REFS} references in total`,\n  id: \"request.post-link-authorization-path-total-references\",\n} as const;\n\nexport const documentSyncResponseRotationRefinement = {\n  description:\n    \"checkpointKind, checkpointPayloadKind, and sourceVersionVector must be absent together or form a rotation baseline\",\n  id: \"response.rotation-checkpoint-fields\",\n} as const;\n\nexport const documentSyncResponseCommitLsnModeRefinement = {\n  description:\n    'commitLsnMode \"untracked\" requires the commitLsn \"0/0\" sentinel',\n  id: \"response.untracked-commit-lsn-sentinel\",\n} as const;\n\nexport const documentSyncResponseCommitLsnSentinelRefinement = {\n  description:\n    'commitLsn \"0/0\" requires commitLsnMode \"untracked\" in the same response',\n  id: \"response.untracked-commit-lsn-mode\",\n} as const;\n\nexport const documentSyncResponsePullPageRefinement = {\n  description:\n    \"pullPage.hasMore is true exactly when pullPage.nextCursor is non-null\",\n  id: \"response.pull-page-continuation\",\n} as const;\n\nexport const documentSyncResponseHistoricalBundlesRefinement = {\n  description:\n    \"contentKeyBundles carries each content-key epoch at most once, and only epochs older than contentKeyBundle.contentKeyEpoch\",\n  id: \"response.historical-content-key-bundles\",\n} as const;\n\nexport const documentSyncResponseRuntimeRefinements = [\n  documentSyncResponseRotationRefinement,\n  documentSyncResponseCommitLsnModeRefinement,\n  documentSyncResponseCommitLsnSentinelRefinement,\n  documentSyncResponsePullPageRefinement,\n  documentSyncResponseHistoricalBundlesRefinement,\n] as const;\n"]}

package/internal/validators/knownManifestsRefinements.js

@@ -0,0 +1,5 @@
+export const knownManifestsHeaderRefinement = {
+    id: "request.known-manifest-hints",
+    description: "x-known-manifests must list at most 48 unique lowercase SHA-256 manifest hashes",
+};
+//# sourceMappingURL=knownManifestsRefinements.js.map

package/internal/validators/knownManifestsRefinements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knownManifestsRefinements.js","sourceRoot":"","sources":["knownManifestsRefinements.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,EAAE,EAAE,8BAA8B;IAClC,WAAW,EACT,iFAAiF;CAC3E,CAAC","sourcesContent":["export const knownManifestsHeaderRefinement = {\n  id: \"request.known-manifest-hints\",\n  description:\n    \"x-known-manifests must list at most 48 unique lowercase SHA-256 manifest hashes\",\n} as const;\n"]}

package/internal/validators/operation/documentSync.d.ts

@@ -746,6 +746,9 @@ export declare const documentSyncOperation: Omit<{
     }, {
         readonly description: "pullPage.hasMore is true exactly when pullPage.nextCursor is non-null";
         readonly id: "response.pull-page-continuation";
+    }, {
+        readonly description: "contentKeyBundles carries each content-key epoch at most once, and only epochs older than contentKeyBundle.contentKeyEpoch";
+        readonly id: "response.historical-content-key-bundles";
     }];
 }, "failureResponses" | "failureStatuses"> & {
     readonly failureResponses: {